Privacy Policy

1. Introduction and Scope

uvenororera (hereinafter referred to as “I”) respects your privacy and is committed to handling personal information responsibly. This Privacy Policy explains how I collect, use, disclose, retain, and protect personal information when you visit the website, browse products, place an order, make a payment, contact customer support, or otherwise use the online shopping services.

This policy applies to information collected through the website and related customer service interactions. It covers information you provide directly, information generated through your use of the website, and information received from service providers or other sources where permitted.

The online store primarily serves customers in the United States. Certain transactions or website interactions may involve individuals in the European Economic Area (EEA), the United Kingdom, or other jurisdictions. Where applicable, I will comply with the privacy requirements that govern the relevant processing activity, including applicable U.S. state privacy laws and the General Data Protection Regulation (GDPR).

This policy describes the categories of personal information involved, the purposes for which information is used, the categories of recipients that may receive it, relevant international transfer arrangements, and the rights available to individuals under applicable privacy requirements.

2. Categories of Personal Information Collected

The information collected depends on how you interact with the website and which services you use.

Contact and identification information may include your name, email address, telephone number, billing address, shipping address, and other details needed to identify you or communicate with you about an order.

Order and transaction information may include the products purchased, order number, purchase date, order value, delivery instructions, shipping status, and records relating to returns, exchanges, cancellations, refunds, or customer complaints.

Payment-related information may include payment status, transaction references, billing information, payment method, and information needed to verify or reconcile a transaction. Payment card details are generally processed by the payment service provider involved in the transaction. I do not intentionally store complete payment card credentials unless this is specifically supported, necessary, and permitted through the relevant payment arrangement.

Device and usage information may include IP address, browser type, device type, operating system, language settings, pages viewed, referring pages, browsing activity, approximate location inferred from technical information, and interactions with website features. The exact information collected depends on the website configuration, technologies in use, and your privacy or cookie settings.

Communications and support records may include messages, attachments, and information you choose to provide when contacting customer support, asking a product question, reporting a problem, or requesting assistance with an order.

Cookie and similar technology information may include identifiers, consent preferences, session details, and website usage information collected through cookies, pixels, or comparable technologies, subject to the applicable consent requirements.

I do not intend to collect sensitive personal information unless it is necessary for a specific purpose and permitted by applicable requirements.

3. How Personal Information Is Collected

I collect personal information through several channels, depending on the services you use.

Information provided directly: You may provide information when completing checkout, creating or using an account where available, submitting a form, contacting customer support, subscribing to communications, or requesting a cancellation, return, exchange, or refund.

Information generated by website use: The website and technologies supporting it may automatically generate technical, security, and usage records when you browse or interact with website features.

Information from service providers: I may receive information from payment processors, shipping and delivery providers, fraud-prevention services, website hosting or ecommerce service providers, and other service providers involved in completing an order or maintaining the website.

Information from other sources: Where permitted by law and necessary for a relevant purpose, I may receive limited information from security, fraud-prevention, or verification services to help assess transactions or investigate suspected misuse.

Providing certain information is necessary to complete an order, deliver products, process payment, or respond to a request. If you do not provide the information required for a particular service, I may be unable to complete that service.

4. Cookies and Similar Technologies

The website may use cookies and similar technologies to maintain essential website functions, remember settings, support checkout, measure website performance, and improve the shopping experience.

Strictly necessary technologies may be used when needed to provide a service you request, maintain website security, or operate essential website features. Optional analytics, advertising, personalization, or other non-essential technologies will be used only where the required consent or other legal basis has been established.

Depending on the website configuration, cookie-related information may be processed by the ecommerce platform, analytics providers, advertising or marketing providers, and consent-management providers. The specific providers and technologies may change as website services change.

You can manage optional cookie preferences through the consent settings made available on the website, where provided. You may also use your browser settings to restrict or delete cookies. Blocking certain cookies may affect checkout, saved preferences, or other website functions.

Where the GDPR or another applicable privacy law requires consent for non-essential cookies or similar technologies, those technologies will not be activated before the required consent is obtained. You may withdraw consent through the available settings where consent is the basis for processing.

Cookie retention periods vary by technology and purpose. Some cookies expire when your browsing session ends, while others remain for a defined period or until deleted. Information about the specific technologies and retention periods should be reviewed in the cookie consent interface or other cookie information made available on the website.

5. Purposes for Processing Personal Information

I use personal information only for purposes relevant to operating the online store and providing customer services.

Order processing and fulfillment: To accept and manage orders, verify transactions, process payments, arrange delivery, provide tracking information, and handle cancellations, returns, exchanges, and refunds.

Customer service: To respond to questions, investigate order issues, manage complaints, communicate with customers, and maintain records needed to resolve service requests.

