PRIVACY POLICY

Last updated: September 23, 2026

At Avelune, we value your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, disclose, and protect your personal data when you visit our website, make a purchase, contact us, or otherwise interact with our services.

This Privacy Policy is intended to comply with applicable data protection laws, including, where applicable, the General Data Protection Regulation (EU) 2016/679 (“GDPR”).

1. Who We Are

Avelune is an online retail brand offering products to customers internationally.

Brand: Avelune
Email: avelune@gmail.com
CNPJ: 37.600.513/0001-43

For the purposes of applicable data protection laws, Avelune acts as the data controller of the personal information described in this Privacy Policy, except where otherwise stated.

2. Personal Information We Collect

Depending on how you interact with Avelune, we may collect the following categories of personal information:

Identification and contact information, such as your name, email address, telephone number, billing address, shipping address, and other contact details.

Order and transaction information, including products purchased, order history, transaction information, refunds, returns, and information necessary to process and fulfil your order.

Payment information. Payments may be processed by third-party payment providers. Avelune may receive limited payment-related information, such as payment status, transaction identifiers, payment method type, and the last digits of a payment card, depending on the payment provider. We do not necessarily receive or store your complete payment card details.

Account information, if customer accounts are available, including login information and information associated with your customer profile.

Device and technical information, such as IP address, browser type, device type, operating system, language, time zone, and information regarding how you interact with our website.

Shopping and website activity, including products viewed, searches, cart activity, purchases, and interactions with pages and features of our website.

Communications, including information you provide when contacting customer support, submitting a request, or communicating with Avelune.

Marketing preferences, including whether you have chosen to receive marketing communications and your communication preferences.

Cookie and similar technology information, subject to applicable consent requirements.

3. How We Collect Your Information

We may collect personal information:

• directly from you when you place an order, create an account, subscribe to communications, or contact us;
• automatically when you browse or interact with our website, subject to applicable cookie and consent requirements;
• from service providers that help us operate our business, such as our e-commerce platform, payment processors, logistics providers, analytics providers, and marketing providers;
• from other sources where permitted by applicable law.

4. How We Use Your Personal Information

We may process personal information to:

Process and fulfil orders, including receiving your order, processing payments, confirming purchases, arranging shipping and delivery, and managing returns or refunds.

Provide customer service, including answering questions and resolving issues relating to your orders or our products.

Operate and improve our website and services, including understanding how customers interact with the store and improving functionality and customer experience.

Maintain security and prevent fraud, including detecting suspicious transactions, abuse, fraud, security incidents, and other unlawful activities.

Comply with legal obligations, including accounting, taxation, regulatory, consumer-protection, and other legal requirements.

Communicate with you, including transactional messages relating to orders, deliveries, returns, refunds, and customer support.

Send marketing communications, where permitted by applicable law and, where required, after obtaining your consent.

Personalize advertising and measure marketing performance, where permitted by applicable law and subject to any consent requirements applicable to cookies and similar technologies.

5. Legal Bases for Processing

Where the GDPR applies, we process personal information only where we have a valid legal basis.

Depending on the circumstances, these legal bases may include:

Performance of a contract: where processing is necessary to process your purchase, deliver your products, provide customer support, or otherwise perform our obligations to you.

Legal obligations: where processing is necessary to comply with applicable laws, accounting requirements, tax requirements, regulatory obligations, or lawful requests.

Legitimate interests: where processing is necessary for legitimate business interests, such as maintaining website security, preventing fraud, improving our services, and operating our business, provided that those interests are not overridden by your fundamental rights and freedoms.

Consent: where you have provided consent for a particular processing activity, such as certain marketing communications, advertising technologies, analytics technologies, or non-essential cookies where consent is required.

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

6. Cookies and Similar Technologies

Our website may use cookies and similar technologies to operate the store, remember preferences, maintain shopping-cart functionality, understand website usage, measure performance, and, where applicable, provide personalized advertising.

Some cookies are strictly necessary for the website and online store to function and may not require consent.

Other cookies, including certain analytics, advertising, personalization, and third-party tracking technologies, may require your consent before being placed or accessed on your device.

Where required by law, Avelune will provide users with the ability to accept or reject non-essential cookies and manage their preferences.

You may withdraw or modify your consent through the cookie preference controls available on our website, where applicable.

For European users, this distinction matters: EU guidance states that technically necessary cookies can operate without consent, while certain analytics, behavioural advertising, social tracking and similar non-essential technologies generally require prior consent. Users must also receive clear information and be able to withdraw consent.

