Privacy Policy

Last Updated: October 23, 2026

This Privacy Policy describes how personal information is handled when you browse zavelloz, place an order, subscribe to communications, or contact our team.

1. The Responsible Company

Xiamen Zixing Network Technology Co., Ltd. owns and operates zavelloz and acts as the data controller for the personal information it processes for the purposes described here, where that term applies.

The store uses Shopify to provide e-commerce infrastructure. Shopify and certain other providers may also process information for their own purposes under their respective privacy notices.

Our contact details appear at the end of this policy.

2. Information We Receive

The information involved depends on your interaction with the store:

• Contact details: Name, email address, telephone number, and delivery or billing address.
• Purchase details: Items selected, order history, transaction references, payment status, returns, and delivery records.
• Payment information: Information handled by the checkout payment provider, together with the transaction details made available to us. Please do not send full card numbers or security codes by email.
• Support communications: Messages, product questions, return explanations, and photographs you choose to provide.
• Account information: Account identifiers, saved preferences, and related activity where account features are used.
• Device and browsing information: IP address, browser and device characteristics, approximate location derived from technical information, referral information, and interactions with the store.
• Privacy and marketing preferences: Subscription choices, consent records, opt-out requests, and relevant cookie settings.

We receive information directly from you and, where relevant, from Shopify, payment providers, delivery partners, and other providers involved in your interaction.

3. Why We Use It

We use relevant information to:

• Take payment and administer purchases.
• Prepare, dispatch, track, and support orders.
• Respond to questions and manage returns or refunds.
• Send essential transaction and service messages.
• Maintain accounts and remember permitted preferences.
• Investigate suspicious transactions and protect the store.
• Diagnose faults and improve usability.
• Measure performance and conduct marketing where the relevant tools are enabled and the processing is lawful.
• Maintain required business records and handle disputes.

Where a legal basis is required, processing may rely on performance of a contract, compliance with legal obligations, consent, or legitimate interests such as proportionate fraud prevention and service security.

Legitimate interests do not replace consent where consent is legally required.

4. Cookies, Pixels, and Similar Technologies

Essential technologies support functions such as checkout, cart contents, security, and necessary session management.

Optional technologies may support analytics, advertising measurement, or personalized marketing where such services are enabled.

Where prior consent is required, non-essential technologies must remain inactive until you choose to allow them. Refusing optional tracking must not prevent an otherwise available purchase.

Cookie controls should provide choices to accept all, reject non-essential, and manage preferences. A cookie banner or preferences control, where displayed, allows you to revisit those choices.

Browser controls may also restrict cookies, although blocking essential technologies can affect store functionality. An email request can help with privacy questions but does not by itself stop a third-party script already running in your browser.

5. Providers and Other Recipients

Information is disclosed only where relevant to the purpose involved. Recipient categories include:

• Shopify and e-commerce infrastructure providers: Store hosting, checkout, order administration, and platform services.
• Payment and fraud-prevention providers: Transaction authorization, payment processing, and security checks.
• Fulfillment and delivery partners: Preparing parcels, creating labels, shipping, tracking, and resolving delivery issues.
• Communication and support providers: Sending service messages, managing inquiries, and handling subscriptions.
• Analytics and advertising providers, where enabled: Measuring visits, conversions, or campaign performance and supporting permitted advertising.
• Professional advisers and public authorities: Accounting, legal advice, legally required disclosures, or protection of legal rights.
• Parties involved in a business reorganization: Only where necessary, lawfully permitted, and subject to appropriate safeguards.

The use of a provider depends on the store functions involved. This policy does not state that a particular advertising platform or analytics tool is installed when that has not been established.

For information about recipients relevant to your data, contact us.

6. Marketing Choices

Where permitted, we may send product updates, packing ideas, or offers according to your subscription choices.

You can unsubscribe using the link in a marketing email or contact us. Opting out of marketing does not stop essential order, payment, security, or support messages.

A purchase does not automatically constitute consent to all forms of advertising or tracking.

7. Advertising Opt-Out Rights

Some privacy laws define certain advertising disclosures as a “sale,” “sharing,” or processing for targeted advertising even where no money is paid for the data.

Where these definitions apply to an enabled advertising practice, you may have the right to opt out. Use the available privacy controls or contact us to submit a request.

Where applicable law requires recognition of a valid Global Privacy Control signal or another recognized universal opt-out mechanism, that signal must be honored for the processing it covers.

These rights do not depend on accepting optional cookies or subscribing to marketing.

8. Retention

We retain information according to its purpose and applicable recordkeeping requirements:

• Order, payment, tax, and accounting records are retained for the legally required period.
• Support and return records are retained as needed to resolve the issue and address associated disputes.
• Marketing information is retained until withdrawal or when it is no longer lawfully needed.
• Consent and opt-out records may be kept to demonstrate and respect your choices.
• Technical records are retained according to security, troubleshooting, and applicable service requirements.

We do not retain every category indefinitely. Information no longer needed is deleted or de-identified, subject to lawful exceptions and backup retention cycles.

9. International Processing

Our business is located in China. Shopify and other service providers may process information in additional countries.

Applicable privacy rules may require safeguards for cross-border transfers. Where required, transfers must rely on a valid mechanism, such as an adequacy decision or appropriate contractual safeguards, together with any required supplementary measures.

Contact us for information about safeguards applicable to your information. We do not treat general website use as blanket consent to unrestricted international transfers.

10. Your Rights

Depending on your location and the law that applies, you may request:

• Access to personal information.
• Correction of inaccurate information.
• Deletion, subject to lawful retention exceptions.
• A portable copy of eligible information.
• Restriction of, or objection to, certain processing.
• Withdrawal of consent for future processing based on consent.
• An opt-out of qualifying sale, sharing, or targeted advertising.
• Review or appeal of a request decision where required.
• Assistance through an authorized representative where legally available.

You may also complain to the competent privacy regulator.

Send requests to service@zavelloz.com. We may request proportionate verification and will explain any refusal or lawful limitation. Requests are handled within the deadlines set by applicable law, and we will not unlawfully discriminate against you for exercising a right.

11. Security and Children

Reasonable organizational and technical measures are used to protect information, but no online transmission or storage system is completely risk-free.

The store is directed to a general adult shopping audience. We do not knowingly collect children’s information in violation of applicable law. A parent or guardian who believes a child has provided information inappropriately may contact us for review.

12. External Links and Policy Changes

External websites have their own privacy practices.

If our practices change, we will update this policy and its revision date. Material changes will receive additional notice where required. A revision does not retroactively authorize an unrelated use of previously collected information.

Privacy Contact

Brand Name: zavelloz
Legal Company Name: Xiamen Zixing Network Technology Co., Ltd.
Business Address: Room 1104, No. 26, Ninghai Wuli, Jimei District, Xiamen
Country: China
Email: service@zavelloz.com
Phone: +86 592 607 6766
Customer Service Hours: Monday–Friday, 9:00 AM–6:00 PM, China Standard Time (UTC+8), excluding public holidays in China.

We aim to acknowledge or respond to emails within 2 business days. This service target does not replace statutory deadlines for privacy requests.