In plain English
We collect only what we need to ship your order. We never sell your data. You can request deletion at any time.
What we collect
When you place an order, create an account, or contact us, we collect: name, email, shipping address, phone (optional), and payment information processed by Stripe. We never store full credit card numbers on our servers. Browsing data (IP address, device, pages viewed) is collected via standard analytics for site performance and fraud prevention.
How we use your data
We use your information to (1) fulfill your orders, (2) communicate about shipping and support, (3) prevent fraud, and (4) — only with your explicit opt-in — send promotional emails. You can unsubscribe from marketing emails at any time via the link in any email or by emailing support@vyroona.com.
Who we share it with
We share order data with our fulfillment partners (CJDropshipping for sourcing, USPS or other carriers for delivery), payment processors (Stripe, PayPal), and email service providers strictly to deliver your purchase. We never sell your personal information to third parties.
Your rights (CCPA/CPRA — California residents)
You have the right to (1) know what personal data we hold about you, (2) request deletion of your data (subject to legal recordkeeping for purchase history), (3) opt out of the sale or sharing of your data (we don't sell, so this is automatic), and (4) non-discrimination for exercising these rights. Email privacy@vyroona.com to make a request.
Data Deletion
To delete your account and the personal data we hold: (1) sign in and go to Account → Profile → Delete account — this removes your profile, saved addresses, wishlist, and marketing preferences; or (2) email privacy@vyroona.com from your account address and we will process the deletion within 30 days. Order records from completed purchases are retained only as required by tax law (see Data retention below) and are anonymized where possible. If you signed in with Google or Facebook, deleting your Vyroona account also removes the linked login — you may additionally revoke Vyroona's access in your Google or Facebook account settings.
Cookies
We use first-party cookies for session management, cart persistence, and analytics (Google Analytics, PostHog). Marketing cookies require your consent — you can manage preferences in the cookie banner shown on first visit.
Data retention
Order data is retained for 7 years for tax and accounting compliance. Account information is retained while your account is active. After deletion, residual data may persist in encrypted backups for up to 90 days.
Security
We use industry-standard encryption (HTTPS) for all data in transit. Payment information is handled directly by Stripe (PCI-DSS Level 1 certified). Passwords are hashed with bcrypt. We will notify affected users within 72 hours of any confirmed security breach involving personal data.
Children
Vyroona is intended for users 18 years or older. We do not knowingly collect personal information from anyone under 13. If you believe we have, contact us at privacy@vyroona.com for immediate removal.
Changes to this policy
We may update this policy. Material changes will be announced via email to active customers and posted at the top of this page. Last updated: May 2026.