Privacy Policy

This Privacy Policy explains how Edelmann Verwaltung GmbH ("we," "us," or "our") collects, uses, stores, shares, and protects personal information when you visit or use evlany.com, place an order, contact us, or otherwise interact with our website and services.

This website is a self-hosted store built on WordPress and powered by WooCommerce. This Privacy Policy should be read together with our Terms of Service, Shipping Policy, Payment Policy, and Return & Refund Policy.

1. Scope of This Privacy Policy

This Privacy Policy applies to personal information collected through evlany.com, including information collected when you browse the website, place an order, contact customer support, subscribe to marketing communications, request a return or refund, or otherwise communicate with us. By using this website, you acknowledge that your information may be collected and processed as described in this Privacy Policy, subject to your rights under applicable law.

2. Website Infrastructure and Platform Information

Our website operates on a self-hosted WordPress environment and uses WooCommerce to manage product listings, the shopping cart, checkout functions, order management, and related store operations. As part of operating this website, we may also use plugins, extensions, hosting tools, security tools, analytics tools, email services, and other technical service providers necessary for the operation, maintenance, protection, and improvement of the website.

3. Personal Information You Provide to Us

We may collect personal information that you provide directly to us, including your name, billing address, shipping address, email address, telephone number, order details, customer service communications, return and refund requests, review submissions, and any other information you choose to send to us through forms, checkout fields, email, or other communications channels.

4. Order and Transaction Information

When you place an order, we collect the information necessary to process and fulfill that order, including your contact details, billing and shipping details, purchased items, order amount, shipping method, tax-related information where applicable, order status, refund status, and related fulfillment records. We may also receive limited transaction-related information from our payment service providers, such as payment status, transaction identifiers, payment method type, and anti-fraud or verification outcomes. We do not store customers’ sensitive payment credentials on our servers.

5. Information Collected Automatically

When you visit the website, we may automatically collect certain technical and usage information, such as Internet Protocol (IP) address, browser type, browser language, device type, operating system, pages viewed, referring URLs, date and time of access, approximate location derived from IP, session activity, shopping cart activity, error logs, and other diagnostic or operational data. This information helps us operate the website, improve performance, maintain security, and investigate suspicious activity.

6. Cookies and Similar Technologies

Our website may use cookies, local storage, pixels, tags, scripts, and similar technologies to support essential website functions, remember cart contents, maintain login or session states, store user preferences, measure website performance, prevent fraud, and improve user experience. Some cookies are necessary for the website to function properly, while others may be used for analytics, personalization, or marketing where permitted. You can usually manage cookie preferences through your browser settings, although disabling certain cookies may affect website functionality.

7. How We Use Personal Information

We use personal information to operate the website; process and fulfill orders; arrange shipping and delivery; provide customer service; communicate with you about orders, returns, refunds, or support issues; verify transactions; prevent fraud and misuse; maintain internal records; improve our products and services; comply with legal obligations; enforce our terms and policies; and, where permitted, send promotional or marketing communications.

8. Legal Bases for Processing Under GDPR

Where the General Data Protection Regulation (GDPR) or similar laws apply, we process personal information on one or more of the following legal bases: performance of a contract, such as processing your order and providing customer support; compliance with legal obligations, such as tax, accounting, consumer protection, and fraud-prevention requirements; our legitimate interests, such as maintaining website security, improving services, preventing abuse, and managing disputes; and consent, where consent is required for specific processing activities such as certain marketing communications or non-essential cookies.

9. How We Share Personal Information

We do not rent or sell your personal information for money. We may share personal information only where reasonably necessary to operate our business and provide our services, including with hosting providers, website maintenance providers, WooCommerce-related service providers, security and fraud-prevention providers, payment processors, shipping carriers, email service providers, analytics providers, customer support tools, legal and professional advisers, and competent authorities where disclosure is required or permitted by law.

10. Payment Processing Through Stripe and PayPal

Payments on this website are processed by trusted third-party payment service providers, including Stripe and PayPal. When you enter payment information at checkout, that information is transmitted directly to the relevant payment provider through its secure payment environment. We do not store or retain full payment card numbers, CVV/CVC security codes, bank account credentials, digital wallet credentials, or other sensitive payment authentication data on our servers.

We may receive limited payment-related information from Stripe and PayPal that is necessary for order processing, bookkeeping, customer service, fraud prevention, and dispute handling, such as payment confirmation, transaction reference numbers, payment status, risk signals, and the last four digits or payment method descriptor where supplied by the processor. Stripe and PayPal process payment data in accordance with their own terms, privacy notices, and security standards.

11. Shipping, Delivery, and After-Sales Fulfillment

To fulfill orders and provide after-sales support, we may share relevant order information with shipping and logistics providers, including recipient name, delivery address, contact details, parcel data, and shipping instructions. This may include deliveries to Europe, North America, Australia, and other eligible regions classified as Rest of World under our Shipping Policy. We may also use your information to arrange delivery updates, verify receipt, investigate transit issues, review damage reports, and process return or refund requests under our Return & Refund Policy.