Website operation and improvement: To maintain the website, troubleshoot technical problems, understand website performance, improve navigation, and make product information and shopping functions easier to use.

Security and fraud prevention: To verify transactions where appropriate, detect suspicious activity, reduce payment or delivery fraud, protect accounts and website systems, and investigate suspected misuse.

Business administration: To maintain purchase records, support accounting and tax processes, manage disputes, establish or defend legal claims, and meet applicable recordkeeping obligations.

Marketing communications: Where permitted and where any required consent has been obtained, to send newsletters, promotional messages, or other communications you have chosen to receive. You can unsubscribe from marketing emails using the unsubscribe link or contact me directly. Necessary order and service messages may still be sent.

Analytics and advertising: Where enabled and permitted, to measure campaign performance, understand customer interactions, and evaluate or personalize advertising. Non-essential tracking technologies will be used only where the required consent or other applicable legal basis has been established.

Compliance and legal requests: To respond to lawful requests, comply with applicable obligations, enforce relevant terms, and protect the rights, safety, and property of customers or others.

I do not use personal information for materially unrelated purposes without providing any notice or obtaining any consent required by applicable law.

6. Legal Bases Under the GDPR

Where the GDPR applies, I process personal information on an appropriate legal basis for the relevant purpose.

Contract performance and pre-contractual steps: Processing information necessary to respond to a purchase request, complete an order, arrange delivery, provide customer service connected with a purchase, or handle a return or refund.

Consent: Processing information for activities that require consent, such as certain non-essential cookies, optional marketing communications, or other consent-based processing. You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Legal obligations: Processing or retaining information when required for applicable accounting, tax, recordkeeping, regulatory, or other legal obligations.

Legitimate interests: Processing information where necessary for legitimate interests such as maintaining website security, preventing fraud, improving website functionality, managing customer service, and establishing or defending legal claims, provided those interests are not overridden by your rights and freedoms.

Where applicable, you may request further information about the legitimate interests relied upon for a particular processing activity. If processing is based on consent, you may refuse or withdraw consent without affecting processing that is lawfully based on another legal ground.

7. Categories of Recipients and Disclosure of Personal Information

I may disclose personal information to the following categories of recipients when reasonably necessary for the purposes described in this policy. The specific recipients depend on the services enabled for the website, the transaction involved, and the service providers actually engaged.

Ecommerce platform and website infrastructure providers: Providers that host or operate the online store, support checkout and order management, maintain website functionality, or provide related technical infrastructure may process contact, order, device, and usage information.

Payment processors and payment service providers: Providers that process card payments, authorize transactions, detect payment fraud, or manage refunds may receive the transaction, billing, payment status, and verification information needed to perform their services. Payment card data is handled according to the payment provider's checkout and processing arrangements.

Shipping, delivery, and fulfillment providers: Carriers, delivery partners, warehouses, and fulfillment service providers may receive your name, delivery address, contact details, order contents, and delivery instructions to prepare, transport, and deliver purchases or process returns.

Customer support and communication providers: Providers supporting customer service, email delivery, contact forms, and customer communications may process the information needed to receive, organize, and respond to your inquiry.

Security, fraud-prevention, and verification providers: Where used, these providers may receive transaction details, device information, technical identifiers, and other relevant records to assess suspicious activity, protect transactions, or verify information.

Analytics, cookie-consent, and advertising providers: Where these services are enabled and their use is permitted, providers may receive cookie identifiers, device and usage information, consent records, and interaction or campaign data to operate analytics, manage consent preferences, or measure advertising. Optional technologies will be subject to applicable consent requirements.

Professional advisers and administrative service providers: Accountants, legal advisers, auditors, insurers, and similar professional service providers may receive relevant information where needed for accounting, advice, insurance, audits, dispute resolution, or the exercise or defense of legal claims.

Government authorities, regulators, courts, and law enforcement: Information may be disclosed where required by a valid legal obligation or request, or where disclosure is otherwise permitted by law to protect rights, safety, or property.

Corporate transaction participants: If a business sale, merger, restructuring, financing, or transfer of business assets is considered or completed, relevant information may be disclosed to potential or actual transaction participants, subject to appropriate confidentiality and other applicable safeguards.

I do not sell personal information in exchange for money. However, certain disclosures involving advertising or cross-context behavioral advertising may be treated as a “sale,” “sharing,” or targeted advertising under particular U.S. state privacy laws, even when no money changes hands. Where such processing occurs and an applicable law grants an opt-out right, I will provide the required opt-out method and honor valid requests.

Service providers and processors are expected to use personal information only as needed to perform the services they provide or as otherwise permitted by applicable law. Where required, appropriate contractual restrictions and safeguards will be used.

