Privacy policy

What we collect, why we collect it, who else sees it, and how to make us stop. We collect the minimum we need to sell you something and get it delivered.

Who is responsible

Dex Solutions LLC, trading as Zaivoron, is the controller of the personal data described here. Registered address: 30 N Gould St, Sheridan, WY 82801, USA. For anything on this page, contact [email protected].

We aim to meet the standards of CCPA/CPRA (California) and GDPR (EU/UK visitors), and we apply the stronger standard to everyone rather than sorting visitors by location.

What we collect

When you place an order

Your name, email address, delivery address and billing address
Your phone number, where a carrier requires one for delivery
What you bought, when, and for how much
Payment confirmation and the last four digits and card type — never your full card number, which goes directly to our payment provider and is never seen or stored by us

When you contact us

Your email address and whatever you choose to put in the message
Our replies, kept so the next person to help you has the history

When you just browse

Pages viewed, approximate region, device and browser type, and referring site
Cookie and similar identifiers — see the cookie policy

We do not ask for, and have no use for, your date of birth, government identifiers, or any special-category data such as health information.

Why we use it, and our legal basis

Fulfilling your order: Performance of our contract with you
Payment and fraud prevention: Legal obligation and legitimate interest
Customer support: Performance of contract and legitimate interest
Keeping tax and accounting records: Legal obligation
Marketing email: Your consent, withdrawable at any time
Analytics and advertising measurement: Your consent, via the cookie banner

We do not sell your personal information for money. If you are in California, note that sharing data with advertising partners for cross-context behavioural advertising can count as a “sale” or “share” under the CCPA/CPRA even without payment — you can switch that off, and the cookie banner is where you do it.

Only the service providers we need to run the store. Each one is bound to use the data only on our instructions.

Shopify — Store platform and order processing: Order and account data
Payment processor — Card authorisation: We never see or store full card numbers
USPS, UPS and DHL — Delivery and tracking: Name and delivery address only
Amazon Web Services — Order emails and, with consent, marketing: Email address and order details
Google Analytics 4 — Aggregate traffic measurement: Consent required; declining changes nothing about the store

We may also disclose data where the law requires it, or to establish or defend a legal claim. If the business is ever sold, customer records may transfer with it, and this policy continues to apply until you are told otherwise.

International transfers

Our providers may process data outside your country, including in the United States. Where data moves out of the UK or EEA, we rely on an adequacy decision or on Standard Contractual Clauses, together with appropriate technical safeguards.

How long we keep it

Order and tax records are kept for 7 years because tax law requires it. Support correspondence is kept for 2 years. Marketing contacts are kept until you unsubscribe, then deleted.

Order and tax records have a legal minimum retention period that we cannot shorten even if you ask us to delete them. Support emails and marketing contacts are deleted when they are no longer needed or when you ask, whichever comes first.

Your rights

Whatever jurisdiction you are in, you can ask us to:

Show you the personal data we hold about you
Correct anything inaccurate
Delete it, where we are not legally required to keep it
Export it in a portable, machine-readable format
Stop using it for marketing, immediately and permanently
Object to or restrict processing based on legitimate interest
Opt out of any sale or sharing for targeted advertising

Email [email protected]. We respond within 30 days, free of charge. We may ask you to confirm your identity first — that is to stop someone else requesting your data, not to slow you down. We will never treat you worse, or charge you more, for exercising any of these rights.

If you are in the EEA or UK you can also complain to your national data protection authority. We would rather you came to us first so we can fix it.

Marketing email

We only email marketing to people who asked for it. Every message has a working unsubscribe link, one click, no sign-in and no “are you sure” page. Unsubscribing never affects emails about an order you have actually placed.

Security

The site is served over HTTPS, payment details go directly to a PCI-compliant provider, and access to customer records is limited to people who need it. No system is perfectly secure, so if a breach ever affects your data we will tell you and the relevant regulator within the timeframes the law sets.

Children

This store is not intended for children, and we do not knowingly collect data from anyone under 16. If you believe a child has given us personal data, email us and we will delete it.

Changes to this policy

If we change how we use personal data in any material way, we will update this page and, where it affects you meaningfully, tell you directly. The date at the top shows the last revision.