Privacy Policy

CLOVERIX LLC (“Company,” “we,” “us,” or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website cloverix.shop (the “Website”), purchase our products, or interact with us in any other way.

Please read this policy carefully. By using our Website, you consent to the data practices described herein. If you do not agree with any part of this policy, you must not use our Website or provide us with your personal information.


1. Information We Collect

We collect several types of information from and about you, including:

A. Personal Identifiers

  • Full name

  • Billing and shipping addresses

  • Email address

  • Phone number

  • Date of birth (only if you choose to provide it for birthday reminders)

B. Payment Information

  • Credit/debit card number (processed directly by Stripe – we do not store full numbers)

  • Cardholder name

  • Billing address

  • Card expiration date and last 4 digits (stored for reference)

C. Commercial Information

  • Products you have viewed, added to cart, or purchased

  • Order history and return/refund records

  • Wishlist items

D. Technical & Usage Data

  • IP address

  • Browser type and version

  • Operating system

  • Device type (desktop, tablet, mobile)

  • Referring website URLs

  • Pages you visit on our Website, time and date of visit, time spent on pages

  • Clickstream data (e.g., which links you click)

E. Location Data

  • General geographic location derived from your IP address (e.g., city, state, country)

  • Precise location only if you grant permission through your browser (e.g., for store locator features)

F. Communication Data

  • Records of your emails, phone calls, or chat messages with us

  • Your responses to surveys or customer feedback requests

G. Inferences

  • We may draw inferences from your browsing and purchase history to recommend products we think you might like.


2. How We Collect Your Information

We use different methods to collect data:

  • Direct interactions: You provide information when you create an account, place an order, sign up for our newsletter, request customer support, or participate in a promotion.

  • Automated technologies: As you browse our Website, we automatically collect technical data using cookies, web beacons, and similar technologies (see Section 8 below).

  • Third parties: We receive data from payment processors (Stripe), shipping carriers (USPS, FedEx, DHL), and analytics providers (Google Analytics).


3. How We Use Your Information

We use your personal data for the following purposes:

Purpose Legal Basis (for GDPR/CCPA compliance)
To process and fulfill your orders (payment, production, shipping) Contract performance
To communicate with you about your order (confirmation, shipping updates, delivery issues) Contract performance
To manage your account and provide customer support Contract performance
To send marketing emails (newsletters, promotions) – you may opt out at any time Legitimate interest (or consent, where required)
To improve our Website, products, and services (e.g., analyzing which cards are most popular) Legitimate interest
To prevent fraud and enhance security Legal obligation / legitimate interest
To comply with legal obligations (tax reporting, court orders) Legal obligation
To personalize your shopping experience (recommending cards based on past purchases) Legitimate interest

We do NOT sell your personal data to third parties for any purpose, including cross-contextual behavioral advertising.


4. Sharing Your Information

We may share your personal data with the following categories of third parties:

A. Service Providers (who process data on our behalf)

  • Stripe – payment processing (see Stripe’s privacy policy)

  • USPS, FedEx, DHL – shipping and delivery

  • Google Analytics – website analytics (data anonymized where possible)

  • Klaviyo – email marketing (if you subscribe to our newsletter)

  • Gorgias – customer support ticket system

  • Printful / ShipBob – fulfillment partners (for production and warehousing)

These providers have access to your data only to perform specific tasks on our behalf and are contractually obligated to protect your data.

B. Legal & Safety Disclosures

We may disclose your information if required by law (e.g., in response to a subpoena, court order, or government investigation) or to:

  • Enforce our Terms and Conditions

  • Protect the rights, property, or safety of CLOVERIX, our customers, or others

  • Detect, prevent, or investigate fraud or security breaches

C. Business Transfers

If CLOVERIX LLC is involved in a merger, acquisition, bankruptcy, or sale of assets, your data may be transferred as part of that transaction. We will notify you via email or a prominent notice on our Website.


5. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law.

Type of Data Retention Period
Order history 7 years (for tax and accounting purposes)
Account information As long as your account is active, plus 3 years after deletion (for fraud prevention)
Marketing email data Until you unsubscribe or request deletion
Customer service emails 3 years from last contact
Website usage data (cookies) Up to 26 months (Google Analytics default)

After the retention period, your data will be anonymized or securely deleted.


6. Your Privacy Rights (CCPA, GDPR, and Other Laws)

Depending on where you live, you may have certain rights regarding your personal data.

For California Residents (CCPA/CPRA)

You have the right to:

  • Know what personal data we have collected about you in the past 12 months

  • Delete your personal data (subject to exceptions)

  • Opt out of the sale of your data (we do not sell data, so no action needed)

  • Correct inaccurate information

  • Limit the use of sensitive personal information (we do not collect sensitive data like SSN, driver’s license, or precise geolocation without consent)

  • Non-discrimination – we will not charge you different prices or deny services for exercising your rights

For EU/UK Residents (GDPR)

You have the right to:

  • Access your data (receive a copy)

  • Rectification (correct inaccurate data)

  • Erasure (“right to be forgotten”)

  • Restrict processing (temporarily limit how we use your data)

  • Data portability (receive your data in a machine-readable format)

  • Object to processing based on legitimate interests (including direct marketing)

  • Withdraw consent at any time (where we rely on consent)

For Other U.S. States (Virginia, Colorado, Connecticut, Utah)

Similar rights apply under state privacy laws. Please contact us to exercise your rights.

