Privacy Policy

This Privacy Policy describes how YORVETA, LLC handles personal information when customers browse yorveta.com, purchase headwear, communicate with us, submit website forms, request support, or otherwise interact with our online store. It also explains certain privacy rights and choices that may be available under applicable law.

By using yorveta.com or providing information through the website, you acknowledge the privacy practices described below. Where applicable law requires consent for a particular activity, consent will be requested before that processing takes place.

1. Website Operator and Platform

yorveta.com is operated by YORVETA, LLC as a self-hosted WordPress website using WooCommerce for online-store functionality.

WordPress provides the website content-management environment, while WooCommerce supports functionality such as product listings, customer accounts where available, shopping carts, checkout, order records, and store administration.

Because the store is self-hosted, YORVETA, LLC administers its website environment and is responsible for implementing reasonable measures to protect personal information processed through the store.

2. Information We Collect

Personal information may be collected when you purchase a product, create an account where available, contact us, submit a form, request support, initiate a return, ask for a refund, or otherwise provide information directly to us.

Depending on the interaction, this information may include your name, billing and shipping addresses, telephone number, email address, order details, products purchased, correspondence, return information, and other information reasonably required to provide our services.

Certain technical information may also be collected automatically, such as IP address, device type, browser, operating system, referral information, pages viewed, access times, approximate location data, and website interaction information.

3. Information Collected When You Place an Order

Completing a purchase through yorveta.com requires information necessary to administer the transaction, such as billing information, shipping details, contact information, selected products, quantities, order value, delivery selection, payment status, and order status.

This information can be used to confirm the purchase, prepare and dispatch the order, communicate shipping or tracking information, respond to questions, process returns and refunds, prevent fraud, provide support, and maintain appropriate business records.

Transaction information may also be reviewed where reasonably necessary to address payment disputes, delivery concerns, chargebacks, suspected fraud, refund requests, or other order-related issues.

4. Payment Information and Third-Party Payment Providers

Payment transactions are handled through authorized third-party providers including Stripe and PayPal. Depending on your selected payment method, sensitive payment information may be provided directly to or securely handled by the applicable provider.

YORVETA, LLC does not store customers' full payment card numbers, CVV or CVC security codes, PayPal passwords, online banking credentials, or similar sensitive payment authentication credentials on our own website servers.

We may receive and retain limited payment-related information such as transaction identifiers, payment status, payment-method category, order number, refund status, transaction amount, and relevant dates.

These limited records may be used for legitimate order administration, refunds, bookkeeping, fraud prevention, customer support, and transaction-dispute management.

5. Stripe and PayPal

Stripe and PayPal provide independent payment-processing services. Information needed to complete a payment may therefore be handled by Stripe, PayPal, banks, wallet services, card networks, acquiring institutions, issuing institutions, or other participants in the payment process.

Those organizations process information under their own privacy notices, contractual terms, security measures, and applicable financial regulations.

Where necessary for an order, refund, risk review, or payment dispute, we may receive information such as payment status, transaction identifiers, fraud indicators, refund records, or dispute information from the applicable provider.

6. How We Use Personal Information

We may use personal information to operate and secure yorveta.com, provide online shopping functionality, process orders, arrange delivery, communicate with customers, administer refunds and returns, maintain business records, respond to inquiries, and improve website functionality.

Information may also be used to identify or prevent unauthorized access, suspicious transactions, account misuse, fraudulent orders, security incidents, chargebacks, or other activity that may affect customers, our website, or our payment processes.

Personal information is not intentionally used for purposes materially incompatible with the reason it was collected unless applicable law permits or requires the additional processing.

7. Legal Bases for Processing

Where applicable privacy law requires us to identify a lawful basis, personal information may be processed under one or more recognized legal grounds.

These grounds may include performance of a contract, such as fulfilling an order; compliance with legal obligations; legitimate interests relating to store operations, fraud prevention, security, customer service, and dispute resolution; and consent where consent is required.

Where processing depends on consent, that consent may generally be withdrawn, subject to applicable legal limitations. Withdrawal does not invalidate processing that occurred lawfully before the withdrawal.

