Privacy policy

Privacy Policy

At Valabasas ("Valabasas," "we," "us," or "our") we know that you care how information about you is used and shared, and we appreciate your trust that we will do so carefully and sensibly. This Privacy Policy describes how we collect, use, disclose, and protect personal information when you visit valabasas.com (the "Site"), purchase our products, communicate with us, or otherwise interact with us. By visiting valabasas.com or using our services, you accept the practices described in this Privacy Policy.

This policy applies to information we collect on the Site, through our mobile application, by email, SMS/MMS text message, telephone, and in connection with our products, programs, and services (including the Valabasas Concierge styling program).

INFORMATION WE COLLECT

We collect the following categories of personal information:

Information you provide to us. When you purchase something from our store, create an account, contact us, sign up for marketing, or enroll in a program, we collect the information you give us, which may include your name, billing and shipping address, email address, telephone/mobile number, order details, and account login credentials. If you participate in our Concierge styling program, we may also collect style preferences, sizing information, and other details you choose to share.

Payment information. When you make a purchase, payment card and billing information is collected and processed by our payment processors (see "Payment" below). We do not store full payment card numbers on our own systems.

Information collected automatically. When you browse our store, we automatically receive your computer's internet protocol (IP) address and other technical information that helps us learn about your browser, device, and operating system. We also collect information about your activity on the Site (such as pages viewed, items added to cart, referring/exit pages, and timestamps) through cookies and similar tracking technologies (see "Cookies and Tracking Technologies" below).

Information from third parties. We may receive information about you from third parties, such as our analytics and advertising partners, social media platforms, shipping carriers, fraud-prevention providers, and marketing platforms, and combine it with information we already hold.

We do not intentionally collect sensitive personal information (such as government identifiers, precise geolocation, or information about health, race, religion, or sexual orientation) for our own purposes. Please do not send us this information.

HOW WE USE YOUR INFORMATION

We use personal information to:

  • Process, fulfill, and deliver your orders, and manage returns and exchanges;
  • Verify payment and prevent, detect, and investigate fraud and other unauthorized or illegal activity;
  • Create and manage your account;
  • Communicate with you about orders, products, services, and customer-support requests;
  • Send you marketing and promotional communications (by email, SMS/MMS, and phone) where permitted, and personalize those communications;
  • Operate the Valabasas Concierge styling program and provide personalized styling outreach and recommendations;
  • Operate, maintain, analyze, and improve the Site, our products, and our services;
  • Personalize your experience and deliver and measure relevant advertising;
  • Comply with our legal obligations, enforce our Terms and Conditions, and protect our rights, property, and safety and those of others.

CONSENT

When you provide us with personal information to complete a transaction, verify your credit card, place an order, arrange for a delivery, or return a purchase, we imply that you consent to our collecting it and using it for that specific reason.

If we ask for your personal information for a secondary reason, such as marketing, we will either ask you directly for your express consent or provide you with an opportunity to decline.

How to withdraw your consent. If after you opt in you change your mind, you may withdraw your consent for us to contact you, or for the continued collection, use, or disclosure of your information, at any time, by contacting us at orders@valabasas.com or by mail at: Valabasas, 4055 American Way, Memphis, Tennessee, United States of America 38118. Withdrawing consent for certain processing may mean we can no longer provide certain services to you.

HOW WE DISCLOSE YOUR INFORMATION

We disclose personal information in the following circumstances:

  • Service providers and vendors. We share information with companies that perform services on our behalf, such as our e-commerce platform (Shopify), payment processors, shipping and logistics providers, email and SMS/MMS messaging platforms, telephony/voice providers, customer-relationship and marketing platforms, analytics providers, advertising partners, and fraud-prevention and security vendors. These providers may only use the information to perform services for us.
  • Advertising and analytics partners. We may share online identifiers and activity data with advertising and analytics partners to deliver and measure advertising, including cross-context behavioral (interest-based) advertising. Depending on your jurisdiction, this may be considered a "sale" or "sharing" of personal information (see "Your California Privacy Rights").
  • Legal and protective disclosures. We may disclose your personal information if we are required by law to do so, in response to lawful requests by public authorities, to enforce our Terms and Conditions, or if you violate our Terms and Conditions.
  • Business transfers. If our store is acquired, sold, or merged with another company, your information may be transferred to the new owners so that we may continue to provide products and services to you.

We do not sell, rent, or share your mobile phone number or SMS/MMS opt-in or consent for any third party's own marketing purposes. See "SMS/MMS Text Messaging Program" below.

