Privacy policy

Updated: 29 September 2026

Privacy and cookies

1. Who is responsible and how to contact us

Melika Lak trading as Evolved Health operates the LÉVOJU store. The legal operator identified in our Legal notice is responsible for our processing of personal data. Contact: support@evolvedhealth.de; Chemnitzer Strasse 7, 63452 Hanau, Germany. Shopify and some payment or advertising providers also process information for their own purposes under their own notices.

2. Information, purposes and legal bases

We receive information from you, your browser/device, payment and fulfilment providers, and services you choose to use. The following bases refer to Article 6(1) EU GDPR and corresponding UK GDPR provisions where applicable.

• Orders, payment, delivery, returns and accounts: name, contact and address details, order contents, payment status, account identifiers and correspondence. Processing needed to enter into or perform your contract uses the contract basis (b). Payment providers process payment credentials; do not send full card details to our support team.
• Customer support: enquiry details and contact information, on the contract basis for purchase-related enquiries or legitimate interests (f) in responding to other enquiries.
• Tax records, legal obligations and product-safety reporting: transaction and relevant complaint information on the legal-obligation basis (c). If a product-reaction report contains health data, we process only what is necessary under an applicable additional Article 9 condition, such as explicit consent or the establishment, exercise or defence of legal claims where applicable. Please avoid unnecessary medical details.
• Website operation, security and fraud prevention: device/browser details, IP address, security logs, order and account indicators. Our legitimate interests (f) are keeping the store secure, preventing misuse and establishing or defending legal claims, subject to your rights. Legally required processing uses (c).
• Newsletters and optional marketing: email/contact details, subscription preferences and relevant interactions, on consent (a) where required. You may unsubscribe through each marketing email or contact us. Order/service messages are separate from marketing.
• Optional analytics and personalised advertising: device identifiers, browsing events, product interactions and associated identifiers, with consent (a) where required. Consent-required cookies or device access also require permission under applicable cookie law, including section 25 TDDDG in Germany. Legitimate interests do not replace that required permission.
• Product recommendations and reviews: product interests, any answers you choose to provide, and review content to provide the requested feature, on contract (b) where necessary or legitimate interests (f) in providing relevant product information. Optional tracking remains subject to consent. Do not submit sensitive medical information through public reviews or general shopping tools.

Information necessary to fulfil an order is required for that purchase; without it we may be unable to supply the goods. Optional marketing consent is not a condition of purchase. A privacy notice is information about processing, not blanket consent to it.

3. Recipients and services

We share data relevant to the purpose with the following types of recipient:

• Shopify: hosting, checkout, accounts, order management, analytics, messaging and, where selected, subscription functions. Shopify may also process information as a separate controller for its own services or enhanced features. See Shopify's consumer privacy information and privacy portal.
• Payment services: the provider selected or displayed during checkout, for authorisation, payment, refunds and fraud prevention. Its own privacy information applies to its independent processing.
• Selfnamed and delivery/logistics partners: order details, recipient name, delivery address and necessary contact information for production, fulfilment, tracking, delivery and returns.
• Google: Google Analytics and Google Ads integrations are configured on this store for audience measurement, conversion measurement and advertising. These can involve online identifiers and shopping events. See Google's privacy policy and information about partner sites. Where permission is required, these purposes are subject to your choices.
• Communications, security and support providers: email delivery/hosting, Shopify messaging and anti-abuse tools such as hCaptcha where presented in a form; relevant technical or enquiry information may be processed. See hCaptcha privacy information.
• Professional advisers, authorities and transaction counterparties: where necessary for legal compliance, claims, or a lawful business transfer, with appropriate protections.

We do not make all customer information public. Content you deliberately post as a public review may be visible to other visitors. Follow the privacy information of external services you visit through links.

