Privacy Policy
1. Our Commitment to Your Privacy
At rovellori (hereinafter referred to as “I”), I respect your privacy and handle personal information responsibly. This Privacy Policy explains how I collect, use, disclose, retain, and protect personal information when you visit my website, browse home products, place an order, make a payment, contact me, or use the services available through my online store.
I use personal information for purposes connected with operating the website, processing orders, arranging delivery, providing customer service, maintaining transaction records, protecting the shopping experience, and meeting applicable obligations.
This policy describes the categories of personal information involved, the purposes for processing, the categories of recipients that may receive information, the countries in which information may be processed, and the privacy rights available to you. Some rights and obligations depend on your state or country of residence and whether particular privacy requirements apply to the processing.
2. Categories of Personal Information I Collect
The information collected depends on how you interact with the website, the products or services you request, and the settings or choices you make.
2.1 Identification and Contact Information
This may include your name, email address, telephone number, billing address, shipping address, and other contact details you choose to provide. I use this information to identify your order, communicate with you, arrange delivery, respond to questions, and handle customer service requests.
2.2 Order and Transaction Information
This may include your order number, purchased products, quantities, order value, transaction status, delivery instructions, shipping records, return or refund details, and relevant communications. I use this information to fulfill purchases, administer returns and refunds, investigate transaction issues, and maintain appropriate business records.
2.3 Payment Information
Depending on the payment method and checkout configuration, I may receive payment status, transaction identifiers, billing information, payment confirmation, refund details, and related records. Payment card information may be collected and processed directly by the payment provider rather than being stored by me.
The information available to me depends on the payment method and the services used during checkout. I do not intentionally collect full payment card security codes through ordinary customer communications.
2.4 Device, Website Usage, and Technical Information
When you visit the website, certain information may be collected automatically, depending on the website configuration and your privacy choices. This may include your IP address, browser type, device information, approximate location derived from technical information, pages visited, referring website, interactions with website features, and diagnostic or log information.
This information may be used to maintain website functionality, troubleshoot errors, protect the website, understand usage, and improve the shopping experience.
2.5 Cookie, Preference, and Marketing Information
Depending on the tools enabled on the website and your choices, I may collect cookie identifiers, consent preferences, browsing interactions, product interests, and information about interactions with marketing communications or advertisements.
Non-essential cookies and similar technologies will be used in accordance with applicable consent requirements and the choices presented through the website's cookie settings.
2.6 Customer Communications
When you contact me, I may collect the information in your message, your contact details, relevant order information, and records of the response or resolution. This information helps me answer questions, investigate complaints, and maintain a record of customer service interactions.
I do not intentionally request sensitive personal information unless it is necessary for a specific purpose and permitted under applicable requirements.
3. Sources of Personal Information
I may obtain personal information from the following sources:
Directly from you when you place an order, submit a form, contact customer service, choose preferences, or otherwise use the website.
Automatically through the website, server logs, cookies, and similar technologies, subject to the applicable settings and consent requirements.
From payment processors and payment service providers that confirm transaction status or provide information needed to administer a payment or refund.
From shipping, delivery, and fulfillment providers that provide tracking updates, delivery confirmations, or information about delivery issues.
From website service providers, security tools, analytics services, or advertising partners, where such tools are enabled and permitted.
From public authorities, professional advisers, or other parties when information is lawfully provided in connection with a legal claim, security incident, or applicable obligation.
The sources actually involved depend on the services used for a particular transaction and the configuration of the website.
4. Purposes for Using Personal Information
I use personal information for the following purposes, where relevant:
4.1 Order Processing and Delivery
To confirm orders, verify payment status, prepare purchases, provide order updates, arrange shipping, supply tracking information, and manage delivery problems.
4.2 Customer Service and Returns
To answer questions, investigate complaints, process eligible cancellations, returns, exchanges, and refunds, and communicate about the status of a request.
4.3 Website Operation and Maintenance
To operate the online store, maintain shopping cart and checkout functions, remember permitted preferences, diagnose technical errors, and improve website usability.
