Privacy Policy

Effective Date: November 11, 2026
Last Updated: November 11, 2026

Privacy decisions should not require a customer to understand the technical design of an online store. This notice describes the information needed for a Brixvano transaction, the separate information produced by browsing, and the rights available when personal data is used. It covers interactions with https://brixvano.com, including order-related messages sent to us.

Data Controller

The organization responsible for deciding why and how customer information is processed for Brixvano's retail operations is:

Data Controller: Shaanxi Yueke Huanxing Trading Co., Ltd.
Unified Social Credit Code (USCC): 91611101MAK6LQJ649
Company Address: Room K1494, Unit 2, Building 6, Phase 2, Airport Economic Industrial Park, Airport New City, Xixian New Area, Shaanxi Province
Privacy Contact: service@brixvano.com
Contact Phone: +86 13942156894
Business Hours: Monday to Friday: 9:00 AM - 5:00 PM (UTC+8, China Standard Time)

The details in this section are also the contact point for access, correction, deletion, objection, and other rights requests concerning information processed by the store. Independent providers may control certain processing in their own right, as explained in their respective notices.

1. Your Choices at a Glance

You can ask us which personal information about you is held in connection with the store, request the correction of inaccurate order or contact details, and make other requests allowed by the law governing your information. You can also ask to stop optional marketing messages, withdraw consent for a consent-based activity, or submit an advertising-related opt-out where the law provides that right. The practical route for these requests is service@brixvano.com; the verification and response process is explained later in this notice.

2. A Record Is Created for a Particular Purpose

Rather than treating every data item as the same, the following describes the main records that can arise in an online purchase.

Checkout and delivery record. When an order is submitted, we receive information such as the buyer's name, email address, telephone number, billing and delivery addresses, items ordered, order value, and the transaction reference or payment status needed to administer the purchase. We use this record to process and fulfill orders, answer delivery questions, and handle cancellations, exchanges, or refunds. A payment provider may process card or other payment credentials as part of checkout; customers should not send complete card numbers to our support mailbox.

Customer conversation. An inquiry may include an order identifier, your contact details, a description of a concern, and files you choose to provide, such as photographs of a damaged parcel. We use this information to understand and resolve the issue, keep relevant service history, and identify an order when needed. It is not necessary to send unrelated identity documents, account passwords, or confidential payment credentials for an ordinary inquiry.

Site-connection and security record. A visit can generate technical information such as IP address, approximate location based on the network, browser type, device information, pages requested, access times, session identifiers, and security or error logs. Such records help present the website, keep sessions and carts functioning, and investigate failures or misuse. Some information may be personal data even when it does not directly display a visitor's name.

Preference record. Where a customer sets a marketing or privacy preference, the choice and information needed to honor it may be retained. Keeping a suppression or opt-out record can be necessary to avoid sending future promotions to someone who has objected.

3. Where the Information Comes From

Much of the information is supplied by you, either when entering checkout details or contacting support. Other information is created automatically as the store and browser communicate. A delivery provider may later supply a tracking event; a checkout provider may return payment or refund status. Where you have an account and the relevant feature is available, the account may also contain preferences and purchase history. Account-related information is relevant only when the corresponding account features are available.

4. Purposes, and the Lawful Grounds Behind Them

Different activities require different legal justifications where such justifications are required by law. Managing your purchase and taking requested steps before an order are generally connected to performance of a contract. Maintaining accounting records or responding to valid legal requirements may be necessary for compliance with a legal obligation. Protecting checkout integrity, preventing fraud, answering service questions, and troubleshooting may involve legitimate interests where those interests have been appropriately balanced against individuals' rights. Optional technologies or marketing may require consent or another basis permitted in the relevant jurisdiction.

We do not treat the acceptance of the Terms of Service as blanket consent to every data use. Where processing depends on consent, you may withdraw that consent prospectively. Withdrawal does not make earlier lawful processing unlawful, nor does it necessarily eliminate records that must be kept for tax, transaction, or dispute purposes.

5. The Difference Between a Store Provider and a Merchant

The Brixvano storefront uses Shopify commerce technology. Shopify and other vendors can process information to provide commerce infrastructure and associated services, while the operating company remains responsible for its own decisions regarding the store's order and customer-service activities. Information relevant to a purchase may also be handled by the payment option selected at checkout, a carrier responsible for delivery, technical support providers, or advisers acting for a necessary business or legal purpose.

