Privacy Policy

1. Introduction

This Privacy Policy explains how Duvnexo, LLC, through duvnexo.com, collects, uses, stores, shares, and protects personal information when customers visit our website, purchase decorative ornaments, make a payment, contact customer service, request a return or refund, or otherwise interact with our services.

We aim to handle personal information transparently and only for legitimate business, contractual, security, and legal purposes.

2. Information We Collect

Depending on how our services are used, we may collect information such as a customer's name, billing address, shipping address, email address, telephone number, order details, transaction references, selected payment method, customer service communications, return or refund information, and delivery or tracking information.

Technical information may also be collected when the website is accessed, including IP address, browser type, device information, operating system, approximate location derived from network information, referring pages, website activity, cookie identifiers, and security-related logs.

3. How Information Is Collected

Information may be provided directly when a customer completes checkout, submits a form, communicates with customer service, requests a return or refund, or provides information necessary to resolve an order issue.

Certain technical and usage information may be collected automatically through cookies, server logs, security technologies, and similar tools used to operate and protect the website.

4. How We Use Personal Information

Personal information may be used to process and fulfill orders, arrange shipping, provide tracking information, administer payments and refunds, respond to customer inquiries, handle returns, investigate delivery problems, prevent fraudulent transactions, maintain website security, and comply with applicable legal or regulatory requirements.

We also use limited information where reasonably necessary to maintain service reliability, diagnose technical problems, improve website functionality, and maintain appropriate business and transaction records.

5. Legal Bases for Processing

Where the GDPR or similar privacy legislation applies, personal information may be processed because it is necessary to perform a contract with the customer, comply with a legal obligation, protect legitimate business and security interests, or because valid consent has been provided where consent is required.

When processing is based on legitimate interests, we consider the nature of the information, the purpose of processing, and the potential impact on the individual's privacy rights.

6. Payment Information and Payment Providers

Payments on duvnexo.com may be processed through Stripe or PayPal, depending on the payment method selected during checkout. These payment providers may receive information required to authorize, authenticate, process, settle, refund, secure, or investigate a transaction.

We do not directly store complete payment card numbers or card security codes such as CVV or CVC on our website. Payment providers may independently process and retain payment information in accordance with their own security, regulatory, fraud-prevention, and privacy obligations.

7. Payment Security

Payment-related information is protected through security measures designed to reduce unauthorized interception and misuse. Our website uses HTTPS and SSL/TLS encryption to protect information transmitted between a customer's browser and the website.

Payment processing may additionally use measures provided by Stripe, PayPal, card networks, or issuing banks, including tokenization, fraud screening, transaction monitoring, PCI-DSS controls, and authentication technologies such as 3D Secure or Strong Customer Authentication where applicable.

8. Website and Information Security

We use reasonable administrative, technical, and organizational safeguards intended to protect personal information against unauthorized access, disclosure, alteration, loss, misuse, or destruction.

Measures may include encrypted HTTPS connections, SSL/TLS transport protection, controlled administrative access, account authentication, software and security updates, limited access to personal information based on operational need, security monitoring, and protections designed to reduce unauthorized website activity.

No internet transmission or storage system can provide an absolute guarantee of security, but we regularly consider appropriate safeguards in relation to the type of information being processed and the services being provided.

9. Data Minimization and Access Controls

We seek to collect only information reasonably necessary for order processing, payment administration, customer support, shipping, returns, refunds, fraud prevention, security, and applicable legal obligations.

Access to personal information is limited according to legitimate operational needs. We do not intentionally make customer order or payment-related information publicly available, and access to administrative systems is restricted to authorized purposes.

10. Shipping, Order Fulfillment, and Service Providers

To fulfill an order, relevant information may be shared with shipping carriers, logistics providers, payment processors, website infrastructure providers, customer service providers, fraud-prevention services, and other vendors that perform necessary functions on our behalf.

For example, a carrier may require the recipient's name, delivery address, telephone number, and shipment details to complete delivery. We seek to limit information shared with service providers to what is reasonably necessary for the relevant service.

11. Cookies and Similar Technologies

Our website may use necessary cookies and similar technologies to maintain shopping-cart functions, remember preferences, support checkout, maintain sessions, detect suspicious activity, and keep important website features working correctly.

Where required by applicable law, non-essential cookies are used based on the appropriate consent choices. Browser controls may also allow users to manage certain cookies, although disabling necessary technologies may affect website functionality.

12. Fraud Prevention and Transaction Verification

We and our payment providers may process transaction, device, network, order, and account-related information to identify suspicious activity, protect customers, reduce unauthorized transactions, and investigate potential fraud.

Where a transaction is disputed through Stripe, PayPal, a card issuer, or another payment provider, relevant order records, payment references, shipping and tracking information, customer communications, refund records, and other information reasonably connected to the transaction may be provided for the purpose of reviewing and responding to the dispute.

13. Data Retention

We generally retain personal information collected through our website for 1 year from the date it is collected or from the customer's most recent relevant transaction or interaction, after which information that is no longer reasonably required is deleted, anonymized, or otherwise removed from active use.

Certain information may need to be retained for longer than one year when required by applicable tax, accounting, consumer protection, anti-fraud, payment, regulatory, or other legal obligations, or when reasonably necessary to establish, exercise, or defend legal claims, chargebacks, payment disputes, or other unresolved matters. In those circumstances, the relevant information is retained only for the period reasonably necessary for that purpose.

14. International Data Transfers

Because our website serves customers in multiple regions and uses third-party service providers, personal information may be processed in a country different from the customer's country of residence.

Where privacy law requires safeguards for international transfers, appropriate mechanisms may be used, including contractual protections or other legally recognized transfer measures. Stripe, PayPal, hosting providers, carriers, and other independent service providers may also maintain their own international data processing arrangements.

15. GDPR Rights

Where the General Data Protection Regulation applies, individuals may have rights to request access to personal data, correction of inaccurate data, deletion in applicable circumstances, restriction of processing, data portability, and objection to certain processing. Where processing relies on consent, consent may also be withdrawn without affecting processing that was lawful before withdrawal.

These rights are subject to applicable legal conditions and exceptions. For example, certain transaction information may need to remain available where retention is required by law or necessary for an unresolved payment dispute or legal claim.

16. Privacy Requests

Privacy-related requests may be submitted to support@duvnexo.com or through our Contact Us page. We may request information reasonably necessary to verify the requester's identity before disclosing, correcting, or deleting personal information.

Requests will be reviewed in accordance with the privacy laws applicable to the request and the information concerned.

17. Data Breach and Security Incident Response

If we become aware of a security incident affecting personal information, we may take measures appropriate to the circumstances, such as investigating the incident, restricting affected access, securing relevant systems, preserving necessary security records, and working with relevant service providers.

Where applicable law requires notification to affected individuals or a supervisory authority, notifications will be made in accordance with the applicable legal requirements and timeframes.

18. Children's Privacy

Our services are intended for general online shopping and are not designed to knowingly collect personal information from children in circumstances prohibited by applicable law.

If we become aware that personal information has been collected in a manner that does not comply with applicable requirements concerning children, appropriate steps may be taken to review and remove the information where required.

19. Policy Updates and Contact

This Privacy Policy may be updated periodically to reflect changes in our services, payment processing, security practices, technology, service providers, or applicable legal requirements. The version published on duvnexo.com represents the privacy policy currently applicable to use of the website.

Questions about this Privacy Policy, the handling of personal information, security practices, or privacy rights may be directed to support@duvnexo.com or submitted through our Contact Us page.