Privacy policy

What we collect

• When you order: your name, email, phone number, shipping address, and what you bought. Payment details go directly to Stripe; we never see or store card numbers.
• When you create an account: your name, email and a password (stored hashed by our authentication provider, never readable by us).
• When you write to us: your name, email and message, plus an order number or event date if you include them.
• Newsletter: your email address only.
• Automatically: the country your request comes from (to pre-select shipping), standard server logs, and how the site is used: pages visited, clicks and scrolling (Vercel Web Analytics and Microsoft Clarity), and, for our Facebook and Instagram ads, pages and products viewed, items added to the cart and orders placed (the Meta Pixel). We do not sell data.

Why we use it

To process and ship your order, quote shipping, send you the order receipt and, if you leave a checkout unfinished, at most one reminder email about it. To answer your messages. To show you your order history when you sign in. To send the newsletter if you asked for it (every issue has an unsubscribe link).

Who processes it for us

We use a small number of service providers, each bound by their own privacy commitments and each receiving only what its job requires:

• Stripe (payments and receipts)
• Supabase (our database and account sign-in, hosted in the United States)
• Vercel (website hosting)
• Resend (transactional email)
• Vercel Web Analytics and Microsoft Clarity (how visitors use the site; Clarity records anonymised sessions with form fields masked)
• Meta Platforms (Facebook and Instagram ads: the pages and products you view and, when you order, the order value and items plus your email, phone and shipping city, postal code and country, scrambled (hashed) before they are sent, so Meta can measure and show our ads)
• Shipping carriers and our shipping platform (name, address and phone, to deliver the parcel)

Some of these providers store data in the United States, where it may be subject to US law. We do not share your information with anyone else except when the law requires it.

Cookies and storage

The site needs a session cookie when you sign in, and your browser’s local storage for your cart and your chosen colour mood. Microsoft Clarity sets cookies to recognise a returning visitor, and the Meta Pixel sets cookies (such as _fbp) so Meta can connect a visit to one of our ads. To opt out of ad tracking, block third-party cookies or use an ad or tracker blocker; you can also manage ad preferences in your Facebook or Instagram settings.

How long we keep it

Order records are kept for as long as Canadian tax and accounting rules require (generally seven years). Account details are kept until you ask us to delete the account. Messages are kept for two years. Newsletter addresses are kept until you unsubscribe.

Your choices

You can ask to see, correct or delete the personal information we hold about you, or withdraw consent to the newsletter, by emailing info@vallaridecor.com. We respond within 30 days. Order records we are legally required to keep are retained even after an account is deleted. If you are not satisfied with our response you may contact the Office of the Privacy Commissioner of Canada.

Changes

If this policy changes, the date at the top changes with it. Material changes are also noted on the shop policies page.