Privacy Policy

1. Introduction

Tervask, LLC respects your privacy and is committed to protecting the personal information collected through tervask.com. This Privacy Policy explains what information we collect, why we collect it, how we use it, how it may be shared, how long it may be retained, and what rights may be available to you. This policy applies when you visit our website, create an account, place an order, contact customer support, submit a return request, use order tracking, or otherwise interact with our services.

2. Website Platform and Store Operation

This website is a self-hosted store built on WordPress and powered by WooCommerce. WordPress provides the website content-management framework, while WooCommerce supports product listings, shopping-cart functions, customer accounts, checkout, order processing, refunds, and related store operations. Because the website is self-hosted, Tervask, LLC is responsible for selecting and managing its hosting environment, installed themes, plugins, extensions, administrative users, security settings, backups, and data-retention configurations.

3. Information We Collect

We may collect information that you provide directly to us, including your name, billing address, shipping address, email address, telephone number, account credentials, order details, purchased-item information, delivery instructions, return or refund requests, customer-service communications, and any photographs or documents submitted in connection with damaged, defective, incorrect, or missing products. We may also collect transaction references and limited payment-related information supplied by our payment processors, such as payment status, payment method type, authorization result, transaction identifier, and fraud-screening result.

4. Information Collected Automatically

When you access tervask.com, certain technical information may be collected automatically, including your Internet Protocol address, browser type, operating system, device type, language preferences, approximate location derived from your IP address, referring page, pages visited, access times, session activity, cookie identifiers, and website error or security logs. This information may be collected through server logs, cookies, WooCommerce functions, security tools, analytics tools, and other technologies necessary to operate and protect the website.

5. How We Use Personal Information

We use personal information to operate the website, create and manage customer accounts, process orders, confirm payments, prepare shipments, provide tracking information, communicate about purchases, handle returns and refunds, respond to questions, prevent fraud, investigate unauthorized transactions, improve website performance, maintain business records, comply with legal requirements, and enforce our policies. We may also use information to personalize website functions and, where permitted, send service announcements or marketing communications.

6. Legal Bases for Processing

Where applicable law requires a legal basis, we process personal information because it is necessary to perform a contract with you, take steps at your request before entering into a contract, comply with legal obligations, protect our legitimate business interests, prevent fraud, establish or defend legal claims, or because you have provided consent. Legitimate interests may include operating and securing the website, improving customer service, maintaining accurate records, detecting misuse, and resolving payment or delivery disputes. Where processing is based on consent, you may withdraw that consent at any time without affecting processing that occurred before withdrawal.

7. Orders, Shipping, and Fulfillment

When you place an order, we use your name, contact details, shipping address, billing information, order contents, and delivery instructions to process and fulfill the purchase. We may share necessary information with warehouses, fulfillment providers, shipping carriers, customs agents, postal services, logistics contractors, and delivery partners. These parties receive only the information reasonably required to prepare, transport, track, deliver, investigate, or return the shipment. International shipments may also require disclosure of information to customs authorities or other government agencies.

8. Payment Processing Through Stripe and PayPal

Payments made through tervask.com are processed by independent third-party payment service providers, including Stripe and PayPal. When you select a payment method, payment information is transmitted directly to the applicable payment provider, card network, digital-wallet provider, bank, or financial institution. Stripe and PayPal may process personal and transaction information under their own privacy notices, security standards, legal obligations, fraud-prevention systems, and data-retention requirements.

9. We Do Not Store Payment Credentials

Tervask, LLC does not store customers’ full credit-card numbers, debit-card numbers, card verification values, bank-account credentials, routing numbers, digital-wallet passwords, or complete payment authentication information. These sensitive payment credentials are submitted directly to Stripe, PayPal, or the applicable financial provider through their secure payment systems. We may retain limited transaction records, such as the payment status, provider name, transaction identifier, card brand, masked card digits, refund status, or authorization result, when required for accounting, customer service, fraud prevention, refunds, and dispute handling.

10. Payment and Transaction Security

Payment pages and communications are protected through secure HTTPS connections and SSL/TLS encryption, which help protect information while it is transmitted between your browser, our website, and the payment provider. Stripe and PayPal use payment tokenization and payment-security controls designed to reduce the exposure of sensitive card information. Payment processors may also use encryption, fraud detection, risk scoring, device analysis, transaction monitoring, authentication tools, and controls designed to support Payment Card Industry Data Security Standard requirements. PCI DSS is the industry security standard applying to organizations that store, process, or transmit cardholder data.

11. Website and Information Security Measures

We use reasonable technical and organizational measures designed to protect personal information against unauthorized access, alteration, disclosure, destruction, loss, misuse, and accidental damage. These measures may include SSL/TLS encryption, HTTPS enforcement, access controls, strong administrator passwords, role-based permissions, restricted database access, software updates, security patches, firewall protections, malware monitoring, login-attempt controls, spam prevention, secure hosting configurations, encrypted or protected backups, logging, fraud screening, and periodic review of installed WordPress themes, plugins, and WooCommerce extensions.

