Privacy policy
1. Introduction
Yuloraestel (“we,” “our,” or “us”) respects your privacy and is committed to protecting the personal information you provide when visiting https://yuloraestel.com, browsing our products, placing an order, contacting customer service, or otherwise interacting with our website.
This Privacy Policy explains how personal information may be collected, used, disclosed, stored, and protected in connection with our online furniture and home decor business.
Our current shipping market is the United States. The privacy laws applicable to your personal information depend on your location, the nature of our business activities, and the relevant legal requirements. Certain U.S. federal and state privacy laws may apply. The European Union General Data Protection Regulation (GDPR) may also apply when its territorial and material requirements are met.
We process personal information in accordance with applicable law. Where a mandatory legal requirement provides greater protection or additional rights, that requirement takes precedence over any inconsistent provision of this policy.
2. Personal Information We Collect
The personal information we collect depends on how you use our website and interact with our services.
Information You Provide
When you place an order, contact us, or submit a request, you may provide information such as:
- Contact details, including your name, email address, telephone number, billing address, and shipping address.
- Order details, including purchased products, order numbers, transaction amounts, order dates, and delivery information.
- Payment-related information, including transaction references, payment status, and information needed to process or reconcile payments.
- Customer service communications, including questions, complaints, return requests, refund requests, and other correspondence.
- Supporting materials, such as photographs or documents submitted to help resolve a damaged product, incorrect shipment, or other order-related issue.
Payment card details and other sensitive payment information may be processed directly by the payment provider used for your transaction. The information handled by each provider depends on the payment method and its technical configuration.
Please avoid sending unnecessary sensitive personal information through ordinary email.
Account Information
If account registration or customer login features are available, we may collect information needed to create and manage your account, such as your name, email address, login credentials, and account preferences.
Automatically Collected Information
When you visit our website, our website infrastructure and enabled technologies may collect technical and usage information, including:
- IP address and approximate location inferred from the IP address.
- Browser type, operating system, device type, and technical identifiers.
- Pages visited, links clicked, referral information, and access timestamps.
- Website performance data, error reports, and security logs.
- Interactions with product pages, shopping cart features, and checkout pages.
The specific information collected depends on the website functions and technologies in use.
Information from Third Parties
We may receive information from service providers involved in processing transactions or supporting our business. Depending on the services used, this may include payment confirmations, transaction references, delivery updates, fraud-prevention information, and customer service records.
We handle information received from third parties in accordance with applicable law and the purposes for which it was provided.
3. Cookies and Similar Technologies
Cookies and similar technologies may be used to support website functionality, remember preferences, analyze website usage, improve security, and support advertising activities where applicable.
Cookies are small data files stored on your device. Similar technologies may include pixels, local storage, software development tools, and other technologies that recognize a browser or device or collect information about website interactions.
Types of Cookies
Strictly necessary cookies may support shopping cart functionality, checkout, session management, website security, fraud prevention, and privacy preferences.
Functional cookies may remember settings or preferences to provide a more consistent browsing experience.
Analytics cookies may help us understand how visitors use our website, which pages they visit, and whether technical issues occur.
Advertising cookies and similar technologies may be used, where enabled, to measure advertising performance, understand interactions with advertisements, or support personalized advertising.
The specific cookies, providers, purposes, and retention periods depend on the technologies used on our website.
Cookie Choices and Consent
Where applicable law requires consent before non-essential cookies or similar technologies are used, we will obtain the required consent before initiating the relevant processing.
Where a cookie preference mechanism is provided, you may use it to manage your choices concerning the available categories of technologies. Where required by law, you will be able to reject non-essential technologies and withdraw consent without unnecessary difficulty.
You may also manage or delete cookies through your browser settings. Blocking certain cookies may affect shopping cart functionality, checkout, or other website features.
Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal. It affects future processing that relies on that consent, subject to applicable law.
4. How We Use Personal Information
We may use personal information for the following purposes, where relevant and permitted by law.
Order Processing and Fulfillment
We use relevant contact, order, payment, and delivery information to process purchases, confirm transactions, arrange shipment, provide order updates, and maintain transaction records.