8. Shipping and Delivery Information

Information necessary to deliver an order may be shared with logistics companies, postal operators, fulfillment providers, shipping carriers, customs authorities, or other parties involved in transportation and delivery.

Such information may include the recipient's name, delivery address, telephone number, email address where necessary, order reference, parcel information, and other details reasonably required to complete delivery.

For international shipments, information may also need to be transmitted for customs declarations, import clearance, security screening, or other cross-border shipping procedures.

9. Returns, Refunds and Customer Support

When a customer contacts us about a return, refund, damaged hat, missing item, incorrect product, delivery problem, or another customer-service matter, we may collect information needed to investigate and respond.

This can include the order number, contact information, photographs, product details, shipping-label information, communications, carrier tracking information, return tracking, and refund records.

Where necessary to resolve the matter, relevant information may be shared with a carrier, fulfillment provider, payment service, or another service provider directly involved in the transaction.

10. Payment Disputes and Chargebacks

If a payment is disputed through Stripe, PayPal, a card issuer, bank, card network, or another payment provider, information reasonably relevant to that dispute may be used or disclosed.

Evidence may include the transaction date and value, transaction identifier, order confirmation, order contents, billing details, shipping address, customer correspondence, fulfillment information, tracking events, delivery confirmation, returns, and refunds.

Relevant information may be submitted to the organizations responsible for reviewing the dispute. We seek to limit such disclosures to information reasonably connected with validating the transaction, confirming fulfillment or refund activity, preventing fraud, or addressing the specific claim.

11. Data Security

We use reasonable administrative, technical, and organizational safeguards designed to reduce the risk of unauthorized access, alteration, loss, misuse, disclosure, or destruction of personal information.

Information transmitted between your browser and our website is protected using SSL/TLS encryption. Access to administrative areas is limited to persons or service providers with an appropriate operational need.

Depending on our configuration and service providers, security practices may also include authentication controls, limited administrative privileges, backups, website and plugin updates, malware monitoring, firewall protections, security logs, hosting safeguards, and vulnerability management.

12. Payment Security

Sensitive payment credentials are processed through specialized third-party payment systems rather than being retained directly by YORVETA, LLC.

Payment providers may use technologies and security standards including SSL/TLS encryption, tokenization, PCI-DSS compliant payment infrastructure, fraud monitoring, payment authentication, secure payment gateways, and 3D Secure authentication where appropriate.

Tokenization and similar technologies allow certain transactions to be processed without requiring our website to store the customer's complete payment-card credentials.

13. Protection of Stored Information

Information stored in our WordPress and WooCommerce environment is subject to reasonable access and security controls, and administrative access is restricted according to legitimate operational needs.

We take reasonable measures to maintain relevant WordPress, WooCommerce, hosting software, themes, plugins, and related website components and to apply suitable updates where available.

Additional safeguards may include backups, security monitoring, firewall tools, access logs, malware protections, login protections, and other measures intended to reduce unauthorized access.

However, no website, electronic storage system, or internet transmission method can be guaranteed to provide absolute security.

14. Cookies and Similar Technologies

yorveta.com may use cookies and similar technologies to keep shopping carts functioning, support checkout, maintain account sessions where available, remember preferences, operate website security, understand website performance, and provide core store functionality.

Certain cookies may be essential for WordPress, WooCommerce, payment, fraud-prevention, shopping-cart, account, checkout, and security functions. Other cookies may be used only where permitted or after consent where legally required.

Browser controls and any cookie-management tools provided through the website may allow you to manage some cookie categories. Disabling essential cookies can prevent checkout, cart, login, or other important site features from functioning correctly.

15. Service Providers and Data Sharing

We may disclose necessary personal information to providers that support our business operations, including hosting providers, WordPress and WooCommerce services, payment processors, shipping companies, logistics providers, security services, fraud-prevention providers, email services, analytics services, customer-support providers, and professional advisers.

Personal information is not disclosed to third parties merely so they can independently use it for unrelated purposes unless the disclosure has been authorized by you or is otherwise permitted or required by law.

