Privacy Policy

This Privacy Policy describes how personal data is collected, used, disclosed, stored, and protected when you visit, browse, interact with, or make a purchase through tavlune.com. This website is operated by CLEARROUTE GLOBAL PAYMENT SOLUTIONS LLC. This website is a self-hosted store built on WordPress and powered by WooCommerce. We are committed to processing personal data lawfully, fairly, and transparently in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR).

By using this website, placing an order, subscribing to our communications, or otherwise interacting with our services, you acknowledge that your personal data may be processed as described in this Privacy Policy. We encourage you to read this Privacy Policy carefully so that you understand what data we collect, why we collect it, how long we keep it, and what rights you may have in relation to that data.

1. Data Controller

The data controller responsible for the processing of your personal data is CLEARROUTE GLOBAL PAYMENT SOLUTIONS LLC. As the data controller, we determine the purposes and means of processing personal data collected through tavlune.com, including data related to orders, account activity, customer service communications, website usage, and security monitoring.

You may contact us at any time regarding privacy, data processing, or data subject rights by email at service@tavlune.com, by phone at +1 (307) 288-6813, or by mail at 101 East 7TH Street, Gillette, WY 82716, US. We are responsible for ensuring that personal data is handled in a manner that is lawful, secure, proportionate, and appropriate to the purposes for which it is collected.

2. Scope of Application

This Privacy Policy applies to personal data collected through tavlune.com, including data collected when you browse the website, add products to your cart, place an order, contact customer support, submit a form, subscribe to newsletters or marketing messages where available, or otherwise communicate with us.

This Privacy Policy also applies to data collected through technical means related to the operation of our website, including cookies, log files, plugins, checkout tools, payment integrations, fraud prevention tools, and analytics features that support the proper operation and security of our store. Where third-party services operate independently, their own privacy notices may also apply in addition to this Privacy Policy.

3. Personal Data We Collect

We collect personal data that you voluntarily provide to us when you use our website or communicate with us. Depending on your interaction with the website, this may include your name, billing address, shipping address, email address, telephone number, order notes, and any information you include in emails, contact forms, customer service requests, or other communications.

We may also collect information associated with your customer activity, such as cart contents, product preferences, order history, refund or complaint history, and records of communications with us. If you choose not to provide certain personal data required for an order or support request, we may be unable to process your purchase, provide delivery services, or respond effectively to your inquiry.

4. Order and Transaction Information

When you place an order, we collect and process information necessary to review, confirm, fulfill, and support that transaction. This includes product details, selected variants, quantities, prices, discounts, billing and delivery details, shipment method, tracking status, order timestamps, transaction status, and related customer service records.

We may also maintain internal records connected to the order lifecycle, such as order confirmations, payment verification status, cancellation requests, refund decisions, return communications, delivery issue investigations, and documentation submitted for damaged, defective, incorrect, or lost shipments. This information is processed for contractual performance, recordkeeping, fraud prevention, dispute handling, and compliance purposes.

5. Payment Processing and Providers

All payments made on tavlune.com are processed through independent third-party payment service providers, including Stripe and PayPal. These providers process payment transactions on their own systems and under their own privacy and security frameworks. When you select one of these payment options, relevant payment and billing information is transmitted directly to the provider to authorize, authenticate, and complete the transaction.

These payment service providers may process personal data such as your name, billing details, payment method information, IP address, fraud signals, transaction amount, and device or authentication data in order to prevent fraud, comply with financial regulations, and complete the payment. We recommend that you review the privacy policies of Stripe and PayPal for information about how they process your personal data on their own behalf.

6. No Storage of Payment Data

We do not store, retain, or have direct access to full payment card numbers, CVV/CVC security codes, bank account credentials, magnetic stripe data, or similar sensitive payment credentials on our servers. Payment credentials are entered directly into secure payment environments controlled by the relevant payment provider.

We may receive limited transaction-related information from Stripe or PayPal, such as payment status, transaction reference identifiers, partial payment method descriptors, chargeback notifications, and confirmation records necessary for order management, fraud review, accounting, customer support, and dispute handling. This limited information does not enable us to reconstruct your full payment credentials.

7. Legal Basis for Processing (GDPR)

Where the GDPR applies, we process personal data on one or more lawful bases depending on the context of the processing activity. The main legal bases we rely on are: performance of a contract, where processing is necessary to process your order and provide requested services; compliance with legal obligations, where we must retain records, respond to lawful requests, or meet accounting and tax obligations; legitimate interests, where processing is necessary for fraud prevention, website security, business administration, customer service improvement, and defense of legal claims; and consent, where required for certain optional technologies or communications.

