This GDPR Privacy Policy explains how Valihavia may collect, use, store, and disclose personal data when you visit https://valihavia.com, place an order, or contact our customer service. It also describes the rights you may have under the General Data Protection Regulation (GDPR), where applicable.
1. Scope of This Policy
The GDPR applies to certain personal data processing activities, depending on the circumstances, including some activities involving organizations outside the European Union that offer goods or services to individuals in the EU or monitor their behavior there.
The rights and obligations applicable to you depend on the relevant circumstances and applicable law.
2. Personal Data We May Collect
Depending on how you use our website, we may process the following categories of personal data:
- Contact Information: Name, email address, telephone number, and shipping or billing address.
- Order Information: Products purchased, order records, delivery details, and transaction-related information.
- Technical Information: IP address, browser type, device information, and technical logs, where collected.
- Website Usage and Cookie Data: Browsing activity, website interactions, and preferences, where applicable.
- Customer Service Communications: Information you provide when contacting us about orders, returns, refunds, or other inquiries.
The information processed depends on your interactions with our website and the services and technologies actually in use.
3. How We Collect Personal Data
We may obtain personal data directly from you when you place an order, submit information through our website, or contact customer service. Where applicable, technical systems and service providers involved in payment processing, website operation, or delivery may also provide information needed to complete transactions or resolve related issues.
4. Purposes and Legal Bases for Processing
Where the GDPR applies, we process personal data only when a valid legal basis exists. Depending on the circumstances, these bases may include:
- Contract Performance: Processing orders, coordinating delivery, handling transactions, and responding to order-related requests.
- Legal Obligations: Maintaining records or meeting applicable legal and regulatory requirements.
- Legitimate Interests: Operating and securing the website, preventing fraud, troubleshooting technical issues, and managing customer inquiries, where our interests do not override your rights and freedoms.
- Consent: Supporting analytics, cookies, marketing, or other activities where consent is required by law.
Where processing is based on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
5. Cookies and Similar Technologies
Cookies and similar technologies may support essential website functions, remember preferences, measure website usage, or support advertising activities where applicable.
Where required by applicable law, consent will be obtained before using non-essential cookies or similar technologies. You may also be able to manage cookies through your browser settings or available website preference controls.
For more information, please review our Cookie Policy.
6. Sharing Personal Data
We may disclose personal data to relevant third parties when necessary for legitimate business purposes and permitted by law. These recipients may include:
- Payment service providers involved in processing transactions.
- Shipping and delivery providers involved in fulfilling orders.
- Website hosting, technical support, and other service providers.
- Government authorities or other parties where disclosure is legally required.
The recipients involved depend on the services used and the circumstances of each transaction. Where required, appropriate safeguards and contractual arrangements will be used for service providers processing personal data on our behalf.
7. International Data Transfers
If personal data is transferred outside the European Economic Area and the GDPR applies, the transfer must comply with applicable GDPR requirements. Depending on the circumstances, this may involve an adequacy decision, appropriate safeguards such as standard contractual clauses, or another legally permitted transfer mechanism.
The actual transfer arrangements depend on our service providers, data flows, and applicable law.
8. Data Retention and Security
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including fulfilling orders, handling returns and refunds, meeting legal obligations, resolving disputes, and protecting our website.
Retention periods vary depending on the type of information and applicable requirements. When information is no longer needed, it will be deleted, anonymized, or otherwise handled in accordance with applicable law.
We seek to apply appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration, or disclosure. However, no method of electronic storage or transmission can be guaranteed to be completely secure.
9. Your Rights Under the GDPR
Where the GDPR applies, you may have the right to:
- Request access to your personal data.
- Request correction of inaccurate or incomplete data.
- Request deletion of personal data in certain circumstances.
- Request restriction of processing in circumstances provided by law.
- Receive certain personal data in a structured, commonly used, machine-readable format and request its transfer where the legal requirements are met.
- Object to certain processing based on legitimate interests.
- Object at any time to processing for direct marketing.
- Withdraw consent where processing is based on consent.
- Lodge a complaint with a competent data protection supervisory authority.
These rights are subject to applicable legal conditions and exceptions. We may need to verify your identity before responding to a request.
10. How to Exercise Your Rights
To submit a privacy request or ask a question about personal data, contact us at service@valihavia.com.
Please describe your request and provide enough information for us to identify the relevant records. Do not send passwords, full payment card numbers, or card security codes by email.
Where the GDPR applies, we generally respond to requests without undue delay and within one month of receipt. This period may be extended by up to two additional months where the request is complex or multiple requests have been received, subject to applicable GDPR requirements. If an extension is necessary, we will provide the required notice within the initial one-month period.
You may also lodge a complaint with a competent data protection supervisory authority without first contacting us.
11. Children's Data
Our website is intended for general shopping purposes and is not specifically directed at children. If personal data relating to a child is processed, we will handle it in accordance with applicable law. If you believe a child's personal data has been provided inappropriately, please contact us.
12. Changes to This Policy
We may update this policy to reflect changes in our website, data processing practices, or applicable legal requirements. Updated versions will be published on this page. We encourage you to review this policy periodically.
13. Contact Us
If you have questions about this policy or wish to exercise your privacy rights, please contact us:
- Website: https://valihavia.com
- Email: service@valihavia.com
- Phone: +1 (321) 425-7196
- Address: 600 Bluefields St SE, Palm Bay, FL 32909, United States
- Customer Service Hours: Monday–Friday, 9:00 AM–6:00 PM Eastern Time
This contact information is provided for customer service and privacy inquiries. It does not represent that an EU representative or Data Protection Officer has been appointed.