GDPR Privacy Policy
GDPR Privacy Policy
This GDPR Privacy Policy explains how we collect, use, disclose, retain, and protect personal data in connection with travenivor.com and our online shopping services.
We are committed to handling personal data responsibly and complying with applicable privacy and data protection laws. The rights and protections under the General Data Protection Regulation (“GDPR”) described in this policy apply only where the GDPR applies to the relevant individual or data processing activity. The GDPR does not automatically apply to every visitor or customer of our website, nor does it automatically apply to all data processing activities associated with our website.
1. Scope of This Policy
This policy applies to personal data processing activities related to our website and online shopping services, including activities related to the purchase of living room furniture and garden furniture.
Where the GDPR applies to a particular individual or data processing activity, we will provide the rights and protections required by the GDPR to the extent applicable.
For individuals or data processing activities that are not subject to the GDPR, other applicable privacy and data protection laws may apply.
2. Personal Data We May Process
“Personal data” generally means information relating to an identified or identifiable individual.
Depending on how you use our website and services, we may process the following categories of personal data:
Contact Information, such as your name, email address, phone number, or other contact information you voluntarily provide;
Shipping and Delivery Information, such as information required to complete order delivery;
Billing and Transaction Information, including information related to purchases, orders, refunds, or other transactions;
Order Information, such as products purchased, order details, and related customer service requests;
Account Information, if the website provides account functionality and you choose to use it;
Device and Usage Information, relating to your use of the website; and
Customer Service Communications, including information you provide when contacting customer service regarding orders, products, returns, deliveries, or other matters.
We process personal data only to the extent reasonably necessary to achieve the purposes described in this policy and other applicable privacy notices.
3. How We Collect Personal Data
We may obtain personal data through several methods:
Information You Provide Directly
When you place an order, submit information through the website, contact customer service, submit a request, or otherwise communicate with us, you may voluntarily provide personal data.
Information Generated Through Your Use of the Website
When you browse or use our website, certain information may be automatically generated or collected, where applicable, including information related to your device and website usage.
Cookies and Similar Technologies
We may use Cookies and similar technologies to support website functionality, improve the user experience, and conduct applicable website operations.
For more information about Cookies and similar technologies, please refer to our separate Cookies Policy.
4. How We Use Personal Data
Depending on the circumstances and applicable laws, we may use personal data for reasonable business and operational purposes, including:
Processing and fulfilling orders;
Arranging product shipping and delivery;
Processing or facilitating payments and transactions;
Providing customer support;
Communicating with you regarding orders, requests, or customer service matters;
Maintaining and operating website functionality;
Improving the website experience;
Preventing fraud, abuse, unauthorized activities, or other improper conduct;
Complying with applicable legal and regulatory obligations;
Establishing, exercising, or protecting legal rights and handling legal claims; and
Protecting our legitimate business interests to the extent permitted by law.
Unless permitted or required by applicable law, we will not use personal data for purposes that are incompatible with the purposes for which it was collected.
5. Legal Bases for Processing
Where the GDPR applies, we process personal data based on one or more lawful bases provided under applicable data protection laws, depending on the circumstances.
These legal bases may include:
Performance of a Contract
When processing personal data is necessary to take steps at your request before entering into a contract or to perform our contractual obligations with you, we may rely on the performance of a contract as a legal basis.
For example, processing personal data may be necessary to process and fulfill orders, arrange delivery, or provide services you have requested.
Consent
Where required or appropriate under applicable law, certain data processing activities may be based on your consent.
If a particular processing activity is based on your consent, you may have the right to withdraw that consent as described in this policy.
Compliance With a Legal Obligation
When processing personal data is necessary to comply with an applicable legal or regulatory obligation, we may process the relevant data based on compliance with a legal obligation.
Legitimate Interests
Where necessary, we may process personal data based on legitimate interests if we or another relevant party has a legitimate interest and that interest is not overridden by the rights and interests of the relevant individual.
Depending on the circumstances, legitimate interests may include maintaining website operations, protecting website security, preventing fraud or abuse, responding to customer inquiries, and protecting legitimate business interests.
Other Lawful Bases
Where applicable, we may process personal data based on other lawful bases permitted under the GDPR or other applicable data protection laws.
The applicable legal basis depends on the specific data processing activity and the circumstances in which personal data is collected and used.
6. Sharing and Disclosure of Personal Data
We may share personal data when reasonably necessary to provide services, operate the website, fulfill transactions, comply with legal requirements, or protect legitimate interests.
Depending on the circumstances, recipients of personal data may include:
Payment processing service providers;
Shipping and delivery service providers;
Website and technology service providers;
Customer support service providers; and
Government, regulatory, judicial, or law enforcement authorities where required or permitted by applicable law.
We will seek to limit disclosures of personal data to the extent reasonably necessary to achieve the relevant purpose.
This policy does not mean that every type of service provider listed above participates in every transaction or data processing activity.
7. International Data Transfers
Our business operates in the United States. Therefore, depending on the circumstances, personal data may be processed or accessed in the United States or other countries or regions outside the country or region where you are located.
