Privacy Policy

1. What we collect

Information you give us:

• Your email address when you join our list or create an account, and your phone number if you choose to receive text messages.
• Your name, shipping address, billing address and order details when you place an order.
• Payment details, which go straight to our payment processor through Shopify's checkout. We never see or store your full card number.
• Anything you include in a message to us, a review or a form on the site.

Information we collect as you browse. We keep our own record of your visit: a random identifier stored in your browser, the pages and products you look at and for how long, what is in your cart, the site or campaign that brought you, your device and browser type, and the city and region you connect from, never a precise location. We do not keep your IP address in this record, only a code made from it with a secret key, used to tell visits from the same network apart and never to recover the address. If you are signed in, the record is linked to your account's email. It is deleted 90 days after your last visit; totals that identify no one are kept. Clearing your browser's site data starts a new, unlinked record.

Cookies and similar storage. varlisse.com uses its own cookies and browser storage for your cart, your sign-in, the fact that you joined the list and the email you joined with (kept for a year so your cart can carry it to Shopify's checkout), and an advertising choice you make in section 6. For 30 days we also keep the page you arrived on, the site that sent you and any campaign tags or ad click code in the link you followed, so we can tell which campaigns lead to orders, and a referral code and a record of the click for 7 days when you arrive on a partner's link so that partner can be credited for an order. The visit identifier above and a receipt for the current visit go with your cart, so an order can be linked to the visit it came from. Google sets cookies for Google Analytics and Google Ads (section 6), and Shopify's checkout sets its own under Shopify's privacy policy.

2. How we use it

• To take, confirm, ship and support your orders, and to answer you when you write to us.
• To run your account and keep you signed in.
• To send marketing emails if you joined our list, and marketing text messages only if you opted in to them (section 3).
• To understand how the shop is used and improve it, with our own visit record and with Google Analytics. Our visit record stays on our systems: it shows us which sites and campaigns bring visitors and orders, and we never give it to Google or any other advertising company or use it to show you ads.
• To advertise: to measure which of our ads lead to signups and orders, and to show our ads to people who have visited varlisse.com, through Google Ads (section 6).
• To detect fraud, enforce our terms and meet legal obligations such as tax records.

We do not sell personal information for money, and we do not sell or rent our email or text message lists, or give them to anyone for their own marketing. Under some US state laws, letting an advertising partner collect information on our site to show you ads elsewhere counts as selling or sharing personal information, or as targeted advertising. Section 6 explains how to opt out.

3. Email and text message marketing

Email. Joining our list means you agree to receive marketing emails from Varlisse. When you join on our signup form, we record the time, the page, the wording shown and the IP address and browser it came from, so we can prove it. Every marketing email carries an unsubscribe link, and you can also write to support@varlisse.com.

Text messages. We send marketing text messages only to a phone number whose owner ticked the text message box on our signup form, in their account or at checkout. Consent to texts is never a condition of any purchase. Message frequency varies. Message and data rates may apply. Reply STOP to any message to cancel, or HELP for help. We record each opt-in with the number, the time and the wording shown, and, for an opt-in on our signup form or in your account, the page and the IP address and browser it came from, so we can prove it and honour it.

Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. We do not sell, rent, loan, trade, lease or otherwise transfer for profit any phone numbers or customer information collected through the text message program to any third party. Information collected through the program is used only to send you those messages and to respond to you.

The full text message terms are in our Terms of Service at varlisse.com/policies/terms.

4. Who we share it with

We share personal information with companies that handle it for us, under contracts that limit what they may do with it, and with Google for analytics and advertising (section 6):

• Shopify, which runs our store, checkout and customer accounts, and the payment processors that take your payment.
• Shipping carriers and the shipping software that prints our labels.
• The providers that send our emails and text messages.
• The providers that host our site, our database and our support mailbox.
• Google, which provides Google Analytics and Google Ads (section 6).

If you arrive through a partner's link, we record that your order came through it so the partner can be credited. We also disclose information when the law requires it, to protect our rights or safety, or in a sale or reorganisation of the business, in which case this policy continues to apply.

The above excludes text messaging originator opt-in data and consent: apart from the service providers listed above that store it or send our text messages for us, this information will not be shared with any third parties, Google included (section 3).

