Privacy Policy

PERSONAL INFORMATION WE COLLECT

Device Information can include IP address, browser type, device identifiers, time zone, pages viewed, referral information, and interactions recorded through Cookies and similar technologies. This information helps the storefront function, maintain security, and understand aggregate use.

Order Information can include name, billing address, shipping address, email, telephone number, selected products, payment information, order history, correspondence, and delivery or return details. We collect information supplied directly and limited information returned by service providers.

HOW DO WE USE YOUR PERSONAL INFORMATION?

We use Order Information to fulfill orders, arrange for shipping, provide invoices and/or order confirmations, communicate about delivery and returns, answer support requests, maintain records, and screen our orders for potential risk or fraud. Device Information supports troubleshooting, site protection, performance assessment, and lawful measurement.

Where consent or another lawful basis permits, contact details and site interactions may help us present relevant product communications. A person can withdraw marketing consent using an unsubscribe control or by emailing us.

SHARING YOUR PERSONAL INFORMATION

We use Shopify to power our online store. We share only the information reasonably needed with providers supporting hosting, checkout, payment, fraud screening, shipping, analytics, communications, and customer service. PayPal processes payment credentials; Xzva does not directly receive or store complete card numbers or security codes.

We also use Google Analytics to help us understand how our customers use the Site. Information may also be disclosed when necessary to comply with law, answer a lawful request, protect rights and safety, or complete a business transaction subject to appropriate safeguards.

BEHAVIORAL ADVERTISING

We may use limited interaction information for targeted advertising or measurement where legally permitted. Choices can be managed through Google's settings at Google Ads Settings and industry controls at Digital Advertising Alliance opt-out. Browser or device controls may also restrict Cookies.

YOUR RIGHTS

Depending on location and applicable law, an individual may request access, correction, deletion, restriction, objection, portability, or withdrawal of consent. Requests are verified in a proportionate way to protect account and order information. Authorized agents may be required to demonstrate authority.

For United States customers, we handle requests under applicable United States federal and state privacy laws. Because the operator is Australian, handling also takes account of the Privacy Act 1988 and the Australian Privacy Principles where applicable. Rights and exceptions vary by jurisdiction, and this notice does not reduce protections that cannot be waived.

RETENTION, SECURITY AND INTERNATIONAL HANDLING

Records are kept only as long as reasonably required for order service, accounting, dispute handling, fraud prevention, and legal obligations. Administrative, technical, and organizational safeguards are used in proportion to the information and risk. No internet transmission is completely risk-free.

Service providers may process information outside the customer's state or country. When required, we use contractual or other recognized measures intended to protect transferred information.

CONTACT

Privacy questions and rights requests can be sent to info@xzva.shop or mailed to APEX GROUP CO. PTY LTD, 24 Fowler Road, Merrylands, NSW 2160, Australia.