Privacy Policy

At MyVello, accessible via myvello.com, your privacy is of paramount importance to us. We recognize and respect your right to privacy, the protection of your personal data, and the trust you place in us when using our website, products, and services. This Privacy Policy outlines our commitments to responsible data processing practices in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), and guides how we collect, use, store, share, and protect your personal information.

1. Commitment to Privacy and Data Protection

We are committed to safeguarding your personal data and fostering a relationship built on transparency, accountability, and mutual respect. All data collected through your interactions with myvello.com are processed lawfully, fairly, and in a manner that upholds your rights and freedoms. We implement rigorous privacy-first safeguards throughout our operations, ensuring your data is handled with the highest degree of confidentiality and integrity.

2. Scope of this Policy and Our Role as Data Controller

This Privacy Policy applies to data collected, processed, and stored through myvello.com and any affiliated platforms, applications, or services operated by MyVello. For purposes of applicable data protection laws, MyVello acts as the Data Controller regarding the personal data you provide. This means we determine the purposes and means of the processing of your personal information.

If you are located in the European Economic Area (EEA), the UK, or California, additional rights and responsibilities described in this policy may apply.

3. Categories of Personal Data We Process

We may collect and process the following categories of personal data when you interact with myvello.com:

i. Usage Data
Information about your interactions with the website, including IP address, browser type and version, operating system, referral URL, time zone settings, session timestamps, and page interaction data (such as scrolls, clicks, and errors).

ii. Account Data
Personal identifiers you provide when creating an account or registering on the website, including full name, email address, mailing address, telephone number, and login credentials.

iii. Profile Data
Details you choose to share with us regarding preferences, interests, products viewed or purchased, shopping behavior, and feedback.

iv. Communication Data
Records of inquiries, customer support requests, complaints, reviews, surveys, and contact history through email, chat, or contact forms.

v. Technical Data
Device-specific data such as hardware identifiers, mobile network and operating system information, web browser capabilities, and platform details.

vi. Transaction Data
Information related to purchases and service usage, including billing address, payment methods (processed through third-party providers), delivery tracking, and customer receipts.

vii. Preference Data
Data relating to your opt-in decisions for marketing communications, newsletter subscriptions, and product preferences used for tailored experiences.

4. Legal Bases for Processing Personal Data

We rely on the following legal bases under the GDPR to lawfully process your personal information:

– Performance of a Contract: Processing necessary to fulfill agreements with you, such as account registration, product delivery, and customer support.
– Legitimate Interests: Where processing is required for our legitimate business interests, provided these do not override your rights.
– Consent: For certain types of data collection (e.g., marketing communications or cookie usage beyond essentials), we obtain your explicit consent.
– Legal Obligation: Where necessary to comply with statutory or regulatory duties.

Under the CCPA, we do not sell your personal data. We may “share” personal data for advertising purposes in accordance with applicable consent requirements.

5. Your Rights

You have the following rights with respect to your personal data, subject to legal limitations:

– Right of Access: Obtain a copy or summary of the personal data we hold about you.
– Right to Rectification: Correct inaccurate or outdated personal information.
– Right to Erasure (“Right to Be Forgotten”): Request deletion of your personal data under specific circumstances.
– Right to Restrict Processing: Temporarily halt processing when disputed or no longer needed.
– Right to Data Portability: Receive your data in a structured, commonly used, and machine-readable format to transmit to another controller.
– Right to Object: Oppose processing for direct marketing or when based on legitimate interests.
– Do Not Sell/Share: California residents may opt-out of personal data sharing as defined by the CCPA.

To exercise any of these rights, please contact us at [email protected]. Identity verification may be required to fulfill certain requests.

6. Security Measures

The security of your personal information is integral to our business practices. We implement organizational, technical, and administrative safeguards, including but not limited to:

– End-to-end encryption of data in transit and at rest.
– Access controls restricting data to authorized personnel only.
– Routine system scans and security audits.
– Staff privacy training and confidentiality agreements.
– Regularly tested data backup and recovery protocols.

7. International Data Transfers

Where required, personal data may be transferred and stored outside your country, including jurisdictions that may not have equivalent data protection laws. In such cases, MyVello ensures that Standard Contractual Clauses or similar protections are in place in accordance with GDPR Article 46 and the relevant frameworks for CCPA. Users from the EEA or UK will have their data protected in line with EU adequacy decisions or appropriate safeguards.

8. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy—or as required by law—and according to the following general timeframes:

– Account and Profile Data: Retained while your account remains active and up to 6 months after closure.
– Transaction Data: Retained for up to 7 years to meet tax and legal requirements.
– Communication and Support Records: Retained for 2 years for customer service quality assurance.
– Preference Data: Retained as long as consent remains active or until revoked.
– Technical and Usage Data: Retained for up to 12 months to improve website performance and analytics.

9. Cookie Policy

MyVello uses cookies to ensure optimal performance and enhance your browsing experience. Cookies fall into these broad categories:

– Essential Cookies: Required for website functionality (e.g., login sessions and cart management).
– Functional Cookies: Enable personalization features such as language preferences.
– Analytics Cookies: Help us understand site usage and improve performance, using tools such as Google Analytics.
– Performance Cookies: Measure loading times, responsiveness, and user flows.

10. Cookie Management and Compliance

Upon visiting myvello.com, you will be presented with a cookie consent banner allowing you to accept or manage your preferences. By adjusting your browser or device settings, or using our cookie consent tool, you may withdraw consent or opt-out of non-essential cookies at any time. We honor ‘Do Not Track’ signals and opt-out mechanisms as required under the CCPA and GDPR.

11. Children’s Privacy

MyVello does not knowingly collect or solicit data from children under the age of 13. If we become aware that we have inadvertently collected personal data from a child under 13 without verifiable parental consent, we will take steps to delete such data promptly. Parents or guardians who believe personal data about their child has been collected should contact us at [email protected].

12. Policy Updates and Notifications

We may revise this Privacy Policy to reflect updates in our practices, legal obligations, or technological advancements. Changes will be posted on this page, and where appropriate, we will inform you through email or site notifications. You are encouraged to review this policy periodically to remain informed about how we protect your information.

13. Contact Us

If you have any questions about this Privacy Policy, your personal data, or wish to exercise your rights, please contact us using the following details:

Email: [email protected]

We are committed to full compliance with applicable privacy laws and welcome any feedback or concerns regarding your privacy rights and how your data is handled at myvello.com.