Privacy policy

Last updated: September 8, 2026

This Privacy Policy explains how LVLUP Design collects, uses, discloses and protects personal information when you visit www.lvlup.design, contact us, subscribe to updates, create or use a customer account, submit a review, configure a product, place an order, or otherwise interact with us.

1. Who we are

The store is operated by Assaf Dovrath, an Israeli registered business (Osek Murshe), trading as LVLUP Design (Hebrew business name: לבל אפ דיזיין).

Public business and correspondence address: 71 Ibn Gabirol Street, Tel Aviv-Yafo 6416202, Israel.
Email: info@lvlup.design
Contact form: Contact us

2. Personal information we collect

Depending on how you interact with the store, we may collect:

  • Identity and contact information, such as your name, email address, telephone number, billing address, shipping address and customer-account details.
  • Order and transaction information, such as products and configurations selected, order history, delivery method, discounts, currency, payment status, refunds and transaction identifiers. Payment credentials are processed by the payment provider; we generally receive confirmation and transaction information rather than your full payment credentials.
  • Customization information, including selections and instructions submitted through a product configurator or in communications with us.
  • Communications and support information, including messages, order numbers and any photographs or short videos you voluntarily send for assembly guidance, missing-part support, damage assessment, returns or other customer service.
  • Reviews and other content you choose to submit, together with the name or other attribution you provide for publication.
  • Marketing preferences, including newsletter subscription status and consent choices.
  • Device and usage information, such as IP address, browser and device information, pages viewed, referring URLs, approximate location derived from IP address, interactions with the store, and cookie or pixel identifiers.

3. How we collect personal information

We collect information directly from you, automatically through the store and related technologies, and from service providers that help us operate the store, process payments, personalize products, provide reviews, prevent fraud, analyze performance, advertise, ship orders and support customers.

4. How we use personal information

We use personal information to:

  • provide, personalize and improve the store and our collectible artwork;
  • prepare, process, fulfill, deliver, support, cancel, return or refund orders;
  • communicate with you about an inquiry, configuration, order, support request or legal notice;
  • maintain customer accounts and newsletter subscriptions;
  • publish and administer reviews where you choose to submit them;
  • detect, investigate and prevent fraud, abuse, security incidents and violations of our terms;
  • measure store performance and, subject to applicable consent and opt-out rights, conduct analytics, marketing and advertising;
  • comply with tax, accounting, consumer-protection, privacy and other legal obligations; and
  • establish, exercise or defend legal claims.

5. Legal bases for EEA, UK and Swiss visitors

Where these laws apply, we process personal information as necessary to perform a contract with you or take steps at your request before entering into a contract; to comply with legal obligations; for our legitimate interests in operating, securing and improving the store and supporting customers, where those interests are not overridden by your rights; and with consent where consent is required, including for certain marketing or non-essential tracking.

6. Cookies, analytics and advertising

We and our service providers use cookies and similar technologies to operate the store, remember choices, maintain security, understand store performance and, where permitted, personalize content or advertising. Essential technologies may operate without consent where the law permits. Non-essential technologies are controlled through the consent tools made available for your region.

You can accept, reject or change non-essential cookie choices through the cookie banner or the Cookie preferences link available on the store.

The store currently uses a Meta app pixel for analytics and marketing. Some privacy laws may describe disclosures connected with advertising pixels as a “sale,” “sharing,” or processing for targeted advertising even when no money is paid for the personal information.

Where applicable, you may opt out of sale, sharing or targeted advertising through Your Privacy Choices. We also honor Global Privacy Control signals where required and supported by Shopify's privacy tools.

7. Shopify Network Intelligence

Shopify may use customer data from this store together with data from interactions with other merchants and Shopify to provide enhanced services, such as improved personalization, performance, fraud prevention and advertising features. Your consent and opt-out choices are communicated through Shopify's customer-privacy tools where applicable. You can learn more or exercise rights directly with Shopify through the Shopify Privacy Portal and the Shopify Consumer Privacy Policy.

8. How we disclose personal information

We disclose personal information only as reasonably necessary for the purposes described above, including to:

  • Shopify, which hosts the store and provides commerce, checkout, customer-account, security, analytics and privacy services;
  • payment providers, currently including PayPal, to authorize payments, prevent fraud and administer refunds;
  • shipping and logistics providers, such as DHL, Israel Post or another carrier selected for the destination, to quote, insure, ship, track and deliver orders and handle delivery claims;
  • store applications and service providers used for product personalization, bundle composition, reviews, email delivery, technical support, hosting, analytics and security, including Zepto Product Personalizer, Bundle Kit and Stamped;
  • advertising and analytics partners, including Meta, subject to applicable consent and opt-out rights;
  • professional advisers and authorities where reasonably necessary for accounting, tax, insurance, legal compliance, dispute resolution or the protection of rights and safety; and
  • a successor or transaction participant in connection with a merger, financing, reorganization, sale of assets or similar business transaction, subject to applicable law.

We do not knowingly sell personal information for money. As explained above, some laws define certain advertising disclosures more broadly as a sale or sharing.

9. International processing

LVLUP Design operates from Israel. Shopify and other service providers may process personal information in Israel, the United States, Canada, the European Economic Area and other countries in which they or their subprocessors operate. Those countries may have different data-protection laws. Where required, we and our providers rely on recognized transfer mechanisms and safeguards.

10. Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including order fulfillment and support, tax and accounting records, fraud prevention, dispute resolution and compliance with legal obligations. The retention period depends on the type of information, why it was collected, applicable legal requirements and whether it is needed to establish, exercise or defend legal claims.

Photographs and videos submitted for support are retained only as long as reasonably needed to resolve the request, document a shipping or insurance claim, prevent abuse, or meet legal obligations. You may ask us to delete them, subject to any lawful reason we must retain them.

11. Security

We use reasonable administrative, technical and organizational measures designed to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Your rights and choices

Depending on where you live, you may have rights to request access to personal information, correction, deletion, restriction, portability, withdrawal of consent, or objection to certain processing. You may also have the right to appeal a decision or complain to a data-protection authority. These rights may be limited by law, and we may need to verify your identity before acting on a request.

You may unsubscribe from marketing emails using the unsubscribe link in the message or by contacting us. Withdrawing marketing consent does not stop transactional or service communications about an order or request.

Residents of certain US states may also have rights to know, correct or delete personal information and to opt out of sale, sharing or targeted advertising. We will not discriminate against you for exercising an applicable privacy right.

To exercise a privacy right, email info@lvlup.design or use our contact form. Please describe your request and the jurisdiction in which you live. Do not send identity documents unless we specifically request a secure verification method.

13. Adults-only collectible artwork

The store and its products are intended for adults aged 18 and over. They are not directed to children, and we do not knowingly collect personal information from children. If you believe a child has provided personal information, contact us so we can investigate and take appropriate action.

14. Third-party links

The store may link to websites or services operated by other organizations. Their privacy practices are governed by their own notices, and we encourage you to review them.

15. Changes to this Policy

We may update this Policy when our practices, services or legal obligations change. The revised version will be posted here with a new last-updated date. If a change materially affects how we use personal information, we will provide additional notice where required.

16. Contact and complaints

Questions, requests or complaints may be sent to info@lvlup.design or to LVLUP Design, 71 Ibn Gabirol Street, Tel Aviv-Yafo 6416202, Israel. Typical response time is up to 3 business days, although verification and completion of a formal privacy request may take longer where permitted by law.

You may also have the right to complain to the Israeli Privacy Protection Authority or to the competent data-protection authority where you live.