CLOVERIX LLC (“Company,” “we,” “us,” or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website cloverix.shop (the “Website”), purchase our products, or interact with us in any other way.
Please read this policy carefully. By using our Website, you consent to the data practices described herein. If you do not agree with any part of this policy, you must not use our Website or provide us with your personal information.
1. Information We Collect
We collect several types of information from and about you, including:
A. Personal Identifiers
-
Full name
-
Billing and shipping addresses
-
Email address
-
Phone number
-
Date of birth (only if you choose to provide it for birthday reminders)
B. Payment Information
-
Credit/debit card number (processed directly by Stripe – we do not store full numbers)
-
Cardholder name
-
Billing address
-
Card expiration date and last 4 digits (stored for reference)
C. Commercial Information
-
Products you have viewed, added to cart, or purchased
-
Order history and return/refund records
-
Wishlist items
D. Technical & Usage Data
-
IP address
-
Browser type and version
-
Operating system
-
Device type (desktop, tablet, mobile)
-
Referring website URLs
-
Pages you visit on our Website, time and date of visit, time spent on pages
-
Clickstream data (e.g., which links you click)
E. Location Data
-
General geographic location derived from your IP address (e.g., city, state, country)
-
Precise location only if you grant permission through your browser (e.g., for store locator features)
F. Communication Data
-
Records of your emails, phone calls, or chat messages with us
-
Your responses to surveys or customer feedback requests
G. Inferences
-
We may draw inferences from your browsing and purchase history to recommend products we think you might like.
2. How We Collect Your Information
We use different methods to collect data:
-
Direct interactions: You provide information when you create an account, place an order, sign up for our newsletter, request customer support, or participate in a promotion.
-
Automated technologies: As you browse our Website, we automatically collect technical data using cookies, web beacons, and similar technologies (see Section 8 below).
-
Third parties: We receive data from payment processors (Stripe), shipping carriers (USPS, FedEx, DHL), and analytics providers (Google Analytics).
3. How We Use Your Information
We use your personal data for the following purposes:
| Purpose | Legal Basis (for GDPR/CCPA compliance) |
|---|---|
| To process and fulfill your orders (payment, production, shipping) | Contract performance |
| To communicate with you about your order (confirmation, shipping updates, delivery issues) | Contract performance |
| To manage your account and provide customer support | Contract performance |
| To send marketing emails (newsletters, promotions) – you may opt out at any time | Legitimate interest (or consent, where required) |
| To improve our Website, products, and services (e.g., analyzing which cards are most popular) | Legitimate interest |
| To prevent fraud and enhance security | Legal obligation / legitimate interest |
| To comply with legal obligations (tax reporting, court orders) | Legal obligation |
| To personalize your shopping experience (recommending cards based on past purchases) | Legitimate interest |
We do NOT sell your personal data to third parties for any purpose, including cross-contextual behavioral advertising.
4. Sharing Your Information
We may share your personal data with the following categories of third parties:
A. Service Providers (who process data on our behalf)
-
Stripe – payment processing (see Stripe’s privacy policy)
-
USPS, FedEx, DHL – shipping and delivery
-
Google Analytics – website analytics (data anonymized where possible)
-
Klaviyo – email marketing (if you subscribe to our newsletter)
-
Gorgias – customer support ticket system
-
Printful / ShipBob – fulfillment partners (for production and warehousing)
These providers have access to your data only to perform specific tasks on our behalf and are contractually obligated to protect your data.
B. Legal & Safety Disclosures
We may disclose your information if required by law (e.g., in response to a subpoena, court order, or government investigation) or to:
-
Enforce our Terms and Conditions
-
Protect the rights, property, or safety of CLOVERIX, our customers, or others
-
Detect, prevent, or investigate fraud or security breaches
C. Business Transfers
If CLOVERIX LLC is involved in a merger, acquisition, bankruptcy, or sale of assets, your data may be transferred as part of that transaction. We will notify you via email or a prominent notice on our Website.
5. Data Retention
We retain your personal data only as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law.
| Type of Data | Retention Period |
|---|---|
| Order history | 7 years (for tax and accounting purposes) |
| Account information | As long as your account is active, plus 3 years after deletion (for fraud prevention) |
| Marketing email data | Until you unsubscribe or request deletion |
| Customer service emails | 3 years from last contact |
| Website usage data (cookies) | Up to 26 months (Google Analytics default) |
After the retention period, your data will be anonymized or securely deleted.
6. Your Privacy Rights (CCPA, GDPR, and Other Laws)
Depending on where you live, you may have certain rights regarding your personal data.
For California Residents (CCPA/CPRA)
You have the right to:
-
Know what personal data we have collected about you in the past 12 months
-
Delete your personal data (subject to exceptions)
-
Opt out of the sale of your data (we do not sell data, so no action needed)
-
Correct inaccurate information
-
Limit the use of sensitive personal information (we do not collect sensitive data like SSN, driver’s license, or precise geolocation without consent)
-
Non-discrimination – we will not charge you different prices or deny services for exercising your rights
For EU/UK Residents (GDPR)
You have the right to:
-
Access your data (receive a copy)
-
Rectification (correct inaccurate data)
-
Erasure (“right to be forgotten”)
-
Restrict processing (temporarily limit how we use your data)
-
Data portability (receive your data in a machine-readable format)
-
Object to processing based on legitimate interests (including direct marketing)
-
Withdraw consent at any time (where we rely on consent)
For Other U.S. States (Virginia, Colorado, Connecticut, Utah)
Similar rights apply under state privacy laws. Please contact us to exercise your rights.
