PRIVACY POLICY – VOLLARA SHOP

Last updated: October 24, 2026

At VOLLARA SHOP, we respect your privacy and are committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store, share and protect personal data when you visit our website, contact us or purchase products from our online store.

We process personal information in accordance with applicable Irish and European Union data protection legislation, including the General Data Protection Regulation (GDPR).

1. WHO WE ARE

VOLLARA SHOP is an independent online store based in Ennis, County Clare, Ireland.

Our collections include natural crystals, gemstones, sacred geometry, spiritual symbols, jewellery and meaningful decorative gifts inspired by nature and spiritual traditions.

Website: https://vollara.shop

DATA CONTROLLER

Trading Name: VOLLARA SHOP

Owner and Data Controller: Rosangela Gardina de Souza

Business Contact Address:

39 Cusack View
Cloughleigh Road
Ennis, Co. Clare
V95 PR60
Ireland

Email: contact@vollara.shop

Phone: +353 87 001 9846

2. PERSONAL DATA WE COLLECT

Depending on how you interact with our website, we may collect:

• Full name.

• Email address.

• Telephone number.

• Billing and shipping addresses.

• Order details and purchase history.

• Transaction and payment-related information.

• IP address and approximate location derived from technical information.

• Browser, device and website interaction information.

• Customer service enquiries and communications.

• Marketing preferences and consent records, where applicable.

We may also collect information through cookies and similar technologies, subject to applicable legal requirements.

3. HOW WE USE YOUR PERSONAL DATA

We may use personal information to:

• Process and fulfil customer orders.

• Arrange shipping and delivery.

• Process returns, cancellations and refunds.

• Communicate order confirmations and delivery updates.

• Provide customer support.

• Maintain and improve our website.

• Protect against fraud and unauthorised transactions.

• Comply with legal, accounting and regulatory obligations.

• Analyse website performance, where permitted.

• Send marketing communications where consent has been provided or another lawful basis applies.

• Manage customer privacy requests.

4. LEGAL BASES FOR PROCESSING UNDER GDPR

Where the GDPR applies, we process personal information using an appropriate legal basis.

Performance of a Contract: Processing necessary to complete purchases, fulfil orders, arrange deliveries and provide related customer services.

Legal Obligations: Processing necessary to comply with applicable accounting, tax, consumer protection and other legal requirements.

Legitimate Interests: Processing necessary for legitimate business purposes, such as fraud prevention, security and certain operational improvements, provided these interests are not overridden by individuals' rights.

Consent: Processing based on consent where required, including certain marketing activities and non-essential cookies.

Where processing is based on consent, you may withdraw that consent at any time.

5. COOKIES AND TRACKING TECHNOLOGIES

Our website may use cookies and similar technologies for:

• Essential website functions.

• Shopping cart and checkout functionality.

• Remembering customer preferences.

• Website analytics and performance.

• Improving the shopping experience.

• Advertising and marketing activities, where permitted.

Where required by applicable law, non-essential cookies and tracking technologies are used in accordance with the choices made through our cookie consent tools.

You may also manage certain cookies through your browser settings.

For additional information, please refer to our Your Privacy Choices page.

6. SHARING PERSONAL INFORMATION

We may share personal information with third-party service providers where necessary to operate our online store.

These may include:

• Shopify: Our e-commerce platform and website hosting provider.

• Payment Providers: To process payments securely.

• Shipping and Logistics Providers: To arrange delivery and tracking.

• Suppliers and Fulfilment Partners: To prepare and dispatch customer orders.

• Technology and Analytics Providers: To support website functionality and performance.

• Marketing Service Providers: Where permitted by applicable law.

• Professional Advisers and Public Authorities: Where necessary or legally required.

Certain products may be shipped directly from international suppliers or fulfilment partners.

For this purpose, relevant order information, including customer names, delivery addresses, contact details and purchased items, may be shared with the partners responsible for fulfilling the order.

