PRIVACY POLICY – VOLLARA SHOP

Last updated: October 24, 2026

VOLLARA SHOP (“we”, “us”, or “our”) respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, disclose, store and protect personal information when you visit our website, https://vollara.shop, purchase our products or communicate with us.

We process personal data in accordance with applicable data protection legislation, including the European Union General Data Protection Regulation (EU) 2016/679 (“GDPR”), the Irish Data Protection Act 2018 and applicable Irish electronic privacy regulations.

1. WHO WE ARE

VOLLARA SHOP is an online retail business based in Ireland, offering natural crystals, gemstones, jewellery, sacred geometry items and spiritual lifestyle accessories.

For data protection enquiries, you may contact us using the following details:

Business name: VOLLARA SHOP
Website: https://vollara.shop
Email: contact@vollara.shop
Address: 39 Cusack View, Cloughleigh Road, Ennis, Co. Clare, V95 PR60, Ireland.

VOLLARA SHOP is responsible for the personal data it processes as a data controller, where applicable. Certain service providers, including Shopify, may also process personal information in accordance with their own legal responsibilities.

2. PERSONAL INFORMATION WE COLLECT

Depending on how you interact with our website, we may collect the following categories of personal information.

Information you provide directly:

• Full name.

• Email address.

• Telephone number.

• Billing and shipping addresses.

• Order details and purchase history.

• Customer service messages and enquiries.

• Account information, where customer accounts are enabled.

• Marketing preferences and consent choices.

Payment information:

Payments are processed through payment service providers available at checkout. We receive the information necessary to confirm payments, process orders, manage refunds and prevent fraud.

We do not ordinarily receive or store complete payment card numbers ourselves.

Website and device information:

When you visit our website, Shopify and other enabled technologies may process:

• IP address.

• Browser and device information.

• Operating system.

• Approximate geographic location derived from technical information.

• Pages visited and interactions with our website.

• Referral information.

• Cookie identifiers and similar technical data.

The information collected depends on the technologies and services enabled on our website and your applicable privacy choices.

3. HOW WE USE PERSONAL INFORMATION

We process personal information for the following purposes:

Order fulfilment: To process purchases, confirm payments, arrange deliveries, manage returns and refunds, and communicate order updates.

Customer support: To respond to enquiries, resolve issues and provide assistance.

Security and fraud prevention: To protect our customers, website and business against fraudulent transactions, misuse and security incidents.

Legal compliance: To maintain necessary records and meet applicable tax, accounting, consumer protection and other legal obligations.

Website improvement: To maintain website functionality, diagnose technical issues and understand how customers interact with our store.

Marketing and communications: To send promotional communications where permitted by applicable law and in accordance with your preferences.

Advertising and analytics: Where applicable, and subject to required consent, to measure website performance and the effectiveness of advertising campaigns.

4. LEGAL BASES FOR PROCESSING

Where the GDPR applies, we rely on the following legal bases, depending on the specific processing activity:

Performance of a contract – Article 6(1)(b):

To process orders, deliver purchased products, handle contractual returns and provide services requested by customers.

Legal obligations – Article 6(1)(c):

To comply with applicable tax, accounting, consumer protection and other legal requirements.

Legitimate interests – Article 6(1)(f):

To protect our website, prevent fraud, maintain security, respond to appropriate business enquiries and improve our services, where those interests are not overridden by individuals' rights and freedoms.

Consent – Article 6(1)(a):

Where required, for optional marketing communications, non-essential cookies, advertising technologies and certain analytics activities.

You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

5. COOKIES AND SIMILAR TECHNOLOGIES

Our website uses cookies and similar technologies to support online shopping and website functionality.

These technologies may include:

• Strictly necessary cookies: Required for essential functions such as shopping carts, checkout, security and session management.

• Analytics cookies: Used to understand website traffic and performance.

• Functional cookies: Used to remember certain preferences and improve website functionality.

• Advertising cookies: Used, where enabled, to measure advertising effectiveness and support relevant marketing.

Non-essential cookies and similar tracking technologies requiring consent will only be used after valid consent has been obtained, in accordance with applicable law.

Customers may manage their preferences through the cookie consent tools made available on our website, where applicable.

You may also control certain cookies through your browser settings. Disabling essential cookies may affect website functionality.

6. SHARING PERSONAL INFORMATION

We may share personal information with trusted service providers where necessary for legitimate business operations.

These may include:

Shopify: Our e-commerce platform, which provides online store infrastructure, checkout functionality and related services.

Shopify's privacy information is available at: https://www.shopify.com/legal/privacy

Payment service providers: To process payments, refunds and transaction security checks.

Shipping and fulfilment partners: To prepare, dispatch, track and deliver customer orders.

Suppliers and fulfilment partners: Where necessary to fulfil orders, including orders shipped directly by third-party suppliers.