The categories above describe the recipients that may be involved in operating an ecommerce website. The actual recipients for a particular transaction depend on the platform, payment, delivery, communications, analytics, and other services enabled at that time. I will not identify a provider as an actual recipient unless that provider is used in connection with the relevant processing activity.

8. Retention of Personal Information

I retain personal information only for as long as reasonably necessary for the purposes described in this policy, unless a longer period is required or permitted by applicable law.

Order and transaction records may be retained to document purchases, process returns and refunds, maintain accounting and tax records, resolve disputes, prevent fraud, and meet recordkeeping obligations.

Customer support communications may be retained for the time needed to respond to the inquiry, manage related service issues, and maintain relevant records.

Technical, security, analytics, and cookie-related information may be retained for periods appropriate to the purpose, the settings of the relevant technology, and applicable legal requirements. Retention periods can vary between individual technologies and providers.

Where the GDPR applies, I consider the purpose of processing, the nature of the information, relevant limitation periods, and applicable legal retention requirements when determining how long information should be kept.

When personal information is no longer needed and no valid retention requirement applies, I will take reasonable steps to delete it, anonymize it, or otherwise handle it appropriately. You may contact me for further information about the retention period applicable to a particular category of personal information.

9. International Data Transfers

The online store is operated from the United States, at the business contact address listed in this policy. Personal information may be processed in the United States and in other countries where the ecommerce platform, payment providers, shipping and fulfillment providers, communications services, website infrastructure providers, or other service providers operate.

The countries in which information is actually accessed or stored depend on the providers used for a particular transaction and their infrastructure, subcontractors, and data-hosting arrangements. I will not represent a country as a confirmed processing destination unless that destination has been verified through the relevant provider's documentation or service arrangement.

At the time this policy is published, I do not have a complete, verified inventory identifying every country in which every service provider or subprocessor may access or store website-related personal information. Accordingly, I cannot reliably list every actual destination country or confirm that a particular transfer mechanism applies to every provider and data category. The United States is the store operator's location; it should not be understood as the only possible processing destination.

Where the GDPR applies and personal data is transferred from the EEA to a country that does not benefit from an applicable adequacy decision, I will rely on an appropriate transfer mechanism where required. Depending on the actual transfer and provider arrangement, this may include:

Standard Contractual Clauses adopted or approved by the European Commission, together with any required transfer assessment and supplementary measures.
An applicable adequacy decision, where the destination country or recipient is covered by that decision and its conditions are met.
Another transfer mechanism or derogation expressly permitted under the GDPR, where its specific conditions are satisfied.

Where the GDPR applies to transfers from the United Kingdom or Switzerland, the applicable UK or Swiss transfer requirements and approved contractual instruments will be considered separately where required. A mechanism valid for an EEA transfer will not automatically be assumed to satisfy UK or Swiss requirements.

For transfers to the United States, the applicable mechanism depends on the recipient and the circumstances. An adequacy framework will be relied upon only where the relevant recipient is eligible, appropriately certified or otherwise covered, and the applicable conditions are satisfied. Otherwise, another valid transfer mechanism will be used where required.

Where necessary, I will assess the level of protection available in the destination and implement supplementary safeguards. Any exception for a specific transfer will be relied upon only when its legal conditions are met and only to the extent permitted by applicable law.

You may request further information about the countries involved in a particular transfer, the applicable safeguards, and how to obtain a copy or description of the relevant transfer mechanism by contacting team@uvenororera.com. Any response will be limited where disclosure is restricted by law, contractual confidentiality, security considerations, or the rights of others.

As the provider inventory and processing arrangements may change, the transfer information in this section should be read together with the current information supplied by the relevant service providers and any updated disclosures made available on the website.

10. Security of Personal Information

I take reasonable organizational, technical, and operational measures intended to protect personal information against unauthorized access, accidental loss, alteration, disclosure, or inappropriate use.

These measures may include limiting access to information according to operational needs, using service providers that offer appropriate security controls, maintaining relevant administrative safeguards, and taking reasonable steps to protect transaction and customer service records.

No website, electronic transmission, or storage method can be guaranteed to be completely secure. If a security incident affects personal information, I will assess the circumstances and take appropriate action in accordance with applicable requirements, including notification to affected individuals or authorities where required.

You can help protect your information by providing accurate contact details, keeping any account credentials confidential, avoiding the disclosure of payment information through unsecured channels, and contacting me if you suspect that your information has been used improperly.

11. Your Privacy Rights Under the GDPR

Where the GDPR applies, you may have the following rights, subject to the applicable conditions and exceptions.

Right of access: You may request confirmation of whether your personal data is being processed and obtain access to that data and certain related information.

Right to rectification: You may request correction of inaccurate personal data or completion of incomplete information.

Right to erasure: You may request deletion of personal data where the conditions for erasure are met. Certain information may need to be retained for legal obligations, contractual purposes, or the establishment or defense of legal claims.

