GDPR Policy

This policy explains how derodarava handles personal information when the General Data Protection Regulation (GDPR) applies.

Our website primarily serves customers in the United States and offers shipping throughout the United States. The GDPR may apply to certain people or activities depending on the circumstances and applicable law.

This policy should be read together with our Privacy Policy and Cookies Policy.

1. What Is the GDPR?

The General Data Protection Regulation (GDPR) is a data protection law that may give people in the European Economic Area (EEA) certain rights over their personal information.

When the GDPR applies to our activities, we seek to handle personal information in accordance with its requirements.

2. What Information May We Collect?

Depending on how you use our website, we may collect:

  • Name and contact details

  • Billing and shipping addresses

  • Order and payment transaction details

  • Messages you send to our customer service team

  • Account information, where applicable

  • Device, browser, and website usage information

  • Cookie-related information

The information collected depends on your interactions with our website and the services you use.

3. How Do We Use Your Information?

We may use personal information to:

  • Process and deliver orders

  • Handle payments, cancellations, returns, and refunds

  • Respond to customer questions

  • Operate and improve our website

  • Protect our website and help prevent fraud

  • Meet legal and regulatory requirements

  • Support analytics or marketing where applicable and permitted by law

We seek to use personal information only for appropriate purposes and in accordance with applicable law.

4. Why Are We Allowed to Process Your Information?

When the GDPR applies, we process personal information only where an appropriate legal basis applies. Depending on the situation, this may include:

  • Your consent: When you have agreed to a particular use of your information.

  • Your order or contract: When information is needed to process an order or provide a service you requested.

  • Legal requirements: When we need to comply with the law.

  • Legitimate interests: When processing is necessary for purposes such as website security, fraud prevention, or improving our services, where permitted by law.

The legal basis depends on the type of information and how it is used.

5. Your Privacy Rights

When the GDPR applies, you may have the right to:

  • Access: Ask for a copy of certain personal information we hold about you.

  • Correction: Ask us to correct inaccurate or incomplete information.

  • Deletion: Ask us to delete certain personal information where the law allows.

  • Restriction: Ask us to limit certain uses of your information.

  • Data portability: Request certain information in a commonly used electronic format where applicable.

  • Object: Object to certain types of processing, including some direct marketing.

  • Withdraw consent: Withdraw your consent when processing is based on consent.

  • Rights relating to automated decisions: Exercise applicable rights concerning certain automated decisions or profiling.

These rights depend on the circumstances and may be subject to legal conditions and exceptions.

6. How to Make a Privacy Request

If you want to exercise a privacy right or ask a question about your personal information, contact us at:

Email: client@derodarava.com

Please include your name, contact email, and a clear description of your request. If necessary, we may ask for additional information to verify your identity and protect your personal information.

Please do not send full payment card numbers, security codes, passwords, or other sensitive payment details.

We will respond to applicable requests within the time required by law.

7. Cookies and Your Choices

Our website may use cookies and similar technologies to support shopping cart functions, website security, preferences, analytics, and other features.

Where required by applicable law, we will request consent before using non-essential cookies or similar technologies.

You may be able to manage your cookie preferences through available website settings or your browser. Blocking certain cookies may affect website features.

For more information, please read our Cookies Policy.

8. Who May Receive Your Information?

Where necessary, we may share personal information with service providers that help us operate our business, such as:

  • Payment service providers

  • Shipping and delivery providers

  • Website hosting and technology providers

  • Customer service providers

  • Security and fraud prevention providers

  • Analytics or marketing providers, where applicable

We may also disclose information when required by law or when reasonably necessary to protect legal rights and security.

Where the GDPR applies, we seek to ensure that relevant service providers handle personal information in accordance with applicable data protection requirements.

9. International Data Transfers

Our website is operated from the United States. Depending on the services involved, personal information may be processed in the United States or other countries.

Where the GDPR applies to an international transfer, we will seek to use the transfer safeguards required by applicable law.

10. How Long Do We Keep Your Information?

We keep personal information for as long as reasonably necessary for the purposes for which it was collected, including processing orders, providing customer support, meeting legal obligations, and handling disputes.

The retention period depends on the type of information and the circumstances. When information is no longer needed, we may delete it, anonymize it, or otherwise handle it in accordance with applicable law.

11. How Do We Protect Your Information?

We use reasonable technical and organizational measures designed to protect personal information from unauthorized access, loss, misuse, or alteration.

However, no method of storing or transmitting information is completely secure, and we cannot guarantee absolute security.

12. Data Breaches

If a personal data breach occurs, we will assess the situation and take appropriate action under applicable law.

Where notification to a supervisory authority or affected individuals is legally required, we will follow the applicable requirements.

13. Automated Decisions and Children's Information

We do not represent that our website routinely makes automated decisions that have legal or similarly significant effects on customers.

Our website is a general furniture shopping website and is not specifically directed at children. If special legal requirements apply to children's information or automated decision-making, we will follow the requirements applicable to the circumstances.

14. Your Right to Complain

If the GDPR applies to you, you may have the right to complain to a data protection supervisory authority.

You can contact the relevant authority in your country or region for information about how to submit a complaint.

You may also contact us directly with privacy questions or concerns.

15. Other Privacy Policies

Please read our other policies for more information:

  • Privacy Policy: Explains how we collect, use, share, and protect personal information.

  • Cookies Policy: Explains how cookies work and how you may manage them.

These policies should be read together to understand our privacy practices.

16. Changes to This Policy

We may update this policy when our business practices, website features, or applicable legal requirements change. Any revised version will be posted on our website.

17. Contact Us

If you have questions about this GDPR Policy or wish to make a privacy request, please contact us.

Website: derodarava.com

Email: client@derodarava.com

Phone: +1 (636) 175-5952

Address:

492 Prospect Creek Dr #A
Ballwin, MO 63021
United States

Business Hours: Monday–Friday, 9:00 AM–6:00 PM Central Time

Shipping: United States nationwide