Privacy Policy

This Privacy Policy explains how TOVEMRIX, LLC collects, uses, protects, shares, and retains personal information when customers visit tovemrix.com, place an order, make a payment, request customer support, submit a return or refund request, use order tracking services, or otherwise interact with our website. We aim to collect only information that is reasonably necessary to provide our services, process transactions, protect customers, and operate our business responsibly.

1. Information We Collect

We may collect information that customers provide directly when placing an order or communicating with us. This may include a name, billing address, shipping address, email address, telephone number, order details, selected payment method, customer service correspondence, return information, and information provided in connection with a damaged, missing, incorrect, or disputed order.

We may also collect limited technical information generated when a customer uses our website, including IP address, browser type, device type, referring pages, approximate geographic region, website activity, session information, and security-related logs where reasonably necessary for website operation, fraud prevention, and security.

2. How We Use Personal Information

Personal information may be used to process and fulfill orders, confirm payments, arrange shipping, provide tracking information, communicate about purchases, respond to customer inquiries, review returns and refunds, investigate delivery issues, prevent fraudulent transactions, maintain website security, and comply with applicable legal obligations.

We do not use customer information for purposes that are materially unrelated to the reason it was collected without an appropriate legal basis or, where required, the customer's consent.

3. Information Required to Process Orders

Certain information is necessary for us to provide our services. For example, a valid shipping address is required to arrange delivery, contact information may be required to provide order updates, and transaction information is necessary to confirm whether payment has been successfully authorized.

Where required information is incomplete or inaccurate, we may be unable to complete a transaction, deliver an order, locate a shipment, process a return, or provide certain customer support services.

4. Payment Information

Payments made through tovemrix.com may be processed through Stripe-supported payment services and PayPal. Depending on the payment method selected at checkout, transaction information may be transmitted directly to Stripe, PayPal, participating banks, card networks, digital wallet providers, or other financial institutions involved in processing the payment.

We do not use complete payment card numbers, card security codes, or similar sensitive payment credentials as ordinary customer account information. Such information is handled through the applicable payment processing infrastructure according to the provider's security procedures.

5. Payment Security

We take payment security seriously and use established third-party payment processors rather than attempting to independently process sensitive financial credentials. Stripe and PayPal maintain their own technical, organizational, fraud-prevention, authentication, and transaction security controls.

Where supported by the applicable payment method, security measures may include encrypted payment transmission, tokenization, fraud screening, card verification, risk analysis, and 3D Secure authentication. These measures are intended to reduce unauthorized access and help identify suspicious transactions.

6. HTTPS, SSL & TLS Protection

tovemrix.com uses HTTPS and SSL/TLS encryption to help protect information transmitted between a customer's browser and our website. Encryption helps reduce the risk that transmitted information can be read or altered by an unauthorized third party while it is moving across a network.

We also aim to maintain secure website configuration, current certificates, appropriately configured encrypted connections, and secure access methods for administrative areas of the website.

7. Additional Data Security Measures

In addition to encrypted connections, we apply reasonable technical and organizational safeguards appropriate to the information we process. These may include restricted administrative access, account authentication, software updates, security monitoring, access controls, limited staff access, and separation of payment processing from ordinary website data where technically appropriate.

Access to customer information is limited to persons or service providers who reasonably require the information to perform an authorized business function, such as order fulfillment, customer support, payment review, shipping, refund administration, or website maintenance.

8. Data Minimization

We seek to follow the principle of data minimization by collecting personal information that is reasonably relevant to the service being provided. We do not intentionally request unnecessary sensitive personal information for ordinary purchases.

Customers are encouraged not to include complete card numbers, account passwords, government identification numbers, or other unnecessary sensitive credentials in ordinary customer service messages.

9. Sharing Information With Service Providers

We may share limited personal information with trusted service providers when necessary to operate tovemrix.com. These providers may include payment processors, shipping carriers, hosting providers, website service providers, fraud-prevention services, technical support providers, and other companies involved in completing a customer's transaction.

Information is shared only to the extent reasonably necessary for the relevant service. Service providers may process information according to their own privacy obligations and contractual responsibilities.

10. Stripe & PayPal

When a customer selects a Stripe-supported payment method, relevant transaction information may be processed by Stripe for payment authorization, fraud detection, transaction security, refunds, and payment dispute handling.

When PayPal is selected, PayPal may process payment account information and transaction details in accordance with its own privacy and security procedures.

Stripe and PayPal operate independently as payment service providers for certain aspects of payment processing. Their handling of information may also be governed by their respective privacy notices, terms, financial regulations, and payment network requirements.

11. Fraud Prevention & Transaction Verification

We may use order, device, payment, shipping, and transaction information to identify potentially unauthorized, fraudulent, duplicated, or otherwise suspicious activity.

