Privacy Policy
Draft — 9 November 2026. This notice describes intended store operations. Confirm actual providers, technologies and practices before opening sales or enabling advertising.
1. Who we are
Valley LLC operates https://valleyclub.store, a U.S. furniture hardware store with prices in USD. Business contact: 9619 Rieshel St, Pico Rivera, CA 90660, United States; hello@valleyclub.store; +1 716-925-5372. These details were provided by the operator and are not an independent registration verification.
2. Information categories, sources and purposes
Depending on the features enabled and how you interact with the store, the following information may be processed:
- Identifiers and contact details: name, email, phone, billing and delivery address, account username and online identifiers. Sources: you, your device and service providers. Purposes: account access, order handling, support, fraud prevention and communications.
- Commercial information: products considered or ordered, selected options, transaction references, payment status, order value and order history. Sources: you, the store and a payment provider once configured. Purposes: payment, fulfillment, returns, accounting and legal obligations. Do not email card numbers or security codes. No gateway is specified in this pack; the intended configuration must avoid storing full payment card numbers or security codes on the store.
- Internet/device activity: IP address, browser, device/operating system, pages viewed, referring URL, timestamps, cookies and security logs. Sources: your browser/device and hosting/software providers. Purposes: website functionality, security, troubleshooting and, only when enabled and legally permitted, analytics and advertising.
- Communications and voluntary content: support messages, privacy requests and reviews you choose to submit. Purposes: responding, resolving issues, managing rights requests and publishing submitted reviews where that feature is enabled. Public reviews should not include sensitive information.
- Advertising events and inferences: if advertising is enabled, cookie/click identifiers, product views, cart/checkout events, purchase value, purchased products and order reference may support attribution, measurement and interest-based advertising. See AppLovin below. Do not include raw contact details or sensitive data in advertising events without a separate lawful, reviewed basis.
We do not plan to collect precise geolocation, health information, biometrics, government identification or other sensitive personal information for advertising. We do not plan to use profiling for decisions producing legal or similarly significant effects. Actual processing and any sensitive-data collection require review and notices/consent required by law before implementation.
3. Recipients and disclosures
Depending on services actually enabled, information may be disclosed to hosting, security and IT providers; email delivery providers; payment processors; fulfillment suppliers and carriers; professional advisers; authorities where legally required; and a successor in a lawful business transfer. Limit disclosure to what is necessary for the stated purpose and apply appropriate contracts. Suppliers receive delivery and order information only as needed for fulfillment. No specific payment processor or fulfillment agreement is established by this pack.
Advertising partners, including AppLovin when enabled, may receive identifiers, device/internet activity and commercial event information for measurement and targeted advertising. These disclosures may constitute a “sale” or “sharing” under California law or a sale/targeted-advertising activity under other state laws even where no money is paid for the information. No advertising scripts or event integrations are bundled with this pack. We do not represent an audited historical sale/disclosure record; the operator must verify actual past practices and update required notices before publication.
4. AppLovin advertising partner
AppLovin Corporation (AppLovin) is the planned third-party advertising and measurement partner. If enabled, its pixel or event integration may collect or receive IP address, browser/device details, cookie and click identifiers, pages and products viewed, cart and checkout actions and purchase information such as products, value and order reference. AppLovin may use these data for ad attribution, measurement, optimization, interest-based advertising/retargeting and improvement of its advertising services, as described in its policy. Its role and permitted processing must be verified against the actual integration and contract.
Read AppLovin’s privacy policy and its own choices at https://legal.applovin.com/privacy. An external AppLovin opt-out does not replace the store’s Your Privacy Choices / Do Not Sell or Share control.
Before enabling AppLovin, configure and test a consent manager that names AppLovin and prevents advertising events where consent is required but absent, consent has been withdrawn, or an applicable opt-out/GPC signal is present. This pack does not itself connect to AppLovin or automatically block future third-party tags. Do not enable advertising until these controls work.
5. Cookies and browser preferences
WordPress and WooCommerce may use necessary login, security, cart and session cookies, such as woocommerce_cart_hash, woocommerce_items_in_cart and wp_woocommerce_session_*, when the corresponding features are used. The exact cookie inventory and durations depend on the deployed configuration and must be audited. Optional statistics/marketing technologies require separate configuration and appropriate consent or opt-out handling.