Shopify Network Intelligence is enabled. Our store is hosted by Shopify, which receives information about visits and purchases. For its enhanced services, Shopify combines information from interactions with this store, other merchants and Shopify to support service improvement, personalisation and advertising. Shopify acts as an independent controller for this processing. Shopify and relevant service providers may process this information in other countries. Consent is required for personalised advertising involving EEA, UK and Swiss visitors. Use our cookie preferences to withdraw consent; use Your Privacy Choices to opt out of advertising sharing where applicable. You can also exercise rights concerning Shopify’s own processing through its privacy portal.

4. Cookies and your choices

Essential technologies support functions such as basket, checkout, authentication, security and recording privacy preferences. Optional technologies support analytics and advertising. The store provides a “Cookie preferences” control in the footer. Use it to review or change choices; withdrawing consent does not affect the lawfulness of earlier processing. Browser controls can also delete or block cookies, but may affect essential functionality and do not necessarily communicate an advertising opt-out.

See Shopify's cookie information for its technologies. Provider information describes their technologies generally and is not a statement that every listed cookie is used here. The applicable settings and services determine which technologies are used. For privacy requests or difficulty changing your choices, email us.

5. International transfers

Shopify and other providers may process data outside your country, including in the United States and other countries. For restricted EU/EEA or UK transfers, a valid safeguard is required: an applicable adequacy decision, or appropriate contractual safeguards such as EU Standard Contractual Clauses and, where needed, the UK Addendum or International Data Transfer Agreement, with supplementary measures where necessary. A provider's certification is relied on only where valid and covering the relevant transfer. Contact us for information about the safeguards relevant to your data and how to obtain a copy.

6. Retention

We keep information only for its purpose and applicable legal requirements. Order/invoice and tax records are retained for the statutory period applicable to that record; enquiry records until the matter is resolved and any relevant claim period expires; account information while the account is maintained and as needed for outstanding obligations; marketing information until withdrawal or the end of the permitted use, with a minimal suppression record where needed to respect your choice. Security logs, analytics identifiers and cookie information follow their purpose and configured retention limits. Legal claims or preservation duties may require longer retention; after expiry we delete or anonymise the information. You may ask us about the retention period for a particular record.

7. EU/EEA and UK rights

Subject to applicable conditions, you may request access, correction, deletion, restriction and portability, and withdraw consent at any time. You may object at any time to direct marketing, including related profiling. You may also object to processing based on legitimate interests for reasons relating to your particular situation. Applicable safeguards concerning decisions based solely on automated processing with legal or similarly significant effects remain available.

Email support@evolvedhealth.de. We may request proportionate identity verification. EU/UK requests are generally answered within one month; if a lawful extension is needed, we explain it within that period. You may complain to a supervisory authority, including the Hessian data protection authority, the authority where you live or work in the EEA, or the UK Information Commissioner's Office. You need not contact us first.

8. United States privacy choices

Depending on your state and whether its law applies to our activities, rights may include knowing/accessing, correcting, deleting and obtaining a portable copy of personal information; opting out of sale, sharing or targeted advertising; and appealing a refused request. Categories involved include contact/account identifiers, commercial/order data, device and online activity information, support communications and interests inferred from shopping activity. They are used and disclosed for the purposes and to the recipients described above.

Advertising disclosures can count as “sale” or “sharing” under some laws even where money is not paid for the data. Use Your Privacy Choices to access the store's opt-out mechanism, or email us. Where applicable, recognised signals such as Global Privacy Control communicate a device/browser opt-out. You may also use an authorised agent subject to appropriate verification. We do not discriminate for exercising applicable rights. We respond within the period required by the applicable state law, generally 45 days where that rule applies, and explain any permitted extension. To appeal a decision, reply to us stating that you request a privacy appeal.

The store is directed to adults and is not intended for children. If you believe a child has provided personal information, contact us so that we can investigate and take appropriate action.

9. Security and updates

We use proportionate safeguards, but no online service can guarantee absolute security. Do not send passwords, full payment credentials or unnecessary sensitive data by email. We update this notice when our practices or requirements change and provide additional notice where required. Changes to this notice do not replace consent where consent is required.