This Privacy Policy explains how ALREADY ON IT Limited, operating under the brand name VAELART ("we", "us", or "our"), collects, processes, and safeguards your personal data when you browse vaelart.com, make a purchase, or otherwise engage with our services (collectively, "the Services").

Throughout this document, "you" refers to any individual whose information we handle, including customers, site visitors, and account holders. By accessing or using the Services, you acknowledge that you have read and understood this policy. If you disagree with any part of it, please discontinue use of the Services immediately.

We may revise this Privacy Policy periodically to reflect changes in legal requirements, business operations, or data handling practices. Updates will be posted on this page with a revised effective date. Continued use of the Services after such changes constitutes acceptance of the updated policy.

The personal data we gather depends on how you interact with our platform. Broadly, this includes:

Information You Provide Directly

• Identity & contact details: name, email address, phone number, billing and shipping addresses.
• Transaction records: order history, payment confirmations, and delivery information.
• Account credentials: username, password, and security preferences.
• Customer service correspondence: messages, inquiries, and feedback you send to us.

Providing certain data is optional, though declining may prevent you from accessing specific features such as order tracking or account management.

Information Collected Automatically

When you visit our site, we may automatically record technical and usage data ("Usage Information") through cookies, pixels, and similar technologies. This may include your IP address, browser type, device identifiers, operating system, referring URLs, and interactions with our pages.

Information from Third Parties

We may receive data about you from trusted partners who assist in delivering our Services, including:

• Our e-commerce infrastructure provider, Shopify;
• Payment processors who handle billing and transaction verification;
• Analytics and advertising partners who help us understand audience behavior.

Any data obtained from external sources is treated in accordance with this Privacy Policy.

We process personal data for the following purposes:

Order Fulfillment

To process payments, confirm transactions, arrange shipping, handle returns and exchanges, and maintain your account. This processing is necessary to perform our contract with you.

Communication

To send order confirmations, shipping updates, account alerts, and respond to your inquiries. We may also send promotional communications if you have opted in. You may unsubscribe from marketing emails at any time using the link provided in each message.

Platform Improvement

To analyze site performance, diagnose technical issues, optimize user experience, and develop new features. This supports our legitimate interest in maintaining a reliable and effective service.

Security & Fraud Prevention

To detect and prevent unauthorized access, fraudulent transactions, and other malicious activity. We strongly advise against sharing your login credentials with anyone. If you suspect unauthorized account access, notify us immediately.

Legal Compliance

To meet applicable legal obligations, respond to lawful requests from authorities, and enforce our terms and policies.

Our site uses cookies and related technologies to enable core functionality, remember your preferences, analyze traffic patterns, and deliver relevant advertising.

You can manage cookie settings through your browser controls. Please note that disabling certain cookies may affect site performance or limit access to some features. For detailed information about Shopify's cookie practices, see Shopify's Cookie Policy.

Our platform recognizes the Global Privacy Control (GPC) signal. If your browser transmits this signal, we will honor it as a request to opt out of targeted advertising and data sharing for that device. We do not respond to other "Do Not Track" signals.

We do not sell or rent your personal data. We only disclose it under the following limited circumstances:

• Service providers: with vendors who perform functions on our behalf, such as payment processing, order fulfillment, cloud hosting, customer support, and analytics.
• Business partners: with marketing and advertising partners to deliver personalized content, subject to their own privacy terms.
• Legal requirements: when required by law, court order, or government request, or to protect our rights, property, or safety.
• Corporate transactions: in connection with a merger, acquisition, or sale of assets, where personal data may be transferred as part of the business.
• With your consent: when you explicitly authorize us to share information, such as for social media integrations or third-party shipping.

Our Services may allow you to post reviews, comments, or other public content. Any information you submit in public areas becomes accessible to others. We cannot control how third parties may use or distribute such information, and we are not responsible for its privacy or security once shared publicly.

Our site may contain links to external websites operated by third parties. We do not control these sites and are not responsible for their privacy practices, content, or security. We encourage you to review the privacy policies of any third-party sites you visit. The inclusion of a link does not imply endorsement of the site or its operator.

The Services are intended for adults aged 18 and over. We do not knowingly collect personal data from children. If you believe a minor has provided us with their information, please contact us immediately so we can delete it.

We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, or destruction. However, no online transmission or storage system is completely secure. We recommend avoiding the transmission of highly sensitive information through unsecured channels.

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce our agreements.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you.
• Correction: request that we update or correct inaccurate information.
• Deletion: request that we erase your personal data, subject to legal exceptions.
• Portability: request a copy of your data in a structured, machine-readable format.
• Restriction: request that we limit the processing of your data in certain circumstances.
• Objection: object to the processing of your data for direct marketing or legitimate interest purposes.
• Withdraw Consent: where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us using the details below. We may need to verify your identity before processing your request. We will not discriminate against you for exercising your privacy rights.

If you have concerns about how we handle your personal data, please reach out to us first. If you are not satisfied with our response, you may have the right to lodge a complaint with your local data protection authority.

Your personal data may be transferred to and processed in countries outside your place of residence, including by our service providers such as Shopify. When transferring data from the European Economic Area or the United Kingdom, we rely on appropriate safeguards such as Standard Contractual Clauses approved by the European Commission or equivalent mechanisms to ensure adequate protection.

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us: