Legal & policies
Privacy policy
Last updated: June 17, 2026
This policy explains what personal data we collect, why, how we protect it, and the rights you have — including under the EU/UK GDPR and the California Consumer Privacy Act (CCPA/CPRA).
Who we are
This website is operated by VIENA SUPPLY TRADING LLC(“Vienatrade,” “we,” “us”), 1000 Brickell Ave Ste 300, Miami, FL 33131, USA. We are the data controller for the personal data described in this policy. Contact us at support@vienatrade.shop.
Data we collect
- Order & contact data: name, email, phone, shipping/billing address.
- Payment data: processed by Stripe. We receive confirmation and limited details (e.g. card brand, last 4 digits) but never your full card number.
- Communications: messages you send us via forms or email.
- Usage data: device, browser, pages viewed, and similar analytics, collected via cookies (see our Cookie Policy).
How we use your data
- To process, fulfil, and deliver your orders, and provide customer support.
- To prevent fraud and secure our site (including spam protection on forms).
- To send transactional emails (order confirmations, shipping updates).
- With your consent, to send marketing emails — which you can opt out of at any time.
- To comply with legal, tax, and accounting obligations.
Legal bases (GDPR)
We rely on: contract (to fulfil your order), consent (for marketing and non-essential cookies), legitimate interests (to secure and improve our service), and legal obligation (tax and record-keeping).
Service providers we share data with
We share data only with providers that help us run the store, under appropriate agreements:
- Stripe — payment processing.
- Supabase — secure database and order records.
- Resend — transactional and marketing email delivery.
- Cloudflare — security and bot/spam protection (Turnstile).
- Shipping carriers — to deliver your order.
We do not sell your personal information.
International transfers
We are based in the United States and process data there. Where data is transferred from the EEA/UK, we rely on appropriate safeguards such as Standard Contractual Clauses.
Data retention
We keep order and transaction records for as long as needed to provide our service and to meet legal, tax, and accounting requirements (typically up to 7 years). Marketing data is kept until you unsubscribe.
Your GDPR rights
If you are in the EEA/UK, you have the right to access, rectify, erase, restrict, or object to processing of your data, the right to data portability, and the right to withdraw consent at any time. You may also lodge a complaint with your local supervisory authority.
Your CCPA/CPRA rights (California)
California residents have the right to know what personal information we collect, to request deletion, to correct inaccurate information, and to opt out of any “sale” or “sharing” of personal information. We do not sell or share your personal information as those terms are defined under the CCPA/CPRA. We will not discriminate against you for exercising your rights.
How to exercise your rights
Email support@vienatrade.shop with your request. We will verify your identity and respond within the timeframe required by applicable law.
Children
Our site is not directed to children under 16, and we do not knowingly collect their data.
Changes
We may update this policy from time to time. The “last updated” date above shows when it last changed.