We do not sell customers' personal information in exchange for money. Certain privacy laws may define the sale or sharing of personal information more broadly, including some advertising activities.

7. PAYMENT INFORMATION

Payments are processed through payment providers available on our Shopify store.

VOLLARA SHOP does not directly store complete payment card numbers or card security codes.

Payment providers process payment information according to their own applicable security and privacy requirements.

8. INTERNATIONAL DATA TRANSFERS

Because we use international technology services, suppliers and fulfilment partners, personal information may be processed or transferred outside Ireland or the European Economic Area (EEA).

Where required by applicable data protection law, international transfers must be supported by an appropriate legal mechanism, such as an adequacy decision, Standard Contractual Clauses or another legally recognised safeguard.

Customers may contact us for further information about applicable transfer safeguards.

9. DATA RETENTION

We retain personal information only for as long as necessary for the purposes for which it was collected or as required by applicable law.

These purposes may include:

• Completing purchases and deliveries.

• Providing customer support.

• Managing returns and refunds.

• Maintaining business and transaction records.

• Meeting accounting and tax obligations.

• Preventing fraud.

• Resolving disputes and legal claims.

Retention periods may vary depending on the type of information and applicable legal requirements.

When personal information is no longer required, it will be deleted or anonymised where appropriate.

10. YOUR DATA PROTECTION RIGHTS

Where the GDPR applies, you may have the right to:

• Access your personal information.

• Request correction of inaccurate or incomplete information.

• Request deletion in certain circumstances.

• Restrict certain processing activities.

• Object to certain processing activities.

• Request data portability where applicable.

• Withdraw consent where processing is based on consent.

• Object to direct marketing.

• Exercise applicable rights concerning certain automated decisions.

These rights may be subject to legal conditions and exceptions.

To exercise your rights, please contact:

Email: contact@vollara.shop

Subject: Privacy Rights Request

We may request information reasonably necessary to verify your identity.

We generally respond to GDPR requests within one month, subject to extensions permitted by law.

11. MARKETING COMMUNICATIONS

Where permitted by applicable law, we may send marketing communications about our products, collections, promotions and special offers.

You can unsubscribe from marketing emails at any time by using the unsubscribe link included in the message or contacting us.

Withdrawing marketing consent does not affect essential communications relating to existing orders.

12. CHILDREN'S PRIVACY

Our online store is intended for customers who are legally able to make purchases or who have appropriate parental or guardian authorisation.

We do not knowingly collect personal information from children in circumstances where parental or guardian consent is legally required without an appropriate legal basis.

If you believe that a child's personal information has been collected improperly, please contact us.

13. DATA SECURITY

We use reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse or disclosure.

Our website also benefits from security features provided by Shopify and other service providers.

However, no electronic transmission or storage system can be guaranteed to be completely secure.

14. THIRD-PARTY WEBSITES

Our website may contain links to external websites or services.

We are not responsible for the privacy practices of independently operated third-party websites.

We encourage visitors to review the privacy policies of those websites before providing personal information.

15. YOUR RIGHT TO LODGE A COMPLAINT

If you believe that your personal information has been processed in violation of applicable data protection legislation, you have the right to lodge a complaint with a competent supervisory authority.

In Ireland, the supervisory authority is:

Data Protection Commission (DPC)

Website: https://www.dataprotection.ie

Depending on your circumstances, you may also be entitled to contact another competent EU or EEA supervisory authority.

16. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy to reflect changes in our business activities, technologies, legal requirements or data processing practices.

Any updated version will be published on our website with a revised date.

17. CONTACT INFORMATION

For questions about this Privacy Policy or the processing of your personal information, please contact:

VOLLARA SHOP

Owner: Rosangela Gardina de Souza

Business Contact Address:

39 Cusack View
Cloughleigh Road
Ennis, Co. Clare
V95 PR60
Ireland

Email: contact@vollara.shop

Phone: +353 87 001 9846

Website: https://vollara.shop

Nothing in this Privacy Policy limits your statutory rights under applicable data protection legislation.