Customer Service
We may use your contact details, order information, and correspondence to respond to questions, investigate reported product issues, process eligible returns and refunds, and communicate the status of your requests.
Website Operation and Improvement
Technical and usage information may be used to maintain website functionality, troubleshoot errors, improve navigation, monitor performance, and understand how visitors interact with our products and services.
Where analytics or other non-essential tracking requires consent, the relevant processing will be subject to applicable consent requirements.
Security and Fraud Prevention
We may process relevant information to protect our website, detect suspicious transactions, prevent fraud, investigate abuse, and safeguard our customers, business operations, and legal interests.
Marketing and Advertising
Where permitted by law and applicable preferences, we may use personal information to send promotional communications, measure advertising performance, or support relevant advertising activities.
Completing a purchase does not, by itself, constitute consent to receive promotional emails where separate consent is legally required. You may opt out of marketing communications as described in this policy.
Legal and Administrative Purposes
We may process personal information to comply with legal obligations, maintain required records, respond to lawful requests, resolve disputes, and establish, exercise, or defend legal claims.
We seek to limit personal information processing to what is reasonably relevant to the applicable purpose.
5. How We Share Personal Information
We may disclose personal information to third parties where reasonably necessary for the purposes described in this policy and permitted by applicable law.
Service Providers
Depending on the services used to operate our business, recipients may include:
- Website hosting and technology providers that support website operation, maintenance, and security.
- Payment processors that handle transactions, payment confirmations, and payment-related inquiries.
- Shipping and logistics providers that deliver orders and provide tracking information.
- Customer service and communications providers that help manage inquiries and transaction-related messages.
- Analytics providers that measure website usage and performance, where enabled.
- Advertising providers that support advertising measurement or delivery, where enabled.
- Security and fraud-prevention providers that help protect transactions and website systems.
The information disclosed to a provider depends on its role and the services it performs. Where appropriate, service providers are subject to contractual and other safeguards consistent with applicable law.
Legal Requirements and Protection of Rights
We may disclose personal information where reasonably necessary to comply with applicable law, respond to valid legal process, protect the rights or safety of individuals, investigate suspected fraud, or establish, exercise, or defend legal claims.
Business Transactions
If a merger, acquisition, restructuring, asset transfer, or similar business transaction occurs, personal information may be disclosed or transferred to the extent permitted by law and reasonably necessary for the transaction.
Any continued use or transfer of personal information will remain subject to applicable legal requirements.
Sale, Sharing, and Targeted Advertising
Certain U.S. privacy laws define “sale,” “sharing,” and “targeted advertising” broadly. Whether an activity falls within these definitions depends on the information involved, the parties receiving it, the contractual arrangements, and the applicable law.
Where applicable law grants you the right to opt out of a sale, sharing, targeted advertising, or another regulated activity, we will provide the required choices and honor valid requests.
We do not use customer contact information in ways prohibited by applicable law, and we do not use customers’ personal information or images in advertisements without the consent required by law.
6. Data Storage, Retention, and Security
Storage and Access
Personal information may be stored or processed through our website infrastructure and the systems of service providers supporting our business.
Access to personal information should be limited to authorized individuals and providers who need the information for legitimate business, operational, security, or legal purposes.
Retention of Personal Information
We retain personal information for as long as reasonably necessary to fulfill the purposes for which it was collected, unless a longer period is required or permitted by applicable law.
Retention periods may vary according to the type of information and the circumstances of its collection.
Order and transaction records may be retained to process purchases, handle returns and disputes, and meet applicable accounting or legal requirements.
Customer service correspondence may be retained to resolve inquiries, document service outcomes, and address potential disputes.
Technical and security logs may be retained for website operation, security monitoring, troubleshooting, and investigation.
Account information, where applicable, may be retained while needed to provide account services and for any additional lawful retention period.
Cookies and similar identifiers may remain on your device according to their individual expiration settings.
When personal information is no longer required, we will take appropriate steps to delete it, anonymize it, or otherwise handle it in accordance with applicable law, subject to lawful exceptions and technical limitations.
