Privacy Policy
Privacy Policy
Avanaor
Last updated: May 2026
Your privacy matters to us. This policy explains what personal data we collect, why we collect it, how we use it, and what rights you have. We process your data in full compliance with the EU General Data Protection Regulation (GDPR) and applicable Romanian data protection law. We never sell your personal data to third parties.
1. Who We Are
Avanaor ("we", "us", "our") is an e-commerce retailer operating at avanaor.com, selling consumer electronics, gadgets, and lifestyle accessories. We are the data controller responsible for your personal data collected through this website.
For any privacy-related questions or requests, contact us at: support@avanaor.com
2. What Data We Collect
We collect personal data only when necessary to provide our services. The data we collect includes:
2.1 Data You Provide to Us
- Identity data: First name, last name
- Contact data: Email address, phone number
- Delivery data: Shipping address, billing address
- Payment data: Payment card type and last 4 digits (we never store full card details — payments are processed securely by Shopify Payments)
- Communication data: Any messages you send us via email or contact forms
2.2 Data We Collect Automatically
- Technical data: IP address, browser type and version, device type, operating system
- Usage data: Pages visited, time spent on site, referring URLs, click behaviour
- Cookie data: Session cookies, preference cookies, analytics cookies (see Section 8)
3. Why We Collect Your Data (Legal Basis)
Under GDPR, we must have a lawful basis for processing your personal data. The table below explains why we process each category of data:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Processing and fulfilling your order | Identity, contact, delivery, payment data | Contract performance |
| Sending order confirmations and shipping updates | Email address, order details | Contract performance |
| Processing returns and refunds | Identity, contact, payment data | Contract performance |
| Customer support and complaint handling | Identity, contact, communication data | Contract performance / Legitimate interest |
| Fraud prevention and security | Technical, payment, identity data | Legitimate interest / Legal obligation |
| Improving our website and services | Usage data, cookie data | Legitimate interest |
| Sending marketing emails (newsletters, offers) | Email address, name | Consent (opt-in only) |
| Complying with legal and tax obligations | Identity, payment, order data | Legal obligation |
4. Who We Share Your Data With
We do not sell, rent, or trade your personal data. We share your data only with trusted third-party service providers who help us operate our business, and only to the extent necessary:
| Third Party | Purpose | Location |
|---|---|---|
| Shopify Inc. | E-commerce platform, payment processing, checkout | USA (GDPR-compliant) |
| Shipping & logistics partners | Order fulfilment and delivery | Various |
| Supplier / fulfilment partners | Product sourcing and dispatch | Various |
| Google Analytics | Website analytics and performance tracking | USA (GDPR-compliant) |
| Email service provider (e.g. Klaviyo / Mailchimp) | Transactional and marketing emails | USA (GDPR-compliant) |
All third parties we work with are required to handle your data securely and in accordance with applicable data protection law. We do not permit them to use your data for their own marketing purposes.
5. International Data Transfers
Some of our service providers are based outside the European Economic Area (EEA). Where we transfer your data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, or we work only with providers certified under equivalent frameworks.
6. How Long We Keep Your Data
We retain your personal data only for as long as necessary for the purposes for which it was collected:
- Order and transaction data: 5 years (required for tax and legal compliance under Romanian law)
- Customer support communications: 2 years from the date of last contact
- Marketing data (email subscribers): Until you unsubscribe or withdraw consent
- Website analytics data: 26 months (Google Analytics default)
- Cookie data: As defined in our Cookie Policy (Section 8)
When your data is no longer needed, we securely delete or anonymise it.
7. Your Rights Under GDPR
As an EU resident, you have the following rights regarding your personal data. You can exercise any of these rights by contacting us at support@avanaor.com:
Right of Access
You can request a copy of all personal data we hold about you.
Right to Rectification
You can ask us to correct any inaccurate or incomplete data we hold about you.
Right to Erasure
You can request that we delete your personal data where there is no legitimate reason to continue processing it.
Right to Restriction
You can ask us to suspend processing of your data in certain circumstances.
Right to Data Portability
You can request a copy of your data in a structured, machine-readable format to transfer to another provider.
Right to Object
You can object to processing based on legitimate interests, including direct marketing at any time.
Right to Withdraw Consent
Where processing is based on consent (e.g. marketing emails), you can withdraw consent at any time by clicking unsubscribe or contacting us.
We will respond to all requests within 30 days. We may need to verify your identity before fulfilling a request. There is no charge for exercising your rights.
You also have the right to lodge a complaint with the Romanian data protection authority (ANSPDCP) at www.dataprotection.ro, or with your local EU supervisory authority.
8. Cookies
Our website uses cookies — small text files stored on your device — to make the site work properly and to improve your experience. We use the following types of cookies:
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Essential cookies | Required for the site to function (cart, checkout, security) | No — site will not work without them |
| Analytics cookies | Help us understand how visitors use our site (Google Analytics) | Yes — via cookie banner |
| Marketing cookies | Used to show relevant ads and track campaign performance | Yes — via cookie banner |
| Preference cookies | Remember your settings and preferences (e.g. language, currency) | Yes — via cookie banner |
You can manage your cookie preferences at any time via our cookie banner or through your browser settings. Disabling certain cookies may affect the functionality of our website.
9. Data Security
We take the security of your personal data seriously and have implemented appropriate technical and organisational measures to protect it against unauthorised access, loss, or misuse. These include:
- 256-bit SSL encryption on all pages and during checkout
- PCI-DSS compliant payment processing via Shopify Payments
- We never store full payment card details on our servers
- Access to personal data is restricted to authorised personnel only
While we take every reasonable precaution, no method of transmission over the internet is 100% secure. If you suspect any unauthorised access to your data, please contact us immediately at support@avanaor.com.
10. Marketing Communications
We will only send you marketing emails if you have explicitly opted in to receive them. You can unsubscribe at any time by clicking the "Unsubscribe" link in any marketing email or by contacting us at support@avanaor.com.
Unsubscribing from marketing emails will not affect transactional emails related to your orders (confirmations, shipping updates, refund notifications).
11. Children's Privacy
Our website is not directed at children under the age of 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The date of the most recent update is shown at the top of this page. We encourage you to review this policy periodically. Where changes are significant, we will notify you by email or by a prominent notice on our website.
13. Contact & Complaints
For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact us:
- Email: support@avanaor.com
- Response time: Within 30 days (usually much faster)
- GDPR complaints: www.dataprotection.ro (Romanian DPA)
- EU ODR platform: ec.europa.eu/consumers/odr
Questions about your data?
We take privacy seriously and will respond to any request within 30 days. Your data belongs to you.
Contact Us