Privacy policy
Effective Date: 08-24-2024 – Last Updated: 03-22-2026
At Inpavilion, we take your privacy seriously. This Privacy Policy explains what information we collect, how we use it, and what rights you have over your data when you visit inpavilion.com or make a purchase from us.
By using our website, you agree to the practices described in this policy. If you have any questions, contact us at [email protected].
I. What information we collect
Information you provide directly
When you make a purchase or contact us, we may collect:
- Name – to process your order
- Email address – to send order confirmation, download links, and support communications
- Billing information – processed securely through our payment gateway (we do not store your card details)
- Messages or inquiries – when you contact us via email or live chat
Information collected automatically
When you visit our website, we automatically collect certain technical data, including:
- IP address
- Browser type and version
- Device type and operating system
- Pages visited and time spent on site
- Referring URLs (how you found us)
- Click and interaction data
This data is collected through cookies and third-party tools described below.
Information from third-party services
We use the following tools which may collect data on our behalf:
Google Analytics – We use Google Analytics to understand how visitors interact with our website – including which pages are most visited, how long people stay, and where traffic comes from. Google Analytics collects anonymized data via cookies. You can opt out using the Google Analytics Opt-Out Browser Add-on.
Google Tag Manager – We use Google Tag Manager to manage and deploy tracking scripts on our website. GTM itself does not collect personal data but facilitates the tools that do, including Google Analytics.
Google Search Console – We use Google Search Console to monitor our website’s performance in Google Search. This tool processes aggregated, non-personal search data such as search queries that lead users to our site.
Google reCAPTCHA – We use Google reCAPTCHA on forms and checkout pages to protect against spam and automated abuse. reCAPTCHA analyzes user behavior and device information to determine whether an interaction is human. This data is processed by Google under their Privacy Policy. By using our forms, you agree to Google’s data collection through reCAPTCHA.
II. How we use your information
We use the information we collect for the following purposes:
| Purpose | Legal Basis (GDPR) |
|---|---|
| Processing your order and delivering files | Contract performance |
| Sending order confirmation and download links | Contract performance |
| Responding to support inquiries | Legitimate interest |
| Analyzing website traffic and improving our site | Legitimate interest |
| Protecting against spam and fraudulent activity | Legitimate interest |
| Complying with legal obligations | Legal obligation |
We do not sell your personal data to third parties.
III. Cookies
Our website uses cookies to improve your browsing experience and gather analytics data.
Types of cookies we use
Strictly Necessary Cookies Essential for the website to function. These include session cookies and security cookies. You cannot opt out of these.
Analytics Cookies Used by Google Analytics and Google Tag Manager to collect anonymized data about how visitors use our site. These help us improve the website experience.
Security Cookies Used by Google reCAPTCHA to distinguish human users from bots.
Managing your cookie preferences
You can control cookies through your browser settings at any time. Most browsers allow you to block or delete cookies. Note that disabling certain cookies may affect website functionality.
For more details, see our Cookie Policy.
IV. How we share your information
We do not sell, rent, or trade your personal data. We may share limited information with trusted third parties only as necessary to operate our business:
- Payment processors (e.g., PayPal, Stripe) – to securely process transactions. They handle your payment data under their own privacy policies.
- Google LLC – for Analytics, Tag Manager, Search Console, and reCAPTCHA services
- Email service providers – to deliver order confirmations and support communications
- Legal authorities – if required by law, court order, or to protect the rights and safety of Inpavilion or others
All third-party partners are required to handle your data securely and in accordance with applicable privacy laws.
V. Data retention
We retain your personal data only for as long as necessary:
| Data Type | Retention Period |
|---|---|
| Order and transaction records | 7 years (legal/tax requirements) |
| Email communications | 2 years after last contact |
| Analytics data | 26 months (Google Analytics default) |
| Account data | Until account deletion requested |
You may request deletion of your data at any time by contacting us at [email protected].
VI. Your rights under GDPR (EU/EEAusers)
If you are located in the European Union or European Economic Area, you have the following rights under the General Data Protection Regulation (GDPR):
- Right to Access – Request a copy of the personal data we hold about you
- Right to Rectification – Request correction of inaccurate or incomplete data
- Right to Erasure – Request deletion of your personal data (“right to be forgotten”)
- Right to Restrict Processing – Ask us to limit how we use your data
- Right to Data Portability – Receive your data in a structured, machine-readable format
- Right to Object – Object to processing based on legitimate interests or for direct marketing
- Right to Withdraw Consent – Withdraw consent at any time where processing is based on consent
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
If you believe we have not handled your data appropriately, you have the right to lodge a complaint with your local data protection authority.
VII. Data security
We take reasonable technical and organizational measures to protect your personal data, including:
- SSL/TLS encryption on all pages
- Secure, encrypted payment processing (we never store card details)
- Access controls limiting who can view your data internally
- Regular security reviews of our systems and third-party integrations
While we do our best to protect your data, no method of transmission over the internet is 100% secure. We encourage you to use strong passwords and keep your account credentials private.
VIII. Children’s privacy
Our website is not intended for children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us at [email protected] and we will delete it promptly.
IX. International data transfers
Inpavilion operates from the United States. If you are accessing our website from outside the US – including from the EU or EEA – your data may be transferred to and processed in the United States.
For EU/EEA users, such transfers are made in compliance with GDPR requirements, including reliance on Standard Contractual Clauses (SCCs) where applicable with our third-party service providers such as Google LLC.
X. Links to third-party sites
Our website may contain links to external websites. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policy of any third-party site you visit.
XI. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we do, we’ll update the “Last Updated” date at the top of this page.
We recommend reviewing this page periodically. For significant changes, we may notify you by email or a notice on our website.
XII. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please reach out:
- Email: [email protected]
- Hotline: +1-415-962-3869
- Live Chat: Available on inpavilion.com
- Response Time: Within 24 hours
By using inpavilion.com, you acknowledge that you have read and understood this Privacy Policy.