The supplied privacy control saves vc_privacy_optout=1, a first-party browser preference cookie lasting up to 365 days, and detects Global Privacy Control (GPC). It records a request to opt out of sale, sharing and targeted advertising for that browser. GPC takes precedence over a conflicting advertising opt-in. Future advertising integrations must read this preference and the consent manager before sending events. Browser settings may delete cookies; use GPC or repeat your choice after clearing cookies and on other browsers/devices. Contact us for account-associated requests; the local control alone does not associate a request with an account or another device.
A consent manager is not bundled. Once installed, provide accessible reject/accept controls where relevant and a persistent settings link. The privacy choices page will render supported consent-manager controls if available. You may also block cookies through browser settings, but necessary store features may stop working.
6. California rights — CCPA/CPRA
Where the California Consumer Privacy Act as amended by the CPRA applies, California residents may request access to categories and specific pieces of personal information; categories of sources; purposes; categories of recipients and information disclosed, sold or shared over the legally required period; deletion subject to lawful exceptions; correction; and a portable copy where applicable. You may opt out of sale and sharing for cross-context behavioral advertising and limit use/disclosure of sensitive personal information where the law provides that right. We do not plan sensitive-data uses beyond legally permitted purposes. If practices change, provide the legally required notice and limitation mechanism first.
Use Your Privacy Choices / Do Not Sell or Share, enable GPC, email hello@valleyclub.store, or call +1 716-925-5372. No account or identity verification is required for opt-outs. Authorized agents may submit requests with appropriate proof of authorization; access/correction/deletion requests may require reasonable verification without excessive collection. We will not discriminate for exercising rights.
The request process must acknowledge qualifying California requests within 10 business days and respond generally within 45 calendar days, with a further 45-day extension and notice where permitted. Sale/sharing opt-outs and qualifying limitation requests must be implemented as soon as feasible and within 15 business days. These legal service requirements must be operational before launch, not merely stated in this notice.
7. Other U.S. state privacy rights
Residents of other U.S. states with applicable privacy laws may have rights to confirm processing, access, correct, delete and obtain portable copies of personal information, and to opt out of targeted advertising, sale of personal data, and profiling in furtherance of decisions producing legal or similarly significant effects. No such significant-effect profiling is planned. Applicable sensitive-data processing requires consent where the law requires it. Legal scope, thresholds, exemptions and exceptions apply; applicability must be assessed before launch.
Submit a request by email to hello@valleyclub.store or call +1 716-925-5372. Use the privacy choices page or a universal opt-out mechanism such as Global Privacy Control to opt out of sale and targeted advertising where required. We may reasonably authenticate access, correction or deletion requests. No account is required. Authorized agents may act for you as permitted by law. We will not discriminate for exercising rights.
We will respond within applicable legal deadlines, explain denials, and provide an appeal path where the law requires one. The operator must establish and test these workflows before launch.
8. Other states and request handling
Other U.S. residents may have similar access, correction, deletion, portability, opt-out and appeal rights under applicable state law. Email or call the contacts above, identify the right requested and provide the email/order reference relevant to your relationship with the store. Do not send passwords, full payment details or unnecessary identity documents. We will explain denials and respond within applicable legal deadlines. Deletion may exclude records required for tax, fraud prevention or legal claims. Requests must be passed to processors or relevant recipients as required by law. You may also contact AppLovin directly through its policy.
9. Retention, security and transfers
Retain order and transaction records only as needed for fulfillment, accounting, tax and legal obligations; support messages as needed to resolve issues and comply with law; account data while needed for the account; and logs only as necessary for security. Retention depends on purpose, legal requirements and disputes, not an invented fixed period. Delete or anonymize data when no longer needed. The browser opt-out duration is described above; actual provider-cookie durations must be disclosed after audit.
Before taking orders, implement HTTPS, least-privilege administrative access, updates/backups and an appropriate payment configuration. No method is completely secure. Service providers may process information outside the United States; assess safeguards and disclose actual providers and transfers before deployment. No specific hosting geography is promised.
10. Children, changes and contact
The store is intended for adults. No advertising to known children or collection/sale/sharing of children’s information is planned. Contact us if a child has supplied personal information so we can investigate and take required action. Any processing involving children requires separate legal review and required parental/other consent before implementation.
Update this notice when practices change and give additional notice where required. Privacy questions, requests, appeals and sensitive-data limitation requests: Valley LLC, 9619 Rieshel St, Pico Rivera, CA 90660, United States; hello@valleyclub.store; +1 716-925-5372.