If personal data is transferred across borders from the European Economic Area (“EEA”) or another jurisdiction subject to international data transfer requirements, we will take appropriate measures to the extent required by applicable data protection laws.
Depending on the circumstances, applicable safeguards may include an adequacy decision, appropriate contractual safeguards, or other lawful data transfer mechanisms recognized by applicable law.
We do not represent that any particular data transfer mechanism applies to all data transfers. The specific safeguards used will depend on the nature and circumstances of the relevant data transfer.
8. Data Retention
We retain personal data only for the period reasonably necessary to achieve the purposes for which the personal data was collected, including where continued retention is necessary to:
Provide products or services;
Complete or document transactions;
Maintain appropriate business and customer records;
Comply with applicable legal or regulatory obligations;
Resolve disputes;
Establish, exercise, or protect legal rights and claims; or
Protect legitimate business interests.
The appropriate retention period may vary depending on the type of information, the purpose of processing, applicable legal requirements, and other relevant circumstances.
Subject to legal and reasonable business requirements, we will not retain personal data beyond the period reasonably necessary to achieve the relevant purposes.
9. Data Security
We take reasonable technical and organizational measures designed to protect personal data from unauthorized access, disclosure, modification, loss, misuse, or destruction.
Specific security measures may vary depending on the nature of the information, the data processing activity, and the particular circumstances.
No method of transmitting or storing information can be guaranteed to be completely secure. Therefore, we do not represent or guarantee that personal data can be protected against all possible security risks.
10. Your GDPR Rights
If the GDPR applies to you, you may have certain rights concerning your personal data, including:
Right to Access
You may have the right to request access to personal data we hold about you, as well as certain information regarding how we process that data.
Right to Rectification
You may have the right to request correction of inaccurate or incomplete personal data.
Right to Erasure
In certain circumstances, you may have the right to request deletion of your personal data.
If applicable law permits or requires us to continue retaining or processing the relevant information, this right may be subject to corresponding limitations.
Right to Restrict Processing
In certain circumstances, you may have the right to request that we restrict the processing of your personal data.
Right to Object
Where the requirements of applicable law are satisfied, you may have the right to object to certain processing activities involving your personal data, including processing based on legitimate interests.
Right to Data Portability
Where applicable, you may have the right to receive certain personal data you have provided to us in a structured, commonly used, and machine-readable format and, in certain circumstances, request that such data be transferred to another organization.
Right to Withdraw Consent
If a particular processing activity is based on your consent, you may have the right to withdraw that consent at any time.
Right to Lodge a Complaint
Where the GDPR applies, you may have the right to lodge a complaint with a competent data protection supervisory authority, particularly, where applicable, with the supervisory authority in your habitual place of residence, place of work, or the place where the alleged infringement occurred.
The availability and scope of these rights depend on the circumstances and applicable law. Certain rights may be subject to exceptions or limitations provided by law.
11. How to Exercise Your Rights
If you believe that the GDPR applies to you and wish to exercise an applicable data protection right, you may contact us using the following information:
Email: team@travenivor.com
Phone: +1 (314) 385-2312
Address: 4655 Elmbank Ave #1A, Saint Louis, MO 63115, United States
When handling a privacy request, we may need you to provide reasonable information to help us understand and verify your request and, where appropriate, confirm that the request was made by the relevant individual.
For your security, please do not provide unnecessary sensitive authentication or payment information when submitting a privacy request. In particular, please do not send your full payment card number, CVV, password, or account security code by ordinary email unless we specifically instruct you to do so through an appropriate secure process.
We will process valid data subject requests in accordance with applicable law and within the time period required by applicable law.
12. Withdrawal of Consent
If a particular data processing activity is based on your consent, you may withdraw your consent at any time, subject to applicable law.
Withdrawing consent does not affect the lawfulness of processing carried out based on valid consent before the consent was withdrawn.
Withdrawing consent also does not prevent us from continuing to process personal data where another lawful basis permits or requires us to do so.
13. Cookies and Similar Technologies
We may use Cookies and similar technologies in connection with the operation of our website.
These technologies may be used to support website functionality, improve the user experience, and conduct other applicable website operations.
Where required by applicable law, we may provide users with appropriate choices or consent mechanisms regarding certain Cookies or similar technologies.
For more detailed information about how Cookies and similar technologies are used, please refer to our separate Cookies Policy.
14. Updates to This GDPR Policy
We may update this GDPR Privacy Policy from time to time to reflect changes in our business practices, website functionality, technology, applicable laws, or regulatory requirements.
When this policy is updated, the revised version will be published on our website. To the extent permitted by applicable law, your continued use of the website after the policy has been updated may be subject to the revised policy.
15. Contact Us
If you have any questions about this GDPR Privacy Policy, our privacy practices, or an applicable data protection request, please contact us using the following information:
Travenivor
Address: 4655 Elmbank Ave #1A, Saint Louis, MO 63115, United States
Email: team@travenivor.com
Phone: +1 (314) 385-2312
Customer Support Hours: Monday through Friday, 9:00 AM–6:00 PM (Eastern Time)