5. Your choices and rights

• Marketing: unsubscribe from emails with the link in any email; cancel texts by replying STOP.
• Your information: write to support@varlisse.com and we will show you the personal information we hold about you, correct it or delete it, except what we must keep for orders, tax or legal reasons.
• Advertising cookies: section 6 explains how to turn them off, and how we treat a Global Privacy Control signal.
• Cookies: you can clear or block cookies in your browser; the cart and sign-in need theirs to work. Clearing this site's cookies also clears an advertising choice you made in section 6.
• California residents: you have the right to know what personal information we collect, use and disclose, to have it deleted or corrected, to opt out of its sale or sharing, and not to be discriminated against for exercising these rights. Through Google Ads on our site, we share personal information, such as cookie identifiers and the pages you visit, with Google for advertising across other sites (cross-context behavioural advertising); text message opt-in data and consent are never part of it. You can opt out as section 6 describes, and we treat a Global Privacy Control signal as that opt-out. We do not disclose personal information to third parties for their own direct marketing (California Civil Code section 1798.83). Requests go to support@varlisse.com.
• Residents of the European Economic Area, the United Kingdom and Switzerland: you have the right to access, correct, erase, restrict or object to our processing of your personal data, to receive a copy of it, and to complain to your data protection authority. We process your data to perform our contract with you, with your consent for marketing, and for our legitimate interest in running and improving the shop. Our own pages on varlisse.com do not load Google Analytics or Google Ads for visitors whose connection comes from those countries; at checkout, which Shopify runs, Shopify's privacy settings apply.

6. Analytics and advertising

We use Google Analytics to see how the site is used, and Google Ads to measure our advertising and to show our ads. On varlisse.com both load through Google Tag Manager. At checkout, which Shopify runs at checkout.varlisse.com, Shopify's Google & YouTube app loads Google's tags under Shopify's privacy settings. Vercel, which hosts varlisse.com, also counts page views and page speed for us (Vercel Web Analytics and Speed Insights), without cookies and without building a profile of you.

Both set cookies in your browser. Google Analytics receives the pages you view, how you reached the site, your device and browser, and whether you joined our list. Google Ads tells us which of our ads lead to signups and orders, and third-party vendors, including Google, use cookies to show our ads on other websites and apps to people who have visited varlisse.com. Google may collect information about your activity over time and across different websites; how it uses information from sites that use its services is explained at policies.google.com/technologies/partner-sites.

We do not give your name, email address or phone number to Google for analytics or advertising, or to any other advertising partner, and text message opt-in data and consent are never shared with them.

The switch below turns Google's advertising cookies off on varlisse.com in this browser, and stops adding this browser to the audiences we use to show our ads elsewhere; if it joined one before, it stays in it until that membership ends, and may see our ads until then. Google Analytics still counts visits, without advertising use, and Google Ads still receives a signal without cookies, which helps measure our advertising but does not add this browser to any audience. The choice is kept in a cookie in this browser: it does not follow you to another browser or device, and clearing this site's cookies removes it. It applies on varlisse.com; checkout runs on Shopify, under Shopify's privacy settings. If your browser sends a Global Privacy Control signal, we treat it as the same choice.

You can also limit Google's personalised ads at adssettings.google.com, opt out of other advertising companies' cookies at thenai.org/how-to-opt-out, and stop Google Analytics in your browser with Google's add-on at tools.google.com/dlpage/gaoptout. Browsers' Do Not Track setting has no common standard, so we do not respond to it; we do honour Global Privacy Control, as above.

7. How long we keep it

We keep order and account records for as long as you have an account or we need them for our records, tax and legal obligations, and marketing consent records for as long as we need to show that consent was given. Visit records are deleted 90 days after your last visit. Google Analytics keeps the details of visits for at most 14 months. Support messages are kept while the matter is open and for a while afterwards in case it comes back.

8. Security

We protect your information with access controls, encryption in transit and the safeguards of the providers above, and we keep payment details out of our own systems. No system is completely secure, so keep your sign-in code private and tell us at support@varlisse.com if you think your account has been misused.

9. Children

varlisse.com is for adults. You must be 18 or older to buy from us or to opt in to text messages, and we do not knowingly collect personal information from anyone under 13. If you believe a child has given us information, write to support@varlisse.com and we will delete it.

10. Other sites

The site may link to other websites and services, including social media. Their privacy practices are their own, and this policy does not cover them.

11. Changes to this policy

We may update this policy from time to time. The current version, with its effective date, is always at varlisse.com/policies/privacy. If a change matters to you, we will tell you by email or on the site.

12. Contact

Varlisse

Email: support@varlisse.com