Your privacy matters to us. This policy explains what information we collect, how we use it, and what choices you have.
SheriChic Inc. ("SheriChic," "we," "us," or "our") operates the e-commerce platform available at torvali.com (the "Platform"). We provide tools that enable independent merchants to build and run online storefronts.
SheriChic acts as the data controller for information collected from merchants and visitors to our Platform. For data that merchants collect from their own end customers through their storefronts, SheriChic acts as a data processor on the merchant's behalf — the merchant is the data controller.
This Privacy Policy applies to:
This policy does not apply to third-party websites, services, or applications that may be linked from the Platform. We encourage you to review the privacy policies of those third parties independently.
When you create a merchant account or use the Platform, we collect:
When you use the Platform, we automatically collect certain technical information, including:
When an End Customer interacts with a merchant's storefront, we may collect on the merchant's behalf:
This data is collected to operate the storefront and fulfill orders. Merchants are responsible for their own privacy disclosures to their End Customers.
We may receive information about you from third-party services integrated with the Platform, such as Stripe (payment status and dispute information). We use this information only as necessary to operate the Platform.
We use the information we collect to:
| Purpose | Legal Basis (where applicable) |
|---|---|
| Create and manage your merchant account | Contract performance |
| Process subscription payments and billing | Contract performance |
| Operate, maintain, and improve the Platform | Legitimate interest |
| Provide customer support and respond to inquiries | Contract performance / Legitimate interest |
| Send transactional emails (receipts, account alerts, security notices) | Contract performance |
| Send platform updates and product announcements | Legitimate interest (opt-out available) |
| Detect, investigate, and prevent fraud or abuse | Legitimate interest / Legal obligation |
| Comply with applicable laws and legal obligations | Legal obligation |
| Analyze usage patterns to improve features and user experience | Legitimate interest |
We do not sell your personal information to third parties for their own marketing purposes.
We do not sell, rent, or trade your personal information. We share information only in the following circumstances:
We share information with trusted third-party service providers who help us operate the Platform, including:
These providers are contractually required to handle your information securely and only for the purposes we specify.
We may disclose your information when required by law, court order, or government authority, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
In the event of a merger, acquisition, or sale of all or substantially all of our assets, your information may be transferred to the successor entity. We will notify you by email or Platform notice before your data becomes subject to a different privacy policy.
We may share your information with third parties when you have given us explicit consent to do so.
We use cookies and similar technologies to operate and improve the Platform. Here is what we use them for:
| Cookie Type | Purpose | Can You Opt Out? |
|---|---|---|
| Essential / Functional | Keeping you logged in, maintaining session state, remembering your cart | No — required for the Platform to function |
| Analytics | Understanding how the Platform is used to improve features | Yes — via browser settings or our cookie preferences |
| Preferences | Remembering your settings and display preferences | Yes |
You can manage or disable cookies through your browser settings. Disabling essential cookies may prevent some features from working correctly.
Merchant storefronts may also use cookies to operate shopping cart functionality and customer accounts. End Customers should refer to the merchant's own privacy policy for details.
Data collected through your storefront from your End Customers (names, emails, orders, addresses) belongs to you as the merchant. SheriChic processes this data on your behalf solely to operate your storefront and fulfill platform functionality.
You are responsible for:
We retain your account information and store data for as long as your account is active. After account cancellation:
You may request early deletion of your data by contacting privacy@sherichic.com, subject to any legal retention obligations.
We implement industry-standard security measures to protect your information, including:
No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.
If you believe your account has been compromised, please contact us immediately at security@sherichic.com.
Depending on where you are located, you may have the following rights regarding your personal information:
To exercise any of these rights, please contact us at privacy@sherichic.com. We will respond within 30 days. We may need to verify your identity before fulfilling your request.
You may opt out of marketing emails at any time by clicking the unsubscribe link in any such email or by emailing support@sherichic.com. You will still receive transactional and account-related emails necessary to operate your account.
The Platform is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a minor, please contact us at privacy@sherichic.com and we will take steps to delete it promptly.
SheriChic is based in the United States. If you access the Platform from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate.
Where we transfer personal data from the European Economic Area (EEA), United Kingdom, or Switzerland to countries that do not have an adequacy decision, we rely on appropriate safeguards such as Standard Contractual Clauses approved by the European Commission to ensure your data is protected.
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
To submit a California privacy request, contact us at privacy@sherichic.com with the subject line "California Privacy Request."
If you are located in the European Economic Area (EEA) or United Kingdom, you have rights under the General Data Protection Regulation (GDPR) or UK GDPR, including those described in Section 10.
Our lawful bases for processing your personal data include:
You have the right to lodge a complaint with your local data protection authority if you believe we have not handled your personal data in accordance with applicable law. For EEA residents, this may be the supervisory authority in your country of residence.
For GDPR-related inquiries, contact our privacy team at privacy@sherichic.com.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by:
The "Last updated" date at the top of this page reflects when the policy was most recently revised. We encourage you to review this policy periodically. Your continued use of the Platform after changes take effect constitutes acceptance of the updated policy.
If you have questions, concerns, or requests related to this Privacy Policy or how we handle your personal information, please contact us:
We will respond to all privacy-related inquiries within 30 days.