Privacy Policy

Last updated: July 2026

Varenna Global respects your privacy and is committed to handling personal information responsibly, transparently, and securely.

This Privacy Policy describes how we collect, use, disclose, retain, and protect your personal information when you visit thevarenna.com, use our services, communicate with us, or make a purchase.

Throughout this Privacy Policy, “Varenna Global,” “we,” “us,” and “our” refer to Varenna Global, operated by GBM DIGITAL BUSINESS SOLUTIONS LLC.

By accessing or using our website, you acknowledge the practices described in this Privacy Policy.

1. Company and Data Controller Information

For the purposes of applicable data-protection laws, the business responsible for determining how your personal information is processed is:

GBM DIGITAL BUSINESS SOLUTIONS LLC
Operating as Varenna Global
7901 4TH ST N STE 300
St. Petersburg, FL 33702
United States

Privacy contact: support@thevarenna.com

2. Scope of This Policy

This Privacy Policy applies to personal information collected through:

• our website;

• our online checkout;

• customer accounts;

• order and warranty forms;

• customer-service communications;

• email and marketing communications;

• cookies and similar technologies;

• social-media interactions with our business; and

• other services that link to this Privacy Policy.

This Policy does not govern independent third-party websites, applications, platforms, or services that maintain their own privacy policies.

3. Personal Information We Collect

The personal information we collect depends on how you interact with us.

Information you provide directly

We may collect:

• full name;

• email address;

• telephone number;

• billing address;

• shipping address;

• account login information;

• order details;

• products viewed, purchased, returned, or exchanged;

• customer-service communications;

• warranty or return information;

• photographs and videos submitted in connection with a product claim;

• reviews, survey responses, or feedback;

• marketing preferences; and

• any other information you voluntarily provide.

Payment information

Payments are processed through authorized third-party payment providers.

Depending on the payment method used, these providers may collect:

• card details;

• billing information;

• bank or digital-wallet information;

• payment authentication data; and

• transaction-risk information.

We generally do not receive or store complete payment-card numbers. We may receive limited transaction information such as payment status, card type, expiration details, billing address, and the final digits of the payment method.

Information collected automatically

When you visit or use our website, we and our service providers may automatically collect:

• IP address;

• browser type and version;

• device type;

• operating system;

• approximate geographic location;

• language and time-zone settings;

• referring website or advertising source;

• pages viewed;

• products viewed;

• links clicked;

• items added to or removed from a cart;

• checkout activity;

• session duration;

• cookie identifiers;

• device identifiers;

• website-interaction information; and

• diagnostic, performance, and security data.

Information obtained from other sources

We may receive information from:

• Shopify and other commerce-platform providers;

• payment processors;

• shipping and logistics providers;

• fraud-prevention and identity-verification services;

• analytics providers;

• advertising and social-media platforms;

• customer-support tools;

• business partners;

• publicly available sources; and

• other parties authorized by you.

4. How We Use Personal Information

We may use personal information to:

• operate and maintain our website;

• process payments and transactions;

• review and accept orders;

• prepare, fulfil, and deliver purchases;

• provide tracking and delivery updates;

• communicate about orders, returns, exchanges, and warranties;

• respond to questions and customer-service requests;

• verify customer and payment information;

• detect, investigate, and prevent fraud or unauthorized transactions;

• protect our customers, business, website, and payment partners;

• create and administer customer accounts;

• personalize website content and shopping experiences;

• remember shopping-cart preferences;

• understand website performance and customer behaviour;

• improve our products, services, website, and customer support;

• conduct internal reporting, analytics, and business planning;

• send transactional communications;

• send promotional communications where permitted;

• display or measure advertising;

• administer promotions, surveys, or loyalty benefits;

• establish, exercise, or defend legal claims;

• comply with tax, accounting, financial, consumer-protection, and other legal obligations; and

• enforce our Terms of Service and other policies.

5. Legal Bases for Processing

Where the European Union GDPR, UK GDPR, or a similar law applies, we process personal information under one or more of the following legal bases:

Performance of a contract

We process information when necessary to:

• accept and fulfil an order;

• process a payment;

• deliver products;

• provide customer support;

• manage returns and refunds; or

• provide warranty services.

Legitimate interests

We may process information for legitimate business interests, including:

• fraud prevention;

• network and website security;

• improving our services;

• customer support;

• maintaining business records;

• measuring advertising effectiveness; and

• protecting our legal rights.

We balance these interests against your privacy rights before relying on this legal basis.

Consent

We rely on consent where required, including for certain:

• marketing communications;

• advertising cookies;

• analytics technologies; and

• personalized advertising activities.

You may withdraw consent at any time. Withdrawal does not affect processing that occurred before consent was withdrawn.

Legal obligations

We may process or retain information to comply with:

• tax and accounting rules;

• payment and anti-fraud requirements;

• court orders;

• government requests;

• consumer-protection obligations; and

• other applicable laws.

6. Orders and Transactional Communications

When you place an order, we use your information to process the transaction, review payment risk, prepare the shipment, provide tracking, communicate about delivery, and provide after-sales assistance.

Transactional messages are necessary to administer your purchase and are not considered optional promotional marketing.

These communications may include:

• order confirmations;

• payment notices;

• security-verification requests;

• shipping confirmations;

• tracking updates;

• delivery notices;

• return or refund updates;

• warranty communications; and

• important service or policy notices.

7. Fraud Prevention and Security Reviews

We may use personal information to assess transaction risk and protect against fraud, abuse, chargebacks, identity theft, and unauthorized payments.

This may involve processing or sharing information such as:

• name;

• billing and shipping details;

• IP address;

• device information;

• payment status;

• transaction history;

• order value;

• fraud indicators; and

• communications related to the order.

In some circumstances, an order may be delayed, declined, limited, or cancelled following a security review.

Where legally permitted, we may request additional information reasonably necessary to confirm the identity of the purchaser or authorization of the transaction.

8. Cookies and Similar Technologies

Our website uses cookies, pixels, tags, local storage, software development kits, and similar technologies.

These technologies may be used to:

• keep the website functioning;

• maintain shopping-cart contents;

• remember preferences;

• support account login;

• secure checkout and prevent fraud;

• measure website traffic;

• understand visitor behaviour;

• improve website performance;

• attribute sales to advertising campaigns; and

• provide or measure personalized advertising where permitted.

Types of cookies

We may use:

• Strictly necessary cookies: required for the website, cart, checkout, security, and account functions.

• Functional cookies: remember settings and improve website functionality.

• Analytics cookies: help us understand website performance and usage.

• Advertising cookies: help deliver, personalize, limit, or measure advertisements.

Where required by law, non-essential cookies will be used only after you provide consent.

You may manage cookie preferences through our cookie banner, privacy settings, browser controls, or other available opt-out mechanisms.

Blocking certain cookies may affect website functionality, account features, cart contents, or checkout performance.

9. Marketing Communications

Where permitted by law, we may use your contact information to send information about:

• new products;

• promotions;

• restocks;

• special offers;

• abandoned carts;

• customer benefits; and

• other commercial updates.

You can unsubscribe from promotional emails by using the unsubscribe link included in the message or by contacting us.

Unsubscribing from marketing will not prevent us from sending necessary transactional or service-related communications.

10. Personalized Advertising and Analytics

We may work with analytics, advertising, and social-media partners to understand how visitors interact with our website and to measure or deliver advertising.

Depending on applicable law and your privacy settings, these providers may process:

• cookie identifiers;

• IP address;

• device information;

• website activity;

• product interactions;

• advertising interactions; and

• purchase or conversion information.

Some privacy laws may define certain advertising-related disclosures as “sharing,” “targeted advertising,” or, in limited circumstances, a “sale” of personal information even when no money is exchanged.

Where applicable, you may have the right to opt out through our cookie banner, data-sharing opt-out page, browser-based privacy signal, or by contacting us.

11. How We Disclose Personal Information

We may disclose personal information to service providers and other parties when reasonably necessary to operate our business.

These recipients may include:

E-commerce and website providers

Providers that host, operate, maintain, or support our online store and checkout.

Payment providers

Banks, card networks, digital-wallet providers, payment gateways, fraud-screening companies, and other financial-service providers.

Shipping and fulfilment providers

Warehouses, fulfilment partners, international carriers, customs agents, postal operators, and local delivery companies.

Technology providers

Hosting services, cloud providers, email platforms, customer-support tools, data-storage services, security providers, and technical contractors.

Analytics and advertising partners

Providers that help us understand website usage, measure campaigns, improve our services, or deliver advertising where permitted.

Professional advisers

Lawyers, accountants, auditors, insurers, consultants, and other professional advisers.

Government and legal authorities

Courts, regulators, customs authorities, tax agencies, law-enforcement agencies, or other government bodies when disclosure is legally required or reasonably necessary to protect rights and safety.

Corporate transactions

Potential or actual buyers, investors, lenders, advisers, or successors in connection with a merger, acquisition, financing, restructuring, asset sale, insolvency, or similar transaction.

Service providers are authorized to process information only as necessary to perform their services or as otherwise permitted by law.

12. Sale and Sharing of Personal Information

We do not sell personal information for direct monetary payment.

However, certain disclosures involving analytics, advertising cookies, or cross-context behavioral advertising may be classified as a “sale,” “sharing,” or targeted advertising under some privacy laws.

Where those laws apply, eligible consumers may request to opt out.

We do not knowingly sell or share the personal information of individuals under 16 for cross-context behavioral advertising.

13. Shopify and Other Service Providers

Our store is hosted and supported by an e-commerce platform and related service providers that help us operate the website and process transactions.

These providers may process personal information on our behalf or as independent controllers, depending on the service and applicable law.

Their processing may be governed by their own privacy terms, data-processing agreements, and legal obligations.

14. International Data Transfers

Varenna Global operates internationally, and our service providers, fulfilment partners, customers, and technical infrastructure may be located in different countries.

Your information may therefore be transferred to, stored in, or processed in countries outside the country where you reside, including the United States.

Privacy and data-protection laws in those countries may differ from those in your jurisdiction.

Where required, international transfers are supported by appropriate safeguards, which may include:

• adequacy decisions;

• standard contractual clauses;

• contractual data-protection commitments;

• participation in recognized transfer frameworks; or

• other legally permitted transfer mechanisms.

15. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy.

Retention periods may depend on:

• the duration of our customer relationship;

• order and warranty periods;

• accounting and tax requirements;

• payment-provider requirements;

• fraud-prevention needs;

• dispute and chargeback periods;

• legal limitation periods;

• regulatory obligations; and

• the need to establish, exercise, or defend legal claims.

When information is no longer required, we may delete, anonymize, or securely isolate it, subject to technical and legal limitations.

A request to delete personal information may not require us to erase information that must be retained for legal, financial, fraud-prevention, dispute-resolution, or other lawful purposes.

16. Data Security

We use reasonable administrative, organizational, contractual, and technical safeguards designed to protect personal information.

These safeguards may include:

• encrypted website connections;

• access controls;

• payment tokenization;

• account authentication;

• security monitoring;

• fraud-prevention systems;

• restricted access to personal data;

• service-provider assessments; and

• internal data-handling procedures.

No website, transmission, storage system, or security measure can guarantee absolute security.

Customers are responsible for protecting their account credentials and should contact us promptly if they believe their account or personal information has been compromised.

17. Your Privacy Rights

Depending on where you reside and the laws that apply, you may have the right to:

• know whether we process your personal information;

• request access to personal information;

• receive a copy of certain personal information;

• request correction of inaccurate information;

• request deletion of personal information;

• request restriction of processing;

• object to certain processing;

• request data portability;

• withdraw consent;

• opt out of direct marketing;

• opt out of targeted or cross-context behavioral advertising;

• opt out of certain sales or sharing of personal information;

• appeal the denial of a privacy request where applicable;

• obtain information about categories of information collected and disclosed; and

• lodge a complaint with a competent privacy or data-protection authority.

These rights are not absolute and may be subject to legal exceptions.

18. European Union and European Economic Area Rights

If you reside in the European Union or European Economic Area, you may have rights under the GDPR, including:

• the right to be informed;

• the right of access;

• the right to rectification;

• the right to erasure;

• the right to restrict processing;

• the right to data portability;

• the right to object;

• rights concerning certain automated decisions; and

• the right to lodge a complaint with your national data-protection authority.

Where processing is based on consent, you may withdraw that consent at any time.

19. United Kingdom Privacy Rights

If you reside in the United Kingdom, you may have similar rights under applicable UK data-protection law, including rights of access, correction, erasure, restriction, objection, and portability.

You may also have the right to complain to the UK Information Commissioner’s Office or another competent authority.

20. United States State Privacy Rights

Residents of certain U.S. states may have additional rights under applicable state privacy laws.

Subject to legal thresholds, exemptions, and verification requirements, these rights may include:

• confirming whether we process personal information;

• accessing personal information;

• correcting inaccurate personal information;

• deleting personal information;

• obtaining portable copies of information;

• opting out of certain sales, sharing, profiling, or targeted advertising;

• limiting certain uses of sensitive personal information; and

• not being discriminated against for exercising privacy rights.

We do not discriminate against consumers for properly exercising applicable privacy rights.

21. California Privacy Notice

Where the California Consumer Privacy Act, as amended, applies, California residents may request information regarding:

• categories of personal information collected;

• categories of sources;

• purposes of collection and use;

• categories of recipients;

• specific pieces of personal information held;

• categories sold or shared where applicable; and

• categories disclosed for a business purpose.

California residents may also have rights to request access, correction, deletion, and to opt out of applicable sales or sharing.

We do not sell personal information for direct monetary compensation.

22. How to Exercise Your Rights

To submit a privacy request, contact:

support@thevarenna.com

Please state that your message concerns a privacy request and describe the right you wish to exercise.

We may request information reasonably necessary to:

• verify your identity;

• locate your records;

• protect your personal information; and

• confirm that an authorized agent has permission to act on your behalf.

We will respond within the timeframe required by applicable law.

In some cases, we may deny or limit a request where an exception applies. When required, we will explain the reason and provide information about available appeal or complaint options.

23. Authorized Agents

Where permitted by law, you may appoint an authorized agent to submit a privacy request for you.

We may require:

• written authorization;

• proof of the agent’s identity;

• direct confirmation from you; or

• other information required to verify the request.

24. Automated Decision-Making

We may use automated tools to help detect fraud, assess payment risk, secure transactions, or identify suspicious activity.

These tools may consider factors such as transaction information, device data, location indicators, order history, and payment-risk signals.

Automated results may contribute to a manual review, order delay, request for verification, or cancellation.

Where required by applicable law, you may have rights related to decisions based solely on automated processing that produce significant legal or similar effects.

25. Do Not Track and Privacy Signals

Some browsers offer “Do Not Track” settings. Because there is no universally accepted standard for responding to every Do Not Track signal, our website may not respond to all such settings.

Where legally required and technically supported, we may recognize browser-based opt-out preference signals, such as a Global Privacy Control signal, as a request to opt out of certain data sales or sharing for the browser or device sending the signal.

26. Children’s Privacy

Our website and products are not directed toward children.

We do not knowingly collect personal information from children under 16 for advertising or commercial purposes.

Purchases must be made by an adult or by an individual legally permitted to enter into the transaction.

If you believe that a child has provided personal information without appropriate authorization, please contact us so that we can review and, where appropriate, delete it.

27. Third-Party Websites and Services

Our website may contain links to third-party websites or services.

We do not control and are not responsible for the privacy, security, content, or practices of independent third parties.

We recommend reviewing the privacy policies of any third-party services you use.

28. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in:

• our business practices;

• our services or technology;

• our service providers;

• legal requirements; or

• regulatory guidance.

The revised version will be published on this page with an updated “Last updated” date.

Where required by law, we may provide additional notice or request renewed consent before material changes take effect.

29. Contact Us

For questions, complaints, privacy requests, or concerns regarding this Privacy Policy, contact:

Varenna Global
Operated by GBM DIGITAL BUSINESS SOLUTIONS LLC
7901 4TH ST N STE 300
St. Petersburg, FL 33702
United States

Email: support@thevarenna.com

Business hours:
Monday to Friday, 9:00 AM – 5:00 PM (CET)