Some providers act on our instructions; others determine certain uses independently. Their roles and notices may differ from ours. For information about Shopify's consumer-related activities and rights available in relation to those activities, see the Shopify Consumer Privacy Policy. When an independent provider processes information for its own purposes, its privacy notice explains the choices and responsibilities associated with that processing.

6. Cookies: Function Before Personalization

Cookies and related browser storage can help a cart recognize a session, support checkout continuity, remember a setting, or protect the site against misuse. Where optional analytics, personalization, or advertising functions are enabled, additional technologies may operate for those purposes. Their availability and legal treatment can depend on the store configuration and the visitor's region.

Browser controls can usually remove or restrict cookies, although doing so may affect features that depend on stored information. Where the law requires consent for non-essential technologies, their use must follow the applicable consent choice. If a cookie-preference link or banner is presented to you, use it to review the available settings; you may also contact service@brixvano.com about a privacy choice or consent withdrawal.

7. Marketing Is a Separate Decision

If promotional emails are offered, receiving them is separate from receiving the messages needed to complete a purchase. You may withdraw permission for promotional emails or object where the law allows, using an available unsubscribe method or the privacy contact address. Order confirmations, delivery messages, and necessary support communications may still be sent when relevant to a transaction.

Some jurisdictions define a sale or sharing of personal information, or processing for targeted advertising, more broadly than an ordinary commercial transaction. If an activity involving this store falls within those legal definitions, eligible individuals can submit the relevant opt-out request to service@brixvano.com or use any applicable privacy-choice mechanism made available through the website. Legally recognized browser preference signals, including Global Privacy Control where applicable, will be handled according to the requirements of the relevant law.

8. Recipients Beyond Ordinary Fulfillment

Information may be provided to a regulator, court, or other competent authority if a valid legal obligation requires it. We may also use it to establish, exercise, or defend legal claims, or share appropriately limited information with professional advisers performing that task. Any transfer or disclosure must have a lawful purpose and be consistent with the applicable data-protection requirements. A third-party website reached through an external link operates under its own notice and controls.

9. Cross-Border Processing

The operating company is based in China. Online storefront technology and international logistics can involve data handling in other jurisdictions. The countries in which information is stored or accessed may differ according to the services used for an order or website visit. Local privacy laws and government-access rules may differ from those in your home country. Where a cross-border transfer requires contractual safeguards, an adequacy decision, consent, or another recognized transfer mechanism, the relevant legal requirement must be met.

10. Keeping Records for Different Lengths of Time

A cart session, an order record, a customer-service exchange, and a request to stop marketing have different lifecycles. We assess retention by the continuing purpose, applicable accounting or tax law, the need to resolve an open problem, legal claims, and the need to respect a lasting opt-out. Different kinds of information are therefore subject to different retention periods. When information is no longer needed and no lawful retention reason remains, it should be deleted or de-identified according to applicable requirements.

11. Protection and Incident Concerns

We seek reasonable measures appropriate to the nature of the information and the risks of its processing, including controls on access and the handling of relevant service-provider responsibilities. No internet system can guarantee absolute protection. If you believe a Brixvano account, order record, or communication may have been misused, contact us at service@brixvano.com. Avoid disclosing account passwords when reporting a concern.

12. How to Submit and Follow Up on a Rights Request

Send a message to service@brixvano.com describing the information or privacy right concerned. Depending on the law applicable to you, this can include requesting access, correction, deletion, portability, a restriction or objection, withdrawal of consent, information on disclosures, or an advertising-related opt-out. Some people may have the right to appeal a refusal or complain to a relevant data-protection authority.

To avoid disclosing personal information to the wrong person, we may request reasonable verification of identity or authority. Any applicable exceptions and required response time limits will be observed. We will not penalize or unlawfully discriminate against a person for exercising a legally protected privacy right. If your question relates specifically to processing carried out independently by Shopify, its consumer privacy resources also explain how to reach Shopify.

13. Children and Changes to This Notice

This is a general retail website, not a service directed at children who cannot lawfully provide the necessary information or make purchases without the appropriate permission. If you believe a child's information has been collected contrary to applicable law, contact us with the relevant facts so that the concern can be reviewed. We may revise this notice to reflect changes in services, information handling, or applicable law; the current text and update date will appear on this page. Where a change requires additional notice or consent, that requirement will apply.

Privacy Questions

All questions about this notice or your information may be directed to the Data Controller identified above at service@brixvano.com, during the business hours shown in the Data Controller section.