How to Exercise Your Rights
To make a request, please email lienphuong84@gmail.com with:
-
Your full name and email address associated with your account
-
The specific right you wish to exercise (e.g., “Request deletion of my data”)
-
Any order numbers or additional identifying information
We will verify your identity before processing your request (we may ask for a government ID or confirmation of recent purchase). We will respond within:
-
30 days for GDPR requests
-
45 days for CCPA requests (we may extend by 45 additional days with notice)
There is no fee for exercising your rights, except for excessive or repetitive requests.
7. Cookies & Tracking Technologies
We use cookies (small text files stored on your device) and similar technologies to enhance your browsing experience, analyze traffic, and personalize content.
Types of Cookies We Use
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Essential for the website to function (e.g., cart, checkout, security). Cannot be disabled. | Session to persistent |
| Performance/Analytics | Help us understand how visitors use our site (e.g., Google Analytics). | Up to 26 months |
| Functional | Remember your preferences (e.g., language, currency, saved cart). | Up to 12 months |
| Targeting/Advertising | Used to show you relevant ads on other websites (e.g., Facebook, Google Ads). You can opt out. | Up to 90 days |
Managing Cookies
-
Most browsers allow you to block or delete cookies through your settings. However, disabling strictly necessary cookies will break essential features like adding items to your cart.
-
To opt out of Google Analytics across all websites, install the Google Analytics Opt-out Browser Add-on.
-
To opt out of interest-based advertising, visit YourAdChoices (US) or Your Online Choices (EU).
Do Not Track (DNT)
Our Website does not respond to browser “Do Not Track” signals because no universal standard exists. However, you can control tracking through cookie settings and opt-out tools.
8. Data Security
We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction.
Our security measures include:
-
SSL/TLS encryption for all data transmitted between your browser and our servers
-
PCI DSS Level 1 compliance for payment processing (via Stripe)
-
Regular security scans of our website and servers
-
Access controls – only employees who need your data to perform their jobs (e.g., customer service, fulfillment) have access
-
Two-factor authentication for administrative accounts
-
Regular backups stored in encrypted form
Despite these measures, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security. If a data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify you and relevant authorities within 72 hours (as required by GDPR).
9. Children’s Privacy
Our Website is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately. We will delete the information.
For children under 18, we require parental consent for account creation or purchases. Parents may contact us to review or delete their child’s information.
10. Third-Party Links
Our Website may contain links to third-party websites (e.g., social media platforms, payment processors, shipping carriers). This Privacy Policy does not apply to those websites. We are not responsible for the privacy practices of third parties. We encourage you to read their privacy policies.
11. International Data Transfers
CLOVERIX LLC is based in the United States. If you are located outside the U.S., your personal data will be transferred to and processed in the U.S., where data protection laws may differ from your country.
For EU/UK customers, we ensure an adequate level of protection through:
-
Standard Contractual Clauses (SCCs) approved by the European Commission, incorporated into our agreements with service providers.
-
Data processing agreements that require compliance with GDPR.
By using our Website, you consent to the transfer of your data to the U.S. as described in this policy.
12. Email Communications & Marketing
When you provide your email address, we may use it to:
-
Send order confirmations, shipping updates, and customer service messages (transactional – cannot opt out)
-
Send newsletters, promotions, and product announcements (marketing – you can opt out)
How to Unsubscribe
-
Click the “unsubscribe” link at the bottom of any marketing email
-
Email lienphuong84@gmail.com with “UNSUBSCRIBE” in the subject line
After unsubscribing, you may still receive transactional emails (order-related) for up to 30 days.
SMS/Text Messaging
We do not currently send marketing text messages. If you provide your phone number for order updates, we will only use it for shipping notifications (via carrier). We will never share your phone number with third parties for marketing.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. The “Effective Date” at the top of this page indicates when the policy was last revised.
For material changes (e.g., new data collection purposes, changes to how we share data), we will:
-
Notify you by email (if you have an account) at least 30 days before the change takes effect
-
Post a prominent notice on our homepage
Your continued use of our Website after the effective date constitutes acceptance of the updated policy.
14. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer (DPO) or Privacy Team:
📞 Phone: +84867980584
✉️ Email: lienphuong84@gmail.com (preferred for privacy-related requests)
📬 Mail:
CLOVERIX LLC
Attn: Privacy Officer
7901 4TH ST N STE 300
ST. PETERSBURG, FL 33702
UNITED STATES
For EU residents: You also have the right to lodge a complaint with your local supervisory authority (e.g., the Information Commissioner’s Office in the UK, or your national Data Protection Authority). We would appreciate the chance to resolve your concerns first, so please contact us before escalating.
15. California Privacy Rights (Shine the Light)
California Civil Code Section 1798.83 (the “Shine the Light” law) permits California residents to request, once per year, a list of third parties to whom we have disclosed personal information for direct marketing purposes. Because we do not share your data for third-party direct marketing, no list is required. Nevertheless, you may contact us with any questions.
16. Nevada Privacy Rights
Nevada residents have the right to opt out of the sale of their personal data. We do not sell data, but if you wish to submit a request to ensure compliance, please email lienphuong84@gmail.com with “NEVADA OPT-OUT” in the subject line.
Acknowledgment
By using cloverix.shop, you acknowledge that you have read, understood, and agreed to this Privacy Policy.
CLOVERIX LLC – Where Every Greeting Tells a Story
📍 7901 4TH ST N STE 300, ST. PETERSBURG, FL 33702
📞 +84867980584
✉️ lienphuong84@gmail.com
🌐 cloverix.shop