EMAIL MARKETING

With your permission, we may send you emails about our store, new products, drops, promotions, and other updates. You can unsubscribe at any time by clicking the "unsubscribe" link at the bottom of any marketing email, or by contacting us at orders@valabasas.com. You may continue to receive transactional or service-related messages (such as order confirmations) even after you opt out of marketing.

SMS/MMS TEXT MESSAGING PROGRAM

By providing your mobile phone number and opting in, you consent to receive recurring automated marketing and informational text messages (SMS and MMS) from Valabasas at the number provided, sent using an automatic telephone dialing system. These messages may include order and shipping updates, checkout and cart reminders, new product and drop announcements, promotions, and — for customers enrolled in our Valabasas Concierge styling program — personalized outreach from our styling team. Consent to receive text messages is not a condition of any purchase.

Message frequency. Message frequency varies based on your activity and the programs you are enrolled in.

Message and data rates. Message and data rates may apply. Such charges are billed by and payable to your mobile service provider. Please contact your wireless carrier for details about your messaging and data plan.

Opting out. You can cancel the SMS service at any time by texting STOP to the number from which you received the message. After you send STOP, we will send a one-time message confirming that you have been unsubscribed, after which you will no longer receive messages from that program. To rejoin, simply sign up again as you did the first time.

Help. For help or more information at any time, text HELP to the number from which you received the message, or contact us at orders@valabasas.com.

Carriers. Supported carriers include AT&T, Verizon Wireless, T-Mobile, and most other major U.S. carriers. Carriers are not liable for delayed or undelivered messages. Message delivery is subject to effective transmission by your wireless carrier and is not guaranteed.

MMS. Certain messages may be sent as MMS (multimedia messages) containing images or other media. If your mobile device does not support MMS messaging, you will receive the message as a standard SMS text message where possible.

Your privacy. We respect your privacy. No mobile information — including your phone number and your SMS opt-in or consent — will be sold, rented, or shared with third parties or affiliates for their own marketing or promotional purposes. We may share your mobile information with service providers and vendors who help us operate our messaging program (for example, our SMS platform and communications providers), solely to deliver the messages you have requested and subject to confidentiality obligations. Text messaging originator opt-in data and consent are not shared with any third parties for marketing purposes.

Your responsibility. You are responsible for notifying us if you change or deactivate your mobile number. By enrolling, you represent that you are the account holder for the mobile number provided, or that you have the account holder's permission to enroll that number.

Your use of the SMS/MMS program is also governed by our Messaging Terms and Messaging Privacy Policy, which are incorporated into this Privacy Policy by reference.

VOICE CALLS AND CALL MONITORING/RECORDING

We may place and receive telephone calls in connection with your orders, customer support, and the Valabasas Concierge styling program. These calls may be handled using third-party telephony and communications providers (for example, Twilio), and some outreach may be assisted by automated dialing systems and/or automated or AI-assisted technologies. Where calls are made for marketing purposes using an automated system, consent to receive them is not a condition of any purchase, and standard message and data or carrier charges may apply.

Monitoring and recording. Some calls may be monitored or recorded for quality assurance, training, identity verification, recordkeeping, and to improve our products and services. Where required by law, we will disclose at the beginning of the call that it may be monitored or recorded. In jurisdictions that require the consent of all parties to a call (such as California and other "two-party" or "all-party" consent states), by continuing with the call after this disclosure you consent to the monitoring and recording. If you do not consent, you may tell us at the start of the call or end the call.

Opting out of marketing calls. You may ask us not to call you for marketing purposes, or to be placed on our internal Do Not Call list, at any time by contacting us at orders@valabasas.com. Recordings and call records are retained in accordance with the "Data Retention" section below.

COOKIES AND TRACKING TECHNOLOGIES

Cookies are unique identifiers that we transfer to your device to enable our systems to recognize your device and to provide features for purchasing, checkout, and personalized content and advertising. We and our third-party partners also use related technologies such as pixels, tags, web beacons, software development kits (SDKs), and similar tools.

We use these technologies for several purposes:

  • Strictly necessary / functional — to operate the Site, enable shopping cart and checkout, remember your preferences, and keep the Site secure.
  • Analytics / performance — to understand how visitors use the Site so we can measure and improve it.
  • Advertising / targeting — to deliver and measure relevant advertising, including interest-based advertising delivered with third-party advertising partners and social media platforms. These technologies may transmit online identifiers and activity data to those third parties.

