Privacy and Cookies Policy

Relover is operated by Catalyst 4 Good SL, C/Bretón de los Herreros, 38, 28003 Madrid, Spain.
We are the data controller for your personal data.

For privacy questions or to exercise your rights, contact:
📩 privacy@relover.ai

Information you provide

• Early access and email subscriptions: your email address, first name if provided, and your marketing opt-in. Our email subscription service also receives the IP address and timestamp associated with a new opt-in.
• Find my gem: your first name, email address, chosen Drop, size and colour preferences, budget, delivery country, any additional requirements, and your choice about ongoing marketing communications. We also record the originating page and submission time.
• Correspondence: the information you include when you contact us by email.

You do not need a customer account to browse Relover or submit these forms. The current public website does not collect account passwords.

Website and usage information

• Website infrastructure processes technical request information, including IP addresses, to deliver the site and support security and troubleshooting.
• If you allow Analytics cookies, Google Analytics receives information about pages and products viewed, product and seller-link clicks, email subscription requests, FAQ interactions and Find my gem interactions, together with technical browser and device information and cookie identifiers.
• Our Most viewed feature records a total view count per product. The counter stores the product identifier and aggregate count, without a visitor identifier. It operates separately from Google Analytics.
• We store your cookie choices and certain preferences in your browser, as explained in Section 5.

Our explicitly configured Google Analytics events do not include the names, email addresses or free-text requirements submitted through our forms.

We use personal data for the following purposes:

• To receive and respond to Find my gem requests and enquiries. The proposed legal basis is our legitimate interest in responding to requests that you initiate; where necessary to take steps towards a contract at your request, the contractual basis applies.
• To send marketing emails when you opt in. The legal basis is consent. You can unsubscribe using the link in an email or contact us to withdraw it.
• To measure website use through Google Analytics and Microsoft Clarity when you accept Analytics, and advertising responses through Meta Pixel when you accept Marketing. The legal basis is consent.
• To deliver and protect the website, troubleshoot problems and maintain aggregate product popularity counts. The proposed legal basis is our legitimate interest in operating and improving the service.
• To meet applicable legal obligations and retain records needed to demonstrate compliance. The legal basis is the relevant legal obligation.

Providing information requested by an email subscription or Find my gem form is necessary for us to process that request. Optional marketing consent for Find my gem is separate from receiving a response about your request.

Relover publishes curated Drops and product recommendations. When you submit a Find my gem request, we use the preferences and requirements you provide to consider your request and contact you about suitable items.

The current public website does not provide an account-based personal feed or automated recommendations based on an individual visitor’s browsing history. This policy does not treat internal editorial or sourcing tools as customer-facing automated decision-making.

We use cookies and similar browser storage for the purposes described below. Google Analytics and Microsoft Clarity are blocked until you allow Analytics. Meta Pixel is blocked until you allow Marketing.

Essential storage and requested preferences

• Cookie choices: Relover stores your category choices, the preference version and the date of your choice in first-party browser storage for 180 days. Acceptance and rejection use the same period. If browser storage is unavailable, your choice may last only for the current page.
• Requested display and motion settings: browser storage remembers settings you explicitly choose, such as pausing autoplay. These preferences remain until you change them or clear browser storage.
• Find my gem: after a successful request, your first name and email may be kept in session storage to help with another request in the same browser tab. This storage lasts for that tab’s session.
• Internal traffic preference: an explicit internal-testing setting can store an exclude_traffic cookie for up to one year. This identifies test traffic for analytics filtering; it does not enable analytics without consent.

Analytics

We use Google Analytics 4, provided by Google, to understand how visitors use Relover and which items and journeys attract interest. It loads only after Analytics consent. It can use first-party cookies such as _ga and _ga_83ZKKWL9QV. Our website configures Google Analytics cookies with a 180-day lifetime and disables automatic expiry renewal. Google’s account-level data-retention settings are separate from browser cookie expiry.

For information about Google’s handling of data, see Google’s partner-sites privacy information.

Microsoft Clarity helps us understand page interactions through heatmaps and session recordings, using cookies such as _clck and _clsk. Form content and the name shown after a Find my gem request are marked for masking in recordings. Clarity starts only after Analytics consent, and receives a separate advertising-storage consent signal reflecting your Marketing choice.

See Microsoft’s privacy statement for provider information.

Marketing and personalization

We use Meta Pixel, provided by Meta, after Marketing consent. It sends page visits and may measure events configured in our Meta data source, together with page URLs, technical browser information and cookie identifiers. Meta may use this information for advertising measurement and related purposes described in its privacy policy. Marketing consent also controls advertising-related signals in Google and Microsoft services when they are active. It does not by itself start Google Analytics or Clarity.

The Personalization choice is saved and passed to the Google tag when active. The current website does not run a separate optional personalization service. Browser settings you explicitly request are described above.

Meta may use first-party cookies such as _fbp and _fbc. Their lifetimes and the provider-side event, retention and matching settings need confirmation against the existing Meta configuration before this draft is finalized.