Service providers are expected to handle information only to the extent needed to perform the services for which they are engaged and in accordance with relevant legal and contractual obligations.

16. Sale of Personal Information

We do not sell customers' complete payment credentials or use full card details for our own independent marketing activities.

Full card numbers and CVV codes processed through Stripe, PayPal, or other payment providers are not provided to us for storage in our own systems.

Where applicable privacy laws provide eligible individuals with specific rights relating to the sale, sharing, or targeted-advertising use of personal information, requests concerning those rights may be submitted to [email protected].

17. Data Retention

Personal information is retained only for periods reasonably necessary to support the purposes described in this Privacy Policy or to satisfy applicable legal requirements.

Order and transaction records may be retained for approximately one year or longer where reasonably necessary for taxation, accounting, legal compliance, refunds, returns, fraud prevention, payment disputes, chargebacks, warranty matters, or the establishment, exercise, or defense of legal claims.

Different data categories may be retained for different periods. Where information is no longer reasonably required, it may be deleted, anonymized, or securely disposed of, subject to applicable financial, legal, fraud-prevention, and dispute-resolution requirements.

18. European Union and European Economic Area – GDPR

Individuals located in the European Union or European Economic Area may have rights under the General Data Protection Regulation (GDPR).

Subject to applicable conditions and exceptions, these rights may include access to personal information, correction of inaccurate information, deletion, restriction of certain processing, objection to certain processing, and portability of eligible information.

Where processing relies on consent, consent may be withdrawn. Where legitimate interests form the legal basis, individuals may have a right to object in certain circumstances.

Privacy rights are not always absolute. We may, for example, need to retain certain order and transaction information where required for accounting, taxation, fraud prevention, chargebacks, dispute handling, legal claims, or another lawful obligation.

Requests concerning applicable GDPR rights may be sent to [email protected]. Reasonable verification information may be requested before a privacy request is completed.

19. International Data Transfers

Operating an international online store can require information to be processed in countries outside the customer's country of residence, particularly where international payment, hosting, security, logistics, shipping, or technology providers are used.

Where legally required, recognized transfer mechanisms or safeguards may be used, including contractual measures, adequacy mechanisms, or another lawful transfer method.

Payment information supplied to Stripe, PayPal, card networks, banks, wallet providers, or other financial organizations may also be processed using those providers' international systems and privacy practices.

20. Children's Privacy

yorveta.com is intended for persons who are legally able to purchase products through an online store. Our services are not intentionally directed toward young children, and we do not knowingly seek to collect children's personal information where such collection would be prohibited by applicable law.

If you believe that personal information relating to a child has been submitted without appropriate legal authorization, please contact [email protected] so that the circumstances can be reviewed.

21. Legal Requirements and Protection of Rights

Personal information may be disclosed where reasonably necessary to respond to applicable laws, court orders, subpoenas, lawful government requests, tax obligations, customs requirements, regulatory requirements, fraud investigations, or other binding legal processes.

Information may also be processed where reasonably necessary to protect the rights, property, security, and legitimate interests of YORVETA, LLC, customers, service providers, or other persons; investigate unauthorized transactions; enforce applicable website terms; prevent fraud; or establish, exercise, and defend legal claims.

Where reasonably possible, disclosures made for legal, fraud-prevention, security, or dispute-resolution purposes are limited to information relevant to the particular matter.

22. Privacy Requests, Policy Updates and Contact Information

Questions about this Privacy Policy, requests for information regarding our privacy practices, and eligible privacy-rights requests may be submitted to us using the contact information below.

This Privacy Policy may be updated when necessary to reflect changes to yorveta.com, our WordPress or WooCommerce environment, payment services, security measures, service providers, legal obligations, or business practices. Unless applicable law requires a different procedure, the revised version becomes effective when published on yorveta.com.

For privacy-related questions or requests, please contact us using the following information:

Company: YORVETA, LLC
Address: 120 N Eagle Creek Dr, Ste 440, Lexington, KY 40509, US
Email: [email protected]
Phone: +1 (859) 317-4430
Website: yorveta.com