Privacy Policy
This policy explains how personal data is handled when you browse the website, place an order, make a payment or contact customer service.
Personal data categories
Depending on how you use the website, we may process information connected with orders, payments, customer-service communications, technical use of the website and cookie preferences.
Orders
Order details may include contact, billing, shipping, product and transaction information required to process and deliver an order.
Payments
Payments are processed through Stripe. Payment-related information may be processed by Stripe and relevant payment networks as part of authorization and settlement.
Customer service
Messages, order references and other information you provide when contacting support may be used to answer requests and resolve issues.
Technical information
Technical information may include device, browser, network and website-use data required for security, operation and service improvement.
Processing purposes and GDPR legal bases
Personal data may be processed to perform a contract, provide requested services, manage orders, respond to customer requests, prevent fraud, protect website security, comply with legal obligations and, where required, act on consent.
Contract performance may support order handling and customer-service activity. Legitimate interests may support proportionate fraud prevention, security and service administration. Consent is used where required for optional cookie or similar processing.
Service providers and payment processing
We may use service providers to support website hosting, order operations, delivery, customer service, security and payment processing. These providers may process personal data only for the functions they perform and subject to applicable data-protection requirements.
Payment processing is handled through Stripe. Card and payment data is processed through the checkout payment flow and relevant financial networks.
International transfers
Where personal data is transferred internationally, appropriate safeguards are used where required by applicable data-protection law. The specific safeguards can depend on the destination, provider and legal framework that applies to the transfer.
Data retention
Personal data is retained for as long as reasonably necessary for the purposes described in this policy, including order administration, customer service, fraud prevention, dispute handling, legal obligations and record keeping. Retention periods may vary according to the type of information and applicable law.
Data subject rights
Where applicable under GDPR or other mandatory data-protection law, you may have the following rights:
Privacy contact
For privacy, personal-data, cookie-consent or data-subject requests, contact privacy@avurqi.com.