Effective date: October 25, 2026
This policy explains what personal information varifyo.com collects, why, who else handles it, how long it is kept and how you can reach us about it. It describes what the site does today: the catalogue is open to browse, and purchasing opens when the release checks are finished. The sections on orders, delivery and payment below are written for the shop as it will trade, so that nothing about them is a surprise on the day it opens.
Who we are
VARIFYO (varifyo.com) is operated by iGlomart LLC, a limited liability company registered in Delaware, United States. For any privacy question or request, write to info@varifyo.com.
Information we collect
When you browse the site
Like any website, our web server records technical information for each request: your IP address, the page requested, the date and time, and your browser’s user-agent string. We use these logs only to keep the site running and secure, and we keep them only as long as needed for that purpose.
The site uses no third-party analytics, no advertising pixels and no social-media trackers, and it loads its fonts and images from our own server. Nothing here follows you to another website. We do count visits ourselves, on our own server, so that we can see which pieces are being looked at and what people search for and cannot find. When you open a page, it sends us the address of that page, the address of the site you came from if you came from one, the time zone your browser is set to and the width of your window. No cookie is used for this and your IP address is not kept: it is combined with your browser’s description and a secret we replace every day to produce a short code, which lets us count you once rather than five times in an afternoon. Because the secret changes, that code cannot be matched to the one you were given yesterday, and none of it can be turned back into you. These records are deleted after one hundred and eighty days, and if you ask us to delete yours sooner we cannot find them, because there is nothing in them that identifies you. One cookie is set while you browse: a list of the pieces you have opened, which draws the “Recently viewed” row at the foot of a product page. It holds product numbers and nothing about you, it stays in your browser, and clearing your cookies removes it. WooCommerce’s order-attribution and usage-tracking features, which record where a visitor arrived from and report store usage to its maker, are switched off. WordPress sets cookies for signed-in site administrators, and the store software sets cookies only once you put something in a shopping bag.
When you email us
If you write to info@varifyo.com, we receive your email address, your name if you include it, and your message. We use them to reply and keep the correspondence as a record of what was agreed. Our mailbox is hosted by our email provider.
When you use the chat assistant
The chat assistant on our site is Allinaa Bot, a service also operated by iGlomart LLC. It collects the messages you type, any details you choose to share (such as your name, email address or phone number), files you choose to attach, and the address and title of the page you were on. It stores a session identifier in your browser’s local storage so the conversation can continue between pages; it sets no cookies and does no cross-site tracking.
Replies are generated automatically by an AI model from the information VARIFYO has approved. To produce a reply, your message is sent to OpenRouter (openrouter.ai), which routes it to the model provider. AI answers can be wrong; for anything that matters, ask us by email. Please do not share sensitive information, such as payment card or government ID numbers, in the chat.
Files attached in the chat are deleted automatically after 30 days. Chat messages and the details you share are kept until you ask us to delete them. The service’s full data practices are described in the Allinaa privacy policy.
How we use information
We use personal information only to answer you, to operate and secure the site and the chat assistant, and to comply with the law. We do not sell personal information, and we do not share it for cross-context behavioral advertising.
Who else handles it
Our hosting provider (the server that runs varifyo.com), our email provider, the Allinaa Bot service and its AI sub-processor OpenRouter with the model provider it selects. Each handles the information only to provide its service to us. An order brings in our supplier, the courier and customs as well; When you buy something, below, says exactly what each of them receives. We may also disclose information if the law requires it.
Your choices and rights
You can ask us what personal information we hold about you, ask us to correct it, or ask us to delete it, by writing to info@varifyo.com. We will reply within 30 days and may need to confirm that the request comes from you. Residents of California and other U.S. states with privacy laws may exercise these rights in the same way, and we will not treat you differently for doing so. If you are in the EU or the UK you have more rights than these, and they are set out in If you are in the EU or the UK, below.
Do Not Track
Because the site does not track visitors across other websites, it does not change its behavior in response to Do Not Track browser signals.
Children
The site is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has given us information, write to info@varifyo.com and we will delete it.
Security
The site is served only over HTTPS. Access to our systems is limited to the people who run them. No method of transmission or storage is completely secure, but we work to protect the information we hold.
Where information is processed
VARIFYO is operated from the United States and is currently delivering within the United States only. Information may be processed in the United States and in other countries where our service providers operate.
When you buy something
Purchasing is not open yet. When it opens, placing an order will mean giving us your name, your delivery and billing address, your email address and, if you choose to give one, a telephone number for the courier. We keep the order itself — what was bought, for how much, where it went and what happened to it — because we have to be able to answer for it, and because tax and accounting law requires a seller to keep records of its sales. Those records are kept for seven years.
Your card details never reach us. They are entered on, and held by, the payment processor. We receive only the fact that a payment succeeded or failed and a reference for it. The processor will be named on this page before the first sale.
To get a parcel to you, your name, delivery address, email address and any telephone number you gave are passed to:
- our supplier, BrandsGateway (Yakka Group AB, Sweden), whose warehouses hold the pieces and who despatch them to you directly on our behalf;
- the courier — FedEx, DHL or UPS — which needs the address to deliver and your email to send tracking;
- customs authorities, which need the contents, the value and the destination to clear a parcel. Import duty is paid by us, not by you, but the declaration is still made in your name as the recipient.
They each receive only what the delivery requires. We do not give them your payment details, and we do not give anyone your information for their own marketing.
If you are in the EU or the UK
We deliver to the EU and the UK, so the GDPR and the UK GDPR apply to what we do with your information. iGlomart LLC is the controller. Write to info@varifyo.com about any of this and a person will answer.
Why we are allowed to hold it. Each purpose has its own basis:
- an order, a delivery and a return — performance of a contract with you;
- keeping sales and tax records — a legal obligation;
- answering an email or a chat message, keeping the site up and keeping it secure — our legitimate interests in running a shop that works and can be held to what it says;
- anything you volunteer in the chat beyond what is needed to answer you — your consent, which you can withdraw at any time.
What you can ask for. A copy of what we hold; a correction; deletion; a restriction on what we do with it; a machine-readable copy to take elsewhere; and an objection to anything we are doing on the basis of our legitimate interests. Where we rely on consent, you can withdraw it, and withdrawing it does not undo what was lawful before. We do not charge for any of this, and we answer within one month. We make no decisions about you by automated means that have a legal or similarly significant effect.
If you are not satisfied, you can complain to your national data protection authority — in the UK, the Information Commissioner’s Office (ico.org.uk). We would rather you told us first, but you do not have to.
Information leaving your country. We are a United States company and our site, our records and our mailbox are in the United States, so your information is processed there. The United States has no European adequacy decision, and we do not rely on the EU-US Data Privacy Framework. Where a transfer needs a safeguard, we use the European Commission’s Standard Contractual Clauses with the provider concerned, and your rights under this policy follow your information wherever it goes. Our supplier BrandsGateway is itself in the EU.
One thing we have not done. Article 27 of the GDPR requires a company outside the EU that offers goods to people inside it to appoint a representative there. VARIFYO has not appointed one yet. We would rather say so than leave it unsaid; it is being arranged, and this page will name the representative when it is.
How long we keep things
- Server logs — 30 days, then deleted.
- Email you send us — three years from the last message, so we can answer a question about an old order.
- Chat messages — until you ask us to delete them. Files you attach are deleted automatically after 30 days.
- Orders, invoices and returns — seven years, because tax law requires it.
- An account, if you make one — until you close it or ask us to.
Changes to this policy
We will update this page when our practices change, including before purchasing opens, and show the new effective date at the top.