Privacy Policy

VALFRÉ PRIVACY POLICY

Effective Date: September 24, 2026
Last Updated: September 24, 2026

Valfre LLC ("Valfré," "we," "us," or "our") respects your privacy.

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit Valfre.com, purchase products, create an account, apply for or use a wholesale account, communicate with us, interact with our social-media pages or advertising, subscribe to marketing communications, or otherwise interact with our websites and services (collectively, the "Services").

This Privacy Policy applies to both retail customers and Valfré wholesale/B2B customers.

By using the Services, you acknowledge the privacy practices described in this Policy.

1. PERSONAL INFORMATION WE COLLECT

The personal information we collect depends on how you interact with us.

A. Contact and Account Information

We may collect information including:

name;
email address;
telephone number;
billing address;
shipping address;
account login or authentication information;
communication preferences; and
other information you provide when creating or maintaining an account.

B. Order and Transaction Information

When you purchase from us, we may collect information regarding:

products purchased;
quantities;
prices;
discounts;
promotions;
order history;
returns;
refunds;
credits;
shipping and fulfillment;
delivery status;
payment status; and
communications concerning the transaction.

C. Payment Information

Payments may be processed through Shopify Payments or other payment providers.

Payment information may include information necessary to authorize, process, verify, refund, or reconcile a transaction.

Valfré generally does not receive or store complete payment card numbers when those credentials are securely processed or vaulted by Shopify or another payment provider.

For eligible wholesale/B2B customers, payment methods may be securely vaulted through Shopify's payment infrastructure for current and future B2B transactions in accordance with the customer's authorization and applicable wholesale terms.

D. Wholesale and Business Information

If you apply for or maintain a wholesale account, we may collect additional business information, including:

legal business name;
DBA or trade name;
business address;
retail locations;
website;
buyer and authorized-user information;
business telephone and email address;
tax identification information;
resale certificates;
tax-exemption documentation;
business verification information;
wholesale application information;
purchase history;
invoice and payment history;
credit/payment terms;
outstanding balances;
shipping information; and
communications relating to the wholesale relationship.

We may use account history and payment performance when deciding whether to grant, modify, maintain, suspend, or revoke wholesale payment terms or other B2B privileges.

E. Communications and Customer Service

When you communicate with us, we may collect the contents of those communications and information associated with them.

This may include:

customer-service inquiries;
wholesale inquiries;
emails;
returns or refund requests;
claims;
complaints;
reviews;
social-media messages; and
other communications.

F. Information Collected Automatically

When you use the Services, we and our providers may automatically collect information such as:

IP address;
approximate location derived from IP address;
browser type;
device type;
operating system;
device or advertising identifiers;
pages viewed;
clickstream information;
referring URLs;
search terms;
website interactions;
cart activity;
purchase activity;
date and time of visits;
cookie identifiers; and
similar usage or technical information.

We may collect this information through cookies, pixels, tags, SDKs, APIs, server logs, and similar technologies.

G. Marketing and Advertising Information

We may collect information concerning interactions with our emails, advertisements, website, social-media content, and marketing campaigns.

This may include whether you opened or clicked an email, viewed or interacted with an advertisement, visited a page, added products to a cart, or purchased after interacting with marketing content.

2. SOURCES OF PERSONAL INFORMATION

We may collect personal information:

directly from you;
automatically from your browser or device;
from Shopify and payment providers;
from fulfillment and shipping providers;
from marketing and advertising platforms;
from customer-service platforms;
from analytics providers;
from fraud-prevention and security providers;
from social-media platforms;
from wholesale or business representatives acting on behalf of a company; and
from other parties where permitted by law.