Where processing is based on legitimate interests, we consider whether the processing is necessary, proportionate, and balanced against your rights and freedoms. Where processing is based on consent, you may withdraw that consent at any time, although withdrawal will not affect processing carried out before the withdrawal took effect.

8. Purpose of Data Use

We use personal data for specific and limited purposes connected to the operation of our store and the services you request. These purposes include processing and fulfilling orders, verifying payments, arranging shipment and delivery, sending order confirmations and service communications, responding to customer service inquiries, handling returns or refunds, and maintaining transaction records.

We also use personal data to maintain the integrity and security of our website, prevent fraudulent or abusive activity, monitor technical performance, troubleshoot issues, improve checkout reliability, maintain internal business records, comply with legal and regulatory obligations, and protect our rights and interests in the event of disputes, claims, or chargeback proceedings.

9. Cookies and Tracking Technologies

Our website uses cookies and similar technologies, including browser cookies, session cookies, local storage tools, log-based tracking, and functional website technologies that help the store operate properly. These technologies may be used to keep the shopping cart active, preserve session information, remember preferences, improve navigation, maintain account or checkout continuity, and support security-related functions.

Depending on how the website is configured, cookies or similar technologies may also be used for traffic measurement, website performance analysis, fraud detection, and plugin or service integration. Some cookies are necessary for the operation of the website and cannot be disabled without affecting core functionality. Others may be controlled through browser settings, cookie banners, or similar consent tools where applicable. Disabling certain cookies may affect your ability to use parts of the website.

10. Technical and Device Data

When you access tavlune.com, certain technical information may be collected automatically. This may include your IP address, browser type and version, device type, operating system, language preferences, referral URLs, pages viewed, timestamps, session duration, approximate location derived from IP, interaction events, and error or crash reports.

We use this information for legitimate operational purposes, including server stability, website administration, fraud detection, abuse prevention, system diagnostics, load balancing, security investigations, and performance optimization. Technical and device data may also be recorded in server logs or through WordPress, WooCommerce, or security-related plugins used to keep the website functioning properly and securely.

11. Data Security Measures

We implement technical and organizational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or unauthorized access. These measures are selected based on the nature of the data processed, the processing environment, and the risks associated with online commerce operations.

Protective measures may include secure hosting configurations, server hardening, firewall controls, malware scanning, vulnerability monitoring, plugin and system updates, suspicious access detection, restricted administrative access, backup procedures, and internal safeguards intended to reduce the likelihood of data exposure. Although no internet-based system can guarantee absolute security, we take reasonable and appropriate steps to protect personal data throughout its lifecycle.

12. Encryption and Secure Transmission

Data transmitted between your device and tavlune.com is protected using SSL/TLS encryption. This helps reduce the risk that personal data submitted through the website, such as checkout details, contact form submissions, or account-related data, will be intercepted during transmission.

Encrypted transmission is one part of our broader security approach. We also rely on secure payment integrations, access restrictions, and infrastructure protections to strengthen the confidentiality and integrity of data processed through the website. You should nevertheless take reasonable precautions on your own devices, such as using updated browsers, protecting your network, and avoiding unsecured public devices when submitting sensitive information online.

13. Access Control and Authentication

Access to personal data is limited to personnel, contractors, or service providers who need such access for legitimate business purposes, such as order handling, customer service, technical maintenance, fraud review, or legal compliance. Access is granted on a need-to-know basis and is subject to internal controls and administrative safeguards.

We may use role-based permissions, password protections, authentication procedures, administrative restrictions, and other access management tools to reduce unauthorized internal access. We also seek to ensure that those handling personal data understand that it must be treated confidentially and only used for approved business purposes consistent with this Privacy Policy and applicable law.

14. Data Minimization and Storage Limitation

We follow the principle of data minimization by collecting and processing only the personal data that is reasonably necessary for the purposes described in this Privacy Policy. We do not intentionally request excessive or irrelevant personal data for ordinary purchases or customer communications.

We also apply storage limitation principles. Personal data is retained only for as long as needed to fulfill the relevant purpose, such as completing an order, maintaining legally required business records, resolving disputes, responding to customer requests, or enforcing contractual rights. When data is no longer necessary, we seek to delete, anonymize, or securely restrict it, subject to legal, regulatory, tax, accounting, fraud prevention, or evidentiary retention needs.