Technology and support providers: To maintain website functionality, security and customer service.

Analytics and advertising providers: Where such services are enabled and the necessary legal requirements, including consent requirements, are satisfied.

We may also disclose personal information where required by law, a valid legal process or an applicable regulatory obligation.

We do not disclose personal information to unrelated parties for their independent marketing purposes without an appropriate legal basis.

7. INTERNATIONAL DATA TRANSFERS

Some service providers, technology partners or fulfilment partners may operate outside the European Economic Area (EEA).

As a result, personal information may be processed or accessed in countries outside the EEA.

Where the GDPR applies, such transfers must be supported by an appropriate legal mechanism, such as:

• An applicable European Commission adequacy decision.

• Standard Contractual Clauses approved by the European Commission, together with supplementary measures where necessary.

• Another lawful transfer mechanism permitted under the GDPR.

We seek to use service providers that offer appropriate contractual, technical and organisational data protection safeguards.

8. DATA RETENTION

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, subject to applicable legal requirements.

Retention periods depend on the type of information and the reason for processing.

For example:

• Order and transaction records may be retained to comply with tax, accounting and consumer protection obligations.

• Customer service communications may be retained for as long as necessary to resolve enquiries and related disputes.

• Marketing information may be retained until consent is withdrawn, an objection is received or the information is no longer required.

• Technical information and cookie data are retained according to the relevant service settings and applicable retention rules.

When personal information is no longer required, it will be deleted, anonymised or otherwise handled securely, unless continued retention is legally necessary.

9. YOUR RIGHTS UNDER THE GDPR

If the GDPR applies to your personal information, you may have the following rights, subject to applicable conditions and exceptions:

• Right of access: Request information about the personal data we hold about you.

• Right to rectification: Request correction of inaccurate or incomplete information.

• Right to erasure: Request deletion of personal data where legally applicable.

• Right to restriction: Request limitations on certain processing activities.

• Right to data portability: Receive eligible personal data in a structured, commonly used and machine-readable format.

• Right to object: Object to certain processing activities, including processing for direct marketing.

• Right to withdraw consent: Withdraw previously given consent at any time.

• Rights concerning automated decisions: Exercise applicable protections relating to qualifying solely automated decisions, including profiling.

To exercise your rights, please contact:

contact@vollara.shop

We will respond within the time limits required by applicable data protection legislation, generally within one month, subject to permitted extensions.

We may request reasonable information to verify your identity before processing certain requests.

You also have the right to lodge a complaint with a competent data protection supervisory authority.

In Ireland, the supervisory authority is:

Data Protection Commission (DPC)
Website: https://www.dataprotection.ie

10. MARKETING COMMUNICATIONS

We may send promotional emails or other marketing communications where permitted by applicable law.

Where consent is required, we will obtain it before sending such communications.

You can unsubscribe from marketing emails by using the unsubscribe link included in the message or by contacting us directly.

Opting out of promotional communications does not prevent us from sending necessary transactional messages, such as order confirmations, delivery updates or customer service responses.

11. DATA SECURITY

We take reasonable technical and organisational measures to protect personal information against unauthorised access, accidental loss, misuse, alteration and disclosure.

Our online store operates through Shopify, which provides security features for its e-commerce infrastructure.

However, no method of electronic transmission or storage can be guaranteed to be completely secure.

12. CHILDREN'S PRIVACY

Our website is intended for a general adult shopping audience and is not specifically directed at children.

We do not knowingly seek to collect personal information from children for independent marketing purposes.

Where consent is relied upon for an information society service offered directly to a child in Ireland, the applicable GDPR and Irish legal requirements will be respected.

If you believe that a child has provided personal information inappropriately, please contact us.

13. THIRD-PARTY WEBSITES

Our website may contain links to third-party websites or services.

We are not responsible for the privacy practices of independently operated third-party websites.

We encourage visitors to review the privacy policies of any external websites they access.

14. AUTOMATED PROCESSING AND FRAUD PREVENTION

Our e-commerce and payment service providers may use automated systems to identify potentially fraudulent transactions, maintain security and assess transaction risks.

Where processing constitutes solely automated decision-making with legal or similarly significant effects under Article 22 GDPR, applicable safeguards and individual rights will be respected.

Further information about relevant processing may be requested using our contact details.

15. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy periodically to reflect changes in our business operations, technology, legal requirements or data protection practices.

The latest version will be published on this page with an updated revision date.

Where legally required, we will provide additional notice of material changes.

16. CONTACT US

For questions, requests or concerns regarding this Privacy Policy or the handling of personal information, please contact:

VOLLARA SHOP

Email: contact@vollara.shop
Website: https://vollara.shop

Postal address:
39 Cusack View
Cloughleigh Road
Ennis, Co. Clare
V95 PR60
Ireland

We are committed to handling personal information responsibly and respecting the privacy rights of our customers.