3. HOW WE USE PERSONAL INFORMATION

We may use personal information to:

operate and provide the Services;
process and fulfill orders;
process payments, refunds, credits, and chargebacks;
create and administer accounts;
manage wholesale relationships;
verify reseller and tax-exemption information;
determine eligibility for wholesale payment terms;
administer Net payment terms and collect amounts owed;
detect and prevent fraud;
protect accounts and systems;
communicate regarding orders and accounts;
provide customer service;
manage returns and disputes;
maintain business and transaction records;
perform accounting and tax functions;
measure website performance;
analyze customer behavior;
improve our products and Services;
personalize customer experiences;
measure marketing effectiveness;
provide advertising;
send marketing communications where permitted;
maintain security;
investigate security incidents;
enforce contracts and policies;
establish, exercise, or defend legal claims;
comply with legal obligations; and
carry out other purposes disclosed when information is collected.

4. SHOPIFY

Our ecommerce and B2B commerce services are powered in whole or in part by Shopify.

Shopify may process personal information in connection with ecommerce infrastructure, customer accounts, checkout, payments, fraud prevention, analytics, security, and other Shopify functionality.

Information processed through Shopify may include:

contact information;
account information;
orders and transaction information;
payment-related information;
shipping information;
device information;
network information; and
website interactions.

Shopify may process certain personal information on our behalf and may also process information for purposes described in Shopify's own privacy notices.

For more information about Shopify's privacy practices, please review Shopify's applicable privacy policies.

5. PAYMENT METHODS AND B2B VAULTING

Eligible wholesale customers may have the option or obligation to maintain a securely vaulted payment method through Shopify as provided in the Valfré Wholesale Terms & Conditions.

When a B2B customer vaults a payment method, Shopify or its payment provider securely maintains the underlying payment credentials.

Valfré may receive information such as payment-method type, expiration information, transaction status, authorization information, and a token or other identifier enabling an authorized transaction without Valfré receiving the complete payment credential.

Valfré may use an authorized vaulted payment method to collect amounts due in accordance with the applicable wholesale agreement and payment authorization.

6. HOW WE DISCLOSE PERSONAL INFORMATION

We may disclose personal information to companies that assist us in operating our business.

These categories may include:

ecommerce and website providers;
payment processors;
financial institutions;
warehousing and fulfillment providers;
shipping carriers;
freight and logistics providers;
customs and import/export service providers;
customer-service providers;
email and SMS providers;
analytics companies;
advertising platforms;
social-media platforms;
fraud-prevention services;
cybersecurity providers;
cloud and hosting providers;
technology providers;
accounting and financial providers;
insurers;
attorneys, accountants, consultants, and other professional advisers; and
government agencies or other parties where required or permitted by law.

We provide service providers with information reasonably necessary for them to perform services for us.

7. FULFILLMENT, LOGISTICS, AND SHIPPING PROVIDERS

To process, fulfill, transport, and deliver orders, we may provide fulfillment and logistics providers with information such as:

name;
shipping address;
telephone number;
email address;
order contents;
order number;
delivery instructions; and
other information reasonably necessary to fulfill or deliver an order.

Because Valfré uses third-party warehousing, logistics, and shipping providers, those providers may process customer personal information within their systems.

International shipments may require information to be disclosed to customs authorities, carriers, brokers, government agencies, or other parties involved in international transportation and importation.

8. MARKETING, ANALYTICS, AND ADVERTISING

We may use providers such as Google, Meta, TikTok, Omnisend, and similar services to operate marketing, analytics, advertising, and communications.

These providers may use cookies, pixels, APIs, tags, or similar technologies to process information regarding interactions with Valfré and other websites or services.

Depending on applicable law, certain advertising activity may constitute "sale," "sharing," cross-context behavioral advertising, or targeted advertising even when Valfré does not sell customer lists for money.

We provide applicable privacy choices as described below.

9. SALE, SHARING, AND TARGETED ADVERTISING

Valfré does not sell personal information for money in the conventional sense.

However, certain disclosures to advertising or analytics partners may be considered a "sale" or "sharing" of personal information or use for targeted advertising under some U.S. state privacy laws.

Where required, you may opt out of those activities by visiting:

valfre.com/pages/data-sharing-opt-out

or by using the privacy controls available through our website.

