Privacy policy

Who is responsible

Gaviota By Lia LLC, a limited liability company formed in Rhode Island, United States, operates this store and is responsible for the data described here. Write to gaviotabylia@gmail.com or message us on WhatsApp at +1 401 305 8713.

What we collect

When you buy: your name, email address, phone number and shipping address. We need all four to charge the order and deliver it.

We never see your card. Payment happens entirely on Stripe: your card details do not pass through our servers and are not stored in our database at any point.

If you create an account, which is optional: your email address and a password. The password is handled by our authentication provider and is stored hashed — we cannot see it or recover it for you.

If you write to us through the contact form: your name, email, phone, subject and message. If you leave a review: your rating and the text you write.

If you subscribe to our news, or ask us to let you know when a sold-out product is back: your email address and the language you browse in.

If you accept Google Analytics in the cookie banner: aggregate data about the pages you visit and how you move through the site. This is tied to an anonymous browser identifier, not to your name, email or order.

What we use it for

To process and ship your order, to send you the receipt and the tracking number, to answer you when you write to us, and to publish your review if you leave one and it is approved.

If you accept Google Analytics: to understand which pages and products get the most attention, so we can improve the store. If you decline or say nothing, this never happens.

We only send marketing email if you subscribe to our news, and every one of those emails includes a link to unsubscribe in one click. A back-in-stock alert is a single email about the product you asked for; it does not sign you up for anything else. All other email is about an order you placed.

Who we share it with

Only with the services needed for your order to exist and arrive: Stripe processes the payment, Supabase hosts the database and accounts, Resend delivers our emails, Vercel hosts the site, and USPS delivers the parcel. Each one only receives what its job requires.

If you accept Google Analytics, Google receives the anonymous browsing data described above. It does not receive your name, email, address or order details.

We do not sell, rent or trade your data, and we do not share it for advertising purposes with anyone.

How long we keep it

Orders and their receipts are kept for as long as tax and accounting obligations require. Contact messages and account data are kept until you ask us to delete them. Your newsletter email is kept until you unsubscribe or ask us to delete it.

Your rights

You can ask us for a copy of your data, for a correction, or for its deletion. Write to gaviotabylia@gmail.com and we will answer within 30 days.

Deleting your account does not erase orders already invoiced: we are required to keep those records. It does remove your login and everything not tied to a completed sale.

Minors

This store is not directed at people under 18 and we do not knowingly collect their data. If you believe a minor has given us data, write to us and we will delete it.

Changes to this policy

If anything material changes, we update this page and the date at the bottom. The version published when you buy is the one that governs your purchase.