In some cases, a payment provider, card issuer, bank, or fraud-prevention service may perform additional verification before approving a payment. These checks may include automated risk indicators and authentication procedures.

We do not guarantee that every payment attempt will be approved, and a legitimate transaction may occasionally require additional verification when a payment provider identifies unusual activity.

12. Payment Disputes & Chargebacks

If a payment dispute, chargeback, unauthorized transaction claim, or similar payment review is submitted through Stripe, PayPal, a bank, card issuer, or another payment provider, we may use and provide information reasonably necessary to explain the transaction.

Relevant records may include order confirmation information, transaction records, shipping and tracking details, delivery confirmation, customer correspondence, return requests, photographs supplied in connection with a claim, refund records, and other documentation directly related to the disputed transaction.

Such information is used only for legitimate transaction review, fraud prevention, legal compliance, or dispute resolution purposes and does not change the customer's rights under our Refund & Returns Policy or applicable law.

13. Shipping & Delivery Information

Customer names, delivery addresses, telephone numbers, and other necessary shipping information may be provided to carriers, fulfillment providers, or other delivery partners when required to deliver an order.

Tracking information may also be associated with an order so that delivery status can be provided through our Order Tracking service and so that delivery-related concerns can be reviewed when necessary.

14. Customer Service, Returns & Refunds

When customers contact us regarding an order, return, refund, damaged product, payment issue, or delivery concern, we may retain the correspondence and information necessary to review and resolve the request.

For damaged, defective, missing, or incorrect merchandise, information submitted within the applicable reporting period may include photographs of the merchandise or packaging. As stated in our other policies, customers are encouraged to report applicable product or delivery issues within 48 hours after delivery whenever reasonably possible.

Refund-related records may be used to confirm that an approved refund was returned to the original payment method and processed in accordance with our Refund & Returns Policy.

15. Cookies & Similar Technologies

Our website may use cookies and similar technologies that are necessary for functions such as maintaining shopping cart sessions, remembering website preferences, supporting checkout, detecting security risks, and maintaining website functionality.

Where consent is legally required for non-essential cookies or similar technologies, customers may be provided with appropriate choices before those technologies are used.

16. Data Retention

Personal information collected through our website is generally retained for no longer than 12 months from the date it is collected or from the completion of the relevant customer interaction, whichever is appropriate to the purpose for which the information was collected.

During this period, information may be retained where reasonably necessary to provide customer service, verify transactions, review returns and refunds, respond to payment disputes, investigate fraud or security incidents, and maintain relevant order records.

At the end of the applicable 12-month retention period, personal information is deleted, anonymized, or otherwise removed from ordinary business systems where reasonably practicable. Information may be retained beyond this period only where a longer retention period is specifically required by applicable law, a binding legal process, tax or accounting obligations, or an unresolved legal or payment dispute.

17. GDPR & European Data Protection Rights

Where the General Data Protection Regulation (GDPR) applies, personal data is handled according to applicable principles including lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, confidentiality, and accountability.

Depending on the circumstances and applicable law, individuals may have the right to request access to their personal data, request correction of inaccurate information, request deletion, restrict certain processing, object to certain processing, request data portability, or withdraw consent where processing is based on consent.

Requests may be submitted to [email protected]. We may request reasonable information to confirm the identity of the person making the request before disclosing, correcting, deleting, or transferring personal information.

18. International Data Processing

Because we offer shipping to the United States, Europe, and other international regions, personal information may be processed by service providers located outside the customer's country of residence.

This may occur when payment processors, shipping carriers, hosting providers, or technical service providers operate systems in different jurisdictions. Where applicable data protection law requires additional safeguards for international transfers, we seek to rely on appropriate legal mechanisms or service-provider safeguards.

19. Data Breaches & Security Incidents

Although no online system can guarantee absolute security, we maintain reasonable safeguards intended to reduce the risk of unauthorized access, alteration, disclosure, destruction, or loss of personal information.

If we become aware of a security incident involving personal information, we may investigate the scope of the incident, take reasonable measures to contain or mitigate the issue, secure affected systems, preserve relevant security records, and work with appropriate technical service providers.

Where notification is required by applicable law, affected individuals or appropriate regulatory authorities will be informed in accordance with the applicable legal requirements.

20. Privacy Requests, Questions & Policy Updates

Customers who have questions about this Privacy Policy, wish to exercise an applicable privacy right, or have concerns regarding the way their personal information has been handled may contact us at [email protected] or visit our Contact Us page.

We may update this Privacy Policy when our services, technical systems, payment providers, security practices, or legal obligations change. Updated versions may be published on tovemrix.com so that customers can review the current information regarding our privacy and data protection practices.