Privacy policy
Effective date: September 8, 2026
This notice covers information associated with visits to cenvola.com, customer accounts, purchases, support requests and marketing choices. It explains the purposes of processing, recipients, retention and ways to exercise privacy rights.
1. Responsible business
Mivosta is responsible for the personal information we process to operate mivosta.com, handle orders and respond to customers. This policy explains those activities and your choices.
2. Information categories and sources
- Contact and order information: name, email, delivery and billing addresses, telephone number where provided, items ordered, transaction status and related payment information. We use this to process purchases, arrange delivery, administer returns, keep required records and communicate about orders. Payment credentials are handled through the payment services available at checkout.
- Account and support information: details you provide when creating an account, contacting us or submitting a request, including correspondence and evidence about an order. We use these to provide support and resolve concerns.
- Device and usage information: IP address, browser and device information, cookie identifiers and interactions with the store. We use these for essential site functions, security, fraud prevention and understanding store performance, subject to applicable consent requirements.
- Preferences: privacy choices and marketing subscriptions you provide. We use these to respect your choices and, where permitted, send communications you requested.
Information comes from you, your interactions with the store, and service providers supporting payments, fulfillment and the shopping experience. Please do not send passwords or full card details by email.
3. Purposes of processing
We use the relevant information to operate the store, complete transactions, deliver purchases, handle returns, resolve support requests and maintain necessary business records. Other purposes include security and fraud checks, performance analysis, and communications or advertising subject to your choices and applicable law. We do not treat an order as permission for unrelated marketing.
4. Cookies and store privacy controls
Essential cookies support functions such as the cart, checkout, preferences and security. Non-essential analytics or marketing technologies are subject to the choices and consent required in your location. Use the cookie banner or available privacy controls to manage consent. Browser controls can also remove or block cookies, though some store features may then be unavailable.
Our store provides a data-sharing opt-out page for supported regions. You may also email us to exercise applicable rights relating to sale, sharing or targeted advertising. Where applicable law requires recognition of an opt-out preference signal such as Global Privacy Control, that signal is treated as an opt-out request. This is distinct from older “Do Not Track” signals, for which there is no uniform response. If you cannot access a control, contact us.
5. Recipients and operational providers
We use Shopify to host and operate our store. We also disclose the information necessary for the services you use to payment providers, delivery and fulfillment providers, support providers and operational store apps. Our current store configuration includes Kaching Bundles for bundle-related functionality and associated shopping events.
We may disclose information to meet legal obligations, respond to lawful requests, protect rights and security, or in connection with a business reorganization subject to applicable safeguards. Shopify may process some information for its own purposes as explained in the Shopify Consumer Privacy Policy.
6. Google Analytics and Meta advertising
We will use Google Analytics and Meta Pixel as part of our analytics and advertising program. The processing described below applies when these services are activated and is subject to applicable consent and opt-out choices.
Google Analytics and Google advertising features
Google Analytics helps us understand visits, traffic sources, page interactions and shopping activity, and measure the performance of our store and campaigns. When enabled, it may receive device and browser information, page URLs, referring pages, cookie or other online identifiers, approximate location and events such as product views, adding items to a cart and purchases, including transaction value and currency.
If we enable Google Analytics advertising features or link it with Google Ads, we and Google may use first-party analytics cookies or identifiers together with Google advertising cookies or identifiers for conversion measurement, audience reporting, ad personalization and remarketing. Google may process information under its own policies. Read how Google uses information from sites and apps. Manage advertising preferences in My Ad Center, or use the Google Analytics opt-out browser add-on where supported.
Meta Pixel, Facebook and Instagram advertising
Meta Pixel allows us to measure advertising results, understand actions taken after an ad, create audiences and show relevant ads, including remarketing on Facebook and Instagram. When enabled, Meta may collect or receive page and product views, cart, checkout and purchase events, transaction value and currency, IP address, browser and device information, and cookie or other online identifiers. Meta may associate this information with your Meta account or other information it holds, subject to its policies and your settings.
If advanced matching or the Meta Conversions API is enabled, we may also send relevant event data and customer identifiers, such as email addresses or telephone numbers in hashed form where required, to help match events and measure advertising. Hashing does not make this information anonymous. These features remain subject to applicable consent and opt-out requirements. Learn more in the Meta Privacy Policy and manage choices through Meta Ad Preferences.
Consent, sharing and your choices
Where required by law, including for non-essential analytics or advertising cookies in the EEA and UK, we will obtain consent before activating the relevant collection or use. You can refuse or withdraw consent through the available cookie or privacy controls, or contact support@mivosta.com. Acceptance of our store terms or a purchase is not, by itself, consent to personalized advertising.
Disclosure of online identifiers, browsing activity or purchase events for cross-context behavioral advertising may constitute a “sale”, “sharing” or targeted advertising under applicable US state privacy laws, even without a monetary payment. Where applicable, you can opt out using our Do Not Sell or Share My Personal Information / data-sharing opt-out page, by emailing us, or through a recognized opt-out preference signal such as Global Privacy Control. We will apply legally required choices to relevant browser-based and server-side advertising disclosures.