Security Measures
We use or seek to maintain reasonable technical and organizational safeguards appropriate to the nature of personal information and the risks associated with its processing.
Depending on the systems and services involved, safeguards may include access restrictions, secure data transmission, account protections, service-provider controls, and security monitoring.
No method of electronic transmission or storage can be guaranteed to be completely secure. We therefore cannot guarantee absolute security.
7. Your Privacy Rights and Choices
Your privacy rights depend on your location, the applicable law, and the nature of our processing activities.
Rights Under Applicable U.S. Privacy Laws
Where applicable U.S. federal or state privacy laws provide these rights, you may be entitled to:
- Request access to certain personal information we maintain about you.
- Request information about how your personal information is collected, used, or disclosed.
- Request correction of inaccurate personal information.
- Request deletion of personal information, subject to legal exceptions.
- Request a copy of certain personal information in a portable format where required.
- Opt out of certain sales, sharing, targeted advertising, or other regulated processing activities, where applicable.
- Limit certain uses or disclosures of sensitive personal information where the law provides that right.
- Appeal a decision concerning a privacy request where required by applicable law.
- Exercise protected privacy rights without unlawful discrimination or retaliation.
Not every right applies to every business, state, person, or category of information. Applicable legal thresholds, exemptions, and procedural requirements determine the rights available to you.
Rights Under the GDPR
If the GDPR applies to the processing of your personal data, you may have the following rights, subject to the conditions and exceptions provided by law:
- Access your personal data and obtain information about its processing.
- Request correction of inaccurate or incomplete personal data.
- Request erasure of personal data in circumstances specified by law.
- Request restriction of processing in circumstances specified by law.
- Request data portability where the legal requirements are met.
- Object to certain processing based on legitimate interests or public task grounds where applicable.
- Withdraw consent where processing is based on consent.
- Lodge a complaint with a competent data protection supervisory authority.
These rights are not absolute. Legal retention obligations and other statutory exceptions may affect how a request can be fulfilled.
How to Submit a Privacy Request
You may contact us at customer@yuloraestel.com to submit a privacy request.
Please describe your request and provide sufficient information for us to understand and process it. If your request relates to a particular order, an order number or relevant date may help us locate the information.
Where permitted or required by law, we may request information reasonably necessary to verify your identity or the authority of a person acting on your behalf. We will seek to limit verification to what is reasonably necessary.
We will respond within the period required by applicable law. If an extension is permitted and necessary, we will provide any notice required by law.
If a request cannot be fulfilled because a legal exception applies, we will provide an explanation or information about available appeal procedures where required.
Marketing and Communication Choices
If we send promotional emails, you may unsubscribe using the available unsubscribe mechanism or contact us to request that marketing communications stop.
Unsubscribing from promotional communications does not prevent us from sending necessary transactional or service messages, such as order confirmations, delivery updates, or important notices about an existing purchase.
Authorized Agents and Non-Discrimination
Where applicable law permits an authorized agent to submit a privacy request on your behalf, we may request evidence of that authority and verify your identity where legally permitted or required.
We will not unlawfully discriminate against you for exercising a privacy right protected by applicable law.
8. Legal Bases for Processing Under the GDPR
This section applies only when and to the extent the GDPR governs our processing of personal data.
Depending on the specific purpose and circumstances, we may rely on one or more of the following legal bases.
Consent
We may rely on your consent where required or permitted by law, including for certain non-essential cookies, advertising technologies, or marketing communications.
You may withdraw consent at any time where processing is based on consent. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
Contractual Necessity
We may process personal data where necessary to perform a contract with you or take steps at your request before entering into a contract. Examples include processing an order, arranging delivery, addressing payment-related matters, and providing requested customer support.
Legal Obligations
We may process personal data where necessary to comply with legal obligations, including applicable accounting, tax, consumer protection, and recordkeeping requirements.
Legitimate Interests
Where permitted by law, we may process personal data for legitimate interests pursued by us or a third party, provided the applicable legal conditions are met and those interests are not overridden by your interests or fundamental rights and freedoms.