15. Fraud Prevention and Risk Management

To help protect our business, our customers, and payment systems, we may use personal data to identify, assess, and prevent suspicious activity, fraudulent transactions, abusive behavior, unauthorized access attempts, chargeback abuse, and other conduct that may threaten the security or integrity of our operations.

This may involve automated or manual review of order patterns, billing and delivery inconsistencies, repeated failed transactions, technical indicators, account behavior, or information provided by payment processors and fraud prevention systems. Where necessary, we may delay, cancel, or review orders that appear high-risk, and we may retain relevant records to support investigations, respond to chargebacks, or defend legal claims.

16. Sharing of Personal Data

We do not sell your personal data. We share personal data only where reasonably necessary to operate our business, fulfill orders, provide requested services, protect the website, or comply with legal obligations. This may include sharing with payment processors such as Stripe and PayPal, shipping and logistics providers, hosting providers, technology vendors, website security tools, customer service tools, accounting or legal advisors, and other service providers supporting the operation of tavlune.com.

Where third parties process personal data on our behalf, we expect them to process such data only for relevant service purposes and with appropriate confidentiality and security protections. We may also disclose personal data where required by law, court order, regulatory request, or where disclosure is necessary to establish, exercise, or defend legal rights, prevent fraud, or protect the safety, rights, or property of our business, users, or others.

17. International Data Transfers

Because online commerce, hosting, payment processing, communications, and technical support services may involve providers located in multiple jurisdictions, your personal data may be transferred to, stored in, or accessed from countries outside your country of residence, including countries outside the European Economic Area (EEA).

Where we transfer personal data internationally and applicable law requires safeguards, we seek to use appropriate protective mechanisms, which may include contractual protections such as standard contractual clauses, reliance on adequacy decisions where available, or other lawful transfer mechanisms recognized by applicable data protection law. Even where such safeguards are used, cross-border processing may involve legal systems that differ from those in your home jurisdiction.

18. Data Retention

We retain personal data for as long as necessary to carry out the purposes described in this Privacy Policy. The precise retention period may vary depending on the type of data and the reason it was collected. For example, order and transaction records may be retained for longer periods where needed for accounting, tax, warranty, fraud prevention, chargeback defense, legal claims, regulatory compliance, or business recordkeeping.

Customer service communications, technical logs, security records, and website usage records may also be retained for appropriate periods where necessary to maintain security, troubleshoot issues, support prior transactions, investigate disputes, or demonstrate compliance. When retention is no longer required, we take reasonable steps to securely delete, anonymize, or otherwise render the data non-identifiable, unless continued retention is required or permitted by law.

19. Your Rights Under GDPR

Where the GDPR applies, you may have the right to request access to the personal data we hold about you, to request correction of inaccurate or incomplete data, to request erasure of data in certain circumstances, to request restriction of processing, to object to certain forms of processing, and to request portability of data that you have provided to us where the relevant legal conditions are met.

These rights are not absolute and may be subject to exceptions or limitations under applicable law. For example, we may retain certain information where necessary for legal compliance, transaction records, fraud prevention, dispute resolution, or the establishment, exercise, or defense of legal claims. To exercise your rights, please contact us at service@tavlune.com and provide sufficient information for us to verify your request and respond appropriately.

20. Right to Withdraw Consent

Where we rely on your consent as the legal basis for processing personal data, you have the right to withdraw that consent at any time. This may apply, for example, to certain optional cookies, marketing communications, or similar processing activities where consent is required by law.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal was made. It also does not affect processing carried out on other lawful bases, such as contract performance, legal obligation, or legitimate interests. If you withdraw consent for certain technologies or communications, some optional features or services may no longer be available in the same way.

21. Complaints and Supervisory Authority

If you believe that your personal data has been processed in a manner that violates applicable data protection law, you have the right to lodge a complaint with a competent supervisory authority. In the European Union or EEA, this may generally be the supervisory authority in your country of habitual residence, place of work, or place of the alleged infringement.

We would, however, appreciate the opportunity to address your concerns first where appropriate. You may contact us at service@tavlune.com so that we can review your concern, clarify the circumstances, and attempt to resolve any privacy-related issue in a timely and responsible manner.

22. Contact Information

If you have questions about this Privacy Policy, the personal data we process, or your rights in relation to that data, please contact us using the details below:

Email: [email protected]
Phone: +1 (307) 288-6813
Address: 101 East 7TH Street, Gillette, WY 82716, US
Website: tavlune.com

When contacting us about a privacy matter, please include enough information for us to understand your request and identify the relevant transaction or communication where applicable. This helps us verify your request, protect personal data, and respond more efficiently.