ViaUmbrata

+ Privacy Policy +

This Privacy Policy explains how Via Umbrata (“we”, “us”, or “our”) collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from viaumbrata.com or viaumbrata.myshopify.com (together, the “Site”), or otherwise interact with us in connection with the Site (collectively, the “Services”).

For purposes of this Privacy Policy, “you” and “your” refer to anyone using the Services, whether as a customer, website visitor, or other individual whose personal information we may collect.

Please read this Privacy Policy carefully.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Site, update the "Last updated" date and take any other steps required by applicable law.

How We Collect and Use Your Personal Information

To provide the Services, we collect and have collected over the past 12 months personal information about you from a variety of sources, as set out below. The information that we collect and use varies depending on how you interact with us.

In addition to the specific uses set out below, we may use information we collect about you to communicate with you, provide or improve the Services, comply with any applicable legal obligations, enforce any applicable terms of service, and to protect or defend the Services, our rights, and the rights of our users or others.

What Personal Information We Collect

The types of personal information we obtain about you depend on how you interact with our Site and use our Services. When we use the term "personal information", we are referring to information that identifies, relates to, describes or can be associated with you. The following sections describe the categories and specific types of personal information we collect.

Information We Collect Directly from You

Information that you directly submit to us through our Services may include:

1. contact details such as your name, address, email, and phone number;
2. order information including your billing and shipping address, payment confirmation, and contact details;
3. account-related information such as username, password, and security settings;
4. customer support messages and any other information you choose to include when communicating with us.

Some features of the Services may require you to provide certain personal information. You may choose not to provide this, but doing so may prevent you from accessing certain features.

Information We Collect about Your Usage

We may also automatically collect certain information about your interaction with the Services (“Usage Data”). This is done using cookies, pixels, and similar technologies (“Cookies”). Usage Data may include details such as how you access and use our Site and your account, including your device type, browser, network connection, IP address, and other technical data related to your use of the Services.

Information We Obtain from Third Parties

Finally, we may obtain information about you from third parties, including vendors and service providers who collect information on our behalf, such as:

1. companies who support our Site and Services, such as Shopify;
2. payment processors who collect payment details (such as your credit or debit card information and billing address) to process transactions and fulfill your orders;
3. marketing and analytics partners. When you visit our Site, open or click on emails we send you, or interact with our Services or advertisements, we or our partners may automatically collect data using tracking technologies such as pixels, web beacons, SDKs, and cookies.

Any information we receive from third parties will be handled in accordance with this Privacy Policy. Also see the section Third Party Websites and Links below.

How We Use Your Personal Information

1. Providing Products and Services. We use your personal information to provide you with the Services in order to perform our contract with you, including to process your payments, fulfill your orders, to send notifications to you related to your account, purchases, returns, exchanges or other transactions, to create, maintain and otherwise manage your account, to arrange for shipping, facilitate any returns and exchanges and other features and functionalities related to your account. We may also enhance your shopping experience by enabling Shopify to match your account with other Shopify services that you may choose to use. In this case, Shopify will process your information as set forth in its Privacy Policy and Consumer Privacy Policy.
2. Marketing and Advertising. We may use your personal information for marketing and promotional purposes, such as to send marketing, advertising and promotional communications by email, text message or postal mail, and to show you advertisements for products or services. This may include using your personal information to better tailor the Services and advertising on our Site and other websites. If you are an EEA resident, the legal basis for these data processing activities is our legitimate interest in selling our products, according to Art. 6 (1) (f) GDPR.
3. Security and Fraud Prevention. We use your personal information to detect, investigate or take action regarding possible fraudulent, illegal or malicious activity. If you choose to use the Services and register an account, you are responsible for keeping your account credentials safe. We highly recommend that you do not share your username, password, or other access details with anyone else. If you believe your account has been compromised, please contact us immediately. If you are an EEA resident, the legal basis for these data processing activities is our legitimate interest in keeping our website secure for you and other customers, according to Art. 6 (1) (f) GDPR.
4. Communicating with You and Service Improvement. We use your personal information to provide you with customer support and improve our Services. This is in our legitimate interests in order to be responsive to you, to provide effective services to you, and to maintain our business relationship with you according to Art. 6 (1) (f) GDPR.

