Data Protection Policy

1. Introduction

At Veraboswell, protecting your privacy and personal data is not just a legal requirement—it is a core part of our commitment to our customers. This Data Protection Policy outlines how we collect, use, store, process, and disclose your personal information when you use our website, services, or interact with us. We aim to uphold the highest standards of data privacy in compliance with applicable laws, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other regional data protection regulations.

We recognize that privacy is a fundamental human right. Therefore, we take our responsibility seriously to protect the information you share with us. This policy will explain:

• What data we collect

• Why we collect it

• How we use it

• With whom we may share it

• How long we keep it

• Your rights and how you can exercise them

• The measures we take to secure your data

This policy applies to all personal data collected or processed by Veraboswell from individuals anywhere in the world who access our services, purchase products from us, or otherwise interact with us online or offline.

2. Definitions

For the purposes of this policy, the following definitions apply:

• Personal Data: Any information that can directly or indirectly identify a person, such as name, email address, IP address, etc.

• Processing: Any operation or set of operations performed on personal data, whether or not by automated means (e.g., collection, recording, storage, use, disclosure).

• Data Subject: The individual whose personal data is being processed.

• Controller: The entity (Veraboswell) that determines the purposes and means of the processing of personal data.

• Processor: Any third party that processes personal data on behalf of the controller.

3. What Personal Data We Collect

We collect personal data from our customers and users through various channels, including:

3.1. Information You Provide Directly

When you:

• Create an account on veraboswell.shop

• Make a purchase

• Contact us through email or chat

• Fill out a form (e.g., newsletter signup, product reviews)

• Participate in surveys or contests

We may collect the following data:

• Full name

• Billing and shipping address

• Email address

• Phone number

• Payment information (handled securely via third-party providers)

• Account login credentials (hashed and stored securely)

• Order history and preferences

3.2. Information Collected Automatically

When you use our website, we automatically collect certain technical information using cookies and other technologies:

• IP address

• Browser type and version

• Device type and OS

• Language preference

• Referring URL

• Pages visited and time spent

• Clickstream behavior

• Session duration

3.3. Information from Third Parties

We may receive personal data from:

• Payment processors (e.g., PayPal, Stripe)

• Shipping companies

• Marketing platforms (e.g., Mailchimp, Google)

• Social media platforms (e.g., Facebook or Instagram if you log in via social credentials)

4. Legal Basis for Processing Personal Data

We rely on different legal bases under applicable data protection laws, including:

• Consent: You have given clear consent for us to process your personal data for specific purposes.

• Contractual Necessity: Processing is necessary to perform a contract with you (e.g., processing an order).

• Legal Obligation: We are required to process your data to comply with legal obligations (e.g., tax compliance).

• Legitimate Interests: We process data to pursue our legitimate interests, provided your fundamental rights and freedoms do not override those interests (e.g., fraud prevention, customer analytics).

5. How We Use Your Personal Data

We use your personal data to:

• Fulfill orders and deliver products

• Process payments securely

• Provide customer support

• Send order confirmations, updates, and delivery status

• Customize your user experience

• Manage your account preferences and order history

• Communicate marketing offers (with your consent)

• Improve our website, products, and services

• Detect, prevent, and investigate fraud or abuse

• Comply with legal and regulatory obligations

We do not sell your personal data to third parties.

6. Sharing and Disclosure of Personal Data

We only share your data with trusted third parties necessary for operating our business. These include:

• Shipping carriers (e.g., USPS, DHL, FedEx)

• Payment processors (e.g., Stripe, PayPal)

• Customer service tools (e.g., Zendesk, Crisp)

• Email marketing providers (e.g., Mailchimp)

• Analytics providers (e.g., Google Analytics)

• Cloud hosting providers (e.g., AWS, Cloudflare)

Each partner is contractually obligated to use the data only as needed to perform their service and to apply appropriate security safeguards.

We may also disclose personal data:

• To law enforcement agencies if legally required

• To prevent harm, fraud, or illegal activity

• During a business transfer such as a merger, acquisition, or sale 

• 7. Cookie Policy

  Cookies are small text files placed on your device when you visit our website. They help us recognize your device, remember your preferences, and improve your browsing experience.

  7.1 Types of Cookies We Use

  Type	Purpose
  Essential Cookies	Required for core functionality such as shopping cart and checkout
  Performance Cookies	Analyze website usage and measure performance (e.g., Google Analytics)
  Functionality Cookies	Remember user preferences and settings
  Advertising Cookies	Deliver relevant ads and track effectiveness

  7.2 Managing Cookies

  Most browsers allow you to:

  • Accept all cookies

  • Reject all cookies

  • Delete cookies on a schedule

  • Customize cookie behavior per site

  You can disable non-essential cookies anytime via the cookie banner or your browser settings. However, blocking essential cookies may affect website functionality.

  7.3 Third-Party Cookies

  We may allow trusted partners (e.g., Facebook Pixel, Google Ads) to place cookies on our site for remarketing and analytics purposes. These third parties are governed by their own privacy policies.

  ---

  8. Your Data Protection Rights

  Under applicable laws such as the GDPR (EU/EEA), CCPA (California), and other regional regulations, you have rights concerning your personal data. We fully honor and support these rights.

  8.1 Right to Access

  You have the right to request:

  • Confirmation whether we hold your personal data

  • A copy of your personal data we store

  8.2 Right to Rectification

  If your data is incorrect, incomplete, or outdated, you may request that we correct or update it.

  8.3 Right to Erasure (“Right to Be Forgotten”)

  You may request deletion of your personal data if:

  • It is no longer necessary

  • You withdraw consent (where applicable)

  • You object to the processing and there’s no overriding legitimate interest

  • The data has been unlawfully processed

  We may retain some data for compliance or legal obligations.

  8.4 Right to Restrict Processing

  You may ask us to limit processing in the following cases:

  • You contest the accuracy of your personal data

  • The processing is unlawful and you oppose deletion

  • We no longer need the data but you require it for legal claims

  8.5 Right to Data Portability

  You can request a copy of your personal data in a machine-readable format for use with another service.

  8.6 Right to Object

  You can object to processing based on:

  • Our legitimate interests

  • Direct marketing purposes

  We will stop processing unless we have compelling legal reasons.

  8.7 Right to Withdraw Consent

  If we rely on your consent for any processing (e.g., email marketing), you can withdraw that consent at any time without affecting previous lawful processing.

  8.8 Right to File a Complaint

  You have the right to file a complaint with your local data protection authority if you believe your rights have been violated.

  ---

  9. Cross-Border Data Transfers

  Because Veraboswell operates globally, your personal data may be transferred to, and processed in, countries other than the one in which you reside.

  This may include countries that do not provide the same level of data protection as your home country. For example:

  • Data from the EU/UK may be processed in the United States or Asia

  • Data from Canada may be processed in the EU or U.S.

  When we transfer your data internationally, we do so under legal safeguards such as:

  • Standard Contractual Clauses (SCCs) issued by the European Commission

  • Adequacy Decisions for approved countries (e.g., UK, Switzerland)

  • Binding Corporate Rules (if applicable)

  • Explicit user consent for transfers

  We ensure that appropriate safeguards are in place to protect your personal data under all conditions.