Last updated: September 02, 2025

At Ylvaape, privacy is a core part of the experience. We believe trust is built like our furniture: with clarity and durability. This Privacy Policy explains—in clear, simple terms—what information is collected, how it is used, who it is shared with, and how it is protected when you visit or purchase from https://ylvaape.com/. This notice applies to customers in the United States, United Kingdom, France, Germany, Australia, Spain, Canada, Italy, Belgium, and Portugal.

1. What Ylvaape collects

Information you provide. When you check out or create an account, Ylvaape processes your name, email, shipping and billing addresses, phone number, and order details (items, prices, order number, delivery status, customization specifications). Ylvaape does not store full payment card numbers or CVV codes—payments are handled securely by providers such as Stripe or PayPal. When you contact support (e.g., to discuss wood types or dimensions), Ylvaape processes the content of messages, chats, and any files you send. If you create an account, Ylvaape stores your login email and an encrypted password, as well as preferences like saved addresses.

Information collected automatically. When you browse the site, Ylvaape receives IP address, browser and device type, operating system, referring URL, approximate location (city/region), pages viewed, time on page, clicks, cart actions, and product interests (e.g., viewing media consoles or dining sets). This happens via cookies, pixels, and analytics so the website works properly and improves over time.

From trusted partners (when relevant). If you arrive from an advertisement or social post, Ylvaape may receive limited campaign information (for example, which ad was clicked) to understand what content performs best. Ylvaape does not buy personal data from data brokers.

Children’s data. Ylvaape does not knowingly collect data from children under 13 (or the minimum age in your country). If you believe a child has provided personal data, contact [email protected] so Ylvaape can delete it.

2. How Ylvaape uses information

Orders and services. Ylvaape uses data to confirm orders, process payments, arrange shipping (often involving specialized furniture delivery), provide delivery updates, and handle returns and warranties.

Support. Ylvaape uses data to answer questions (e.g., advice on wood maintenance), investigate issues, and improve service quality.

Personalization and improvements. Ylvaape remembers your preferences (e.g., preferred wood type, finish samples requested) and analyzes product and site performance to fix problems, plan better features, and suggest items you may like.

Marketing (only with your consent where required). Ylvaape sends newsletters or promotions (e.g., announcements of new solid wood collections) only if you opt in. You can unsubscribe anytime via email links or by contacting [email protected].

Safety and compliance. Ylvaape uses information to prevent fraud, secure the site, enforce policies, and meet legal or tax obligations.

How long data is kept. Order and invoice records are kept up to 6 years (to satisfy tax, accounting, and warranty requirements). Support messages are kept up to 2 years. Marketing preferences are kept until you unsubscribe. Analytics data is typically retained 14–26 months (tool-dependent). Data may be kept longer if required by law or to resolve disputes; otherwise it is deleted or anonymized.

Legal bases (EU/UK). Ylvaape processes personal data because it is necessary to perform a contract (your order for customized furniture), for legitimate interests (running, improving, and protecting services—balanced against your rights), with consent (for marketing and non-essential cookies), and to comply with legal obligations. Ylvaape does not make decisions about you solely by automated means that have legal or similarly significant effects.

3. Sharing information

Ylvaape does not sell or rent personal data. Information is shared only with trusted partners who must keep it secure and use it solely to provide services to Ylvaape:

Payment processors (e.g., Stripe, PayPal)

Shipping and logistics (e.g., UPS, FedEx, DHL, specialized furniture couriers)

Service providers (secure hosting, cloud storage, customer email delivery, analytics such as Google Analytics, and advertising tools such as Meta Pixel where you have consented)

Professional advisers (accounting, legal) when needed

Legal and safety. If the law requires it—or to protect rights, safety, or prevent fraud—Ylvaape may disclose information to authorities.

Business changes. If Ylvaape undergoes a merger, acquisition, or sale, your data may transfer to a new owner under the same protections described here.

4. Data security

Ylvaape protects information with TLS/SSL encryption, secure servers and access controls, routine security updates and monitoring, and limited staff access with privacy training. While strong safeguards are applied, no online system is 100% secure.

5. Your rights

Everyone can request a copy of their data, correct inaccurate data, ask for deletion where allowed, restrict or object to certain uses, and withdraw consent to marketing at any time (you will still receive order and shipping emails). To exercise rights, email [email protected]. Ylvaape may ask for information to verify your identity and aims to respond within 30 days. Requests are free unless excessive or repeated, in which case a reasonable fee may apply.

United States (CCPA/CPRA – California). You can know what is collected, request deletion or correction, and opt out of “sale” or “sharing” for cross-context behavioral advertising. Ylvaape does not sell or share personal data in this way. If that changes, a “Do Not Sell or Share My Personal Information” option will be provided. Where required by law, Ylvaape treats a valid Global Privacy Control signal as an opt-out. If a request is denied, you may submit an appeal using the instructions in the response.

European Union & United Kingdom (GDPR/UK GDPR). You have the rights of access, correction, deletion, portability, restriction, and objection. You may also lodge a complaint with your local Data Protection Authority.

Canada (PIPEDA). You may access and correct personal data and withdraw consent, subject to legal and contractual limits.

Australia (APPs). You may access and correct personal data and complain to the OAIC if concerns are not resolved.

6. Cookies

Cookies help the site function correctly (cart, checkout, login), remember preferences, measure what is working, and—with your consent where required—show more relevant ads. You can manage cookies in your browser (block, delete, or limit). If you block some cookies, features such as the cart may not work. In places where the law requires it, Ylvaape uses a cookie banner so you can accept or reject non-essential cookies and adjust your choices later.

7. International transfers

Your data may be stored or processed on secure servers in the United States. For customers in the EU/UK/Canada/Australia, this means data may be transferred outside your country. Ylvaape protects these transfers with approved safeguards such as Standard Contractual Clauses (SCCs) or other region-approved tools.

8. Additional details for transparency

User-generated content. If you leave product reviews or upload images of your installed furniture, the content may be public on the site. Please do not post sensitive personal information.

• Third-party links. The website may link to other sites. Those sites have their own privacy practices; please review their policies.

• Sensitive data. Ylvaape does not use precise geolocation, biometric identifiers, or other sensitive categories to infer characteristics about you, and does not use sensitive personal information for purposes that require an opt-out under the CPRA.

Notice at collection (California). In the last 12 months, Ylvaape has collected identifiers (name, email, address, phone), commercial information (orders), internet activity (pages viewed, interactions), and geolocation at the city/region level. Sources include you and your devices (via cookies/analytics), and ad platforms for campaign attribution. The purposes and retention periods are described above; Ylvaape does not sell or share this data as defined by California law.

9. Changes to this policy

Ylvaape may update this policy to reflect changes in services or the law. When updates occur, the “Last updated” date above changes. If a change is significant, Ylvaape may also notify you by email (where permitted) or with a notice on the website.

10. Contact

If you have questions about this Privacy Policy or your personal data, please contact Ylvaape:

Address: 313 Rose St, Craig, CO 81625

Phone: +1 (970) 568-2040

Email: [email protected]

Support Time: Mon–Sun: 8:00 AM-5:00 PM MST