7. How We Share Personal Information

We may share personal information with third parties only where necessary and permitted by law, including:

E-commerce and technology providers that enable us to operate our online store.

Payment processors and financial service providers that process transactions.

Shipping, logistics, warehouse, and delivery providers that fulfil and deliver orders.

Customer service providers that assist us in responding to customer requests.

Analytics, advertising, and marketing providers, subject to applicable consent and data protection requirements.

Professional advisers, including accountants, lawyers, insurers, and other professional service providers where necessary.

Government authorities, regulators, courts, or law enforcement authorities where disclosure is required by law or necessary to protect our legal rights.

We do not sell personal information in the ordinary meaning of selling customer data for money.

Certain privacy laws may define “sale”, “sharing”, or similar concepts more broadly, particularly in relation to online advertising. Where applicable, we will provide the rights and choices required by those laws.

8. Shopify

Our online store is hosted through Shopify, which provides the e-commerce infrastructure that allows us to offer our products and services online.

Shopify and other providers involved in operating the store may process personal information in connection with providing their services to Avelune.

Their processing of personal information may also be governed by their own privacy notices and contractual arrangements with Avelune.

9. International Data Transfers

Because Avelune operates online and may use service providers located in different countries, your personal information may be processed outside the country in which you live.

Where the GDPR or other applicable laws require safeguards for international transfers, we will rely on legally recognized transfer mechanisms where appropriate, such as adequacy decisions or approved contractual safeguards.

The European Commission specifically recognizes mechanisms such as Standard Contractual Clauses (SCCs) as safeguards that can be used for qualifying transfers of personal data outside the EU/EEA.

10. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

• fulfil orders and provide our services;
• maintain appropriate business and transaction records;
• comply with tax, accounting, consumer-protection, and other legal obligations;
• resolve disputes;
• prevent fraud and abuse;
• establish, exercise, or defend legal claims.

Retention periods may vary depending on the type of information, the reason for processing it, and applicable legal requirements.

When personal information is no longer required, we will delete, anonymize, or otherwise securely dispose of it where appropriate.

11. Your Privacy Rights

Depending on where you live and the laws applicable to you, you may have rights concerning your personal information.

For individuals protected by the GDPR, these may include the right to:

• be informed about how your personal information is processed;
• access your personal information;
• correct inaccurate or incomplete information;
• request deletion of personal information in applicable circumstances;
• restrict certain processing;
• object to certain processing, including direct marketing;
• receive certain personal information in a portable format;
• withdraw consent where processing relies on consent;
• lodge a complaint with a competent data protection supervisory authority.

These correspond to the principal data-subject rights recognized by EU authorities under the GDPR.

12. Exercising Your Rights

To exercise an applicable privacy right, please contact:

Avelune
Email: avelune@gmail.com

Please specify the nature of your request and provide sufficient information for us to identify the relevant account or transaction.

We may need to verify your identity before fulfilling certain requests.

Where the GDPR applies, requests must generally be addressed without undue delay and, in principle, within one month.

You also have the right to lodge a complaint with the data protection supervisory authority in your country of residence, place of work, or where you believe an infringement has occurred, where applicable.

13. Marketing Communications

If you subscribe to our marketing communications, we may send you information about Avelune products, collections, promotions, and other updates where permitted by law.

Where consent is required, we will send such communications based on your consent.

You may unsubscribe from marketing emails at any time by using the unsubscribe link provided in the communication or by contacting us at:

avelune@gmail.com

Unsubscribing from marketing communications will not prevent us from sending transactional or service-related communications necessary to fulfil your orders or respond to your requests.

14. Security

We take reasonable technical and organizational measures designed to protect personal information against unauthorized access, disclosure, alteration, loss, misuse, or destruction.

However, no method of transmitting or storing information electronically can guarantee absolute security.

15. Children's Privacy

Our products and services are not intentionally directed toward children, and we do not knowingly collect personal information from children in violation of applicable law.

If you believe that a child has provided personal information to us unlawfully, please contact us at avelune@gmail.comso that we can review the matter and take appropriate action.

16. Third-Party Websites

Our website may contain links to websites or services operated by third parties.

Avelune is not responsible for the privacy practices of third-party websites. We encourage you to review their privacy policies before providing personal information to them.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices, technologies, services, or legal requirements.

When appropriate, we will update the “Last updated” date at the beginning of this Privacy Policy.

Where required by applicable law, we will provide additional notice regarding material changes.

18. Contact Us

If you have questions about this Privacy Policy, how Avelune handles personal information, or wish to exercise your privacy rights, please contact:

Avelune
Email: avelune@gmail.com