Here is a list of certain cookies that we use:

  • _session_id — unique token, sessional — allows Shopify to store information about your session (referrer, landing page, etc.).
  • _shopify_visit — no data held, persistent for 30 minutes from the last visit — used by our website provider's internal stats tracker to record the number of visits.
  • _shopify_uniq — no data held, expires midnight (relative to the visitor) of the next day — counts the number of visits to a store by a single customer.
  • cart — unique token, persistent for 2 weeks — stores information about the contents of your cart.
  • _secure_session_id — unique token, sessional.
  • storefront_digest — unique token, indefinite — if the shop has a password, this is used to determine whether the current visitor has access.

Managing cookies and tracking. You can manage non-essential cookies through any cookie banner or preference tool we make available on the Site, and through your browser settings. Most browsers let you refuse or delete cookies; however, some features of the Site may not function properly without them.

Global Privacy Control and Do Not Track. Some browsers and extensions transmit "Do Not Track" or Global Privacy Control (GPC) signals. Where required by law, we treat a recognized GPC signal as a valid request to opt out of the "sale" or "sharing" of personal information for the browser and device from which it is sent. Outside of those requirements, our Site may not respond to all Do Not Track signals.

Currency conversion. By using our website, you (the visitor) agree to allow third parties to process your IP address in order to determine your location for the purpose of currency conversion. You also agree to have that currency stored in a session cookie in your browser (a temporary cookie which gets automatically removed when you close your browser). We do this in order for the selected currency to remain selected and consistent when browsing our website so that the prices can convert to your local currency.

THIRD-PARTY SERVICES

In general, the third-party providers used by us will only collect, use, and disclose your information to the extent necessary to allow them to perform the services they provide to us.

However, certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies in respect to the information we are required to provide to them for your purchase-related transactions. For these providers, we recommend that you read their privacy policies so you can understand the manner in which your personal information will be handled.

Certain providers may be located in, or have facilities located in, a different jurisdiction than either you or us. If you elect to proceed with a transaction that involves the services of a third-party service provider, then your information may become subject to the laws of the jurisdiction(s) in which that service provider or its facilities are located.

Once you leave our store's website or are redirected to a third-party website or application, you are no longer governed by this Privacy Policy or our website's Terms of Service.

PAYMENT

Notice: All orders not using PayPal must use the same address for billing as for shipping. Your order will be cancelled if you do not comply.

If you choose a direct payment gateway to complete your purchase, then Shopify stores your credit card data. It is encrypted through the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is stored only as long as is necessary to complete your purchase transaction. After that is complete, your purchase transaction information is deleted.

All direct payment gateways adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express, and Discover. PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers.

SHOPIFY HOSTING

Our store is hosted on Shopify Inc. They provide us with the online e-commerce platform that allows us to sell our products and services to you. Your data is stored through Shopify's data storage, databases, and the general Shopify application. They store your data on a secure server behind a firewall.

DATA RETENTION

We retain personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, including to provide our products and services, maintain your account, comply with our legal, tax, accounting, and recordkeeping obligations, resolve disputes, prevent fraud, and enforce our agreements. When personal information is no longer needed, we will delete, de-identify, or securely destroy it. Retention periods vary depending on the type of information and the purpose for which it was collected.

SECURITY

To protect your personal information, we take reasonable precautions and follow industry best practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered, or destroyed.

If you provide us with your credit card information, the information is encrypted using secure socket layer technology (SSL) and stored with AES-256 encryption. Although no method of transmission over the Internet or electronic storage is 100% secure, we follow all PCI-DSS requirements and implement additional generally accepted industry standards. In the event of a data breach affecting your personal information, we will notify you and the appropriate authorities where required by applicable law.

YOUR CALIFORNIA PRIVACY RIGHTS

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the "CCPA"), provides you with the following rights regarding your personal information.

Categories of personal information. In the preceding 12 months, we may have collected the following categories of personal information: identifiers (such as name, postal address, email address, phone number, and IP address); customer records and commercial information (such as products purchased and payment/billing information); internet or other electronic network activity information (such as browsing and interaction data); approximate geolocation (derived from IP address); audio information (such as call recordings); and inferences drawn from the above (such as preferences and characteristics). We collect this information from the sources, and use and disclose it for the purposes, described in this Privacy Policy.

"Sale" and "sharing." California law defines "sale" and "sharing" broadly. Because we use advertising and analytics technologies that may disclose online identifiers and activity data to third parties for cross-context behavioral advertising, we may "sell" or "share" personal information as those terms are defined under the CCPA. We do not knowingly sell or share the personal information of consumers under 16 years of age. We do not sell or share your SMS/text-messaging opt-in or consent.