See Meta’s privacy policy for its processing practices.

Your choices

On your first visit, you can accept all, deny non-essential categories or manage individual choices. Optional categories start off. You can change your choices any time via our [Cookie Settings], the footer link or the cookie button.

Turning off an active category refreshes the page to unload tracking code and clears accessible Google, Meta and Clarity tracking cookies. A partly completed form may be lost during that refresh. Rejecting website cookies does not unsubscribe you from marketing emails; use the unsubscribe link in an email for that separate choice.

Affiliate links and external websites

Some seller links may be affiliate links. When you follow them, the destination or its affiliate provider may receive referral information and use its own tracking technologies to attribute a purchase to Relover. Relover may earn a commission without an additional charge to you. Tracking on those external websites is governed by their own privacy notices and consent controls. Relover records its own seller-link analytics event only if you allow Analytics.

California privacy rights

Where applicable, some advertising-related disclosures of personal information may be considered sharing under California privacy law. You can deny Marketing and Analytics through [Cookie Settings] and contact privacy@relover.ai about applicable rights.

• Cloudflare provides hosting and infrastructure for the public website and stores Find my gem contact and request records.
• Flodesk processes email subscription details, consent information and email-list membership. For Find my gem, the website checks for an existing Flodesk contact and may update its first name even if you do not select new marketing consent. New email subscriptions and communication-segment additions depend on your marketing choice.
• Google and Microsoft receive consented analytics and related technical data. Microsoft Clarity provides heatmaps and session recordings. Meta receives consented pixel data for advertising measurement.
• External marketplaces, sellers and affiliate providers receive information when you follow their links and interact with their services.
• Public authorities or other recipients may receive information where disclosure is required by law.

We do not receive your full payment details from purchases on external marketplaces. Their payment handling, delivery, returns and privacy practices are governed by their own terms.

The privacy-policy link alongside our email subscription forms currently points to our Flodesk-hosted privacy page. Email marketing consent and website cookie consent are separate.

Our hosting, email and analytics providers may process personal data outside the European Economic Area. The relevant processing locations, contractual arrangements and transfer safeguards for each provider, including Meta and Microsoft, need confirmation before this draft is finalized.

Where applicable, international transfers require a valid transfer mechanism, such as an adequacy decision or standard contractual clauses with any necessary supplementary measures. You can contact privacy@relover.ai for information about the arrangements applicable to your data.

Under GDPR (EU)

You may:

• Access, correct, or delete your data
• Withdraw consent at any time
• Object to processing or request restriction
• Request data portability
• File a complaint with your local Data Protection Authority

Under CCPA (California)

You may:

• Request details on what personal info we collect
• Request deletion of your data
• Opt-out of data “selling” or “sharing” where applicable
• Not be discriminated against for exercising your rights

📩 To make a request, email privacy@relover.ai with subject line: "Privacy Request"

Find my gem: our selected retention rule is to keep identifiable request details for up to one year after the request is completed or closed, unless earlier deletion is appropriate or limited retention is required by law. After that period, only genuinely anonymous aggregate information may be kept to improve our curation, without a fixed retention limit, provided individuals can no longer reasonably be identified. Individual request records, free-text requirements and identifiers must not be retained as an anonymous archive.

Email subscriptions: we retain the contact details and consent evidence necessary to provide the emails you subscribed to while your subscription and consent remain valid. We regularly review whether continued retention remains necessary. You can unsubscribe at any time. Unsubscribing stops marketing; limited records may still be needed to honour your opt-out, demonstrate consent or comply with applicable law. An unsubscribe does not automatically erase every record held by our email provider.

Correspondence is retained for as long as needed to deal with your enquiry and relevant follow-up. Where Spanish law requires records to be blocked following correction or deletion, they must be kept separately from ordinary use, solely for the applicable legal responsibilities, and destroyed when that period ends.

Browser-storage periods are explained in Section 5. The current website does not offer an ongoing personal-stylist profile. Any future profile will require its own clear information and retention controls before we start collecting personal data for it.

Draft implementation check: the one-year Find my gem rule has been selected, but request closure, anonymisation and deletion are not yet enforced by the website. Retention periods for other records must be justified by their purpose. Provider event, log and email-history retention settings and the restricted-record procedure also need verification before publication. This draft does not confirm those processes are operating.

The website uses HTTPS connections. Credentials used to connect to services such as Flodesk are handled on the server and are not included in the public form code. Find my gem records are stored in the website’s hosting infrastructure.

Security arrangements, staff access and provider protections must be reviewed as part of operating the service. No internet service can guarantee absolute security.

We may update this policy as the service or its data practices change. The date at the top identifies this version. Where required, we will provide notice of material changes or request fresh consent.

Have questions, concerns, or requests?

privacy@relover.ai
Catalyst 4 Good SL

C/Bretón de los Herreros, 38

28003 Madrid

Spain