12. Internal Access Controls

Access to customer information is limited to authorized personnel, contractors, and service providers who require the information to perform legitimate business functions. Administrative access is granted according to job responsibilities and may be protected through authentication controls and activity logging. Personnel with access to personal information are expected to use it only for authorized purposes and to maintain its confidentiality. Where appropriate, access may be removed or changed when duties change or access is no longer required.

13. Fraud Prevention and Payment Disputes

We may use order, account, device, payment, shipping, and communication information to identify suspicious transactions, prevent fraud, investigate unauthorized activity, and respond to chargebacks or payment disputes. When responding to a Stripe, PayPal, card-network, bank, or payment-provider inquiry, we may provide relevant evidence, including order confirmations, transaction references, billing information, customer communications, IP or device records where lawfully available, shipment tracking, delivery confirmation, return authorization, inspection records, photographs, policy acceptance records, and refund documentation. This information is used only to verify the transaction, protect customers and the business, and establish or defend legal claims.

14. Cookies and Similar Technologies

tervask.com may use cookies and similar technologies to maintain shopping-cart contents, remember account sessions, support checkout, store preferences, protect forms, prevent fraud, measure website performance, and understand how visitors use the website. Some cookies are necessary for the website to function and cannot reasonably be disabled through our systems. Other cookies, including analytics or advertising cookies, may require consent depending on your location. You may manage cookies through your browser settings or any cookie-consent controls made available on the website.

15. Analytics, Marketing, and Communications

We may use analytics services to understand traffic, page performance, device usage, and customer interactions. Where permitted by law, we may use your email address to send information about products, store updates, or other marketing communications. You may unsubscribe from marketing emails using the unsubscribe option included in the message or by contacting [email protected]. Transactional messages concerning orders, payments, shipping, returns, security, or policy changes are service communications and may still be sent when necessary.

16. Service Providers and Third Parties

We may disclose personal information to service providers that support website hosting, data storage, WordPress maintenance, WooCommerce functionality, payment processing, fraud prevention, order fulfillment, customer support, email delivery, analytics, security monitoring, accounting, legal compliance, returns, and shipping. These providers may process information only as needed to perform their services or satisfy their own legal obligations. We do not sell personal information in exchange for money. We may disclose information when required by law, court order, subpoena, government request, or when reasonably necessary to protect rights, safety, property, or prevent unlawful activity.

17. International Data Transfers

Because Tervask, LLC provides worldwide shipping and uses international service providers, personal information may be processed or stored in countries other than the country where you live. These countries may have data-protection laws that differ from those in your jurisdiction. Where required, we use appropriate safeguards for international transfers, which may include contractual protections, standard contractual clauses, service-provider agreements, or other legally recognized transfer mechanisms.

18. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including completing orders, providing customer service, processing refunds, maintaining transaction and tax records, meeting accounting obligations, preventing fraud, responding to payment disputes, enforcing agreements, and complying with applicable law. Retention periods may differ according to the type of information and legal requirements. WooCommerce privacy and retention settings may be used to remove, anonymize, or retain eligible account and order data, although certain order, tax, payment, invoice, dispute, or legal records may need to be retained after an erasure request.

19. European Economic Area, United Kingdom, and GDPR Rights

If you are located in the European Economic Area, European Union, or United Kingdom, applicable data-protection law may provide you with the right to request access to your personal information, correction of inaccurate information, deletion of eligible information, restriction of processing, data portability, and objection to certain processing. You may also have the right to withdraw consent and lodge a complaint with the competent data-protection supervisory authority. These rights may be subject to limitations where information must be retained to complete a contract, comply with legal obligations, prevent fraud, resolve disputes, or establish, exercise, or defend legal claims. GDPR principles require lawful, fair, transparent, purpose-limited, proportionate, accurate, secure, and appropriately retained data processing.

20. United States Privacy Rights

Depending on your state of residence and subject to applicable thresholds and exceptions, you may have rights to request information about the personal data we collect, access or obtain a copy of your data, correct inaccurate data, request deletion, or opt out of certain targeted advertising, profiling, sharing, or sale activities as those terms are defined by applicable law. We will not unlawfully discriminate against you for exercising an available privacy right. We may need to verify your identity before completing a request and may retain certain information when required for transactions, security, tax, accounting, fraud prevention, disputes, or legal compliance.

21. Children’s Privacy

tervask.com is not directed to children under the age of 16, and Tervask, LLC does not knowingly collect personal information directly from children under 16. If we learn that personal information has been collected from a child without appropriate authorization, we will take reasonable steps to delete it, subject to applicable legal obligations. A parent or legal guardian who believes that a child has provided information to us should contact [email protected].

22. Privacy Requests, Policy Updates, and Contact Information

To request access, correction, deletion, restriction, portability, objection, withdrawal of consent, or other assistance concerning your personal information, contact Tervask, LLC at [email protected]. We may request reasonable information to verify your identity and locate the relevant records before completing the request. We may update this Privacy Policy when our services, website technology, payment providers, legal obligations, or data practices change. The revised policy will be posted on tervask.com with an updated effective date. Questions or complaints may also be sent to Tervask, LLC at 219 Forbes Ave, Ste 200, Pittsburgh, PA 15222, US or by telephone at +1(412)392-4570.