Privacy Policy

PRIVACY POLICY
Last Updated: 02/03/2025

Welcome to Clayvera, operated by Clayvera.com. We value your privacy and are committed to safeguarding your personal data. This Privacy Policy explains how and why we collect, store, use, and share your data when you visit our website (“Website”) and purchase our Talavera products for Cultural Heritage Communities. It also describes your rights under the General Data Protection Regulation (GDPR) and other applicable laws.

By using our Website or services, you agree to the terms of this Privacy Policy. If you have any questions, please contact us at:

1. WHO WE ARE

For the purposes of the GDPR, Clayvera.com is the Data Controller for the personal data we collect from you.

2. DATA WE COLLECT

We collect personal data to provide our products, enhance your user experience, and comply with legal requirements. The types of data we collect include:

2.1 Information You Provide Voluntarily

  • Contact Details: Name, email address, phone number, billing/shipping address.
  • Account Details: If you create an account, we collect login details (e.g., username, password).
  • Payment Information: Such as credit/debit card details. Payments are processed by a third-party provider; we do not store full payment details.
  • Communications: Any information you share when contacting us (e.g., inquiries, feedback, reviews).

2.2 Information Collected Automatically

  • Device & Usage Data: IP address, browser type, device type, operating system, referring URLs, pages visited, and time spent on each page.
  • Cookies & Similar Technologies: We use cookies, beacons, and other tracking tools to personalize content, analyze website traffic, and improve our services. For more details, see our [Cookie Policy or relevant section below].

2.3 Special Categories of Personal Data

We do not knowingly collect or process special categories of personal data (e.g., health, religion, biometric data). If you voluntarily provide such data, you consent to our processing of that data as necessary to provide our services.

3. HOW WE USE YOUR DATA

We use your personal data for the following purposes:

  1. Order Processing & Fulfillment
    To process payments, ship orders, and communicate order status.

    • Legal Basis: Performance of a contract.

  2. Account Management
    To register and maintain your account, including password reset and user authentication.

    • Legal Basis: Performance of a contract; legitimate interests.

  3. Customer Support & Communication
    To respond to your inquiries, provide customer service, and offer technical support.

    • Legal Basis: Performance of a contract; legitimate interests.

  4. Marketing & Promotions
    To send newsletters, special offers, and other marketing materials, provided you have opted in. You can opt out at any time.

    • Legal Basis: Consent.

  5. Analytics & Site Improvement
    To analyze how you use our Website, improve user experience, and develop new features.

    • Legal Basis: Legitimate interests.

  6. Legal & Regulatory Compliance
    To comply with our legal obligations, such as maintaining business records or responding to lawful requests.

    • Legal Basis: Legal obligation.

4. LEGAL BASES FOR PROCESSING

We only process your personal data when there is a lawful basis to do so under GDPR, including:

  • Consent: When you have given your clear and affirmative consent (e.g., subscribing to a newsletter).
  • Contract: When processing is necessary to perform a contract with you (e.g., fulfilling orders).
  • Legal Obligation: When processing is necessary to comply with legal obligations (e.g., tax filings).
  • Legitimate Interests: When processing is necessary for our legitimate interests and not overridden by your rights (e.g., improving our Website’s security).

5. DATA STORAGE & RETENTION

We store personal data on secure servers. We retain your personal data only as long as necessary to fulfill the purposes for which it was collected, or as required by law. Retention periods may vary depending on factors such as:

  • Legal requirements (e.g., mandatory recordkeeping).
  • Fulfillment of contractual obligations (e.g., open orders, unresolved disputes).
  • Your personal preferences (e.g., whether you opt out of marketing communications).

When we no longer need your personal data, we will securely delete or anonymize it.

6. DATA SHARING & DISCLOSURES

We do not sell or rent your personal data. However, we may share data under these circumstances:

  • Service Providers: With third-party vendors (e.g., payment processors, shipping carriers, email marketing services) who help us operate our business.
  • Legal Compliance: Where required by law, court order, or government regulation, or when we believe disclosure is necessary to protect our rights, property, or safety.
  • Business Transfers: In connection with a merger, acquisition, or bankruptcy, your data may be transferred to a successor entity.
  • Analytics: We use analytics providers like Google Analytics to understand Website usage and improve our services.

All third parties are contractually required to process personal data in compliance with GDPR and other relevant laws.

7. SECURITY MEASURES

We implement appropriate technical and organizational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These measures may include:

  • Encryption of data in transit (HTTPS/SSL).
  • Access controls and authentication protocols.
  • Regular security assessments and monitoring.

While we strive to protect your personal data, no method of transmission or storage is 100% secure.

8. INTERNATIONAL TRANSFERS

If your personal data is transferred outside the European Economic Area (EEA), we ensure it is adequately protected by one of the following safeguards:

  • Adequacy Decision: The destination country has data protection laws deemed adequate by the European Commission.
  • Standard Contractual Clauses (SCCs): We use contractual obligations approved by the European Commission to protect your rights.
  • Binding Corporate Rules: Approved internal policies applicable to large multinational groups.

You may request more information about these safeguards by contacting us at [clayverallc@gmail.com].

9. YOUR RIGHTS UNDER GDPR

If you are in the EEA or the UK, you have certain rights regarding your personal data:

  1. Right to Access: Request a copy of the personal data we hold about you.
  2. Right to Rectification: Request correction of inaccurate or incomplete data.
  3. Right to Erasure (“Right to be Forgotten”): Request deletion of your data under certain conditions.
  4. Right to Restrict Processing: Ask us to limit how we process your data in certain circumstances.
  5. Right to Data Portability: Receive your data in a structured, commonly used, and machine-readable format.
  6. Right to Object: Object to processing based on legitimate interests or direct marketing.
  7. Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of processing before withdrawal.

To exercise these rights, please contact us at [clayverallc@gmail.com]. We will respond within the statutory timeframe. You also have the right to lodge a complaint with your local data protection authority if you believe your rights have been infringed.

10. COOKIES & SIMILAR TECHNOLOGIES

We use cookies, web beacons, and similar tools to enhance user experience, analyze trends, administer the Website, and track users’ movements around the Website. You can control cookies through your browser settings. For more information, please review our [Cookie Policy] or contact us at [clayverallc@gmail.com].

11. THIRD-PARTY LINKS

Our Website may contain links to third-party websites, plug-ins, and applications. We do not control these third-party sites and are not responsible for their privacy statements. When you leave our Website, we encourage you to read the privacy policy of every site you visit.

12. CHILDREN’S PRIVACY

Our services are not intended for individuals under the age of 16. We do not knowingly collect or process personal data from children under 16. If you believe we have inadvertently collected such data, please contact us at [clayverallc@gmail.com], and we will promptly take steps to delete it.

13. UPDATES TO THIS POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. When we do, we will revise the “Last Updated” date at the top of this document. We encourage you to review this policy periodically to stay informed about how we protect your personal data.

14. CONTACT US

If you have any questions or concerns about this Privacy Policy or our data practices, please reach out to us at:

We are committed to working with you to resolve any concerns regarding the privacy and security of your personal data.