Privacy policy.

Who we are.

Revival Raw is a raw dog food brand based in La Motte, Iowa, United States. This privacy policy governs your use of revivalrawdogfood.com, our checkout subdomain shop.revivalrawdogfood.com, and the order data we receive from those sites.

For privacy questions or requests, email Support@revivalrawdogfood.com. We respond within 30 days.

What we collect.

• Order information: name, shipping address, email, phone (used for delivery exceptions), order history. Collected during checkout and stored in Shopify.
• Payment data: handled exclusively by Shopify Payments and PCI-DSS Level 1 compliant processors. We never see, store, or transmit your card number, CVV, or bank credentials.
• Site analytics: aggregate, anonymized usage data via Google Analytics 4 — page views, device type, browser, approximate geography at country / region level, referring URL. IP addresses are anonymized by GA4 before storage. No personally identifying information is collected here.
• Marketing email + SMS list: if you submit your email through a Klaviyo signup form on our site, we store your email (and optionally phone) in Klaviyo for transactional emails, abandoned-cart reminders, and marketing campaigns you opt into.
• Advertising attribution: when you click an ad or arrive from a paid campaign, the Meta Pixel records the visit, what products you viewed, what you added to cart, and whether you initiated checkout. This lets us measure ad performance without us seeing your identity directly.
• Cookies + local storage: a session-scoped cart identifier (so your cart persists if you refresh), analytics cookies, and advertising cookies for the trackers listed below. Categorized in the cookie section.

Third parties that receive your data.

These are the only third parties that touch your information. Each one is a contracted sub-processor — we have a data processing agreement with each provider where applicable.

• Shopify (Shopify Inc., Canada): stores orders, customers, payment records, and inventory. Hosts the checkout flow at shop.revivalrawdogfood.com. Shopify privacy policy.
• Klaviyo (Klaviyo Inc., USA): stores marketing email + SMS lists, sends transactional and marketing messages, runs onsite signup forms. Klaviyo privacy notice.
• Meta (Meta Platforms Inc., USA): receives Meta Pixel events for advertising attribution — page views, product views, add-to-carts, initiate-checkouts, and purchases. Used only for our own ad campaigns. Meta privacy policy.
• IDPixel (identity resolution): matches your visit against a third-party identity graph to associate your activity on this site with contact and profile information, which we use for marketing follow-up. Under the CCPA/CPRA this may constitute a "sale" or "sharing" of personal information. It runs by default, and you can opt out at any time using the "Do Not Sell or Share My Personal Information" / Cookie Preferences control in the footer.
• Google (Google LLC, USA): receives anonymized Google Analytics 4 events for site analytics. IP anonymization is enabled. Google privacy policy.
• Vercel (Vercel Inc., USA): hosts the marketing site. Receives only the HTTP request data needed to serve the page (IP address, user agent, request path). Server logs are retained per Vercel's standard policy. Vercel privacy policy.
• Cloudflare (Cloudflare Inc., USA): manages DNS for revivalrawdogfood.com. Does not receive content or PII beyond DNS resolution metadata. Cloudflare privacy policy.
• ShipStation (a Stamps.com / Auctane company, USA): receives order data from Shopify to print shipping labels and schedule pickups. ShipStation privacy policy.

We do not share your data with any party outside this list without your consent or unless required by law.

Cookies.

We use these categories of cookies and similar storage. Our cookie banner lets you accept or reject the optional categories, and you can change your choice any time via "Cookie Preferences" in the footer.

• Strictly necessary: the cart identifier in localStorage and any session cookies Shopify sets during checkout. Without these the site cannot function. No opt-out.
• Analytics: Google Analytics 4 cookies (typically _ga, _ga_*). Loads only if you accept the Analytics category. You can also opt out site-wide using Google's Analytics Opt-out Browser Add-on.
• Marketing: Klaviyo (email signup), Meta Pixel (ad attribution; _fbp, fr), and IDPixel (identity resolution). These load by default; reject the Marketing category any time to stop them.

What we don't do.