Cookies

Like many websites, we use Cookies on our Site. For specific information about the Cookies that we use related to powering our store with Shopify, see Shopify’s Cookie Policy. We use Cookies to power and improve our Site and our Services (including to remember your actions and preferences), to run analytics, and to better understand user interaction with the Services (in our legitimate interests to administer, improve, and optimize the Services).

We may also permit third parties and service providers to use Cookies on our Site to better tailor the services, products, and advertising on our Site and other websites. This includes embedded content from third-party platforms such as Instagram and YouTube. These services may place Cookies or other tracking technologies in your browser when their content loads, even if you do not interact with the content directly. To comply with applicable privacy laws, we only load this embedded content after you have given consent to third-party Cookies via our cookie banner.

Most browsers automatically accept Cookies by default, but you can choose to set your browser to remove or reject Cookies through your browser controls. Please keep in mind that removing or blocking Cookies can negatively impact your user experience and may cause some of the Services — including certain features and general functionality — to work incorrectly or no longer be available. Additionally, blocking Cookies may not completely prevent how we share information with third parties such as our advertising partners.

Our website does not currently support the Global Privacy Control (GPC) signal. However, portions of the Services provided through Shopify may recognize and respond to GPC, as described in Shopify’s Privacy Policy. We continue to evaluate system updates and may support GPC in the future.

How We Disclose Personal Information

In certain circumstances, we may disclose your personal information to third parties for purposes including fulfilling contracts, pursuing our legitimate interests, or meeting legal obligations, as described in this Privacy Policy. These circumstances may include:

1. disclosing your information to vendors and service providers who perform services on our behalf, such as IT infrastructure management, payment processing, data analytics, customer support, cloud storage, shipping, and order fulfillment;
2. sharing information with business and marketing partners, who are responsible for processing your information according to their own privacy policies, to provide services and display relevant advertisements;
3. disclosing your information at your direction or with your consent — for example, when you use social media login integrations or ask us to ship products to third parties;
4. sharing your information with our affiliates, or within our corporate group, to operate our business efficiently;
5. disclosing information in the context of a business transfer (e.g., merger, acquisition, bankruptcy), or to comply with applicable laws, respond to lawful requests, enforce our terms, or protect our rights or the safety of users.

We have in the past 12 months disclosed the following categories of personal information and sensitive personal information about users for the purposes set out above in “How we Collect and Use your Personal Information” and “How we Disclose Personal Information”:

Category

• Identifiers such as basic contact details and certain order and account information;
• Personal information categories listed in the California Customer Records statute such as basic contact details and certain order and account information;
• Commercial information such as order information, shopping information and customer support information;
• Internet or other similar network activity, such as Usage Data;
• Geolocation data such as locations determined by an IP address or other technical measures.

Categories of Recipients

• Vendors and third parties who perform services on our behalf (such as Internet service providers, payment processors, fulfillment partners, customer support partners and data analytics providers);
• Business and marketing partners;
• Affiliates.

We do not use or disclose sensitive personal information without your consent or for the purposes of inferring characteristics about you.

With your consent we share personal information for the purpose of engaging in advertising and marketing activities, as follows.

We have “sold” and “shared” (as those terms are defined in applicable law) personal information over the preceding 12 months for the purpose of engaging in advertising and marketing activities, as follows.

Categories of Personal Information and Recipients

• Identifiers such as name, e-mail address and phone number, disclosed to business and marketing partners;
• Commercial information such as records of products or services purchased, disclosed to business and marketing partners;
• Usage Data, disclosed to business and marketing partners.

Third Party Websites and Links

Our Site may contain links to websites or other online platforms operated by third parties. If you follow a link to a site not affiliated with or controlled by us, you should review that site’s privacy and security policies as well as any other applicable terms and conditions.