Depending on the circumstances, these interests may include maintaining website security, preventing fraud, improving website functionality, resolving disputes, and protecting legal rights.
You may have the right to object to processing based on legitimate interests in circumstances specified by law.
Other Legal Bases
Vital interests and public task grounds apply only when the specific circumstances satisfy the requirements of the GDPR. They are not asserted as routine legal bases for ordinary furniture sales, payment processing, or general website analytics.
For visitors and customers in the United States, applicable privacy requirements depend on the relevant federal and state laws and the circumstances of the processing.
9. International Data Transfers
Personal information may be processed in the United States and, depending on the service providers and technical arrangements involved, in other countries.
Where the GDPR applies and personal data is transferred outside the European Economic Area to a country without an applicable adequacy decision, we will use a transfer mechanism permitted by applicable law where required.
Depending on the circumstances, this may include the European Commission’s Standard Contractual Clauses, together with any required transfer assessment and supplementary safeguards.
Other lawful transfer mechanisms or exceptions may apply in specific circumstances. We will handle international transfers in accordance with the legal requirements applicable to the relevant processing.
If you have questions about international transfers involving your personal data, you may contact us using the information in Section 14.
10. Third-Party Websites and Services
Our website may contain links to external websites or rely on third-party services to support payments, delivery, communications, analytics, or other functions.
External websites and independent service providers may have their own privacy policies and data handling practices. We do not control the privacy practices of independent third parties merely because their websites or services are linked to or used in connection with our website.
We encourage you to review the applicable privacy information before providing personal information directly to an external website or service.
Where a third-party technology is integrated into our website, the information it collects and the purposes for which it processes that information depend on the integration, configuration, and applicable legal requirements.
11. Children's Privacy
Our website is intended for a general shopping audience and is not specifically directed to children under 13.
We do not intend to knowingly collect personal information directly from children under 13 in circumstances that violate applicable law.
This statement does not mean that an age-verification system or technical mechanism preventing all collection of children's information has been implemented.
The Children's Online Privacy Protection Act (COPPA) and other applicable laws may impose specific obligations depending on the nature of the website, its audience, and the operator's activities and knowledge.
If you believe a child has provided personal information in circumstances requiring action under applicable law, please contact us at customer@yuloraestel.com. We will review the matter and take any action required by law.
Where the GDPR applies, additional requirements concerning children's consent and the processing of children's personal data may also apply.
12. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our business operations, website features, service providers, data processing practices, or applicable legal requirements.
When we make changes, we will update the “Last Updated” date at the beginning of this policy.
Where applicable law requires notice, renewed consent, or another action before a change takes effect, we will provide the required notice or obtain the required consent.
We encourage you to review this page periodically to remain informed about how personal information is handled.
13. Additional Information for Applicable U.S. State Privacy Laws
Certain U.S. state privacy laws impose specific disclosure, response, and consumer-choice requirements on businesses that meet the relevant applicability criteria.
Where applicable, disclosures may include the categories of personal information collected, the purposes of processing, categories of recipients, retention criteria, and information about rights to access, correct, delete, obtain, or opt out of certain processing.
Whether these requirements apply depends on the relevant state law, business thresholds, exemptions, and actual processing activities.
Where applicable law requires an opt-out mechanism for the sale or sharing of personal information or targeted advertising, we will provide the required mechanism and honor valid requests.
Where a legally recognized browser-based or other opt-out preference signal must be honored, we will handle it in accordance with the applicable law.
This section does not expand or limit any rights provided by applicable law.
14. Contact Us
If you have questions about this Privacy Policy or wish to submit a privacy request, please contact us using the information below.
Email: customer@yuloraestel.com
Phone: +1 (314) 682-7493
Mailing Address: 5242 Ville Anita Ct, Hazelwood, MO 63042, United States
Customer Service Hours: Monday through Friday, 9:00 AM to 6:00 PM Central Time.
Please provide sufficient information for us to understand your inquiry. For privacy rights requests, we may need to verify your identity or authority to act on another person's behalf where permitted or required by applicable law.
We will handle privacy inquiries and requests in accordance with this policy and applicable legal requirements.