Privacy policy

 

1. Scope of this Policy

This Privacy Policy applies solely to personal data collected through our online store. It governs information gathered when you browse our indoor furniture collections, place orders, complete checkout transactions, or communicate with customer support. We sell exclusively online and do not maintain any physical storefronts or offline retail operations.

2. Technical Means of Information Collection: Cookies

We utilize cookies and standardized technical tools (such as session identifiers and web beacons) to recognize your browser, maintain shopping cart contents, ensure smooth navigation, and compile operational metrics. Automatically recorded parameters include IP addresses, browser types, operating systems, referring web pages, and access timestamps.

3. Information Use Scope and Sharing

Personal data is gathered strictly for direct business purposes, including processing furniture purchases, scheduling freight transport, validating payments, answering inquiries, and preventing transactional fraud.

We share personal details solely with essential service entities under contractual confidentiality terms:

  • Payment processors to facilitate secure, encrypted transactions without storing sensitive card details on our hosting environment;

  • Logistics and freight carriers to fulfill deliveries to your designated address;

  • Secure server hosts and technical infrastructure partners necessary to maintain store availability.

We do not sell, rent, release, or share your personal information with outside entities for commercial monetary gain.

Cookies and technical parameters are held on local devices and secured host servers. Visitors are provided with an explicit notification upon initial visit, explaining the functional, analytical, and marketing cookies deployed. You possess full authority over these tools: you may give consent, refuse non-essential cookies, or withdraw consent at any time via browser controls or technical preference panels.

You maintain comprehensive rights regarding your personal information:

  • Access: Inquire whether your data is processed and obtain a portable copy of stored records.

  • Correction: Request the modification of inaccurate, outdated, or incomplete records.

  • Deletion: Request the permanent erasure of personal data under applicable criteria.

  • Withdrawal of Consent: Retract previously given consent at any time without impacting operations conducted prior to withdrawal.

To exercise these rights, submit your request through our contact channels detailed below.

In adherence to our GDPR政策 framework, we process personal information strictly on the following lawful grounds:

  • Performance of a Contract: Fulfilling customer orders, managing billing, coordinating deliveries, and providing purchased services.

  • Explicit Consent: Administering direct email subscriptions, newsletters, and marketing activities upon your active opt-in.

  • Compliance with Legal Obligations: Meeting mandatory accounting, financial auditing, tax reporting, and regulatory standards.

  • Legitimate Interests: Securing our website infrastructure, preventing fraudulent payments, and evaluating store performance to optimize user experience.

7. Data Security Measures

We deploy advanced technical and organizational measures to safeguard personal data against unauthorized disclosure, interception, destruction, or alteration. All electronic interactions and payment data flows utilize Transport Layer Security (TLS/SSL) encryption. Administrative access to data storage environments is strictly limited to authorized personnel subject to confidentiality agreements and multi-factor authentication.

8. Data Processing and Transfers Outside the European Economic Area

Information collected through our online operations is processed on host facilities located outside the European Economic Area, including secured data centers within the United States. To safeguard transfers beyond the European Economic Area, we implement standard contractual clauses adopted by regulatory bodies, coupled with robust server-side encryption and restricted physical access controls.

9. Supplemental United States Data Handling and State-Specific Protections

For consumers residing in the United States, we comply with relevant federal and state standards, including the California Consumer Privacy Act (CCPA/CPRA) and related state frameworks:

  • Right to Know and Access: You may request details on the categories and specific pieces of personal data collected over the preceding 12 months.

  • Right to Delete and Correct: You may request the deletion or correction of personal records held in our databases.

  • Non-Sale and Non-Sharing Commitment: We do not sell personal data, nor do we share personal details for targeted advertising. We do not process sensitive personal data for profiling.

  • Non-Discrimination: We will never deny service, vary service quality, or impose different rates should you exercise your privacy entitlements.

  • Transmission Basis: US data transfers occur over encrypted protocols exclusively to fulfill orders, verify fraud-free transactions, and provide direct consumer care.

10. Data Retention Period

We retain personal details only for the duration required to achieve the purposes defined in this policy:

  • Transactional and billing documentation is kept for the period mandated by tax and corporate audit rules.

  • Account records are maintained until you formally request account closure or data deletion.

  • Customer support logs and non-essential technical logs are systematically purged once relevant business inquiries or analytical reviews conclude.

11. Supplemental Rights, Exercise, and Complaint Channels

To submit an inquiry, request data changes, or exercise your rights under applicable privacy rules, contact us via the details in Section 15. We verify requester identity before processing substantive data requests and respond within statutory deadlines. If you believe your rights have been infringed, you maintain the entitlement to file a formal complaint with a competent supervisory authority.

12. Automated "Do Not Track" and Opt-Out Preference Signals

Our website recognizes and respects automated browser opt-out signals, including the Global Privacy Control (GPC). Upon receiving a recognized signal, non-essential data analytics and tracking scripts are automatically suppressed.

13. Policy Updates

We reserve the right to update this policy as necessitated by technological advancements or business adjustments. All modifications become effective upon their publication in the online store.

14. Severability

Should any single clause within this document be declared invalid or unenforceable by a court of competent authority, the validity and enforceability of all remaining sections shall remain fully operational.

15. Contact Information

For inquiries regarding our privacy standards or to exercise your individual data rights, contact us through the following credentials:

Address: 318 Charles St, Port Orange, FL 32129, United States
Phone: +1 (386) 788-4291
Email: hello@yavianaria.com
Service Hours: Monday to Friday, 9:00 AM – 6:00 PM (Central European Time, CET)