4.4 Payment Administration and Fraud Prevention
To confirm transactions, identify suspicious activity, protect account and order integrity, investigate possible fraud, and help prevent unauthorized or abusive use of the website.
4.5 Analytics and Advertising
Where analytics or advertising technologies are enabled and permitted, relevant information may be used to understand website performance, measure advertising effectiveness, evaluate product interest, or deliver and measure marketing communications. Where consent or an opt-out mechanism is required, the relevant processing will be subject to those requirements and your available choices.
4.6 Legal, Accounting, and Administrative Purposes
To maintain transaction records, address disputes, comply with applicable tax or accounting requirements, respond to lawful requests, and establish, exercise, or defend legal claims.
I do not use personal information for purposes materially incompatible with the purposes described here without providing additional information or obtaining consent where required.
5. Legal Bases for Processing Where the GDPR Applies
If the General Data Protection Regulation (GDPR) applies to the processing of your personal data, I rely on an appropriate legal basis for each relevant activity.
Contractual necessity: Processing necessary to enter into or perform a purchase agreement, including order administration, payment coordination, delivery, customer service, and eligible returns or refunds.
Consent: Processing for which consent is required, such as certain non-essential cookies or marketing activities. You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
Legal obligation: Processing necessary to meet applicable accounting, tax, recordkeeping, or other legal obligations.
Legitimate interests: Processing necessary for legitimate interests, where permitted, such as maintaining website security, preventing fraud, administering business records, improving services, or handling legal claims. I consider the relevant interests and your rights before relying on this basis. You may object where the GDPR provides that right.
Where another legal basis is applicable to a particular activity, I will process the information in accordance with the requirements governing that activity.
6. Categories of Third-Party Recipients
I may disclose personal information to third parties when reasonably necessary for the purposes described in this policy. The recipients depend on the services enabled on the website and the circumstances of your interaction with the store.
6.1 E-Commerce Hosting and Website Infrastructure Providers
Website hosting, e-commerce platform, content delivery, cloud infrastructure, and technical service providers may process information to make the store available, maintain checkout functionality, store order records, and support website security.
6.2 Payment Processors and Financial Service Providers
Payment processors, payment gateways, card networks, financial institutions, and payment-related fraud prevention providers may receive the transaction, billing, or payment information necessary to authorize payments, confirm transactions, investigate payment issues, and process refunds.
The particular provider depends on the payment method presented and selected at checkout.
6.3 Shipping, Delivery, and Fulfillment Providers
Carriers, delivery companies, fulfillment providers, warehouse operators, and related logistics service providers may receive your name, shipping address, telephone number where needed, order details, delivery instructions, and tracking information to prepare, transport, and deliver your purchase or process a return.
6.4 Customer Support and Communication Providers
Email, telephone, customer service, helpdesk, and communication service providers may process contact details, order information, and messages to facilitate customer inquiries, send transactional communications, and document service requests.
6.5 Analytics and Website Performance Providers
Where analytics tools are enabled, analytics, measurement, diagnostic, and performance service providers may receive technical information, cookie identifiers, website interaction information, and related usage data to measure and improve website performance.
6.6 Advertising and Social Media Providers
If advertising, retargeting, social media integrations, or related marketing technologies are enabled, advertising networks, social media platforms, and marketing measurement providers may receive or collect certain device identifiers, cookie identifiers, IP addresses, browsing interactions, or advertising event information.
Depending on the applicable privacy laws and the actual arrangement, some disclosures for targeted advertising may be considered “sharing,” “targeted advertising,” or a “sale” of personal information, even when no money is exchanged for the information. Where required, I will provide the applicable notice and opt-out mechanisms. You may also manage available advertising and cookie preferences through the website settings.
6.7 Security, Fraud Prevention, and Technical Support Providers
Security monitoring, fraud prevention, anti-abuse, backup, troubleshooting, and technical support providers may process relevant information to protect the website, investigate suspicious activity, and maintain service reliability.
