Privacy policy

2. Privacy policy

Varenno

Website: https://varenno.com

Email: contact@varenno.com

Business Address: 1209 Mountain Road Place Northeast, Suite R, Albuquerque, New Mexico 87110, United States

1. Introduction

Varenno respects the privacy of its customers and website visitors.

This Privacy Policy explains how personal information is collected, used, disclosed, stored, and protected when customers visit varenno.com, purchase products, subscribe to communications, or contact customer support.

The online store operates using Shopify and may use third-party services to process transactions, fulfil orders, analyse website activity, and manage customer communications.

By using our website, customers acknowledge the information provided in this Privacy Policy. Where consent is legally required, we will request it separately.

2. Personal information we collect

We may collect the following categories of personal information:

Identity and contact information

  • Full name.

  • Email address.

  • Telephone number.

  • Billing address.

  • Shipping address.

Order and transaction information

  • Products purchased.

  • Order numbers and purchase history.

  • Payment method and transaction status.

  • Refund and customer support records.

Payment card information is handled through the payment processors available at checkout. Varenno does not require customers to disclose their complete payment card numbers through customer support.

Technical and usage information

  • IP address.

  • Browser type and device information.

  • Cookie identifiers.

  • Website interactions and pages visited.

  • Approximate location inferred from technical information.

  • Referral sources and advertising interactions.

Customer communications

  • Emails and support enquiries.

  • Product reviews and feedback.

  • Photographs voluntarily provided in connection with refund requests or product complaints.

Marketing information

  • Email marketing preferences.

  • Newsletter subscription status.

  • Interactions with marketing campaigns.

  • Product interests inferred from website activity, where permitted by law.

3. How we use personal information

Personal information may be processed for the following purposes:

  • Processing and fulfilling orders.

  • Confirming payments and transactions.

  • Arranging shipping and delivery.

  • Providing order updates and tracking information.

  • Managing refunds and customer enquiries.

  • Detecting fraud and protecting website security.

  • Maintaining transaction and accounting records.

  • Improving website functionality.

  • Understanding website performance.

  • Measuring advertising effectiveness.

  • Sending promotional communications where permitted.

  • Meeting applicable legal obligations.

Personal information will not be used for purposes incompatible with those described in this policy without an appropriate legal basis.

4. Legal basis for processing under the GDPR and UK GDPR

For individuals protected by the European Union General Data Protection Regulation or United Kingdom General Data Protection Regulation, Varenno relies on applicable lawful bases under Article 6.

Contractual necessity

Processing necessary to complete purchases, fulfil orders, arrange deliveries, and provide customer support.

Legal obligations

Processing necessary to comply with applicable accounting, tax, consumer protection, and other legal requirements.

Legitimate interests

Processing reasonably necessary for fraud prevention, website security, service administration, and business operations, where these interests are not overridden by the rights and freedoms of individuals.

Consent

Processing for non-essential cookies, certain advertising technologies, and electronic marketing where consent is legally required.

Individuals may withdraw consent at any time without affecting the lawfulness of processing performed before withdrawal.

5. Cookies and tracking technologies

Varenno uses cookies and similar technologies to support website functionality, understand visitor activity, and manage advertising and communications.

The following services may be used:

Shopify

Supports essential website functionality, shopping cart operations, checkout sessions, security, and order processing. Certain Shopify analytics and marketing features may use additional technologies subject to applicable consent requirements.

Meta Pixel

Used to measure advertising performance, understand conversions, and support advertising audience creation and remarketing on Meta platforms, including Facebook and Instagram.

Google Analytics 4

Used to analyse website traffic, visitor interactions, traffic sources, and website performance.

TikTok Pixel

Used to measure advertising interactions, understand conversions, and support advertising optimisation and remarketing on TikTok.

Klaviyo

Used to manage email subscriptions, customer communication preferences, marketing campaigns, and related engagement analytics.

These services may process device identifiers, browsing information, interaction data, and other information relevant to their respective functions.

Cookie preferences and consent

Where required by applicable law, non-essential analytics and advertising technologies are subject to prior user consent.

Customers may refuse or withdraw consent for non-essential tracking through the website's cookie preference controls, where provided.

Customers may also configure their browser to block or delete cookies and may contact contact@varenno.com for assistance with privacy preferences.

Disabling strictly necessary cookies may affect shopping cart, checkout, or other essential website functions.

Withdrawing consent does not affect processing already performed lawfully.

Third-party services may maintain their own privacy settings and opt-out mechanisms.

6. Email marketing

Varenno uses Klaviyo to manage marketing communications.

Customers may receive promotional emails where they have subscribed or where communication is otherwise permitted by applicable law.

Customers can unsubscribe at any time by clicking the unsubscribe link included in marketing emails or contacting contact@varenno.com.

Unsubscribing from marketing communications does not prevent essential transactional messages relating to orders, payments, delivery, refunds, or account security.

7. Sharing personal information

Personal information may be disclosed to service providers when necessary for legitimate business operations.