Your rights. Subject to certain exceptions, California residents have the right to:

  • Know/Access — request the categories and specific pieces of personal information we have collected about you, the sources, the business or commercial purposes for collecting it, and the categories of third parties to whom we disclose it;
  • Delete — request that we delete personal information we collected from you;
  • Correct — request that we correct inaccurate personal information;
  • Opt out — opt out of the "sale" or "sharing" of your personal information;
  • Limit — limit the use and disclosure of sensitive personal information (to the extent we use it for purposes that trigger this right);
  • Non-discrimination — not receive discriminatory treatment for exercising your privacy rights.

How to exercise your rights. You may submit a request by emailing orders@valabasas.com, by mail at the address in the "Contact Us" section, or through any "Do Not Sell or Share My Personal Information" link or preference tool we make available on the Site. You may also exercise your opt-out right by enabling a Global Privacy Control (GPC) signal in a supported browser. We will verify your request and may need additional information to confirm your identity. You may use an authorized agent to submit a request on your behalf, subject to verification.

Notice of Financial Incentive. We may offer programs, discounts, or other benefits in exchange for the collection, retention, or use of personal information, such as a discount or promotional offer when you sign up for our email or SMS marketing. When you sign up, you provide personal information such as your email address or mobile number; the value of this information to us is reasonably related to the value of the offer or discount provided to you, and any difference is reasonably related to that value. Participation is entirely voluntary, and you may withdraw at any time by unsubscribing as described in this policy.

YOUR PRIVACY RIGHTS IN OTHER U.S. STATES

If you are a resident of a U.S. state that has enacted a comprehensive consumer privacy law (such as Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and others), you may have rights similar to those described above, which may include the right to confirm whether we process your personal information and to access it; to correct inaccuracies; to delete personal information; to obtain a portable copy of your data; and to opt out of targeted advertising, the sale of personal information, and certain profiling. Where applicable law provides a right to appeal a decision on your request, you may do so by contacting us at orders@valabasas.com. To exercise any of these rights, contact us using the information in the "Contact Us" section. We will respond as required by applicable law.

INTERNATIONAL USERS (EEA, UK, AND OTHERS)

Our Site is operated from the United States. If you access the Site or provide information to us from outside the United States, your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country.

If you are located in the European Economic Area (EEA) or the United Kingdom, you may have additional rights under the General Data Protection Regulation (GDPR) and UK GDPR, including the rights to access, rectify, erase, restrict, and object to processing of your personal data, and the right to data portability. Where we rely on consent, you may withdraw it at any time. The legal bases on which we process your personal data include performance of a contract (to fulfill your orders), our legitimate interests (to operate and improve our business and prevent fraud), your consent (for marketing and certain cookies), and compliance with legal obligations. Where we transfer personal data internationally, we rely on appropriate safeguards as required by applicable law. You also have the right to lodge a complaint with your local data protection authority. To exercise your rights, contact us at orders@valabasas.com.

CHILDREN'S PRIVACY AND AGE CONSENT

By using this site, you represent that you are at least 18 years old, or that you are not considered a minor in your state or province of residence, or that you are using the Site with the involvement of a parent or guardian. Our Site and products are intended for adults and are not directed to children under 13. We do not knowingly collect personal information from children under 13 (or the minimum age required by applicable law in your jurisdiction). If you believe a child has provided us with personal information, please contact us at orders@valabasas.com and we will take steps to delete it.

AUTOMATED PROCESSING AND PERSONALIZATION

We may use automated tools and technologies, including artificial intelligence, to personalize your experience, tailor marketing and styling recommendations, support customer service, and detect and prevent fraud. These tools do not make decisions that produce legal or similarly significant effects about you without human involvement. Where applicable law gives you rights regarding automated decision-making or profiling, we will honor those rights as described in the relevant sections above.

LINKS

When you click on links on our store, they may direct you away from our Site. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements.

CHANGES TO THIS PRIVACY POLICY

We reserve the right to modify this Privacy Policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the website. If we make material changes to this policy, we will notify you here that it has been updated, so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we use and/or disclose it. If our store is acquired or merged with another company, your information may be transferred to the new owners so that we may continue to sell products to you.

CONTACT US

If you have questions about this Privacy Policy or our privacy practices, or wish to exercise your privacy rights, you can contact us at:

Valabasas 4055 American Way Memphis, Tennessee, United States of America 38118 Email: orders@valabasas.com