Privacy policy
What we collect through this website and by email, why, who receives it, how long we keep it — and what you can ask us to do with it.
Who we are
This website is run by Varony Global LLC trading as Asoran (“we”, “us”). We are the controller of the personal information described in this policy. For any privacy question or request, email hello@asoran.com.
What we collect
What you send us through the inquiry form or by email: your name, email address, country, the kind of project, the quantity you have in mind and a description of your project. You may also add files you attach, such as sketches, photos or your logo, links you share, company name, website, the products you are interested in, finish, timeline and target price.
To reply we need the details marked as required on the form; without them we cannot prepare a quote. Everything else is optional. If you order, we also receive the delivery, invoicing and payment details needed for it.
When you send the form, our hosting provider tells us which country your internet connection appears to come from, based on your IP address. We add this to your inquiry to help us reply at a sensible time and estimate shipping.
To deliver this website and protect it from abuse, our hosting provider processes your IP address and basic request details, such as your browser type and the page requested. For example, we limit how many inquiries can be sent from one IP address in a short time.
How we use it, and why we may
| What we do | Legal basis (GDPR / UK GDPR) |
|---|---|
| Reply to your inquiry and prepare a quote | If you contact us for yourself — as a sole trader or independent designer, for example — steps you asked for before a possible contract (Art. 6(1)(b)). If you contact us for a company, our legitimate interest in answering business inquiries (Art. 6(1)(f)). |
| Make and ship your order | Performing our contract with you (Art. 6(1)(b)) or, where the contract is with your company, our legitimate interest in fulfilling it (Art. 6(1)(f)). |
| Keep records of past inquiries and orders | Our legitimate interest in handling follow-up questions and reorders, and in establishing or defending legal claims (Art. 6(1)(f)). |
| Keep accounting and tax records | Our legitimate interest in complying with the accounting and tax law of the place where we are established (Art. 6(1)(f)). |
| Protect this website and the inquiry form from spam and abuse | Our legitimate interest in keeping the site secure and usable (Art. 6(1)(f)). |
You can ask us how we balanced these interests against your rights. We don’t send marketing emails, and we don’t sell, rent or share your information for advertising.
Designs, sketches and 3D files you send us are used only to quote, sample and make your order. We don’t show them to other customers or use them for anyone else.
Automated decisions
We don’t make decisions about you by automated means. To filter spam, the form notes things such as how quickly it was filled in; a submission that looks automated is still delivered to us and read by a person.
Who receives it
- Cloudflare, Inc. (USA) hosts this website, runs the inquiry form, delivers your inquiry to our mailbox and protects the site, acting on our behalf as our processor (see its privacy policy).
- Our email provider stores our correspondence with you.
- Workshops that help make your order — casting, plating or stone setting, for example — receive only the design files and specifications they need, not your contact details.
- The couriers we use for your order receive the delivery details needed to ship it.
- Our bank and accountants receive the payment and invoice details they need.
- Authorities, where the law requires us to disclose information.
We do not sell your information or share it with anyone for their own marketing.
International transfers
Our team works outside the EU and the UK, in a country that does not have an adequacy decision from the EU or the UK. When you send us an inquiry, you send it directly to us there.
Cloudflare, Inc. participates in the EU–U.S. Data Privacy Framework, its UK Extension and the Swiss–U.S. Data Privacy Framework, so transfers to Cloudflare rely on the adequacy decisions for those frameworks (GDPR Art. 45). Cloudflare’s Data Processing Addendum also contains the EU Standard Contractual Clauses as a fallback.
Wherever your information is processed, we use it only for the purposes in this policy.
How long we keep it
| Information | Kept for |
|---|---|
| Inquiries that don’t lead to an order | Deleted within 24 months |
| Orders, invoices and accounting records | As long as the accounting and tax law of the place where we are established requires |
| An inquiry whose email delivery failed (its text, your name and email address, and the names of any files — not the files themselves) | Up to 30 days at Cloudflare, so we can still answer it; then deleted automatically |
| Our website logs (a reference number and any errors — never your name, email or message) | Up to 7 days |
| Cloudflare’s email delivery records (sender, recipient, time, status and the subject line, which shows your name or company) | Up to 31 days |
| A copy of the delivered inquiry, if Cloudflare’s message preview is switched on for troubleshooting | Up to 7 days |
Your rights
You can ask us for a copy of your information, to correct it, to delete it, to restrict how we use it, to object to how we use it (in particular where we rely on legitimate interests), and to receive it in a portable format. Email hello@asoran.com — we reply within one month.
If you are unhappy with how we handle your information, please tell us first: we acknowledge every complaint within 30 days and tell you the outcome. You can also complain to a data protection authority — in the EU, the authority in your country; in the UK, the Information Commissioner’s Office.
Changes to this policy
If we change this policy in a way that matters, we update the effective date at the top of this page. Questions about it are always welcome: see “Who we are”.