GDPR Policy

1. Data Controller

Retrohavena acts as the data controller for the personal data collected through our website and services. We are responsible for ensuring your data is processed lawfully and securely.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

  • Identity information (name, billing/shipping address)
  • Contact information (email address, phone number)
  • Order information (products purchased, order history)
  • Payment information (processed securely by third-party providers; we do not store full card details)
  • Technical data (IP address, browser type, device information)
  • Usage data (website interactions, pages viewed, session duration)

3. Legal Basis for Processing

We process your personal data under the following legal bases:

  • Contract performance: to process and deliver your orders
  • Legal obligation: for tax, accounting, and regulatory compliance
  • Legitimate interests: to improve services, prevent fraud, and ensure website security
  • Consent: for marketing communications and optional cookies (where applicable)

4. How We Use Your Data

Your personal data may be used to:

  • Process and fulfill orders
  • Provide customer support
  • Send order confirmations and shipping updates
  • Process payments and refunds
  • Improve website functionality and user experience
  • Prevent fraudulent or unauthorized activity
  • Comply with legal obligations

5. Data Sharing

We do not sell your personal data.
However, we may share your data with trusted third parties, including:

  • Payment service providers
  • Logistics and shipping partners
  • IT and hosting providers
  • Legal or regulatory authorities when required by law

All third parties are required to process data securely and in compliance with GDPR.

6. Data Retention

We retain personal data only for as long as necessary to:

  • Fulfill orders and provide services
  • Comply with legal, tax, and accounting obligations
  • Resolve disputes and enforce agreements

After this period, data is securely deleted or anonymized.

7. Your GDPR Rights

Under GDPR, you have the following rights:

  • Right to access your personal data
  • Right to rectification of inaccurate data
  • Right to erasure (“right to be forgotten”)
  • Right to restrict processing
  • Right to data portability
  • Right to object to processing
  • Right to withdraw consent at any time

To exercise your rights, please contact our support team.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against loss, misuse, unauthorized access, or disclosure.

9. International Data Transfers

Your personal data may be transferred and processed outside your country of residence. In such cases, we ensure appropriate safeguards are in place to protect your data in accordance with GDPR requirements.

10. Cookies and Tracking

We use cookies and similar technologies to enhance user experience, analyze website traffic, and support marketing activities. You can manage your cookie preferences at any time.

11. Changes to This Policy

We may update this GDPR Policy from time to time. Any changes will be posted on this page with an updated effective date.

12. Contact Us

Customer Service Email: info@retrohavena.com
Address: 187 Barker St, Anniston, AL 36206, USA
Telephone: +1 (256) 294-3243
Business Hours: Monday to Friday, 9:00 AM – 6:00 PM (EST)