Last updated: October 24, 2026. This policy describes how Vezorya handles personal information. Privacy rights that apply in your location remain in force.

1. Privacy requests

For questions about personal information or to submit a request, use the privacy request form or the contact form.

2. What data we collect and why (purposes & legal basis)

DataPurposeLegal basis (GDPR)
Name, email, password (hashed)Account creation & authenticationContract
Shipping address, phoneOrder fulfilment & deliveryContract
Order & payment records (no card numbers)Processing orders, tax/accounting, fraud preventionContract / Legal obligation / Legitimate interest
Referral code, clicks, attributed ordersOperating the affiliate programmeContract / Legitimate interest
Support tickets & chatCustomer serviceContract / Legitimate interest
Device/browser, IP, analytics cookiesSecurity, analytics, site improvementConsent / Legitimate interest
Marketing email & preferencesPromotional communicationsConsent (or applicable soft opt-in)

Checkout currently offers PayPal and NOWPayments. The selected payment provider processes payment credentials; the store receives the transaction status and reference needed to fulfil an order.

3. Your rights (GDPR / UK GDPR)

You have the right to: access, rectify, erase ("right to be forgotten"), restrict processing, data portability, object to processing, and withdraw consent at any time. EU/UK users may also lodge a complaint with a supervisory authority.

Exercise these from your account (Settings → Export/Delete), via the privacy request form, or through our contact form. Response periods depend on the applicable jurisdiction.

4. CCPA / CPRA (California)

We collect the categories described above for the listed business purposes. You have the right to know/access, delete, correct, and limit the use of sensitive personal information, and the right not to be discriminated against for exercising these rights.

Do Not Sell or Share My Personal Information: we do not sell personal information in the traditional sense and do not share it for cross-context behavioural advertising beyond what you consent to. You may submit an opt-out via the privacy request form. We honor the Global Privacy Control (GPC) signal automatically.

5. Cookies

We use essential, analytics and marketing cookies. You control optional cookies through our consent banner; see the Cookie Policy.

6. Data sharing & processors

The service uses hosting, database, email, storage, and payment providers to operate the store. PayPal and NOWPayments are available at checkout.

7. International transfers

Service providers may process information in countries other than your own. Applicable data protection requirements continue to apply.

8. Retention

Account and order records are retained only as long as needed to operate accounts, fulfil orders, protect the service, and meet legal and accounting obligations. Marketing consent records are retained to document consent and withdrawal. You can submit a privacy request through the privacy request form.

9. Security & breach response

We apply technical and organisational measures (encryption in transit, hashed passwords, access controls, audit logging). No system is guaranteed perfectly secure. In the event of a personal-data breach likely to result in risk to individuals, we will notify the competent supervisory authority (and, where required, you) within the legal deadlines.

10. Children

Accounts and purchases should be made only by people legally able to enter into a contract where they live. If you are not legally able to do so, ask a parent or guardian to act for you.

11. Contact & changes

Questions: use the contact form. We may update this policy; material changes will be notified where required.