Turning off ad personalization does not necessarily stop all analytics or all advertising. Provider settings and browser add-ons may apply only to the relevant account, browser or device; use our store privacy controls for choices about this store. Withdrawing consent does not affect processing lawfully carried out before withdrawal. We will update this policy if the activated features materially differ from those described here.
7. Retention by record type
| Record | Retention considerations |
|---|---|
| Customer and account details | The period needed to provide account services and manage the customer relationship, together with any records legally needed after closure. |
| Orders, payments and returns | Fulfillment and refund processing, accounting and tax duties, fraud prevention, and the period necessary to address legal claims. |
| Support messages and evidence | Resolution of the issue, follow-up support and any applicable dispute or recordkeeping obligation. |
| Marketing preferences and consent | The duration of the subscription or permission; limited suppression or consent records may remain necessary to respect an opt-out or demonstrate compliance. |
| Usage events and online identifiers | The relevant analytics or advertising purpose and provider retention controls, subject to consent withdrawal and applicable deletion requirements. |
These criteria do not authorize indefinite storage. We review whether information remains necessary and delete or anonymize it when it is no longer needed, subject to applicable recordkeeping duties.
8. Requesting access, correction or deletion
Depending on your location and applicable law, you may request access, correction, deletion, a portable copy, restriction of processing, or object to certain processing, including direct marketing. Applicable US state laws may also provide rights to opt out of sale, sharing or targeted advertising, limit certain uses of sensitive information, and appeal a denied request. You may use an authorized agent where permitted. We will not unlawfully discriminate against you for exercising a right.
Email support@Mivosta.com with the subject “Privacy request”. We may reasonably verify identity for access, correction or deletion requests, but will not impose identity verification on opt-outs where prohibited. We respond within applicable legal periods and explain any permitted extension or refusal. You may complain to the relevant data protection or consumer authority, including the supervisory authority in your EEA country or the UK Information Commissioner's Office.
9. California and other US state rights
Where the relevant privacy law applies, consumers may request information about the categories and purposes of collection, access or correct their information, request deletion, and opt out of covered sale, sharing or targeted advertising. Additional rights can include limiting certain uses of sensitive information and appealing a denied request. These rights are subject to legal scope and exceptions; exercising them will not result in unlawful discrimination.
Use our data-sharing opt-out page or email support@Mivosta.com. You do not need an account to submit an opt-out. We recognize qualifying Global Privacy Control signals where required by law.
10. EEA and UK processing grounds
Where EEA or UK data protection law applies, we process information to perform a contract or respond to pre-contract requests, comply with legal duties, pursue legitimate interests in operating and securing our business where balanced against your rights, or rely on consent where required. You may withdraw consent without affecting earlier lawful processing.
Depending on the applicable law, you may also object to processing based on legitimate interests, request restriction, obtain eligible information in a portable format and complain to your local supervisory authority. Withdrawal of consent applies prospectively. The request procedure in section 8 is available for these rights.
11. Processing across borders
Our store's configured data-hosting location is the United States. Our providers may also process data in other countries. Where a transfer is subject to EEA or UK transfer rules, the applicable mechanism may include an adequacy decision or approved contractual safeguards. Contact us for information about safeguards relevant to your information; Shopify explains its own international processing in its privacy policy.
12. Security and confidentiality
We and the services supporting the store use safeguards appropriate to their roles. Access to customer information should be limited to what is needed for the relevant business purpose. No online service or storage system can promise complete security. Please use care when sharing order evidence and do not send full card details or passwords by email.
13. Children
The store is intended for a general adult shopping audience rather than children. We do not knowingly collect children's information for marketing. A parent or guardian can contact support@mivosta.com about information provided by a child so we can investigate and take appropriate action.
14. Email and text-message preferences
Where email or SMS subscriptions are offered, participation is optional and consent is obtained where required. You may unsubscribe using the instructions in a message or by contacting us. Transactional messages about an order may still be necessary. We do not share SMS opt-in consent with third parties for their own marketing. Before introducing materially different advertising or data-sharing practices, we will update this notice and obtain consent where required.
15. External websites and services
Links to payment, advertising, social or other independent services may take you to a service with its own privacy notice. Review that notice for its processing practices and controls. Our responsibilities for information we disclose remain subject to applicable law.
We work with AppLovin to serve advertisements within our application. AppLovin may collect, process and share personal data for advertising‑related purposes, including delivering interest‑based advertisements and improving advertising services. For more information about AppLovin’s collection and use of your information visit: https://legal.applovin.com/privacy/
16. Changes to this notice
We will revise the effective date when this notice changes and communicate material changes as required. If an activated advertising feature or another use of information materially differs from this description, we will update the notice and seek any required consent before the new processing.
17. Privacy contact
JAFDJA INC, trading as Cenvola
Email: support@Mivosta.com
Company Name:HONG KONG WORTH TECHNOLOGY LIMITED
Mobile:+86 15679103810
Registered Address:KONG
RMA08, 2/F, BLDG 8, LEE KA INDUSTRIAL FONG ST, SAN PO KONG, HONG
For privacy requests, use the subject “Privacy request”. This is our business mailing address, not an instruction to send merchandise returns.