Privacy policy

What we collect

• When you order: your name, email, phone number, shipping address, and what you bought. Payment details go directly to Stripe; we never see or store card numbers.
• When you create an account: your name, email and a password (stored hashed by our authentication provider, never readable by us).
• When you write to us: your name, email and message, plus an order number or event date if you include them.
• Newsletter: your email address only.
• Automatically: the country your request comes from (to pre-select shipping), and standard server logs. We do not run advertising trackers or sell data.

Why we use it

To process and ship your order, quote shipping, send you the order receipt and, if you leave a checkout unfinished, at most one reminder email about it. To answer your messages. To show you your order history when you sign in. To send the newsletter if you asked for it (every issue has an unsubscribe link).

Who processes it for us

We use a small number of service providers, each bound by their own privacy commitments and each receiving only what its job requires:

• Stripe (payments and receipts)
• Supabase (our database and account sign-in, hosted in the United States)
• Vercel (website hosting)
• Resend (transactional email)
• Shipping carriers and our shipping platform (name, address and phone, to deliver the parcel)

Some of these providers store data in the United States, where it may be subject to US law. We do not share your information with anyone else except when the law requires it.

Cookies and storage

We use only what the site needs to work: a session cookie when you sign in, and your browser’s local storage for your cart and your chosen colour mood. There are no third-party advertising cookies, so there is no cookie banner.

How long we keep it

Order records are kept for as long as Canadian tax and accounting rules require (generally seven years). Account details are kept until you ask us to delete the account. Messages are kept for two years. Newsletter addresses are kept until you unsubscribe.

Your choices

You can ask to see, correct or delete the personal information we hold about you, or withdraw consent to the newsletter, by emailing info@vallaridecor.com. We respond within 30 days. Order records we are legally required to keep are retained even after an account is deleted. If you are not satisfied with our response you may contact the Office of the Privacy Commissioner of Canada.

Changes

If this policy changes, the date at the top changes with it. Material changes are also noted on the shop policies page.