How to Exercise Your Rights

To make a request, please email lienphuong84@gmail.com with:

  • Your full name and email address associated with your account

  • The specific right you wish to exercise (e.g., “Request deletion of my data”)

  • Any order numbers or additional identifying information

We will verify your identity before processing your request (we may ask for a government ID or confirmation of recent purchase). We will respond within:

  • 30 days for GDPR requests

  • 45 days for CCPA requests (we may extend by 45 additional days with notice)

There is no fee for exercising your rights, except for excessive or repetitive requests.


7. Cookies & Tracking Technologies

We use cookies (small text files stored on your device) and similar technologies to enhance your browsing experience, analyze traffic, and personalize content.

Types of Cookies We Use

Cookie Type Purpose Duration
Strictly Necessary Essential for the website to function (e.g., cart, checkout, security). Cannot be disabled. Session to persistent
Performance/Analytics Help us understand how visitors use our site (e.g., Google Analytics). Up to 26 months
Functional Remember your preferences (e.g., language, currency, saved cart). Up to 12 months
Targeting/Advertising Used to show you relevant ads on other websites (e.g., Facebook, Google Ads). You can opt out. Up to 90 days

Managing Cookies

  • Most browsers allow you to block or delete cookies through your settings. However, disabling strictly necessary cookies will break essential features like adding items to your cart.

  • To opt out of Google Analytics across all websites, install the Google Analytics Opt-out Browser Add-on.

  • To opt out of interest-based advertising, visit YourAdChoices (US) or Your Online Choices (EU).

Do Not Track (DNT)

Our Website does not respond to browser “Do Not Track” signals because no universal standard exists. However, you can control tracking through cookie settings and opt-out tools.


8. Data Security

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction.

Our security measures include:

  • SSL/TLS encryption for all data transmitted between your browser and our servers

  • PCI DSS Level 1 compliance for payment processing (via Stripe)

  • Regular security scans of our website and servers

  • Access controls – only employees who need your data to perform their jobs (e.g., customer service, fulfillment) have access

  • Two-factor authentication for administrative accounts

  • Regular backups stored in encrypted form

Despite these measures, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security. If a data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify you and relevant authorities within 72 hours (as required by GDPR).


9. Children’s Privacy

Our Website is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately. We will delete the information.

For children under 18, we require parental consent for account creation or purchases. Parents may contact us to review or delete their child’s information.


10. Third-Party Links

Our Website may contain links to third-party websites (e.g., social media platforms, payment processors, shipping carriers). This Privacy Policy does not apply to those websites. We are not responsible for the privacy practices of third parties. We encourage you to read their privacy policies.


11. International Data Transfers

CLOVERIX LLC is based in the United States. If you are located outside the U.S., your personal data will be transferred to and processed in the U.S., where data protection laws may differ from your country.

For EU/UK customers, we ensure an adequate level of protection through:

  • Standard Contractual Clauses (SCCs) approved by the European Commission, incorporated into our agreements with service providers.

  • Data processing agreements that require compliance with GDPR.

By using our Website, you consent to the transfer of your data to the U.S. as described in this policy.


12. Email Communications & Marketing

When you provide your email address, we may use it to:

  • Send order confirmations, shipping updates, and customer service messages (transactional – cannot opt out)

  • Send newsletters, promotions, and product announcements (marketing – you can opt out)

How to Unsubscribe

  • Click the “unsubscribe” link at the bottom of any marketing email

  • Email lienphuong84@gmail.com with “UNSUBSCRIBE” in the subject line

After unsubscribing, you may still receive transactional emails (order-related) for up to 30 days.

SMS/Text Messaging

We do not currently send marketing text messages. If you provide your phone number for order updates, we will only use it for shipping notifications (via carrier). We will never share your phone number with third parties for marketing.


13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. The “Effective Date” at the top of this page indicates when the policy was last revised.

For material changes (e.g., new data collection purposes, changes to how we share data), we will:

  • Notify you by email (if you have an account) at least 30 days before the change takes effect

  • Post a prominent notice on our homepage

Your continued use of our Website after the effective date constitutes acceptance of the updated policy.


14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer (DPO) or Privacy Team:

📞 Phone: +84867980584
✉️ Email: lienphuong84@gmail.com (preferred for privacy-related requests)
📬 Mail:
CLOVERIX LLC
Attn: Privacy Officer
7901 4TH ST N STE 300
ST. PETERSBURG, FL 33702
UNITED STATES

For EU residents: You also have the right to lodge a complaint with your local supervisory authority (e.g., the Information Commissioner’s Office in the UK, or your national Data Protection Authority). We would appreciate the chance to resolve your concerns first, so please contact us before escalating.


15. California Privacy Rights (Shine the Light)

California Civil Code Section 1798.83 (the “Shine the Light” law) permits California residents to request, once per year, a list of third parties to whom we have disclosed personal information for direct marketing purposes. Because we do not share your data for third-party direct marketing, no list is required. Nevertheless, you may contact us with any questions.


16. Nevada Privacy Rights

Nevada residents have the right to opt out of the sale of their personal data. We do not sell data, but if you wish to submit a request to ensure compliance, please email lienphuong84@gmail.com with “NEVADA OPT-OUT” in the subject line.


Acknowledgment

By using cloverix.shop, you acknowledge that you have read, understood, and agreed to this Privacy Policy.


CLOVERIX LLC – Where Every Greeting Tells a Story
📍 7901 4TH ST N STE 300, ST. PETERSBURG, FL 33702
📞 +84867980584
✉️ lienphuong84@gmail.com
🌐 cloverix.shop