Laviafy

User Privacy Policy

Effective Date: This policy takes effect on the date it is first published on the Platform.

This policy explains how the Platform collects, uses, stores, and protects your personal data. “Platform” means the online sales channel you are using and its operator.

By using the Platform, registering, placing an order, or paying, you acknowledge the processing described below. Where law requires a separate consent, it will be obtained separately.

  1. Data We Collect

The Platform collects only what is needed to provide the service, mainly:

  • account data: email, mobile number, and hashed password;

  • order and shipping data: name, phone, delivery address, and order contents (including model, specifications, configuration, and quantity);

  • payment-related data: payment method type, status, transaction IDs, amount, and refund status. Full card numbers, CVV, and payment passwords are processed by the payment service provider and are not stored by the Platform;

  • after-sales and support data: return reasons, correspondence, photos or videos of product condition, and product identifiers you provide for verification or warranty (such as serial number, IMEI, or similar device IDs), as well as activation or account-lock status you report;

  • device and log data: IP address, device type, visit records, and cookies, used for security, login, and basic analytics.

If required data is not provided, ordering, payment, shipping, warranty handling, or refunds may not be available.

Do not send full card numbers, CVV, one-time codes, or passwords for device accounts (such as Apple ID, Google, or Find My) to customer support.

  1. How We Use Data

We use this data to: create and maintain accounts; process orders, shipping, and notices; collect payment, issue refunds, and reconcile transactions; handle after-sales, returns inspection, and support; verify serial numbers, completeness, and activation status of returned devices; process manufacturer warranty claims where applicable; prevent fraud and payment risk; meet accounting, tax, and other legal duties; and send marketing messages if you consent.

The Platform does not sell personal data. Personal data found on a device you return is not used for marketing or profiling.

  1. Payment and Refunds

Payment is completed with third-party payment service providers. The Platform sends them the order ID, amount, currency, and original transaction identifier needed to capture payment and issue refunds. Refunds go back to the original payment method, so original transaction data is required.

If a chargeback is opened, the Platform may provide order, shipping, and after-sales records to the payment provider to show that the order was fulfilled or already refunded, and to avoid a double payout.

Transaction and refund records are kept as required for accounting, tax, anti-money-laundering, and payment-provider rules, usually for several years after the transaction. During that period, necessary records tied to the transaction (including product identifiers used to verify that order) may be retained even if you delete your account.

  1. Sharing

Data is shared only as needed with: payment service providers; logistics and warehousing providers; cloud, email, or SMS vendors; manufacturers or authorized service partners when a warranty or repair claim so requires; and authorities where required by law. Recipients may use the data only for these purposes.

If the business is merged or acquired, personal data may transfer with it. The successor must continue to protect it.

  1. Cookies

The Platform uses cookies or similar technologies to keep you logged in, remember the cart, secure checkout, and measure basic traffic. You may refuse cookies in your browser. Refusing necessary cookies may affect login or payment.

  1. Retention, Returned Devices, and Security

Data is kept only as long as needed for the purpose, then deleted or anonymized. Order, payment, refund, and legally required records follow Section 3.

Before returning a device, back up your data, sign out of all accounts, turn off device locks, and restore factory settings, as described in the User Agreement. The Platform is not responsible for data you leave on a returned device. If residual personal data is found, the Platform may delete or wipe it so the device can be inspected, repaired, restocked, or recycled, and will not return a copy of that data to you.

The Platform uses reasonable security measures, including encryption in transit and access control. Internet transmission is not completely secure. Please keep your account safe.

If a personal-data security incident occurs, the Platform will notify you or regulators as required by law.

  1. Your Rights

Where applicable law allows, you may access, correct, or delete your data, withdraw consent, object to marketing, or request account deletion. Use the contact method published on the Platform. Identity verification may be required.

Data still needed for open orders or refunds, or for legal, accounting, warranty, or anti-fraud purposes, may not be deleted immediately.

The Platform is intended for adults and does not knowingly collect personal data from children under 13 (or a higher age set by local law, such as 14). If this occurs, contact the Platform.

  1. Other Terms

This policy may be updated and published on the Platform. For personal-data processing, this policy prevails and applies together with the User Agreement. Chinese and English versions are equally authentic. If they conflict, the interpretation that complies with applicable law and better protects personal-data rights prevails.

Lumenary Codex Inc.

1755 Telstar Dr #340, Colorado Springs, CO 80920

If you have any questions, please contact us: