Legend · Legal & help
Privacy policy
This policy explains which personal data we collect when you visit ulveroni.com or buy from us, why we use it, who receives it and what rights you have. We collect only what we need to sell and deliver your order and to answer your messages.
1. Who is responsible
The controller is DOBROSTAMAT Clothing Inc, trading as ULVERONI, 7533 S Center View Ct, Ste 210, West Jordan, UT 84084, United States. Email support@ulveroni.com, telephone +1 (254) 249-2894. Please send any privacy question or request to the same email address.
2. What we collect, why, and for how long
| Data | Purpose | Legal basis (EU GDPR / UK GDPR) | Retention |
|---|---|---|---|
| Order data: name, email address, delivery and billing address, phone number (optional), items ordered, ring size chosen, order amounts, payment status. We never receive full card numbers. | Process, ship and support your order; send order and dispatch emails; handle refunds | Contract, Art. 6(1)(b) | 7 years, to meet tax and accounting record-keeping obligations |
| Order and payment records | Keep tax and accounting records | Legal obligation, Art. 6(1)(c) | 7 years |
| Account data, if you create an account: email address, password (stored only as a secure hash), saved addresses, order history | Let you sign in and view your orders | Contract, Art. 6(1)(b) | Until you ask us to delete your account; order records as above |
| Messages you send us through the contact form or by email | Answer your questions and complaints | Contract or steps before a contract, Art. 6(1)(b); legitimate interests, Art. 6(1)(f) | 2 years |
| Withdrawal requests, including the acknowledgement we send | Handle your withdrawal and keep proof of it | Legal obligation, Art. 6(1)(c); contract, Art. 6(1)(b) | 3 years |
| Technical data recorded by our hosting provider: IP address, date and time, browser type, pages requested | Run the site securely, prevent fraud and abuse | Legitimate interests, Art. 6(1)(f) | For a short period in the hosting provider’s server logs, then deleted |
| Delivery country you choose | Show prices in the right currency | Legitimate interests, Art. 6(1)(f), and strictly necessary storage | 1 year in your browser, see the Cookie Policy |
Our legitimate interests are running a secure shop, preventing fraud and answering customers. Name, email address and delivery address are needed to complete an order; without them we cannot deliver. Everything else is optional.
We do not send newsletters. We do not use analytics, tracking tools, advertising pixels or social media plugins. We do not profile you, make automated decisions with legal or similar effects about you, or sell your data.
3. Who receives your data
| Recipient | What they receive | Why |
|---|---|---|
| Hostinger (website hosting and email) | All data stored on the website and in our mailbox | Hosts the shop, the order database and our email on our behalf, as a processor |
| Payment providers: Stripe and PayPal, when you pay with them | Order amount, currency, billing details and the data you enter in their payment fields | Process your payment and refunds and prevent fraud. They act as independent controllers for their own purposes under their own privacy notices. |
| Our fulfilment partner | Name, delivery address, phone number (if given), items ordered | Pack and ship your order on our behalf |
| Shipping carriers | Name, delivery address, email address and phone number (if given), parcel contents and value | Deliver your parcel, send tracking updates and prepare customs declarations |
| Customs and tax authorities, advisers | Order and parcel information, financial records | Where the law requires it, for customs, tax and accounting |
4. International transfers
DOBROSTAMAT Clothing Inc is based in Utah, United States, so your data is processed in the United States, and some recipients may process it in other countries. If you are in the EEA, the United Kingdom or Switzerland, we protect these transfers with the EU Standard Contractual Clauses and, for UK data, the UK International Data Transfer Agreement or the UK Addendum to the Standard Contractual Clauses, where required; or by relying on the EU–US Data Privacy Framework (and its UK and Swiss extensions) where the recipient is certified. You can ask us for a copy of the relevant safeguards.
5. Cookies
We use only strictly necessary cookies and browser storage to run the bag and checkout, keep you signed in and remember your delivery country. Details are in the Cookie Policy.
6. Your rights in the UK, the EEA and Switzerland
You have the right to:
- Access the personal data we hold about you
- Rectification of incorrect data
- Erasure, unless we must keep the data by law
- Restriction of processing
- Data portability: receive the data you gave us in a common, machine-readable format
- Object to processing based on our legitimate interests
Email support@ulveroni.com or use the contact form. You do not need an account. We reply within one month. If we must keep order records for tax reasons, we will restrict them to that purpose.
You also have the right to complain to a data protection supervisory authority, for example the Information Commissioner’s Office (ICO) in the UK, the data protection authority of your federal state in Germany, Datatilsynet in Denmark, or the authority in the country where you live or work.
7. Your rights in the United States
Residents of California, Utah and other US states with consumer privacy laws have rights over their personal information. In the last 12 months we have collected the categories described in section 2: identifiers (name, email, address, phone), commercial information (orders and purchases), and internet activity recorded in server logs. We collect them from you directly and use them for the purposes in section 2. We disclose them only to the recipients in section 3, for those purposes.
We do not sell your personal information and we do not share it for cross-context behavioural advertising. We do not use targeted advertising and we do not collect sensitive personal information. We honour Global Privacy Control (GPC) signals as a valid opt-out request.
You may ask to know, access, correct or delete your personal information. Email support@ulveroni.com or call +1 (254) 249-2894. We verify requests by matching the details you give us with our records, for example your email address and an order number. We respond within 45 days; if we need longer, we will tell you why. You may use an authorised agent, who must provide your signed permission; we may still ask you to confirm your identity. If we decline a request, you may appeal by replying to our answer, and we will explain how to contact your state attorney general if the appeal is also declined. We will not discriminate against you for exercising your rights. More on the Your Privacy Choices page.
8. Security
The site uses an encrypted HTTPS connection. Card and PayPal payments are processed by PCI DSS compliant payment providers, and card details never reach our servers. Access to order data is limited to the people who handle orders and customer messages.
9. Children
This site is not directed at children under 16, and we do not knowingly collect their personal data.
10. Changes
If we change how we use personal data, we update this page and the date below.
Last updated: 3 November 2026