Recipients may include:

  • Shopify, for website hosting and commerce functionality.

  • Payment processors, for transaction processing and fraud prevention.

  • Third-party suppliers in China, for order fulfilment.

  • Shipping carriers and logistics providers, for delivery.

  • Meta, Google, and TikTok, for advertising measurement and related services.

  • Klaviyo, for customer email communications and marketing administration.

  • Professional service providers where necessary for accounting, security, compliance, or legal matters.

Only information reasonably necessary for the relevant service should be disclosed.

Personal information may also be disclosed where required by law or to protect legitimate legal rights.

Certain advertising disclosures may constitute the sharing of personal information under California privacy law. Applicable rights and controls are described below.

8. International data transfers

Varenno operates internationally, and personal information may be processed in countries outside the customer's country of residence.

This may include the United States and China, particularly where information is necessary for payment processing, order fulfilment, or international delivery.

Where the GDPR or UK GDPR applies, restricted international transfers must be supported by an appropriate legal transfer mechanism, such as an applicable adequacy decision, approved contractual safeguards, or another lawful mechanism.

Customers may contact contact@varenno.com for information about safeguards applicable to their personal information.

9. Data retention

Personal information is retained only for as long as reasonably necessary for the purpose for which it was collected, subject to applicable legal obligations.

Retention is determined by factors including:

  • The time necessary to fulfil and administer orders.

  • Applicable tax and accounting requirements.

  • Customer service and dispute resolution needs.

  • Fraud prevention and security requirements.

  • Applicable limitation periods.

  • Marketing preferences and consent status.

When information is no longer required, it will be deleted, anonymised, or otherwise handled in accordance with applicable law.

10. Data security

Varenno takes reasonable technical and organisational measures to protect personal information against unauthorised access, disclosure, alteration, or destruction.

These measures may include access restrictions, secure transmission technologies, payment processing protections, and appropriate service provider arrangements.

No internet-based service can guarantee absolute security.

Customers should avoid sending sensitive financial information through ordinary email.

11. European Union and United Kingdom privacy rights

Where the GDPR or UK GDPR applies, individuals may have the right to:

  • Request access to personal information.

  • Request correction of inaccurate information.

  • Request deletion of personal information in applicable circumstances.

  • Request restriction of processing.

  • Object to certain processing activities.

  • Request data portability where applicable.

  • Withdraw consent at any time.

  • Object to direct marketing.

  • Exercise applicable rights concerning solely automated decisions producing legal or similarly significant effects.

  • Lodge a complaint with the relevant data protection supervisory authority.

Requests can be submitted to contact@varenno.com.

Varenno will respond within the time limits required by applicable data protection law.

Identity verification may be required where reasonably necessary.

The contact point for GDPR and UK GDPR enquiries is:

Varenno

1209 Mountain Road Place Northeast, Suite R

Albuquerque, New Mexico 87110

United States

contact@varenno.com

12. California privacy rights: CCPA and CPRA

Where the California Consumer Privacy Act, as amended by the California Privacy Rights Act, applies, eligible California residents may exercise the following rights:

  • The right to know what personal information is collected and how it is used.

  • The right to request access to applicable personal information.

  • The right to request deletion, subject to lawful exceptions.

  • The right to request correction of inaccurate personal information.

  • The right to opt out of the sale or sharing of personal information.

  • The right to limit certain uses and disclosures of sensitive personal information where applicable.

  • The right to receive equal treatment when exercising privacy rights, as required by law.

Varenno may collect identifiers, commercial information, internet activity information, approximate location information, and related inferences for the purposes described in this policy.

Categories of recipients may include commerce service providers, payment processors, logistics providers, analytics providers, and advertising partners.

The use of advertising pixels or similar technologies may qualify as sharing personal information for cross-context behavioural advertising under California law.

Eligible consumers may submit privacy requests or opt-out requests through contact@varenno.com.

Where legally required, applicable browser-based opt-out preference signals, including Global Privacy Control, will be treated as valid opt-out requests.

Customers may also use any privacy choice controls provided on the website.

Varenno will not discriminate unlawfully against customers for exercising applicable privacy rights.

13. Children's privacy

Varenno's website and products are not directed to children under the age of 16.

Children should not provide personal information or make purchases without the involvement of a parent or legal guardian.

If personal information relating to a child has been collected in violation of applicable law, a parent or guardian may contact us to request appropriate action.

14. Third-party websites

The website may contain links to external services and third-party websites.

Varenno is not responsible for the privacy practices of independent websites.

Customers should review the privacy policies of external websites before submitting personal information.

15. Changes to this policy

Varenno may update this Privacy Policy to reflect changes in legal requirements, website functionality, service providers, or operational practices.

The current version will be made available on varenno.com.

Where legally required, customers will receive additional notice of material changes.

16. Contact information

For privacy-related requests, questions, or complaints:

Varenno

Website: https://varenno.com

Email: contact@varenno.com

Business Address: 1209 Mountain Road Place Northeast, Suite R, Albuquerque, New Mexico 87110, United States