Privacy Policy

Introduction

This Privacy Policy explains how Tran Van Tuan, the company that operates xylvaxhydra.shop (“Xylvaxhydra”, “we”, “us”, “our”), collects and handles your information when you visit our website or place an order. We are committed to being clear about the data we hold and how it is used.

By using xylvaxhydra.shop, you agree to the practices described here. Our services are intended for customers in the United States. If you do not agree with this policy, please do not use the website.

Information We Collect

Information You Provide

When you place an order, contact us, or otherwise interact with the store, you may provide your name, shipping address, billing details, email address, phone number, and the details of your order. Payment information is entered directly with PayPal and is not collected by us.

Information Collected Automatically

When you browse the site, we automatically receive certain technical data such as your IP address, browser type, device information, referring pages, and how you move through the site. This is gathered through cookies and similar technologies described below.

How We Use Your Information

We use the information we collect for the following purposes:

• To produce, process, and ship your made-to-order items.
• To send order confirmations, shipping updates, and tracking details.
• To respond to your questions and support requests.
• To process returns, exchanges, cancellations, and refunds.
• To detect, prevent, and address fraud or technical issues.
• To improve our website, catalog, and customer experience.
• To comply with legal, tax, and accounting obligations.

Sharing & Disclosure

We do not sell your personal information. We share it only with the service providers needed to fulfill your order and run the store:

• PayPal — to process your payment securely.
• USPS, UPS, and FedEx — to deliver your order.
• Print and fulfillment partners — to produce your made-to-order item.
• Google (Google Analytics 4, Google Ads, Google Tag Manager) — to understand site usage and measure advertising.
• Legal compliance — where required by law, regulation, or valid legal process.

Cookies & Tracking Technologies

We use cookies and similar technologies to run the site and understand how it is used. Specifically:

• Google Analytics 4 (GA4) — measures site traffic and behavior. You can opt out by installing the Google Analytics Opt-out Browser Add-on from Google.
• Google Ads — measures the performance of our advertising.
• Google Tag Manager — manages the tags used for analytics and advertising.

You can also control or disable cookies through your browser settings, though some parts of the site may not function correctly without them.

Data Retention

We keep your personal information only as long as necessary for the purposes described in this policy. Order records are retained for 7 years to meet tax and accounting requirements. Support messages and other data are kept only as long as needed, then deleted or anonymized.

Data Security

We use SSL/TLS encryption to protect data transmitted through our website. Payment processing is handled by PayPal under PCI-DSS standards, and we never store your full card details. While no method of transmission is completely secure, we take reasonable steps to protect your information.

Your Privacy Rights

Depending on where you live, you may have the right to:

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to correct inaccurate information.
• Deletion — request that we delete your personal data, subject to legal retention rules.
• Portability — request your data in a portable format.

To exercise any of these rights, email [email protected].

California Residents — CCPA Rights

If you are a California resident, the California Consumer Privacy Act (CCPA) gives you the following rights:

• Right to Know — what personal information we collect, use, and share.
• Right to Delete — request deletion of your personal information.
• Right to Opt-Out — we do not sell your personal information.
• Right to Non-Discrimination — you will not receive different treatment for exercising your rights.

Children’s Privacy

Our website and products are intended for adults. In line with COPPA, we do not knowingly collect personal information from children under 13. If you believe a child has provided us with data, contact us and we will delete it.

Third-Party Links

Our site or emails may reference third-party services such as PayPal, Google, or the shipping carriers. We are not responsible for the privacy practices of those third parties. Please review their own policies before providing information to them.

International Users

Our services are intended for US residents only. We do not ship internationally and do not target customers outside the United States. If you access the site from outside the US, you do so on your own initiative.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Significant changes may also be communicated by email or a notice on the website. For any questions about this policy, email [email protected].