Privacy Policy
Last updated: October 11, 2026
This Privacy Policy explains how EVOXEN LLC, trading as Evoxen USA ("we", "us"), collects and uses personal data when you visit evoxenusa.com or buy from us. It is intended to meet the EU/UK General Data Protection Regulation (GDPR) and the California Consumer Privacy Act as amended by the CPRA (CCPA), and similar laws.
1. Controller and contact
[BUSINESS ADDRESS]
Email: [CONTACT EMAIL]">[CONTACT EMAIL]
Website: evoxenusa.com
EU representative (GDPR Art. 27): [EU REPRESENTATIVE NAME AND ADDRESS, IF APPOINTED]
2. Data we collect
- Order data: your name, email address, shipping address (street, city, postal code, country), the items ordered and order amounts.
- Payment data: card details are entered into a secure form hosted by Square and are sent directly to Square. We never see or store your full card number or security code. We receive limited information from Square, such as payment status, card brand and last four digits.
- Communications: what you send us by email (for example, fitment or return requests).
- Technical data: our hosting provider Cloudflare processes your IP address, browser type and request data to deliver and secure the website. Square may process device data in its payment form for fraud prevention.
We do not knowingly collect data from children under 16. We do not collect sensitive personal information.
3. Purposes and legal bases (GDPR)
| Purpose | Legal basis |
|---|---|
| Processing payment, fulfilling and delivering your order, returns and refunds, customer service | Performance of a contract (Art. 6(1)(b)) |
| Keeping tax and accounting records | Legal obligation (Art. 6(1)(c)) |
| Fraud prevention, website security, defending legal claims | Legitimate interests (Art. 6(1)(f)) |
| Marketing emails (only if you sign up) | Consent (Art. 6(1)(a)), which you can withdraw at any time |
4. Cookies and tracking
We do not use analytics, advertising or tracking cookies, and we do not use third-party tracking pixels. We store your language preference in your browser's local storage; this is strictly necessary for the feature you request and is never sent to us. Square's payment form and Cloudflare may use strictly necessary cookies or similar technologies for security and fraud prevention.
5. Who we share data with
- Square, Inc. (USA) – payment processing and fraud prevention.
- Cloudflare, Inc. (USA) – website hosting, content delivery and security.
- 5 Core (USA) – our supplier and fulfillment partner, which receives your name, shipping address and ordered items to ship your order (and, where needed for delivery, contact details).
- Shipping carriers – to deliver your parcel.
- Email provider (Google) – to send and receive order and support emails.
- Authorities or advisers where required by law.
We do not sell your personal information and do not "share" it for cross-context behavioral advertising, as those terms are defined in the CCPA.
6. International transfers
We are based in the United States and our service providers process data in the US. If you are in the EU/EEA, UK or Switzerland, your data is transferred to the US. These transfers are made where necessary to perform our contract with you (GDPR Art. 49(1)(b)) and, for service providers, on the basis of the EU-US Data Privacy Framework where the provider is certified, or the European Commission's Standard Contractual Clauses.
7. Retention
- Order and payment records: for as long as required by tax and accounting law (generally up to 7 years).
- Customer service emails: up to 3 years after the last contact.
- Marketing list: until you unsubscribe.
- Server logs held by Cloudflare: according to Cloudflare's short retention periods.
8. Your rights
EU/EEA/UK residents have the right to access, rectification, erasure, restriction of processing, data portability, and to object to processing based on legitimate interests, and to withdraw consent at any time. You also have the right to lodge a complaint with your local data protection supervisory authority.
California residents have the right to know what personal information we collect, use and disclose; to access and receive a copy; to correct; to delete; to opt out of sale or sharing (we do neither); to limit use of sensitive personal information (we do not collect it); and not to be discriminated against for exercising these rights. You may use an authorized agent. Categories collected in the last 12 months: identifiers (name, email, IP address), customer records (shipping address), commercial information (purchases), and internet activity (server logs) — all for the business purposes described above.
To exercise any right, email [CONTACT EMAIL]">[CONTACT EMAIL]. We will verify your request by matching it to your order details and respond within one month (GDPR) or 45 days (CCPA), which may be extended where the law allows.
9. Security
The site is served only over HTTPS. Payment data is handled by Square, a PCI-DSS compliant processor. No method of transmission is 100% secure, but we take reasonable measures to protect your data.
10. Changes
We may update this policy. The date at the top shows the latest version.