We recognize qualifying opt-out preference signals, including Global Privacy Control ("GPC"), where required by applicable law.

10. COOKIES AND SIMILAR TECHNOLOGIES

We may use cookies and similar technologies for:

essential website functionality;
shopping carts;
checkout;
account authentication;
fraud prevention;
performance measurement;
analytics;
personalization;
marketing; and
advertising.

Where required, we provide a cookie or privacy preference mechanism allowing you to control certain non-essential technologies.

Browser settings may also allow you to block or delete cookies, although doing so may affect functionality.

11. EMAIL AND SMS

If you subscribe to promotional email communications, you may unsubscribe using the unsubscribe link included in those messages.

If you participate in a Valfré SMS program, you may opt out using the instructions provided with the program, including replying STOP where applicable.

Opting out of marketing does not prevent us from sending transactional or service communications relating to orders, accounts, payments, security, or other non-promotional matters.

12. SENSITIVE PERSONAL INFORMATION

We do not use or disclose sensitive personal information for purposes of inferring characteristics about an individual except where permitted by law.

Certain business transactions may require information that may be treated as sensitive under applicable laws, such as financial information, tax-related documentation, authentication information, or government-issued identifiers contained in business verification records.

Where collected, such information is used for appropriate operational, verification, legal, security, financial, or transactional purposes.

13. DATA SECURITY

We maintain administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, acquisition, use, disclosure, loss, alteration, or destruction.

We also rely on third-party technology, ecommerce, payment, warehousing, fulfillment, logistics, shipping, marketing, and other providers that operate their own information systems and security programs.

No electronic system, storage technology, transmission method, or security practice can guarantee absolute security.

Accordingly, while we take reasonable measures to protect personal information, we cannot guarantee that unauthorized access, acquisition, disclosure, or other security events will never occur.

14. SECURITY INCIDENTS

If Valfré becomes aware of a security incident that may affect personal information, we may:

investigate the nature and scope of the incident;
work with relevant service providers, security professionals, insurers, attorneys, or forensic specialists;
take reasonable steps to contain and remediate the incident;
evaluate whether personal information was affected;
preserve relevant records and evidence;
implement appropriate corrective measures; and
notify affected individuals, regulators, law-enforcement agencies, or other parties where required by applicable law.

The involvement of a third-party service provider in a security incident does not alter any notification obligations Valfré may have under applicable law.

15. DATA RETENTION

We retain personal information for as long as reasonably necessary for the purposes for which it was collected and for legitimate legal and business purposes.

Relevant considerations may include:

customer account administration;
wholesale account administration;
transactions;
payments;
tax and accounting requirements;
resale documentation;
fraud prevention;
chargebacks;
contracts;
customer service;
product history;
warranty or claim records;
security investigations;
legal disputes;
litigation holds; and
regulatory requirements.

When information is no longer reasonably necessary, we may delete, anonymize, aggregate, or otherwise dispose of it in accordance with our practices and applicable law.

Information may also remain in backups or systems maintained by service providers for periods consistent with their legal obligations and retention practices.

16. INTERNATIONAL USERS AND DATA TRANSFERS

Valfré is based in the United States.

Personal information may be processed or stored in the United States and other countries where we or our providers operate.

Those countries may have privacy laws different from the laws of your country.

Where required, we use appropriate safeguards for international transfers.

For individuals in the European Economic Area, United Kingdom, Switzerland, or other jurisdictions requiring a lawful basis for processing, applicable bases may include:

performance of a contract;
compliance with a legal obligation;
legitimate interests;
consent; and
other lawful bases permitted under applicable law.

17. PRIVACY RIGHTS

Depending on your jurisdiction, you may have rights concerning your personal information.

Those rights may include:

access;
confirmation of processing;
correction;
deletion;
data portability;
restriction of processing;
objection to certain processing;
withdrawal of consent;
opt-out of sale;
opt-out of sharing;
opt-out of targeted advertising;
limiting certain uses of sensitive personal information; and
appeal of certain privacy-request decisions.

