Privacy policy
AVALLE operates this online store and the related website, including all information, content, features, tools, products, and services offered (hereinafter, the “Services”), in order to provide you with an appropriate and secure shopping experience.
The AVALLE store is supported by Shopify, which enables us to provide you with the Services. This Privacy Policy describes how we collect, use, store, and disclose your personal data when you visit, use, or make purchases through the Services, or when you communicate with us.
In the event of any conflict between the Terms and Conditions of Sale and this Privacy Policy, the latter shall prevail with regard to the collection, processing, and disclosure of personal data.
We invite you to read this Policy carefully. By accessing or using the Services, you confirm that you have read and understood what is described herein.
Personal Data We Collect or Process
“Personal data” means information that identifies or is reasonably linkable to an identified or identifiable natural person. Anonymized or aggregated data is not included in this definition.
Depending on your interaction with the Services, your geographic location, and applicable laws, we may collect or process the following categories of personal data:
Contact data: first name, last name, address, billing and shipping address, phone number, email address
Payment and financial data: credit or debit card details, financial account information, transaction details and payment confirmations (processed through certified providers)
Account data: username, password, preferences, settings
Transaction data: products viewed, purchased, returned, or added to cart or wishlist
Communications: information provided when contacting customer service or through other communications
Device data: IP address, browser, connection network, unique identifiers
Usage data: information on how and when you interact with the Services
Sources of Personal Data
Personal data may be collected:
- Directly from you, when you create an account, make a purchase, use the Services, or communicate with us
- Automatically, through cookies and similar technologies when you browse the website
- From our service providers, who process data on our behalf
- From partners or third parties, within the limits permitted by law
Purposes of Processing Personal Data
We use your personal data for:
Provision and improvement of the Services
- managing orders, payments, shipping, returns, and exchanges
- creating and managing your account
- personalizing the shopping experience
- sending service communications and account notifications
Marketing and advertising
- sending promotional communications via email or other channels (where consent is required)
- showing you personalized ads on our Services or third-party platforms
Security and fraud prevention
- preventing fraudulent or unlawful activities
- protecting our systems, the Services, and users
Legal obligations
- complying with legal requirements
- responding to requests from authorities
- protecting our rights in legal proceedings
Sharing of Personal Data
We may share your personal data:
- with Shopify and service providers for technical, logistics, payment, and support purposes
- with marketing partners, in compliance with applicable regulations
- when required by law or competent authorities
- in the event of extraordinary corporate transactions (e.g., merger, acquisition, insolvency)
Relationship with Shopify
The Services are supported by Shopify, which processes certain personal data as a data processor or independent controller, depending on the functionalities used.
For more information, you may consult Shopify’s Privacy Policy and its Privacy Portal.
Third-Party Websites and Services
The Services may contain links to third-party websites. AVALLE is not responsible for the privacy practices or content of such websites.
Children’s Data
The Services are not intended for minors. We do not knowingly collect personal data from individuals under the age of majority as defined by applicable law.
Data Security and Retention
We adopt appropriate technical and organizational security measures. However, no system is completely secure.
Personal data is retained for as long as necessary to fulfill the purposes for which it was collected or to comply with legal obligations.
Data Subject Rights
Under applicable law, you may have the right to:
- access your data
- rectification
- erasure
- restriction of processing
- data portability
- objection
- withdrawal of consent
You may exercise these rights by contacting us using the details provided below.
Complaints
You have the right to lodge a complaint with the competent Data Protection Authority.
International Transfers
Data may be transferred outside the EEA in compliance with the safeguards provided by law (e.g., Standard Contractual Clauses).
Changes to this Policy
We reserve the right to update this Policy. Changes will be published on the website with an updated date.
Contact
For questions, requests, or to exercise your rights:
Data Controller
For the purposes of applicable data protection laws, AVALLE is the data controller of personal data.