We collect information in three ways:

Information you give us — name, email, shipping & billing address, phone number, and any personalisation details (name & number for custom shirts) you provide at checkout.

Collected automatically — IP address, browser & device type, pages visited, and shopping behaviour, gathered via cookies and similar technologies.

From third parties — payment confirmation from our processors, and analytics or ad-performance data from partners like Meta and Google.

We do not store your full card details. Payments are handled securely by our payment providers (e.g. Shopify Payments / Stripe / PayPal), who process them under their own privacy and PCI-DSS standards.

• To process, fulfil and deliver your orders
• To send order confirmations, shipping updates and support replies
• To handle returns, exchanges and customer service requests
• To improve our store, products and overall shopping experience
• To send marketing emails only if you opt in (you can unsubscribe anytime)
• To prevent fraud and keep our store secure

We use cookies to keep your cart working, remember preferences, understand how our store is used, and measure our advertising.

You can control or disable cookies through your browser settings, and where required by law we'll ask for your consent through our cookie banner. Disabling some cookies may affect how parts of the store work.

We never sell your personal data. We share it only with trusted partners who help us run the store, and only with what they need to do their job:

• Shopify — our e-commerce platform that hosts the store and processes orders.
• Payment providers — to securely process your payment.
• Suppliers & fulfilment partners — to produce, pack and ship your order (this may include partners located outside your country).
• Shipping carriers — to deliver your order and provide tracking.
• Analytics & advertising partners — such as Google and Meta, to understand and improve our store and ads.
• Authorities — only where legally required.

Because we serve customers worldwide and work with international suppliers and fulfilment partners, your information may be transferred to and processed in countries outside your own — including outside the EU/UK/Brazil. Wherever your data goes, we take reasonable steps to ensure it remains protected in line with this policy and applicable law.

We keep your information only as long as needed to fulfil your orders, provide support, and meet legal, tax and accounting obligations. When it's no longer needed, we securely delete or anonymise it.

Depending on where you live (e.g. under the GDPR, CCPA/CPRA or LGPD), you may have the right to:

• Access — request a copy of the data we hold about you.
• Correct — ask us to fix inaccurate information.
• Delete — ask us to erase your personal data.
• Opt out — withdraw consent or unsubscribe from marketing.
• Portability — receive your data in a portable format.
• Complain — lodge a complaint with your local authority.

To exercise any of these rights, just email us at support@riverno.site. We'll respond within the timeframe required by law.

We use industry-standard measures — including SSL encryption across our store — to protect your information. No method of transmission over the internet is 100% secure, but we work hard to safeguard your data and partner only with providers who do the same.

Our store is not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us information, please contact us and we'll remove it.

We may update this policy from time to time. Significant changes will be communicated where appropriate, and the latest version will always be available on this page.