Privacy Policy

Section 01

Who we are

Vieira Home is a trading name of JMax B.V., a company registered in the Netherlands. Under the GDPR we are the controller of your personal information, which means we decide how and why it is used.

We have not appointed a Data Protection Officer, as we are not required to under Article 37 GDPR. Privacy questions go to the email address above.

Section 02

What we collect

Information you give us

Name, email address, phone number, billing and shipping address when you order or create an account; the content of emails and contact form messages; your email address if you subscribe to our newsletter; and any reviews, photographs or other content you choose to submit.

Payment information

Transaction details, the payment method type, the last digits of your card, and the billing name and address.Your card details are entered directly into the secure environment of Shopify Payments, which is powered by Stripe. We never see or store your full card number.

Device and usage information

Device and browser type, operating system, language and screen settings, IP address and the approximate location derived from it, pages viewed, products clicked, time spent on the site, and the page or advertisement that brought you here.

Cookies and identifiers

Cookie and similar identifiers set by us and by the partners described in section 10.

Section 03

Where it comes from

We collect information directly from you, automatically through the shop, and from the service providers listed in section 05 – for example delivery status updates from carriers and fraud-screening results from our payment provider.

Section 04

Why we use it, and our legal basis

Where we rely on consent, you can withdraw it at any time. Where we rely on legitimate interests, you can object – see section 14.

Section 05

Who we share it with

We share it with the parties we need to in order to run the shop:

• Shopify Inc. – hosts the store, processes orders and holds our customer records;
• Shopify Payments / Stripe – processes payments and screens transactions for fraud;
• DHL, UPS and FedEx – receive your name, address and phone number so your parcel can be delivered;
• Our fulfilment partner – receives your name, delivery address and order contents in order to pick, pack and dispatch your goods, and to process returns. Our fulfilment operation is based in Guangdong, China; see section 07;
• Professional advisers – accountants, lawyers and insurers, where necessary;
• Authorities and courts – where we are legally required to disclose information, or to establish, exercise or defend legal claims.

If our business is ever sold, merged or reorganised, your information may transfer to the new owner, who would remain bound by this policy.

Section 06

Our relationship with Shopify

Our shop is hosted by Shopify, which collects and processes personal information about your visit in order to provide and improve the platform. For details of how Shopify uses your information and what rights you have in relation to it, see the Shopify Consumer Privacy Policy and the Shopify privacy portal.

Section 07

International transfers

Your information is processed outside your own country and, in some cases, outside the European Economic Area – principally in the United States (Shopify, Stripe) and in China (our fulfilment partner).

For transfers out of the EEA we rely on the safeguards permitted under the GDPR: an adequacy decision by the European Commission where one exists, or the European Commission's Standard Contractual Clauses combined with additional technical and organisational measures. Transfers to our fulfilment partner in China are limited to the data needed to dispatch and return your order – name, address, phone number and order contents.

You can ask us for details of the safeguards applying to a specific transfer by emailing info@vieirahome.com.

Section 08

How long we keep it

Order and transaction records

Seven years, as required by Dutch tax law.

Customer account data

For as long as your account is open, plus a short period afterwards.

Customer service correspondence

For as long as needed to deal with the matter and any dispute arising from it.

Newsletter subscriptions

Until you unsubscribe, plus a record of the unsubscribe itself so that we do not contact you again.

Cookie and analytics data

For the lifetime of the cookie concerned, as set out in our cookie settings.

When a retention period ends, we delete the data or irreversibly anonymise it.

Section 09

Security

We use HTTPS encryption across the site, limit internal access to personal information to those who need it, and work with service providers who maintain recognised security standards. No system is completely secure, but if a data breach ever poses a risk to your rights, we will notify you and the relevant supervisory authority as the law requires.

Breach notification duties are not limited to our support hours. If we become aware of a qualifying breach outside those hours, the statutory deadlines still run and we act on them, whatever day it is.

Section 10

Cookies and tracking

Cookies are small files stored on your device. We use three kinds:

Analytics and marketing cookies are placed only after you consent. You can change or withdraw that choice at any time through the cookie settings link in our footer, and you can block or delete cookies through your browser – though blocking strictly necessary cookies will stop parts of the shop from working.

We honour the Global Privacy Control (GPC) signal where your browser sends one.

Withdrawing consent and changing your cookie settings work at any hour and take effect immediately – nothing waits for our support hours, and you never need to contact us to do it.

Section 11

Children

Our shop is intended for adults. We do not knowingly collect personal information from children under 16, and we do not sell or share the personal information of anyone under 16. If you believe a child has given us their information, please contact us and we will delete it.

Section 12

Automated decision-making

We do not make decisions with legal or similarly significant effects about you by purely automated means. Our payment provider runs automated fraud checks on transactions; if a payment is declined on that basis, contact us and ask for it to be reviewed by a person.

That review is carried out by a member of our team during our support hours, so a request made outside them is picked up on the next business day. The automated check itself runs at all hours, and a declined payment charges you nothing while you wait for the review.

Section 13

Your rights if you are in the United States

Depending on your state – California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon and a growing number of others – you may have the right to:

• Know what categories of personal information we collect, why, and who we disclose it to;
• Access a copy of the personal information we hold about you;
• Correct inaccurate personal information;
• Delete your personal information, subject to legal exceptions such as our tax record-keeping duty;
• Opt out of the “sale” or “sharing” of personal information for cross-context behavioural advertising;
• Appeal a decision we make on your request, where your state provides for it.

You will not be treated differently or charged more for exercising any of these rights.

We do not knowingly collect sensitive personal information, and we do not use it for advertising or profiling.

To make a request, email info@vieirahome.com with the subject line “Privacy Request”. We respond within 45 days and may extend that once where the law allows, telling you why. We may ask you to verify your identity first. An authorised agent may act for you with written permission.

The 45 days are counted from the day your request reaches us, not from the day we open it. Send it whenever you like – a request that arrives on a Sunday or a holiday is dated that day.

Section 14

Your rights under the GDPR

If you are in the EU or the EEA, you have the right to:

• Access the personal information we hold about you, and receive a copy of it;
• Rectify information that is inaccurate or incomplete;
• Erase your information where there is no longer a valid reason for us to keep it;
• Restrict how we use your information while a dispute about it is resolved;
• Data portability – receive certain information in a structured, machine-readable format;
• Object to processing based on our legitimate interests, and to direct marketing at any time;
• Withdraw consent at any time, without affecting processing that has already taken place.

Section 15

Complaints

If you are unhappy with how we handle your personal information, please contact us first – most issues are settled quickly. You also have the right to complain to a supervisory authority. In the Netherlands that is the Autoriteit Persoonsgegevens, and you may equally complain to the authority in the EU country where you live. In the United States you can contact your state attorney general.

When you can reach us

Privacy requests and complaints are handled by the same team that handles your orders. You can email at any hour; we read and answer during the hours below, in Eastern Time (ET).

Section 16

Changes to this policy

We update this policy when our practices or the law change. The date at the top of the page always shows the current version. If a change is significant, we will make it clear on the site and, where required, ask for your consent again.