Privacy Policy

PRIVACY POLICY

Last updated: October 14, 2026

Welcome to Gavella!

Gavella operates the website https://gavellafi.com and provides online shopping services, including product browsing, checkout, order processing, customer support, and related services (collectively, the "Services").

At Gavella, we respect your privacy and are committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you visit our website, make a purchase, contact us, or otherwise interact with our Services.

We process personal data in accordance with applicable data protection laws, including the European Union General Data Protection Regulation (GDPR), where applicable.

1. PERSONAL INFORMATION WE COLLECT

When you interact with Gavella, we may collect the following categories of personal information:

Contact Information

Full name
Email address
Phone number
Billing and shipping addresses

Order and Transaction Information

Products purchased
Order numbers and order history
Payment status and transaction confirmations
Shipping and delivery information
Returns, refunds, and customer service requests

Payment Information

Payments are processed through third-party payment service providers. Depending on the payment method used, these providers may process payment card details, billing information, and transaction data.

Gavella does not intentionally store complete payment card numbers on its own systems.

Technical and Usage Information

IP address
Browser type and device information
Operating system
Pages visited and interactions with our website
Cookies and similar tracking technologies
Referral sources and approximate location derived from IP addresses

Customer Communications

If you contact us, we may collect information you provide through emails, contact forms, or other customer support channels.

2. HOW WE USE YOUR INFORMATION

We use personal information for legitimate business purposes, including:

Processing and fulfilling orders
Arranging shipping and delivery
Providing customer service
Managing refunds, returns, and disputes
Sending order confirmations and delivery updates
Maintaining website functionality and security
Detecting and preventing fraud
Improving our products and shopping experience
Meeting legal, tax, and accounting obligations
Sending promotional communications where permitted by law
Measuring advertising performance where legally permitted

We only process personal information when we have an appropriate legal basis.

3. LEGAL BASIS FOR PROCESSING

Where the GDPR applies, we rely on one or more of the following legal bases:

Performance of a Contract

We process information necessary to complete purchases, deliver products, and provide customer support related to your orders.

Legal Obligations

We may process and retain information to comply with applicable tax, accounting, consumer protection, and other legal requirements.

Legitimate Interests

We may process information to maintain website security, prevent fraud, improve our services, and operate our business, provided these interests do not override your rights and freedoms.

Consent

Where required, we request your consent before using non-essential cookies, certain analytics technologies, personalized advertising, or sending marketing communications.

You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

4. HOW WE SHARE YOUR INFORMATION

We may share necessary personal information with trusted service providers to operate our online store.

These may include:

Shopify

We use Shopify to support store management, order processing, and fulfillment operations.

Funnelish

We may use Funnelish to provide product pages, sales funnels, and checkout experiences.

Payment Service Providers

Payment processors securely handle payments and transaction verification.

Shipping and Fulfillment Partners

We share necessary delivery information with suppliers, fulfillment providers, logistics companies, and shipping carriers to process and deliver orders.

Analytics and Advertising Partners

Where applicable and legally permitted, we may use analytics and advertising services, including Meta advertising tools, to understand website performance and measure marketing campaigns.

Legal and Regulatory Authorities

We may disclose information when required by law or when necessary to protect our legal rights.

We do not sell personal information to third parties for monetary compensation.

Some advertising-related disclosures may be classified as "sharing" or "selling" under certain privacy laws, even when no money is exchanged. Where applicable, we provide the required choices and opt-out mechanisms.

5. COOKIES AND TRACKING TECHNOLOGIES

Our website may use cookies and similar technologies to:

Enable essential website functions
Maintain shopping cart and checkout functionality
Remember preferences
Understand website traffic
Improve website performance
Measure advertising effectiveness
Support personalized marketing where permitted

Essential cookies may be used where necessary to provide the Services.

Where required by applicable law, non-essential cookies and tracking technologies are used only after obtaining your consent.

You can manage your cookie preferences through our website's cookie consent settings, where available.

You may also manage cookies through your browser settings.

6. INTERNATIONAL DATA TRANSFERS

Because Gavella may work with technology providers, payment processors, suppliers, and fulfillment partners operating internationally, personal information may be processed outside your country of residence.

Where personal data is transferred outside the European Economic Area (EEA), we take steps to ensure appropriate safeguards are in place when required by law.

These safeguards may include adequacy decisions, Standard Contractual Clauses approved by the European Commission, or other legally recognized transfer mechanisms.

7. DATA RETENTION

We retain personal information only for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy.

Retention periods depend on factors such as:

Order fulfillment and customer service requirements
Legal and accounting obligations
Fraud prevention and security
Resolution of disputes
Applicable statutory retention periods

When personal information is no longer necessary, we delete or anonymize it, unless continued retention is required by law.

8. YOUR PRIVACY RIGHTS

If you are located in Finland or another country within the European Economic Area, you may have the following rights under the GDPR:

Right of Access: Request access to your personal information.
Right to Rectification: Request correction of inaccurate or incomplete information.
Right to Erasure: Request deletion of personal information in certain circumstances.
Right to Restriction: Request restrictions on certain processing activities.
Right to Data Portability: Request eligible personal information in a structured, commonly used, machine-readable format.
Right to Object: Object to certain processing activities, including direct marketing.
Right to Withdraw Consent: Withdraw previously provided consent at any time.
Right to Lodge a Complaint: Submit a complaint to a competent data protection supervisory authority.

To exercise your rights, please contact us using the information provided below.

We may need to verify your identity before processing certain requests.

We respond to privacy requests within the timeframes required by applicable law.

9. DATA SECURITY

We take reasonable technical and organizational measures to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

These measures may include secure service providers, access controls, encrypted connections, and appropriate operational safeguards.

However, no method of internet transmission or electronic storage is completely secure.

10. THIRD-PARTY WEBSITES

Our website may contain links to external websites or services.

These third-party websites operate independently and may have their own privacy policies.

We encourage you to review their privacy practices before providing personal information.

Gavella is not responsible for the privacy practices of independently operated third-party websites.

11. CHILDREN'S PRIVACY

Our Services are intended for general consumers and are not directed toward children.

We do not knowingly collect personal information from children in violation of applicable data protection laws.

If you believe a child has provided personal information to us unlawfully, please contact us so we can investigate and take appropriate action.

12. MARKETING COMMUNICATIONS

If you subscribe to our newsletter or otherwise agree to receive marketing communications, we may send information about:

New products
Special offers
Promotions
Store updates

You can unsubscribe from marketing emails at any time using the unsubscribe link included in those communications.

Transactional communications, such as order confirmations and shipping updates, may still be sent when necessary to fulfill your purchase.

13. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy periodically to reflect changes in our business operations, technologies, legal requirements, or data protection practices.

Any updates will be published on this page with a revised "Last updated" date.

Where legally required, we will provide additional notice of material changes.