We do not guarantee and are not responsible for the privacy or security practices of third-party websites, including the accuracy, completeness, or reliability of information found on them.

Any information you provide on public or semi-public platforms, including third-party social networking services, may be visible to other users of those platforms or the Services, and may be collected and used without limitation by us or others.

The inclusion of such links on our Site does not imply endorsement of the content, owners, or operators of those third-party sites, unless explicitly stated otherwise.

Children's Data

Our Services are not intended for use by children. We do not knowingly collect personal information from individuals under the age of 16. If you are a parent or guardian and believe that your child has provided us with personal information, you may contact us using the contact details provided below to request its deletion.

As of the effective date of this Privacy Policy, we do not have actual knowledge that we “sell” or “share” (as defined by applicable law) the personal information of individuals under the age of 16.

Security and Retention of Your Information

We implement appropriate technical and organizational measures to safeguard your personal information. However, no security system is completely secure, and we cannot guarantee absolute protection. Additionally, data transmitted over the internet may not be secure during transit. We advise you not to send sensitive or confidential information via unsecured channels.

We retain your personal information only as long as necessary for the purposes for which it was collected, including to maintain your account, provide the Services, comply with legal obligations, resolve disputes, and enforce applicable agreements and policies.

Your Rights

Depending on where you live, you may have some or all of the rights listed below in relation to your personal information. However, these rights are not absolute and may apply only in certain circumstances. In some cases, we may decline your request as permitted by law.

1. Right to Access / Know — you may request access to the personal information we hold about you, including details on how we use and share it;
2. Right to Delete — you may request that we delete the personal information we maintain about you;
3. Right to Correct — you may request that we correct inaccurate or incomplete personal information;
4. Right to Portability — you may request a copy of your personal information in a portable format, and where feasible, request that we transfer it to another controller;
5. Right to Opt Out of Sale, Sharing, or Targeted Advertising — you may direct us not to “sell” or “share” your personal information, or to opt out of targeted advertising, as defined by applicable privacy laws. If you visit our Site with a Global Privacy Control (GPC) signal enabled, we will treat it as a valid opt-out request for that browser or device;
6. Restriction of Processing — you may request that we restrict the processing of your personal information under certain circumstances;
7. Withdrawal of Consent — where we rely on your consent to process personal information, you may withdraw that consent at any time;
8. Right to Appeal — if we deny your request, you may have the right to appeal our decision. You may do so by replying directly to our response;
9. Managing Communication Preferences — you may opt out of promotional emails at any time by using the unsubscribe link in those emails. We may still send transactional emails related to your account or purchases.

You may exercise your rights through our Site or by contacting us using the details provided below.

We will not discriminate against you for exercising your rights. To help protect your privacy and security, we may ask you to verify your identity — such as by providing your email address or account details — before responding to your request. Where permitted by law, you may also designate an authorized agent to make a request on your behalf. In that case, we may require the agent to present proof of authorization, and we may ask you to verify your identity directly.

Complaints

If you have concerns or complaints about how we handle your personal information, please contact us using the details provided below. If you are not satisfied with our response, you may have the right to appeal our decision or lodge a complaint with your local data protection authority, depending on where you live.

In the European Economic Area (EEA), you can find a list of data protection supervisory authorities here.

In the Netherlands, you may lodge a complaint with the Autoriteit Persoonsgegevens (Dutch Data Protection Authority).

International Users

Your personal information may be transferred to, stored in, or processed in countries outside of your own, including by staff and third-party service providers in those locations.

If we transfer personal information out of Europe, we rely on recognized safeguards such as the European Commission’s Standard Contractual Clauses, or any equivalent mechanisms approved by the competent authority of the UK, unless the destination country has been deemed to offer an adequate level of data protection.

Contact

If you have any questions about this Privacy Policy or how we handle your personal information, or if you wish to exercise your privacy rights, please contact us at viaumbrata@gmail.com.

Unless stated otherwise, we are the data controller of your personal information for the purposes of applicable data protection laws.

Last updated: 19 May 2025