Elovyrhaven · elovyrhaven.com · Effective Date: 15 September 2026

1. Introduction

This Privacy Policy explains how Elovyrhaven (“we”, “us”, “our”) collects, uses, discloses and protects personal information on the website elovyrhaven.com (the “Site”). By using the Site or by providing personal information to us, you agree to the practices described in this Policy.

2. Who We Are

We operate the Site and are the controller of the personal information described in this Policy (where applicable, under the EU General Data Protection Regulation (“GDPR”) and the Personal Information Protection Law of the People’s Republic of China (“PIPL”)). To contact us about this Policy or your personal information, email info@elovyrhaven.com.

3. Information We Collect

You provide. When you create an account, we collect your name, email address and password. When you place an order, we collect your billing and shipping addresses, email address, phone number (if provided), order contents and order history. Payment details are processed by third-party payment providers third-party payment providers; we do not collect or store full card details. We also collect the content of any communications you send us, and, where you use them, your reviews or uploaded media (together with your IP address for spam prevention).

Automatically. When you visit the Site, we collect your IP address, browser and device data, pages visited and similar usage data through cookies and similar technologies (see Section 5).

We do not collect. We do not knowingly collect sensitive categories of personal data or children’s data (see Section 11), unless you voluntarily provide such information to us.

4. How We Use Your Information

We use personal information to: process and deliver orders (contract); manage accounts and provide customer service (contract and legitimate interests); prevent fraud and secure the Site (legitimate interests and legal obligations); improve our products and services (legitimate interests); send marketing communications where you have opted in or the law permits (consent or legitimate interests); comply with legal obligations; and establish, exercise or defend legal claims (legitimate interests). We do not use automated decision-making that produces legal effects concerning you.

If you do not provide information necessary for an order, we may be unable to process it. Marketing messages always include a simple opt-out; even after opting out, we may still send service messages (e.g., order confirmations and delivery updates) where necessary.

5. Cookies

We use essential cookies (e.g., shopping-cart, session and security cookies) that are strictly necessary and do not require consent. Preference, analytics and marketing cookies are used only with your consent where required by law. You can manage cookies through your browser settings; blocking certain cookies may affect how the Site works.

6. How We Share Your Information

We do not sell, rent or trade personal information. We share it only: (a) with service providers (payment processors, shipping carriers, hosting and analytics providers) who process data on our behalf; (b) where required by law or to protect our rights, our users or others; (c) in connection with a merger, acquisition or sale of assets, with notice as required by law; and (d) with your consent where required by applicable law (e.g., under the PIPL).

7. International Data Transfers

We and our service providers may process personal information in countries other than your country of residence. Where the GDPR, PIPL or other law requires safeguards for such transfers, we rely on appropriate safeguards (e.g., standard contractual clauses) and, where separate consent is required by law, we will obtain it before transferring your personal information abroad.

8. Data Retention

We keep personal information only as long as necessary for the purposes described above, including legal, accounting and tax obligations, fraud prevention, dispute resolution and enforcement of our agreements. In particular, order records are kept for as long as required by applicable tax and accounting law, and account data while your account is active plus a reasonable period. When data is no longer needed, we delete or anonymize it.

9. Security

We use reasonable technical and organizational measures to protect your personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a personal-data breach requires notification under applicable law, we will notify you and the relevant authorities as required.

10. Your Rights

Depending on your location, you may have the right to access, correct, delete, restrict or object to processing of your personal information, to data portability, to withdraw consent, to opt out of marketing, and to lodge a complaint with your local supervisory authority. California residents have the right to know, delete and correct their personal information and not to be discriminated against for exercising these rights (we do not sell or share personal information).

To exercise any of these rights, email info@elovyrhaven.com. We may verify your identity first and will respond within the time required by law (generally 30 days). We may refuse or charge a reasonable fee for manifestly unfounded or excessive requests, and we may retain data that we are legally required to keep.

11. Children’s Privacy

The Site is not directed to children, and we do not knowingly collect personal information from children under the age of 16 (or under 13 where that is the applicable threshold). If you believe a child has provided us with personal information, email info@elovyrhaven.com and we will delete it where required by law.

12. Third-Party Links

The Site may link to third-party websites. This Policy does not apply to them, and we are not responsible for their privacy practices.

13. Changes to This Policy

We may update this Policy from time to time; the Effective Date above indicates the latest version. Material changes will be notified on the Site or by email. Your continued use of the Site after changes are posted constitutes acceptance, except where applicable law requires a separate consent.