• Rent your personal information, or exchange it for money for anyone else's independent use.
• Share your information with any party other than the sub-processors named above.
• Use your data to train AI models.
• Allow scraping or unauthorized data export.
• Email you without a clear, one-click way to unsubscribe in every message.

"Sale" and "sharing" of personal information.

Under the CCPA/CPRA's broad definitions, our use of identity-resolution (IDPixel) and advertising (Meta Pixel) technologies — which run by default — may constitute a "sale" or "sharing" of personal information, even though we do not exchange your data for money. You have the right to opt out at any time: use the "Do Not Sell or Share My Personal Information" control in the footer (it opens your cookie preferences, where rejecting the "Marketing" category stops this sharing), or email Support@revivalrawdogfood.com.

Email + SMS marketing.

If you opt in (typically via a popup or checkout checkbox), we send order confirmations, shipping updates, abandoned-cart reminders, and occasional product updates and offers. All marketing email includes a one-click unsubscribe link. Reply STOP to any SMS to unsubscribe immediately and permanently. Klaviyo manages the subscription state — once you unsubscribe, you stay unsubscribed unless you re-opt in.

Data retention.

• Order records: retained for 7 years from order date to comply with US tax, accounting, and consumer protection regulations.
• Marketing list entries: retained until you unsubscribe or request deletion, whichever comes first. Unsubscribed records may be retained in a suppression list to honor your unsubscribe choice across future campaigns.
• Analytics data: Google Analytics 4 retention is set to 14 months from the most recent activity.
• Ad attribution data: Meta retains Pixel event data per Meta's policy (typically 180 days for ad optimization).
• Server logs: Vercel and Cloudflare retain access logs for short windows (typically 7-30 days) for security and debugging.

Your rights — California (CCPA / CPRA).

California residents have the right to:

• Know what categories of personal information we collect, the sources, the purposes, and the categories of third parties we share with — all listed above.
• Request access to the specific personal information we hold about you.
• Request correction of inaccurate personal information.
• Request deletion of your personal information, subject to legal retention requirements (tax, fulfillment).
• Opt out of the "sale" or "sharing" of personal information for cross-context behavioral advertising and identity resolution. We honor this through the "Do Not Sell or Share My Personal Information" / Cookie Preferences control in the footer — rejecting the "Marketing" category stops IDPixel and Meta Pixel sharing. You can also email Support@revivalrawdogfood.com to opt out and to have your data removed from Meta custom-audience targeting and the IDPixel match process.
• Non-discrimination: we will not deny service, charge different prices, or provide a different level of quality if you exercise your privacy rights.

To exercise these rights, email Support@revivalrawdogfood.com. We respond within 45 days (extendable once by 45 more days for complex requests, with notice). We may need to verify your identity using order email + the email associated with the request.

Your rights — EU / UK / EEA (GDPR).

If you are in the European Union, United Kingdom, or European Economic Area, you have the right to: access, rectification, erasure ("right to be forgotten"), restriction of processing, data portability, and to object to processing. Our legal bases for processing are: (a) contract performance for orders, (b) legitimate interests for analytics and ad attribution, and (c) consent for marketing. You can withdraw consent at any time. Data is transferred to and processed in the United States; we rely on standard contractual clauses with our sub-processors where applicable. Lodge a complaint with your local supervisory authority if you believe your rights are violated.

Security.

The site runs on HTTPS with HSTS preload (2-year max-age). Content Security Policy restricts script execution to our explicit allowlist. Order data is hosted on Shopify's PCI-DSS Level 1 infrastructure. We follow standard security practices, monitor for unauthorized access, and respond promptly to verified vulnerability reports per security.txt. We will notify affected customers and any required regulator within 72 hours of confirming a data breach involving personal information.

Children.

This site is not directed to anyone under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us at Support@revivalrawdogfood.com and we will delete it.

Changes to this policy.

If we update this policy materially, we'll update the "Last updated" date at the top, post a notice on the site, and email subscribers whose interactions are affected by the change. Continued use of the site after the change means you accept the updated policy.

Contact.

Revival Raw — Privacy
La Motte, Iowa, United States
Email: Support@revivalrawdogfood.com
Security reports: /.well-known/security.txt