Privacy policy
PRIVACY POLICY
This Privacy Policy explains how Valaziio ("we", "us", "our") collects, uses, shares and protects your personal data when you visit https://valaziio.com or place an order. We comply with the EU General Data Protection Regulation (GDPR), the UK GDPR and Data Protection Act 2018, the California Consumer Privacy Act as amended by the CPRA (CCPA/CPRA), and Canada's PIPEDA.
DATA CONTROLLER
The controller responsible for your personal data is IAN TORRAS PAES, 17 Rue des Cerisiers, 80100 Abbeville, France. Privacy contact: contact@valaziio.com
PERSONAL DATA WE COLLECT
Identity and contact data: name, billing and shipping address, email address, phone number.
Order and transaction data: products purchased, order value, order history, and correspondence with us.
Payment data: processed securely by our payment providers. We do not receive or store full card numbers.
Technical and usage data: IP address, device and browser type, pages viewed, collected through cookies and similar technologies.
Marketing preferences: your consent choices for newsletters and promotional messages.
HOW WE COLLECT IT
Directly from you when you place an order, create an account, subscribe, or contact us.
Automatically, through cookies and analytics tools when you browse the site.
From third parties, such as our payment processors, shipping carriers, and advertising or analytics platforms.
WHY WE USE YOUR DATA AND OUR LEGAL BASES (GDPR Art. 6)
To process and deliver your orders and provide customer support – performance of a contract.
To comply with tax, accounting and other legal obligations – legal obligation.
To prevent fraud, secure our site, and improve our products and service – legitimate interests.
To send marketing communications and set non-essential cookies – your consent, which you may withdraw at any time.
WHO WE SHARE DATA WITH
We share personal data only as needed to run the store: with our e-commerce platform and hosting provider (Shopify); payment processors (such as Shopify Payments, Stripe or PayPal); shipping, fulfilment and supplier partners; analytics and advertising providers (such as Google, Meta and TikTok); and public authorities where required by law. We do not sell your personal data for money.
INTERNATIONAL DATA TRANSFERS
Some of our providers are located outside the EEA or the UK. Where personal data is transferred internationally, we rely on appropriate safeguards such as European Commission adequacy decisions or Standard Contractual Clauses.
DATA RETENTION
We keep your personal data only as long as necessary for the purposes described above, and for as long as required to meet legal obligations (for example, invoicing and accounting records). After that, data is deleted or anonymised.
COOKIES
We use strictly necessary cookies to run the store, and – subject to your consent – analytics and marketing cookies. You can accept, refuse or change your cookie choices at any time through our cookie banner or your browser settings.
YOUR RIGHTS – EU & UK (GDPR / UK GDPR)
Access, rectify, erase, restrict or object to the processing of your data.
Data portability, and the right to withdraw consent at any time.
The right to lodge a complaint with a supervisory authority – in France, the CNIL (www.cnil.fr); in the UK, the ICO (ico.org.uk); or the authority in your EU country of residence.
YOUR RIGHTS – UNITED STATES / CALIFORNIA (CCPA/CPRA)
The right to know what personal information we collect and how we use it.
The right to request deletion or correction of your personal information.
The right to opt out of the "sale" or "sharing" of personal information for targeted advertising – you may exercise this via a "Do Not Sell or Share My Personal Information" request to contact@valaziio.com.
The right to limit the use of sensitive personal information, and the right not to be discriminated against for exercising these rights.
YOUR RIGHTS – CANADA (PIPEDA)
You may access and correct your personal information, and complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca).
HOW TO EXERCISE YOUR RIGHTS
Send your request to contact@valaziio.com. We respond within the timeframes set by law (one month under the GDPR/UK GDPR; 45 days under the CCPA/CPRA). We may need to verify your identity before acting on a request.
CHILDREN
Our store is not directed to children, and we do not knowingly collect personal data from children under 16. If you believe a child has provided us with data, please contact us and we will delete it.
CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time. The date shown when it was last revised applies.