These rights may be subject to legal exceptions.

We may need to verify your identity before fulfilling a request.

Where permitted by law, an authorized agent may submit a request on your behalf subject to verification requirements.

We will not unlawfully discriminate against you for exercising an applicable privacy right.

18. CALIFORNIA PRIVACY RIGHTS

California residents may have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA").

Depending on applicability and subject to statutory exceptions, those rights may include requesting:

the categories of personal information collected;
categories of sources;
purposes for collection or use;
categories of third parties receiving information;
specific pieces of personal information maintained about you;
correction of inaccurate information;
deletion of qualifying information;
portability;
opt-out of sale or sharing; and
limitation of certain uses or disclosures of sensitive personal information.

Valfré does not discriminate against consumers for exercising CCPA rights.

Where required by California law, we recognize qualifying Global Privacy Control signals as requests to opt out of sale or sharing.

19. CATEGORIES OF INFORMATION FOR U.S. STATE PRIVACY DISCLOSURES

Depending on how you interact with us, we may collect categories of personal information such as:

identifiers and contact information;
commercial and transaction information;
internet or electronic network activity;
approximate geolocation information;
professional or business information associated with wholesale accounts;
financial and payment-related information;
inferences relating to purchasing or marketing preferences; and
other information you voluntarily provide.

We collect and use these categories for the operational, transactional, security, legal, analytics, marketing, and other purposes described in this Policy.

We may disclose applicable categories to the provider categories identified in this Policy.

20. NOTICE AT COLLECTION

At or before points where required personal information is collected, Valfré may provide a shorter Notice at Collection describing the categories of information collected and applicable purposes.

This Privacy Policy provides additional detail concerning our privacy practices.

21. PRIVACY REQUESTS

To exercise an applicable privacy right, contact:

cs@valfre.com

Please use the subject line:

Privacy Request

For applicable advertising opt-outs, you may also use:

valfre.com/pages/data-sharing-opt-out

We may request information reasonably necessary to verify your identity, residency, or authority to submit the request.

Where applicable law provides a right to appeal our decision regarding a privacy request, you may email:

cs@valfre.com

with the subject line:

Privacy Appeal

22. CHILDREN'S PRIVACY

The Services are not directed to children under 13 or to children below a higher minimum age where applicable local law requires parental authorization.

We do not knowingly collect personal information from children in violation of applicable law.

If you believe a child has improperly provided personal information to us, please contact us.

23. LEGAL AND SAFETY DISCLOSURES

We may disclose personal information where we reasonably believe disclosure is necessary to:

comply with law;
respond to a subpoena, court order, warrant, or other legal process;
respond to lawful governmental requests;
investigate fraud;
investigate security incidents;
protect the safety, rights, or property of Valfré or others;
enforce agreements;
prevent unlawful activity; or
establish, exercise, or defend legal claims.

24. BUSINESS TRANSFERS

Personal information may be disclosed or transferred in connection with an actual or proposed merger, acquisition, financing, restructuring, investment, sale of assets, bankruptcy, or similar corporate transaction, subject to applicable law.

25. THIRD-PARTY WEBSITES AND SERVICES

Our Services may contain links to or integrations with independent third parties.

Valfré does not control the privacy practices of independent third parties.

Information provided directly to a third party is governed by that party's privacy practices.

26. CHANGES TO THIS PRIVACY POLICY

We may periodically update this Privacy Policy to reflect changes in:

our Services;
technology;
business practices;
service providers;
legal requirements; or
other circumstances.

We will update the "Last Updated" date when changes are made.

Where applicable law requires additional notice or consent for a material change, we will provide such notice or seek such consent.

27. CONTACT US

Questions or requests concerning privacy may be directed to:

Valfre LLC
Sheridan, Wyoming, USA
Email: cs@valfre.com
Website: valfre.com

Discover

Country/region