12. Fraud Prevention, Risk Control, and Dispute Management

We may use personal information and order-related records to detect, prevent, investigate, and respond to fraud, unauthorized transactions, payment abuse, suspicious activity, policy violations, and chargebacks or other payment disputes. For these purposes, we may review and retain records such as order details, transaction references, billing and shipping information, device and browser data, IP address, checkout timestamps, customer communications, refund history, carrier tracking, proof of delivery, return authorization records, photos or other evidence submitted to us, and processor-provided risk or verification results.

This information may be used to help establish the legitimacy of a transaction, confirm fulfillment, respond to a Stripe or PayPal dispute, defend against chargebacks, and comply with legal or contractual requirements imposed by payment processors or financial institutions.

13. Marketing Communications and Preferences

If you subscribe to newsletters, promotional emails, or similar communications, we may use your contact information to send you updates about products, offers, or news related to our website. You can opt out of marketing emails at any time by using the unsubscribe link in the message or by contacting us at service@evlany.com. Even if you opt out of marketing communications, we may still send you non-promotional messages relating to your orders, returns, customer service requests, security matters, or important policy updates.

14. International Data Transfers

Because we provide services and arrange deliveries across multiple regions, your personal information may be processed in countries other than the country in which you are located. This may include transfers to hosting providers, payment providers, logistics providers, technical service providers, or support providers located in other jurisdictions. Where required by applicable law, we take appropriate measures designed to safeguard personal information transferred internationally, such as relying on contractual protections, service provider commitments, and other lawful transfer mechanisms.

15. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including fulfilling orders, maintaining customer service records, complying with tax, accounting, fraud-prevention, and legal obligations, resolving disputes, enforcing agreements, and maintaining business records. Retention periods may vary depending on the nature of the information, the purpose for which it was collected, and applicable legal requirements. When information is no longer required, we will delete it, anonymize it, or securely restrict access to it, unless continued retention is required or permitted by law.

16. Information Security Measures

We use reasonable technical, administrative, and organizational measures designed to protect personal information against unauthorized access, disclosure, alteration, loss, or misuse. Depending on the context, these measures may include SSL/TLS encryption for data transmitted through the website, secure checkout connections, encrypted or access-restricted admin environments, role-based access controls, least-privilege permissions, strong password practices, two-factor authentication where supported, software and plugin updates, firewall protections, malware scanning, server and application monitoring, logging, backup procedures, and measures intended to detect or reduce unauthorized or suspicious activity.

No website, transmission method, or storage system can be guaranteed to be completely secure. However, we take data protection seriously and work to maintain safeguards appropriate to the nature of the information we process and the risks involved.

17. Payment Security and Sensitive Payment Data

We take payment security seriously. Payment details entered during checkout are handled directly by Stripe or PayPal through their secure payment infrastructure. We do not store full card numbers, card security codes, bank login details, or other sensitive payment credentials on our own servers. Where payment processors provide tokenized or limited transaction references for operational purposes, those references do not give us access to the underlying sensitive payment credentials.

We may also rely on processor-supported security features such as encryption, tokenization, risk screening, authentication workflows, and transaction monitoring offered by Stripe or PayPal. These measures help reduce fraud risk, support secure transaction handling, and assist with payment dispute review where necessary.

18. Your Rights Under GDPR and Similar Laws

Depending on your location and applicable law, you may have the right to request access to the personal information we hold about you, request correction of inaccurate information, request deletion of your personal information, request restriction of processing, object to certain processing, request data portability, and withdraw consent where processing is based on consent. You may also have the right to lodge a complaint with a competent data protection authority if you believe your rights have been violated.

19. How to Exercise Your Privacy Rights

To exercise your rights, ask a privacy-related question, or request access, correction, deletion, or restriction, please contact us at service@evlany.com. We may need to verify your identity before processing certain requests, particularly where the request concerns sensitive account or order information. In some cases, we may be unable to fully comply with a request where we are legally required to retain certain information, where the information is necessary to complete a transaction or defend against a dispute, or where another lawful exception applies.

20. Third-Party Websites and External Services

Our website may contain links to third-party websites, plug-ins, or services that are not operated by us. If you follow a link to a third-party website or interact with an external service, that third party’s own terms and privacy practices will apply. We are not responsible for the privacy, security, content, or data-handling practices of third-party websites or services that are outside our control. We encourage you to review their privacy policies before providing personal information to them.

21. Children’s Privacy

This website is not directed to children, and we do not knowingly collect personal information from children under the age of 16 without appropriate authorization where required by law. If you believe that a child has provided us with personal information in violation of applicable law, please contact us at service@evlany.com so that we can review the matter and take appropriate action.

22. Changes to This Privacy Policy and Contact Information

We may update this Privacy Policy from time to time to reflect changes in our business practices, legal requirements, website functions, or service providers. Any updates will be posted on this page. Your continued use of the website after an updated Privacy Policy is posted will be subject to that revised version to the extent permitted by law.

If you have questions about this Privacy Policy or our data practices, please contact us by email at service@evlany.com, by phone at +1 (712) 214-9344, or by mail at 505 W Broadway, Council Bluffs, IA 51501, US.