Política de privacidad

This policy explains what personal data we collect when you visit this website or order from us, why we do it, and what rights you have under the General Data Protection Regulation (GDPR).

1. Who is responsible

The controller is Syner Ecom LLC (ELVORA), 1209 Mountain Road Pl NE, Ste R, Albuquerque, NM 87110, USA. Phone: +1 505 369 4633. Email: info@elvora.com.

Because we are based outside the European Union, we have named a representative in the EU under Article 27 GDPR: [PLACEHOLDER: EU representative].

2. What data we process and why

  • Visiting the website: technical data such as IP address, browser type, device and time of access. Purpose: to show the site securely and keep it running. Legal basis: our legitimate interest (Art. 6(1)(f) GDPR).
  • Placing an order: name, delivery and billing address, email, phone number (if given), order details and payment status. Purpose: to process your order, deliver it, handle payments, returns and customer support. Legal basis: performance of the contract (Art. 6(1)(b) GDPR).
  • Payment: card or PayPal details are entered in the checkout and handled by the payment providers. We do not see or store your full card number.
  • Legal obligations: invoices, accounting and tax records. Legal basis: Art. 6(1)(c) GDPR.
  • Contacting us: the data you send by email or form. Legal basis: Art. 6(1)(b) or (f) GDPR.
  • Analytics and advertising measurement: only if you consent (see Cookies below). Legal basis: your consent (Art. 6(1)(a) GDPR and, in Germany, Section 25 TDDDG).

3. Who receives your data

We only share data where needed for the purposes above. Recipients and service providers are:

  • Shopify (online store and checkout).
  • Shopify Payments and PayPal (payment processing and fraud prevention).
  • BigArena Fulfillment (warehouse and order fulfilment, Bulgaria/Slovakia), which receives your name, address and order contents to pack and ship your order.
  • Carriers who deliver your parcel, which receive your name, address and, where needed, your phone number or email for delivery notices.
  • Meta (Meta Pixel) and Google (Google Analytics 4), only if you accept marketing or statistics cookies.
  • Authorities, courts or advisers, where the law requires it or to enforce our rights.

We do not sell your personal data.

4. Transfers outside the EU/EEA

We are based in the United States, and some of our providers process data outside the EU/EEA, for example in the United States. Where this happens, we rely on the EU Standard Contractual Clauses, together with additional safeguards where needed, or on an adequacy decision of the European Commission where one exists. You can ask us for a copy of the safeguards using the contact details above.

5. How long we keep data

  • Order and invoice data: as long as the law requires us to keep accounting and tax records, generally up to 10 years.
  • Customer support messages: until your request is resolved, then for as long as needed to deal with possible claims.
  • Cookie and measurement data: for the lifetime of the cookie or the retention period set in the tool concerned.
  • Data we process based on consent: until you withdraw your consent.

After that, we delete or anonymise the data.

6. Cookies and similar technologies

We use three types of cookies:

  • Necessary: always active. They are needed for the cart, checkout, security and to remember your cookie choice. They do not need consent.
  • Statistics: Google Analytics 4, to understand how the site is used. Only with your consent.
  • Marketing: Meta Pixel, to measure how our ads perform. Only with your consent.

When you first visit the site, you can accept all cookies or only the necessary ones. Statistics and marketing cookies are not loaded before you accept. You can change your choice at any time by deleting the site data (cookies and local storage) for this website in your browser. The banner then appears again on your next visit. You can withdraw consent at any time with effect for the future.

7. Your rights

Under the GDPR you have the right to:

  • access your data (Art. 15);
  • have wrong data corrected (Art. 16);
  • have your data deleted (Art. 17);
  • restrict processing (Art. 18);
  • receive your data in a portable format (Art. 20);
  • object to processing based on our legitimate interests (Art. 21);
  • withdraw your consent at any time (Art. 7(3)).

To use these rights, contact us at info@elvora.com or our EU representative.

8. Right to complain

You have the right to complain to a data protection supervisory authority, in particular in the EU country where you live, work or where you think a breach took place. In Germany this is, for example, the data protection authority of your federal state. In Austria it is the Datenschutzbehörde.

9. Is providing data required?

You need to give us the data in the checkout so that we can process and deliver your order. Without it we cannot complete your order. Consent for cookies is voluntary.

10. Automated decisions

We do not use automated decision-making or profiling that has legal effects on you. Our payment providers may run automated fraud checks.

11. Changes

We may update this policy when our services or the law change. The date of the latest update is shown at the top of this page.