6.8 Professional Advisers and Business Service Providers
Where necessary, lawyers, accountants, auditors, insurers, and other professional advisers may receive relevant records to provide professional services, manage disputes, or meet applicable obligations.
6.9 Public Authorities and Legal Recipients
Personal information may be disclosed to courts, regulators, law enforcement agencies, tax authorities, or other public bodies when required by applicable law or valid legal process. Information may also be disclosed when reasonably necessary to establish, exercise, or defend legal claims or protect the rights, safety, and security of individuals or the business.
6.10 Business Transfers
If a merger, acquisition, restructuring, financing, or sale of business assets occurs, relevant information may be disclosed to prospective or actual transaction participants and their professional advisers, subject to appropriate confidentiality and other applicable requirements.
6.11 Limits on Disclosure
I aim to disclose only information reasonably necessary for the relevant purpose. Where a third party processes personal information on my behalf, the arrangement should provide for appropriate restrictions and safeguards consistent with applicable requirements.
Some independent providers, including certain payment providers, advertising platforms, or social media services, may process information under their own privacy policies and may act as separate controllers or businesses for certain activities. Their handling of information is also governed by their own applicable terms and privacy notices.
I do not disclose personal information to third parties for purposes unrelated to the services or purposes described in this policy without an appropriate legal basis or consent where required.
7. Cookies and Similar Technologies
The website may use cookies, pixels, tags, local storage, and similar technologies to support website functions and, where enabled, analytics or advertising.
Essential technologies may be used where necessary to provide the website or a service you request. Non-essential technologies will be used subject to applicable consent requirements and the choices presented through the website's consent interface.
You may manage optional cookie choices through the available cookie settings. You can also use browser controls to restrict or remove cookies. Blocking essential cookies may affect shopping cart, checkout, or other website functions.
Where applicable privacy laws recognize browser-based opt-out preference signals, including Global Privacy Control, I will process such signals in accordance with the requirements that apply to the website and the relevant processing activity.
More information about the specific cookies, their purposes, and their retention periods should be provided through the website's cookie settings or a separate Cookie Policy, where available.
8. Disclosure, Sale, Sharing, and Targeted Advertising
I may disclose personal information to the recipient categories identified in Section 6 for the purposes described in this policy.
Certain U.S. state privacy laws distinguish between ordinary disclosures to service providers, the “sale” of personal information, “sharing” for cross-context behavioral advertising, and processing for targeted advertising. These terms have specific legal meanings and do not necessarily depend on whether money is exchanged.
Whether a particular disclosure falls within one of these categories depends on the actual data flows, contractual arrangements, technologies enabled, and applicable law. I will not characterize all service-provider disclosures as sales or sharing, nor assume that advertising-related disclosures are exempt.
Where applicable law grants you the right to opt out of the sale or sharing of personal information or targeted advertising, you may exercise that right through the privacy or cookie controls provided on the website or by contacting me using the details in Section 15.
If a legally required opt-out mechanism or “Do Not Sell or Share My Personal Information” link applies, it should be made available in the required location and form. Where a recognized opt-out preference signal is legally required to be honored, I will handle it in accordance with the applicable requirements.
9. Data Retention
I retain personal information only for as long as reasonably necessary for the purposes for which it was collected, subject to applicable legal and operational requirements.
Order, payment, shipping, and refund records may be retained to administer purchases, respond to customer service requests, handle returns, maintain accounting records, resolve disputes, and meet applicable tax or recordkeeping obligations.
Customer communications may be retained for the period reasonably needed to respond to an inquiry, document a resolution, manage a dispute, or maintain appropriate business records.
Technical logs, analytics information, and cookie-related records may be retained for periods determined by the purpose of the tool, its configuration, applicable consent choices, and relevant security or reporting needs.
Retention periods may differ by record type and service provider. When personal information is no longer reasonably necessary, it will be deleted, anonymized, or otherwise handled in accordance with applicable requirements, unless continued retention is permitted or required.
You may contact me to request information about the retention period applicable to your personal information or the criteria used to determine that period.
