VANA PURE
Privacy Policy

Introduction

VANA PURE, operated by STAR INNOVATION LIMITED ("VANA PURE", "we", "us", or "our"), designs and sells handcrafted plush toys and offers a bespoke custom-toy service to customers across Europe and North America. We are committed to protecting your privacy.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at www.vanapure.com (the "Site"), create an account, place an order, request a custom plush toy, or interact with our services. Please read this policy carefully. If you disagree with its terms, please discontinue use of the Site.

Information We Collect

We may collect the following types of information:

• Personal Information: Name, email address, shipping address, billing information, and phone number when you make a purchase or create an account.
• Account & Profile Data: Profile details obtained when you register, including via Google Sign-In (your name, email, and profile picture).
• Custom Order Content: Reference photographs, design notes, and descriptions you upload or email to us for a bespoke plush toy.
• Usage Data: How you access and use the Site, including your IP address, browser type, pages visited, and time spent on pages.
• Device Information: Hardware model, operating system, and unique device identifiers.
• Communications: Records of correspondence if you contact us directly.

Custom Plush Toy Service

Our custom plush toy service lets you bring your own design to life. To process a custom request, we ask you to complete an order form and provide the following:

• Email address — so we can communicate about your design, quotes, approvals, and order status.
• Reference photos & images — the pictures you send us are used solely to design, prototype, and manufacture your personalized plush toy.
• Design details — colors, sizes, and any special instructions you share.

If your reference photos contain images of other identifiable people, please ensure you have their permission before sharing them with us.

Google Sign-In & Membership

To make joining the VANA PURE family effortless, we offer one-click registration and login through Google Sign-In (Google OAuth).

• When you choose to sign in with Google, we receive only your basic profile information — your name, email address, and profile photo — to create and secure your membership account.
• We do not receive or store your Google password.
• We use this information solely to authenticate you, manage your account, and personalize your shopping experience.
• Your use of Google Sign-In is also governed by Google's Privacy Policy.

You may disconnect VANA PURE from your Google account at any time via your Google Account permissions.

How We Use Your Information

We use the information we collect for the following purposes:

• To process and fulfill your orders, transactions, and custom plush toy requests.
• To communicate with you about your orders, products, and services.
• To create and manage your membership account.
• To improve, personalize, and expand our Site and services.
• To send you marketing and promotional communications (where permitted by law and with your consent where required).
• To comply with legal obligations and resolve disputes.
• To detect, prevent, and address technical issues or fraudulent activity.

Social Media & Advertising APIs

To manage our own brand presence and marketing, VANA PURE uses several official platform APIs to operate our own corporate social media and advertising accounts — publishing content, scheduling posts, and reviewing performance analytics.

• These integrations are used only to manage VANA PURE's own official accounts — to publish content, manage advertising campaigns, and view aggregated analytics.
• We do not collect, store, or process the personal data of third-party social media users through these APIs.
• Access tokens granted by each platform are used exclusively by our internal publishing and marketing tools, are stored securely, and are never sold or shared with unauthorized third parties.
• Each platform's handling of data is also governed by its own privacy policy — Google, TikTok, and Meta.

YouTube API Services & Google Data

VANA PURE uses the YouTube API Services to manage our official YouTube channel, including uploading and publishing video content. By using features on our Site that interact with YouTube, you acknowledge that your use is also subject to Google's Privacy Policy.

In connection with our use of the YouTube API Services:

• We access YouTube account data solely to upload, manage, and publish video content on our own official VANA PURE YouTube channel.
• We do not collect, store, or share any personal YouTube data belonging to third-party users.
• We do not use YouTube API data for advertising, resale, or any purpose other than internal channel management.
• OAuth 2.0 tokens obtained through Google are used exclusively for authenticating our internal publishing tool. These tokens are stored securely and are never shared with third parties.

You may revoke our application's access to your Google account data at any time via your Google Account security settings.

Cookies & Tracking Technologies

We use cookies and similar tracking technologies to monitor activity on our Site and to hold certain information. Cookies are files with a small amount of data that may include an anonymous unique identifier.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, some portions of the Site may not function properly. Where required by law (e.g., in the EEA and UK), we request your consent before placing non-essential cookies.

Sharing Your Information

We do not sell, trade, or otherwise transfer your personal information to outside parties except in the following circumstances:

• Service Providers: Third-party vendors who help us operate our business (e.g., payment processors, shipping providers, hosting and analytics), subject to confidentiality agreements.
• Legal Requirements: When required by law or in response to valid requests by public authorities.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

International Data Transfers

As a company serving customers in both Europe and North America, your information may be processed and stored in countries outside of your own, including outside the EEA and UK.

When we transfer personal data internationally, we put in place appropriate safeguards — such as the European Commission's Standard Contractual Clauses (SCCs) — to ensure your data receives an adequate level of protection wherever it is processed.

Data Retention

We retain your personal information only for as long as is necessary to fulfill the purposes described in this Privacy Policy, or as required by law. Custom-order reference photos are retained only for the duration needed to design, produce, and deliver your order plus any return window. When your data is no longer needed, we will securely delete or anonymize it.

Data Deletion Request

You have the right to request the deletion of your personal data held by VANA PURE at any time. To submit a request, please contact us at the email below. We will process your request within 30 days and confirm once your data has been deleted. Please note we may be required to retain certain information for legal or regulatory purposes.

To request deletion of any data associated with Google or YouTube API Services, you may also revoke our application's access directly via Google Account permissions, after which we will delete any associated tokens from our systems.

Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Third-Party Links

Our Site may contain links to third-party websites. We have no control over the content or privacy practices of those sites and are not responsible for their privacy policies. We encourage you to review the privacy policy of any third-party site you visit.

Children's Privacy

Our Site is not directed to children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us and we will take steps to delete such information.

Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal data:

• The right to access the personal data we hold about you.
• The right to request correction of inaccurate data.
• The right to request deletion of your data.
• The right to object to or restrict our processing of your data.
• The right to data portability.
• The right to withdraw consent at any time, where processing is based on consent.

For California Residents (CCPA / CPRA)

You have the right to know what personal information we collect, to request its deletion, to correct inaccurate information, and to opt out of the "sale" or "sharing" of personal information. VANA PURE does not sell your personal information. We will never discriminate against you for exercising these rights.

For EEA & UK Residents (GDPR)

You also have the right to lodge a complaint with your local data protection authority. To exercise any of these rights, please contact us using the information below.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page with an updated revision date. You are advised to review this Privacy Policy periodically. Changes are effective when posted on this page.