Privacy Policy.
Introduction
Havelay operates this store and website to provide a curated shopping experience (the “Services”). The company is powered by Shopify. This Privacy Policy describes how personal information is collected, used, and disclosed when visiting, using, or making purchases through the Services.
Personal information we collect or process
The following categories of personal information may be collected depending on how you interact with the Services:
- Contact details including name, billing address, phone number, and email address
- Financial information including payment card details (processed by Shopify Payments; full card details are not stored on Havelay servers)
- Quiz responses including fitness goals, activity level, equipment access, dietary preferences, and uploaded photographs
- Transaction information including purchased items and past transactions
- Communications with us regarding customer support inquiries
- Device information including device type, browser, network connection, IP address, and unique identifiers
- Usage information regarding interaction with the Services
Personal information sources
Personal information may be collected from:
- Direct submission when taking quizzes, making purchases, or communicating with the company
- Automatic collection through cookies and similar technologies
- Service providers engaged to enable technology
- Partners and third parties including advertising and analytics platforms
How we use your personal information
Personal information is used for:
- Providing, tailoring, and improving Services, including generating personalized 12-week fitness plans
- Marketing and advertising purposes, including recovery emails and online advertisements
- Security and fraud prevention
- Customer support and communication
- Legal compliance and enforcing policies
AI content disclosure
The “after” photo shown on the transformation page, if you choose to upload one, is created using AI image generation based on your uploaded photograph.
This is an illustration of potential outcomes, not a guarantee of actual results.
How we disclose personal information
Personal information may be disclosed to:
- Shopify – hosts store, processes payments, handles checkout
- Resend – sends transactional and marketing emails
- Supabase – provides database hosting
- Cloudflare – provides DNS, CDN, and file storage
- Anthropic and Google – provide AI models for content generation
- Meta – receives event data for advertising optimization
- Microsoft Clarity – provides analytics
- Sentry and PostHog – provide error tracking and analytics
- Business and marketing partners
- Legal and safety recipients when required
- Recipients in connection with business transactions
Relationship with Shopify
The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services for you.
Third-party websites and links
The Services may contain links to third-party websites. Havelay is not responsible for their privacy or security practices.
Children’s data
The Services are not intended for children under the age of majority. The company does not knowingly collect personal information from children under 16 years of age.
Security and retention of your information
No security measures are completely impenetrable. Information retention depends on factors including whether the company needs information to provide ongoing access, comply with legal obligations, resolve disputes, or enforce contracts.
Your rights and choices
Depending on location, you may have:
- Right to access or know personal information held about you
- Right to delete personal information
- Right to correct inaccurate personal information
- Right of portability to receive and transfer personal information
- Managing communication preferences to opt out of promotional emails
Exercise these rights by contacting [email protected].
California residents
California residents have additional rights under the California Consumer Privacy Act, including the right to opt out of sale or sharing of personal information.
Australian residents
Australian residents are covered by the Australian Privacy Act 1988 and may lodge complaints with the Office of the Australian Information Commissioner.
Complaints
Contact [email protected] regarding complaints about personal information processing.
International transfers
Personal information may be transferred outside your country of residence. Transfers outside the European Economic Area or United Kingdom rely on mechanisms like Standard Contractual Clauses unless the destination country has adequate protection.
Changes to this Privacy Policy
The company may update this Privacy Policy with notice as required by law.
Contact
For questions or to exercise rights: [email protected].
Havelay is operated by Dhaka Co (ABN 89 224 504 274), registered in Victoria, Australia.