10. U.S. State Privacy Rights
Depending on your state of residence, the nature of the processing, and whether the relevant state privacy law applies, you may have some or all of the following rights:
Right to know or access: Request information about the categories and specific pieces of personal information collected, the sources of that information, the purposes for collecting or using it, and the categories of third parties to whom it is disclosed.
Right to correction: Request correction of inaccurate personal information, subject to applicable exceptions.
Right to deletion: Request deletion of personal information, subject to exceptions for transactions, security, legal compliance, and other permitted purposes.
Right to data portability: Request a copy of certain personal information in a portable and, where required, readily usable format.
Right to opt out: Where applicable, opt out of the sale of personal information, sharing for cross-context behavioral advertising, targeted advertising, or certain profiling activities that produce legally defined significant effects.
Right to limit certain uses of sensitive personal information: Where applicable and where such information is processed in a covered manner, request limitations on certain uses or disclosures.
Right to appeal: Where the applicable state law provides an appeal right, request review of a decision not to act on a privacy request.
Right to non-discrimination: Not be unlawfully discriminated against for exercising privacy rights. I will not deny goods or services, charge a different price, or provide a different level or quality of service solely because you exercised a right where such treatment is prohibited by applicable law.
These rights are not absolute and may be subject to verification requirements and legal exceptions. The precise rights available depend on the state law that applies to your circumstances.
10.1 How to Submit a Request
You may submit a privacy request using the contact information in Section 15. Please identify the right you wish to exercise and provide enough information for me to understand and process the request.
I may request additional information reasonably necessary to verify your identity or authority to act on behalf of another person. Verification information will be used for that purpose and handled in accordance with applicable requirements.
Where permitted by law, an authorized agent may submit a request on your behalf. I may require evidence of authorization and, where permitted, confirmation of your identity.
I will respond within the timeframe required by the applicable law. If an extension is permitted and necessary, I will notify you of the extension and the reasons for it within the required timeframe. Where an appeal process is required, I will provide instructions for submitting an appeal.
11. Privacy Rights Under the GDPR
If the GDPR applies to the processing of your personal data, you may have the following rights, subject to the conditions and exceptions provided by that regulation.
Right of access: Request confirmation of whether your personal data is being processed and obtain access to the data and relevant information about the processing.
Right to rectification: Request correction of inaccurate personal data or completion of incomplete data.
Right to erasure: Request deletion of personal data where the applicable conditions are met. Certain information may need to be retained where a legal obligation or a valid legal claim requires it.
Right to restriction: Request restriction of processing in the circumstances specified by the GDPR.
Right to data portability: Where the legal conditions are met, receive personal data you have provided in a structured, commonly used, machine-readable format and, where technically feasible and legally applicable, request transmission to another controller.
Right to object: Object to processing based on legitimate interests on grounds relating to your particular situation, subject to the applicable legal conditions. Where personal data is processed for direct marketing, you have the right to object to that processing at any time.
Right to withdraw consent: Where processing relies on consent, withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
Right to lodge a complaint: Lodge a complaint with a competent data protection supervisory authority, particularly in the EU or EEA country where you live, work, or believe the alleged infringement occurred.
To exercise a GDPR right, contact me using the details in Section 15. I may need to verify your identity before responding to a request involving personal data.
Where the GDPR applies, I generally respond within one month of receiving a valid request. The period may be extended by up to two additional months where permitted because of the complexity or number of requests. If an extension is necessary, I will inform you within the initial one-month period and explain the reasons.
12. International Data Transfers
My business contact address is in the United States. Personal information provided through the website may therefore be accessed or processed in the United States to operate the store, administer purchases, provide customer service, and maintain records.
Depending on the services enabled and the providers involved, personal information may also be processed in other countries where website infrastructure, payment, communication, analytics, security, shipping, or other service providers operate. The countries involved may vary by service and may change when a provider changes its processing arrangements.
