Privacy policy
Last updated: June 2026
1. Introduction & Our Commitment
URVELL ("we", "us", or "our") is committed to protecting your privacy and handling your personal information responsibly. For the purposes of the General Data Protection Regulation (EU) 2016/679 ("GDPR"), URVELL acts as the data controller of the personal information collected through our website.
We never sell, rent, or trade your personal data to third parties.
By accessing our website or placing an order, you acknowledge and accept the practices described in this Privacy Policy.
2. Information We Collect
When you interact with our website, we may collect personal information that you voluntarily provide, including your name, billing address, shipping address, email address, telephone number, payment information, and any information submitted through customer support enquiries.
We may also automatically collect certain technical information, including your IP address, browser type, device information, operating system, referring websites, pages viewed, session duration, and interactions with our website.
3. How We Use Your Information
We use your personal information to process and fulfil orders, provide customer support, communicate regarding purchases, send transactional emails, manage returns and refunds, prevent fraud, and comply with legal obligations.
Where you have provided consent, we may use your information to send promotional communications, newsletters, product updates, and marketing offers. You may withdraw your consent at any time by using the unsubscribe link included in marketing emails or by contacting us directly.
We may also use aggregated or anonymised data for analytical, operational, and business improvement purposes.
4. Cookies & Tracking Technologies
Our website uses cookies and similar technologies to improve functionality, security, and user experience.
Certain cookies are strictly necessary for the operation of the website and cannot be disabled through our systems. These cookies enable essential features such as secure checkout, account access, and shopping cart functionality.
With your consent, we may also use analytical and advertising cookies provided by platforms including Meta, Google Ads, and TikTok to understand website performance, measure advertising effectiveness, and deliver more relevant advertising experiences.
Visitors are presented with a cookie consent mechanism upon their first visit and may manage cookie preferences at any time where available.
5. Order Fulfilment & Third-Party Services
Our website is hosted and operated through Shopify, which provides the infrastructure, ecommerce platform, and checkout functionality necessary to process transactions and operate our store.
Payments are securely processed through Shop Pay, Visa, Mastercard, American Express, Diners Club, Discover, Apple Pay, Google Pay, and PayPal Wallet. We do not store complete payment card information on our own systems.
To efficiently process and deliver customer orders, fulfilment operations may be conducted through logistics facilities located in the United States, China, and Germany. Regardless of fulfilment location, all products are subject to the same strict quality control procedures and operational standards before dispatch. This fulfilment network enables efficient inventory allocation, optimised routing, and faster delivery to customers whenever possible.
Shipping carriers receive only the information necessary to complete delivery, including customer name, shipping address, and contact details when required.
We may also use advertising and analytics services provided by Meta, Google Ads, and TikTok, which may collect information through cookies, pixels, and similar technologies in accordance with their own privacy policies.
6. Data Retention
We retain personal information only for as long as reasonably necessary to fulfil the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.
Order records and related transactional information may be retained for periods required under applicable tax, accounting, consumer protection, and regulatory laws.
Requests for deletion of personal data will be handled in accordance with applicable GDPR requirements. We acknowledge requests within 48 hours and provide a full response within 30 days unless a longer retention period is legally required.
7. Your Rights Under GDPR
If you are located within the European Economic Area or where GDPR applies, you may have the right to access your personal data, correct inaccurate information, request deletion of your data, restrict processing, object to processing, request data portability, and withdraw consent where processing is based on consent.
You also have the right not to be subject to certain automated decision-making processes where applicable under law.
Requests concerning your personal information may be submitted to kontakt@urvell.de. We acknowledge requests within 48 hours and aim to provide a full response within 30 days.
8. International Data Transfers
Because some of our service providers and operational partners may be located outside your country of residence, your personal information may be transferred internationally.
Where such transfers occur, we implement appropriate safeguards including Standard Contractual Clauses, adequacy decisions, contractual protections, and other mechanisms recognised under GDPR to ensure that your personal information remains adequately protected.
Such transfers are subject to oversight and enforcement under applicable European data protection laws.
9. Data Security
We implement reasonable technical, administrative, and organisational measures designed to protect personal information against unauthorised access, disclosure, alteration, misuse, or destruction.
Our website uses SSL/TLS encryption to secure data transmitted between your device and our systems. Shopify provides additional infrastructure security measures designed to maintain the integrity and security of customer information.
In the event of a personal data breach, we will respond promptly and fulfil all applicable legal notification obligations.
10. Children's Privacy
Our website and services are not directed toward individuals under the age of 16.
We do not knowingly collect personal information from children under 16 years of age. If a parent or guardian believes that a child has provided personal information to us, they should contact us immediately so that appropriate steps can be taken to remove the information where required.
11. Changes to This Policy
We reserve the right to update or modify this Privacy Policy at any time to reflect operational, legal, regulatory, or technological changes.
The most recent version will always be published on this page and indicated by the "Last updated" date shown above.
Continued use of the website after changes become effective constitutes acceptance of the revised Privacy Policy.
12. Contact Us & Supervisory Authority
If you have any questions regarding this Privacy Policy, your personal information, or your rights under GDPR, please contact us at:
Email: kontakt@urvell.de
If you believe that your personal data has been processed in violation of applicable law, you have the right to lodge a complaint with the competent supervisory authority within your EU Member State.
For Germany, information regarding the Federal Commissioner for Data Protection and Freedom of Information can be found at:
BfDI (Federal Commissioner for Data Protection and Freedom of Information)
We acknowledge privacy-related requests within 48 hours and aim to provide a full response within 30 days.