Privacy policy

This Privacy Policy explains how Cavora Home collects, uses, shares, and protects the personal data of visitors and customers who use our website and place orders with us. Please read it carefully to understand your rights and how we handle your information.

1. Controller

The controller responsible for the processing of personal data on this website is:
Cavora Home
3254 Progress Way
52242 Iowa City, United States
Email: contact@cavorahome.shop
Phone: +13199368293

If you have any questions about this Privacy Policy or about how your personal data is processed, you are welcome to contact us using the details above.

2. Data We Collect

We collect personal data in the following situations, and only to the extent necessary for the purposes described below.

2.1 When You Visit the Site

When you browse our website, our server automatically and temporarily logs certain technical information, including your IP address, the date and time of access, the URL requested, the referring page, your browser type, and your operating system. This information is used solely to ensure the security, stability, and reliable operation of our website, and is not used to identify you personally. Legal basis: GDPR Art. 6(1)(f) (legitimate interest).

2.2 When You Place an Order

When you place an order with us, we collect the personal data necessary to process, fulfill, and deliver that order. This includes your name, billing and shipping address, email address, phone number (optional), and payment details. Payments on our store can be made using Visa, Mastercard, Maestro, American Express, Google Pay, and Apple Pay. Depending on the payment method you choose, some of your payment data may be collected and processed directly by our payment provider rather than by us (see Section 5). Legal basis: GDPR Art. 6(1)(b) (performance of a contract).

2.3 When You Contact Us

If you contact us by email, phone, or through a contact form, we store the content of your message together with your contact details so that we can respond to your inquiry and keep a record of our correspondence. Legal basis: GDPR Art. 6(1)(b) and (f).

3. Sharing Data

We do not sell your personal data. We only share personal data with third parties in the following circumstances:

  • you have given us your explicit consent to the sharing;
  • sharing is necessary to fulfill our contract with you, for example passing your shipping address to a carrier or your payment details to a payment provider;
  • we are required to do so by law or by a legally binding order from a public authority; or
  • we have a legitimate interest in sharing the data under GDPR Art. 6(1)(f), and this interest does not override your rights and freedoms.

Any third party we share data with is only permitted to use it for the specific purpose for which it was shared.

4. Cookies

Our website uses cookies, which are small text files stored on your device. We use cookies that are strictly necessary for the website to function correctly, such as those needed for browsing and checkout. These necessary cookies are set automatically and do not require your consent.

Optional cookies, such as those used for analytics or marketing purposes, are only set after you have given your consent through our cookie banner. You can manage or withdraw your consent for optional cookies at any time through your browser settings or the cookie banner.

5. Services We Use

To operate our store and provide our services, we rely on the following third-party providers:

  • Hosting: This website is hosted on Shopify (Shopify Inc., 150 Elgin Street, Ottawa, ON, K2P 1L4, Canada), which stores and processes data on our behalf in order to run the store.
  • Payment processing: Payments are processed by our configured payment providers, supporting Visa, Mastercard, Maestro, American Express, Google Pay, and Apple Pay. Depending on the option you select at checkout, your payment data may be transmitted directly to and processed by that provider.

Each of these providers processes personal data under its own privacy policy, and acts as an independent controller or processor with respect to the data it handles.

6. Your Rights

Subject to applicable law, you have the following rights regarding your personal data:

  • the right to request access to the personal data we hold about you (GDPR Art. 15);
  • the right to request correction of inaccurate or incomplete data (Art. 16);
  • the right to request deletion of your data (Art. 17);
  • the right to request restriction of processing (Art. 18);
  • the right to request data portability (Art. 20);
  • the right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal (Art. 7(3)); and
  • the right to lodge a complaint with a supervisory authority (Art. 77).

To exercise any of these rights, please contact us at contact@cavorahome.shop. We will respond to your request in accordance with applicable law.

7. Right to Object

Where we process your personal data on the basis of a legitimate interest, you have the right to object to that processing at any time under GDPR Art. 21, on grounds relating to your particular situation. If you object, we will stop processing your data for that purpose unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.

To exercise your right to object, or if you have any other questions about how we handle your personal data, please contact us at contact@cavorahome.shop.