12.1 Transfers of Personal Data from the EEA, United Kingdom, or Switzerland
Where personal data is transferred from the European Economic Area (EEA), the United Kingdom, or Switzerland to a country that does not provide an applicable recognized level of protection, the transfer will be made only where a valid transfer mechanism or permitted exception applies.
Depending on the transfer and the applicable requirements, a mechanism may include:
An applicable adequacy decision or other legally recognized determination that the destination provides an adequate level of protection.
The European Commission's Standard Contractual Clauses, where applicable to the transfer, together with any supplementary measures required following an assessment of the transfer.
An applicable UK international data transfer agreement or addendum for transfers subject to UK data protection requirements.
An applicable Swiss-recognized contractual or other transfer safeguard.
Another legally permitted transfer mechanism or narrowly applicable exception, where its conditions are satisfied.
The EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. Data Privacy Framework, or a comparable recognized framework will be relied upon only where the relevant recipient is appropriately certified, the transfer is within the scope of that certification, and all applicable conditions are met. I do not represent that any particular provider is certified unless that status has been verified.
A transfer exception will be used only where the applicable legal conditions are satisfied and the exception is appropriate for the circumstances. It will not be treated as a general substitute for an applicable transfer safeguard.
12.2 Destination Countries and Further Information
The United States is a destination country for information handled in connection with my U.S.-based business. Other destination countries depend on the actual service providers, their affiliates, subcontractors, and the locations where the relevant services process or access information.
I do not represent that all personal information is stored exclusively in the United States or the EEA. The destination countries and transfer mechanisms applicable to a particular service must be determined from the actual provider arrangements and processing locations.
You may contact me using the details in Section 15 to request further information about the countries involved in a relevant transfer and the applicable safeguards. Where required and available, I will provide information about the transfer mechanism or a copy or description of the relevant safeguards, subject to lawful redactions to protect confidential information or the rights of others.
13. Data Security and Personal Data Incidents
I use reasonable technical and organizational measures intended to protect personal information against unauthorized access, accidental loss, misuse, alteration, and improper disclosure. The measures used should reflect the nature of the information, the services involved, and the risks associated with processing.
Depending on the service, safeguards may include access controls, provider security measures, secure transmission methods, restricted access to relevant records, and procedures for handling suspected security incidents.
No method of electronic transmission or storage can be guaranteed to be completely secure. If a personal data incident occurs and notification is required by applicable law, I will take appropriate steps to address the incident and provide the required notifications.
You can help protect your information by avoiding unnecessary sensitive details in ordinary messages and contacting me if you suspect that information relating to your order has been used improperly.
14. Children's Privacy
The website is intended for people who can lawfully make purchases under the rules applicable to them. It is not designed to knowingly collect personal information directly from children in circumstances where parental consent or other authorization is required.
If you believe that a child has provided personal information in circumstances that were not permitted, contact me using the details below. I will review the matter and take appropriate steps in accordance with applicable requirements.
15. Contact Information and Privacy Requests
For questions about this Privacy Policy, requests to access, correct, delete, or obtain personal information, requests to opt out of applicable advertising-related disclosures, or questions about international data transfers and retention, you may contact me using the details below.
Store: rovellori
Address: 4052 W 132nd St #B, Hawthorne, CA 90250, United States
Phone: +1 (310) 624-7839
Email: hello@rovellori.com
Business Hours: Monday through Friday, 9:00 AM to 6:00 PM Eastern Time (ET)
When submitting a request, please explain the information or privacy right involved and provide enough details to help me locate the relevant records. Please do not send payment card security codes, passwords, or other unnecessary sensitive information.
I will review and respond to your request in accordance with the privacy requirements that apply to your situation.
16. Changes to This Privacy Policy
I may update this Privacy Policy when website services, data processing activities, service providers, or applicable privacy requirements change.
If a material change affects how personal information is handled, I will provide notice through an appropriate method where required. The revised policy will be published on this page, with an updated effective date where appropriate.
The updated policy will apply from the stated effective date, subject to any notice, consent, or other requirements that apply to the change. I encourage you to review this page periodically to remain informed about how personal information is handled and which privacy choices are available to you.