Privacy policy

Lovepetura™ — operated by Meridian Commerce Holdings LLC Last updated: September 3, 2026

Meridian Commerce Holdings LLC ("Lovepetura," "we," "us," or "our"), d/b/a Lovepetura, respects your privacy. This Privacy Policy explains what personal data we collect when you visit lovepetura.com, place an order, or contact us (the "Services"), why we process it, and what rights you have.

This policy is designed to comply with the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG), as well as applicable U.S. state privacy laws, including the California Consumer Privacy Act as amended (CCPA/CPRA).

1. Controller

Meridian Commerce Holdings LLC 30 N Gould St Ste R Sheridan, WY 82801 d/b/a Lovepetura Email: info@lovepetura.com

You can contact us at any time with questions about data protection or to exercise your rights. You also have the right to lodge a complaint with a data protection supervisory authority — in Germany, the Landesdatenschutzbehörde (state data protection authority) responsible for your place of residence, or the authority of your country of habitual residence.

2. What Data We Collect

2.1 Data you provide to us:

• Name, email address, phone number
• Shipping and billing addresses
• Order details (products, order value, currency, order history)
• Payment information — processed exclusively by our payment provider (see Section 6); we never see or store your full card number
• Messages you send us by email or through forms
• Product reviews, photos, and other content you voluntarily submit

2.2 Data collected automatically:

• IP address
• Browser type/version, operating system, device type
• Pages viewed, date and time of access, referring page
• Cookie and advertising identifiers (only where permitted — see Section 5)

2.3 Data from third parties:

• Our payment provider (payment confirmation)
• Shipping carriers (delivery status)
• Advertising and analytics providers (aggregated usage data and, with your consent, advertising identifiers)

We do not knowingly collect data from children under 16.

3. Why We Process Your Data

Where German law applies: the use of your email address for direct marketing in connection with an existing customer relationship follows § 7(3) UWG; you may object at any time with effect for the future.

4. Shopify

Our online store is hosted by Shopify International Limited (Victoria Buildings, 1–2 Haddington Road, Dublin 4, Ireland) and its affiliates ("Shopify"). Shopify processes the data necessary to operate the store, process orders, and fulfill contracts, including hosting, checkout, and order management. Where data is transferred to Shopify Inc. (Canada/USA), this occurs on the basis of applicable safeguards, including the EU Standard Contractual Clauses and the fact that Canada is recognized by the European Commission as providing an adequate level of data protection.

Server log files (including IP address) are collected on the basis of our legitimate interest in the secure and stable operation of the site and are deleted after 7 days.

5. Cookies, Analytics, and Advertising

On your first visit, a cookie consent banner lets you accept, reject, or individually configure each category, with equally accessible "Accept all" and "Reject all" options. No non-essential cookies are set before you give consent, and you can change or withdraw your consent at any time via the "Cookie Settings" link in the footer of our site.

We use the following categories:

• Essential (always active): shopping cart, checkout, session, security. Basis: § 25(2) TDDDG and Art. 6(1)(f) GDPR.
• Analytics: to understand how visitors use the site (e.g., Shopify Analytics; Google Analytics 4 where enabled). IP addresses are shortened where technically possible.
• Marketing/Advertising: we run online advertising, including on platforms such as Meta (Facebook/Instagram), Google, and TikTok. Their pixels and cookies are only loaded with your consent and are used to measure conversions and display relevant ads. Data may thereby be transmitted to these providers, including to the United States; these companies are certified under the EU–US Data Privacy Framework, and we rely on this framework and, alternatively, EU Standard Contractual Clauses as transfer safeguards.

You can also opt out of personalized advertising directly with the providers (e.g., via Google Ad Settings, Meta Ad Preferences, or networkadvertising.org).

6. Payments

All payments are processed exclusively through Shopify Payments. Depending on the payment method you choose at checkout, the following companies act as processors for the payment transaction: Stripe (for card payments, Apple Pay, Google Pay, and other Shopify Payments methods) and PayPal (where PayPal is selected). We do not offer purchase on account, installments, or financing through third-party providers such as Klarna; should this change in the future, we will inform you separately at checkout and in an updated version of this policy, including any credit-check information then required by law.

We receive from the payment provider only the confirmation of payment, payment method type, and the last digits of your card (if applicable) — never your full payment credentials.

7. Shipping

To deliver your order, we share your name and delivery address (and, where required for customs, your order data) with the shipping carrier responsible for your country. Because we select fast, reliable shipping lines depending on the destination country, the specific carrier may vary by order; each carrier processes your data solely to deliver your shipment and is bound by contractual data processing obligations.

8. Reviews

Where review functionality is available on our store, submitting a review is voluntary. Published reviews display the name or pseudonym you choose. If you submit photos or content with a review, you confirm that you own the rights to them. You can request deletion of your review at any time via info@lovepetura.com.

9. Your Rights

9.1 GDPR rights (EU/EEA customers, including Germany)

You have the right to:

• Access to your data (Art. 15)
• Rectification of inaccurate data (Art. 16)
• Erasure of your data (Art. 17)
• Restriction of processing (Art. 18)
• Data portability in a machine-readable format (Art. 20)
• Objection to processing based on legitimate interests, including profiling for direct advertising, at any time and without giving reasons (Art. 21) — if you object to direct marketing, we stop using your data for that purpose
• Withdraw consent at any time, with effect for the future (Art. 7(3))
• Lodge a complaint with a supervisory authority (in Germany: your Landesdatenschutzbehörde)

Send requests to info@lovepetura.com. We respond within one month; for complex cases this can be extended by two further months (we will inform you within the first month). We may require proof of identity. Requests are free of charge; a reasonable fee may apply only for manifestly unfounded or excessive repeat requests.

9.2 U.S. state rights

If you are a resident of California, Colorado, Connecticut, Virginia, or another U.S. state with an applicable privacy law, you may have the right to know/access, delete, correct, and port your personal information, and to opt out of the "sale" or "sharing" of personal data for cross-context behavioral advertising. Because our advertising cookies may qualify as "sharing" under California law, you can opt out at any time via the Cookie Settings link; we also honor browser-level opt-out preference signals (such as Global Privacy Control) where required. We do not sell personal information for money and never discriminate against you for exercising your rights.

10. International Data Transfers

Lovepetura is based in the United States, so your data will be transferred to and processed in the United States. For transfers of data originating in the EU/EEA, we rely on the EU Commission's adequacy decisions (including the EU–US Data Privacy Framework, where the recipient is certified) or, otherwise, the EU Standard Contractual Clauses together with supplementary technical measures such as encryption. You may request a copy of these safeguards (redacted where commercially sensitive) at info@lovepetura.com.

11. Data Security

We protect your data with appropriate technical and organizational measures, including TLS/SSL encryption of all traffic, restricted access on a need-to-know basis, and the security infrastructure of Shopify. No transmission over the internet is ever completely secure, but we continuously review and improve our safeguards.

12. Data Breaches

If a personal data breach is likely to result in a risk to your rights, we will notify the competent supervisory authority within 72 hours and, where required, inform affected individuals without undue delay.

13. Changes to This Policy

We may update this Privacy Policy as our practices or legal requirements evolve. The current version is always published on this page with its effective date at the top.

14. Contact

Meridian Commerce Holdings LLC d/b/a Lovepetura 30 N Gould St Ste R Sheridan, WY 82801, Email: info@lovepetura.com

---