Legal
Privacy Policy
What personal data QUELVANI collects, why, who receives it and your rights under US state privacy laws, the GDPR and the UK GDPR.
Last updated October 29, 2026
This policy explains what personal data we collect when you use quelvani.com, why, and what rights you have. We collect as little as we need to sell and deliver your order.
1. Controller
WOODLAND Clothing Inc (trading as QUELVANI), 118 Ruby Ave, Hattiesburg, MS 39401, United States. Email support@quelvani.com, telephone +1 292 262 7144. For any privacy question, write to the same email address.
2. What we collect and why
| Data | Purpose | Legal basis (EU GDPR / UK GDPR) | How long |
|---|---|---|---|
| Name, email, delivery and billing address, phone (optional), items ordered, phone or earbud model selected, order language | Process, deliver and support your order; send order emails | Contract, Art. 6(1)(b) | 7 years after the end of the financial year in which the order was placed (US tax record rules), then deleted |
| Payment status and the last digits / type of the card or wallet (we never receive full card details) | Take payment, refunds, fraud prevention | Contract, Art. 6(1)(b); legal obligation, Art. 6(1)(c) | 7 years after the end of the financial year |
| Messages you send us (contact form, email, withdrawal form) | Answer you; handle withdrawals and returns | Contract or pre-contract steps, Art. 6(1)(b); legal obligation, Art. 6(1)(c) | Customer emails 2 years; withdrawal records 3 years; longer if linked to an order |
| Technical data: IP address, browser, pages requested | Run the site securely, prevent abuse and fraud | Legitimate interests, Art. 6(1)(f) | Server logs up to 30 days |
| Delivery country and language you choose; phone model you select | Show prices in your currency and the site in your language; pre-fill model selection on product pages | Legitimate interests, Art. 6(1)(f) | Stored in your browser, see the Cookie Policy |
We do not use your data for advertising, we do not sell or share it, and we do not run analytics or tracking tools on this site. We do not send newsletters. We do not make automated decisions with legal effects about you.
Name, email and address are required to complete an order; without them we cannot deliver. Everything else is optional.
3. Who receives your data
| Recipient | What they receive | Why |
|---|---|---|
| Payment providers (Stripe for card payments; PayPal when enabled) | Order amount, currency, and the data you enter in their payment fields | Process payments, refunds and fraud checks. They act as independent controllers for some of this processing under their own privacy notices. |
| Carriers delivering your parcel | Name, delivery address, email and phone (if you gave it) | Deliver the parcel and send tracking notifications |
| Hostinger (web host and email) | All order and customer data | Store the site, the order database and our mailbox on our behalf, under a data processing agreement |
| Our tax advisers and tax authorities | Order records and financial data | Where the law requires it for tax and accounting obligations |
| Customs authorities | Parcel contents and recipient address for international orders | Legal obligation for export and import declarations |
4. International transfers
We are based in the United States. Some providers (Hostinger, Stripe, PayPal, carriers) may process data in the United States and other countries. For customers in the European Economic Area, the United Kingdom, Norway and Switzerland, these transfers are protected by the EU–US Data Privacy Framework (where the recipient is certified), the UK Extension to the EU–US Data Privacy Framework, or the EU Standard Contractual Clauses approved by the European Commission.
5. Cookies and local storage
We use only strictly necessary cookies to run the shopping cart, remember your language and delivery country, and process payments. We also store your chosen phone model in your browser. Full details in the Cookie Policy.
6. Your rights in Europe
Under the EU GDPR and the UK GDPR you have the right to:
- Access your personal data
- Rectification of incorrect data
- Erasure (subject to legal retention obligations)
- Restriction of processing
- Data portability (receive a copy in a portable format)
- Object to processing based on legitimate interests
- Withdraw consent where processing is based on consent
To exercise any of these rights, email support@quelvani.com, use the contact form, or write to us at the address above. You do not need an account. We answer within one month. We may need to keep order data for the legal retention period (seven years after the end of the financial year) even if you ask us to delete it, but we will then use it for nothing else.
You can also complain to a data protection authority:
- United Kingdom: Information Commissioner’s Office, ico.org.uk
- Denmark: Datatilsynet
- Germany: the data protection authority of your federal state
- Sweden: Integritetsskyddsmyndigheten (IMY)
- Norway: Datatilsynet
- France: Commission Nationale de l’Informatique et des Libertés (CNIL)
- Netherlands: Autoriteit Persoonsgegevens
- Spain: Agencia Española de Protección de Datos (AEPD)
- Italy: Garante per la protezione dei dati personali
- Or the supervisory authority where you live or work
7. Your rights in the United States
Under US state privacy laws (including California CCPA/CPRA, Virginia VCDPA, Colorado CPA, Connecticut CTDPA, Utah UCPA, and Texas TDPSA), residents of those states have rights regarding their personal information.
Categories of personal information we collected in the last 12 months:
- Identifiers (name, email, address, phone)
- Commercial information (order history, items purchased)
- Internet or network activity (IP address, browser, pages visited)
- Geolocation data (delivery country, inferred from IP or your selection)
We do not sell or share your personal information. We do not use it for targeted advertising. We honour Global Privacy Control signals as an opt-out of sale or sharing (though we do neither). We do not collect sensitive personal information as defined by these laws.
You can read more in the Do Not Sell or Share My Personal Information page.
Your rights:
- Know what personal information we collect, use, disclose and sell
- Access a copy of your personal information
- Correct inaccurate personal information
- Delete your personal information (subject to legal retention obligations)
- Opt out of the sale or sharing of your personal information (we do not sell or share)
- Opt out of targeted advertising (we do not run targeted advertising)
- Limit the use of sensitive personal information (we do not collect it)
- Non-discrimination for exercising your rights
How to exercise your rights: Email support@quelvani.com, use the contact form, or call +1 292 262 7144. You do not need an account. We will verify your identity by matching the information you provide with the data we hold. For deletion or access requests, we may ask you to confirm your email address or provide an order number.
Authorized agents: You may designate an agent to make a request on your behalf. The agent must provide written authorization signed by you, and we may still ask you to verify your identity directly.
Response time: We will respond within 45 days. If we need more time, we will tell you and may take up to 90 days total.
Appeals: If we deny your request, you may appeal by replying to our response email or contacting us again at support@quelvani.com. We will respond to the appeal within 45 days (or as required by your state law). If your appeal is denied, we will explain how to contact your state attorney general to submit a complaint.
We will not discriminate against you for exercising any of these rights. We may need to keep order data for tax and accounting obligations (seven years) even if you request deletion, but we will then use it for nothing else.
8. Security
The whole site runs over HTTPS. Payments are handled by PCI DSS certified payment providers; card numbers never touch our servers. Access to order data is limited to the people who fulfil orders and answer customers.
9. Children
This site is not directed at children under 16. We do not knowingly collect data from children.
10. Changes
If we change how we use personal data, we update this page and the date at the top.