Privacy Policy

Last updated: September 14, 2026

Viva Rome Poto operates the website romepoto.com. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit our website, place an order, contact us, or subscribe to our marketing communications.

Personal Information We Collect

When you visit or use our website, we may collect the following types of information:

Information you provide directly

This may include your:

• Name
• Email address
• Phone number
• Billing and shipping address
• Order and purchase information
• Information you provide when contacting customer support
• Information you submit through forms, including email-signup forms
• Any other information you choose to provide

Information collected automatically

When you browse our website, Shopify may automatically collect information about your device and interactions with the site, including:

• IP address
• Browser type
• Device type
• Operating system
• Time zone
• Pages and products viewed
• Referring website
• Search terms
• Date and time of visits
• Information about how you interact with the website

We use this information to operate the website, process orders, improve the customer experience, maintain security, and understand general website performance.

Payment information

Payments are processed through Shopify and the payment providers available at checkout. We receive information needed to confirm and fulfill your order, but payment information is handled according to the privacy policies of Shopify and the applicable payment provider.

How We Use Personal Information

We may use personal information to:

• Process and fulfill orders
• Process payments
• Arrange shipping and delivery
• Send order confirmations and account-related messages
• Provide customer support
• Respond to questions, requests, or complaints
• Maintain and improve our website
• Protect our website, customers, and business from fraud or unauthorized activity
• Comply with legal and accounting requirements
• Send marketing emails when you have subscribed or otherwise provided consent
• Share information about products, new Hapé blends, ceremonial tools, and special offers

Email Marketing

If you subscribe to our marketing emails, we use your email address to send updates about Viva Rome Poto products, new Hapé blends, ceremonial tools, and special offers.

You can unsubscribe from marketing emails at any time by clicking the unsubscribe link included in our emails or by contacting us using the information in the Contact section of this policy.

Unsubscribing from marketing emails does not stop transactional messages, such as order confirmations, shipping updates, account notices, or other communications related to a purchase.

How We Share Personal Information

We may share personal information with trusted service providers that help us operate our business, including:

• Shopify, which hosts and operates our online store
• Payment processors
• Shipping and delivery providers
• Fulfillment providers
• Customer-support providers
• Email and marketing service providers
• Website, security, and technology service providers
• Professional advisers, where necessary

These service providers may access personal information only as needed to provide services to us or to comply with legal requirements.

We may also disclose personal information if required by law, legal process, court order, or government request, or when disclosure is necessary to protect our rights, customers, property, or operations.

Cookies and Similar Technologies

Our website uses cookies and similar technologies to support essential store functions, including:

• Shopping-cart functionality
• Checkout
• Customer account features
• Security
• Regional and language settings
• Privacy preferences
• Website performance and analytics

Some cookies are necessary for the website to function. Other cookies may help us understand how visitors use the website so we can improve the store.

You can manage cookies through your browser settings and, where available, through the privacy tools provided on our website. Blocking some cookies may affect how certain parts of the website work.

Google Search Console is used to verify our website and monitor search performance. It is not used by us as a customer-behavior advertising or email-marketing tool.

Data Retention

We retain personal information for as long as necessary to provide our services, fulfill orders, provide customer support, comply with legal and accounting obligations, resolve disputes, prevent fraud, and enforce our agreements.

When personal information is no longer needed, we may delete it, anonymize it, or securely retain it where required by law.

Data Security

We use reasonable administrative, technical, and organizational safeguards to protect personal information. However, no method of transmission or electronic storage is completely secure, and we cannot guarantee absolute security.

Your Privacy Rights

Depending on where you live, you may have rights regarding your personal information, including the right to:

• Ask what personal information we hold about you
• Request access to your personal information
• Request correction of inaccurate information
• Request deletion of personal information, subject to legal exceptions
• Request information about how your personal information is used or shared
• Withdraw consent for marketing communications
• Opt out of certain forms of marketing or data sharing where applicable

To make a privacy request, contact us using the information in the Contact section of this policy. We may need to verify your identity before completing a request.

You can unsubscribe from marketing emails at any time by using the unsubscribe link in the email.

California Privacy Rights

If you are a California resident, you may have additional rights under California privacy laws. These may include the right to request access to, correction of, or deletion of personal information, as well as the right to know more about how personal information is collected and used.

You may also have the right to opt out of certain uses or sharing of personal information where applicable. We will not discriminate against you for exercising a privacy right.

To submit a privacy request, contact us using the information in the Contact section of this policy. We may ask for information needed to verify your request.

Children’s Privacy

Our website is not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided personal information to us, please contact us so we can review and delete the information where appropriate.

Third-Party Websites

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices, content, or security of third-party websites. We encourage you to review the privacy policies of those websites before providing personal information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, website, services, or legal requirements.

When we make changes, we will update the “Last updated” date at the top of this policy. Your continued use of the website after an updated policy is posted means you acknowledge the revised policy.

Contact Us

If you have questions about this Privacy Policy, want to make a privacy request, or have a complaint about our privacy practices, contact us using the business email, phone number, and mailing address listed in the Contact section of this policy.