隱私權政策
最後更新：2026 年 10 月 11 日
本隱私權政策說明 EVOXEN LLC（營業名稱 Evoxen USA，「我們」）在您造訪 evoxenusa.com 或購物時，如何蒐集與使用個人資料。本政策旨在符合歐盟／英國《一般資料保護規則》（GDPR）、經 CPRA 修訂的《加州消費者隱私法》（CCPA）及類似法規。
1. 資料控管者與聯絡方式
歐盟代表（GDPR 第 27 條）：[EU REPRESENTATIVE NAME AND ADDRESS, IF APPOINTED]
2. 我們蒐集的資料
- 訂單資料：姓名、電子郵件、配送地址（街道、城市、郵遞區號、國家）、訂購商品與金額。
- 付款資料：卡片資料輸入於 Square 提供的安全表單並直接傳送給 Square。我們絕不會看到或儲存您的完整卡號或安全碼。我們僅自 Square 取得有限資訊，如付款狀態、卡別與末四碼。
- 通訊內容：您以電子郵件寄給我們的內容（例如適配或退貨申請）。
- 技術資料：主機服務商 Cloudflare 為提供與保護網站，會處理您的 IP 位址、瀏覽器類型與請求資料。Square 可能在付款表單中處理裝置資料以防範詐欺。
我們不會在知情的情況下蒐集 16 歲以下兒童的資料，也不蒐集敏感個人資料。
3. 目的與法律依據（GDPR）
| 目的 | 法律依據 |
|---|---|
| 處理付款、履行與配送訂單、退貨退款、客戶服務 | 履行契約（第 6(1)(b) 條） |
| 保存稅務與會計紀錄 | 法定義務（第 6(1)(c) 條） |
| 防範詐欺、網站安全、法律請求之防禦 | 正當利益（第 6(1)(f) 條） |
| 行銷電子郵件（僅於您訂閱時） | 同意（第 6(1)(a) 條），可隨時撤回 |
4. Cookie 與追蹤
我們不使用分析、廣告或追蹤 Cookie，也不使用第三方追蹤像素。我們僅在您瀏覽器的本機儲存空間保存語言偏好，此為您所要求功能的必要設定，且不會傳送給我們。Square 付款表單與 Cloudflare 可能為安全與防詐目的使用必要的 Cookie 或類似技術。
5. 資料分享對象
- Square, Inc.（美國）— 付款處理與防詐。
- Cloudflare, Inc.（美國）— 網站主機、內容傳遞與安全。
- 5 Core（美國）— 我們的供應商暨出貨合作夥伴，為出貨需取得您的姓名、配送地址與訂購商品（必要時含聯絡資料）。
- 物流業者 — 配送包裹。
- 電子郵件服務商（Google）— 收發訂單與客服郵件。
- 依法要求時之主管機關或顧問。
我們不出售您的個人資訊，也不為跨情境行為廣告目的「分享」您的資訊（依 CCPA 定義）。
6. 跨境傳輸
我們位於美國，服務供應商亦在美國處理資料。如您位於歐盟／歐洲經濟區、英國或瑞士，您的資料將傳輸至美國。此類傳輸係為履行與您的契約所必要（GDPR 第 49(1)(b) 條），服務供應商部分則依據其取得認證的歐美資料隱私框架（DPF）或歐盟執委會標準契約條款（SCC）。
7. 保存期間
- 訂單與付款紀錄：依稅務與會計法規要求保存（一般最長 7 年）。
- 客服郵件：最後一次聯絡後最長 3 年。
- 行銷名單：直到您取消訂閱。
- Cloudflare 伺服器日誌：依 Cloudflare 的短期保存期間。
8. 您的權利
歐盟／歐洲經濟區／英國居民享有查閱、更正、刪除、限制處理、資料可攜、反對基於正當利益之處理，以及隨時撤回同意的權利，並有權向當地資料保護主管機關提出申訴。
加州居民有權知悉我們蒐集、使用與揭露的個人資訊；查閱並取得副本；更正；刪除；選擇退出出售或分享（我們皆未進行）；限制敏感個人資訊之使用（我們未蒐集）；以及不因行使權利而受歧視。您可委任授權代理人。過去 12 個月蒐集的類別：識別資料（姓名、電子郵件、IP 位址）、客戶紀錄（配送地址）、商業資訊（購買紀錄）與網路活動（伺服器日誌），皆用於上述業務目的。
如欲行使權利，請寄信至 [CONTACT EMAIL]">[CONTACT EMAIL]。我們會比對訂單資料驗證身分，並於一個月（GDPR）或 45 天（CCPA）內回覆，法律允許時得延長。
9. 安全
本網站僅透過 HTTPS 提供服務。付款資料由符合 PCI-DSS 的 Square 處理。任何傳輸方式都無法百分之百安全，但我們會採取合理措施保護您的資料。
10. 變更
我們可能更新本政策，頁首日期為最新版本。