Right to restriction of processing: You may request restriction of processing in circumstances recognized by the GDPR, including certain situations involving disputed accuracy or an objection to processing.

Right to data portability: Where the legal conditions are met, you may request personal data you provided in a structured, commonly used, machine-readable format. Where technically feasible and legally required, you may also request direct transmission to another controller.

Right to object: Where processing is based on legitimate interests or carried out for a task in the public interest, you may object on grounds relating to your particular situation, subject to the conditions set out in the GDPR. You have the right to object at any time to processing for direct marketing purposes, including related profiling, where applicable.

Right to withdraw consent: Where processing is based on consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Rights concerning automated decision-making: Where applicable, you may have rights relating to decisions based solely on automated processing that produce legal effects or similarly significant effects, subject to the conditions and exceptions in the GDPR.

Right to lodge a complaint: You may lodge a complaint with a data protection supervisory authority, particularly in the EEA country where you live, work, or believe an infringement occurred. You may also contact the authority responsible for your circumstances where applicable.

To exercise a right, email team@uvenororera.com and describe your request. I may need to verify your identity before responding. I will respond within the time required by applicable law and will explain any applicable limitation or refusal where required.

12. Privacy Rights of U.S. Residents

Depending on your state of residence, the nature of the information, and the applicable law, you may have rights concerning your personal information. These rights may include:

The right to know or access categories and specific pieces of personal information collected about you, as provided by applicable law.
The right to request deletion of personal information, subject to legal exceptions.
The right to request correction of certain inaccurate personal information.
The right to obtain a portable copy of eligible personal information in a usable format.
The right to opt out of the sale of personal information, sharing for cross-context behavioral advertising, or targeted advertising, where these concepts and rights apply.
The right to limit certain uses or disclosures of sensitive personal information where the applicable law provides that right.
The right not to receive unlawful discriminatory treatment for exercising privacy rights.
The right to appeal a denial of a privacy request where required by applicable state law.

These rights are not identical in every state and may be subject to exceptions, eligibility thresholds, verification requirements, and other conditions.

I do not knowingly sell personal information for monetary consideration. If an activity qualifies as a sale, sharing, or targeted advertising under an applicable state privacy law, I will provide any required notice and opt-out mechanism. Where supported by applicable law and the website's technical capabilities, I will also process recognized opt-out preference signals, such as Global Privacy Control, as required.

To submit a request, email team@uvenororera.com with “Privacy Request” in the subject line and describe the right you wish to exercise. Please include enough information for me to identify the relevant records, but do not send sensitive identification documents or payment card details unless specifically requested through an appropriate secure process. I may request reasonable verification before completing a request.

If applicable law permits an authorized agent to submit a request on your behalf, I may require evidence of authorization and may also need to verify your identity directly. Where a law provides a right to appeal a decision, you may submit an appeal by replying to the response to your original request and clearly stating that you wish to appeal.

13. Children's Privacy

The website is intended for a general shopping audience and is not directed to children under 13. I do not knowingly collect personal information directly from children under 13 without any consent required by applicable law.

If you believe a child has provided personal information inappropriately, please contact team@uvenororera.com. I will review the request and take appropriate steps in accordance with applicable requirements.

Where a higher age threshold or additional requirements apply under local law, I will follow the requirements applicable to the relevant processing activity.

14. Third-Party Websites and Services

The website may contain links to third-party websites, payment pages, delivery tracking services, or other external services. Those services may have their own privacy policies and practices.

When you leave the website or interact directly with a third-party service, the privacy practices of that provider may apply to the information you submit to it. I encourage you to review the provider's privacy notice before supplying personal information.

A third-party link does not mean that I control the provider's website or its data handling practices. This policy covers personal information processed through the online store and related services to the extent described here.

15. Changes to This Privacy Policy

I may update this Privacy Policy when website operations, service providers, data handling practices, or applicable privacy requirements change.

The latest version will be made available on the website. If a change materially affects how personal information is processed, I will provide additional notice or obtain consent where required.

The updated policy will apply from the effective date stated in the revised version, subject to any applicable notice, consent, or other requirements. I encourage you to review this page periodically.

16. Contact Information

For questions about this Privacy Policy, requests to exercise privacy rights, or inquiries about recipients and international data transfers, please contact me using the details below.

Address: 313 Yuhoma Dr, Yukon, OK 73099, United States

Phone: +1 (405) 638-2714

Email: team@uvenororera.com

Business Hours: Monday through Friday, 9:00 AM to 6:00 PM Eastern Time (ET)

When submitting a privacy request, please describe the issue and include a relevant order number only if it helps identify the records involved. I will review your request and respond in accordance with the applicable privacy requirements.