TEVANLY is operated by Nova Transit Inc (collectively, "TEVANLY," "we," "us," or "our"). Nova Transit Inc, doing business as TEVANLY, is the controller of personal information described in this Privacy Policy unless otherwise stated.

This Privacy Policy explains how we collect, use, disclose, and otherwise process personal information when you visit tevanly.com, create an account, place an order, request a return, communicate with us, or otherwise use our website, products, features, and services (collectively, the "Services"). Our store is hosted by Shopify, which provides the ecommerce platform that enables us to offer the Services.

Please read this Privacy Policy carefully. By using the Services, you acknowledge that you have read and understood the practices described in this policy.

Personal Information We Collect

Depending on how you interact with the Services and where you live, we may collect or process the following categories of personal information:

• Contact information, such as your name, email address, telephone number, billing address, and shipping address.

• Order and transaction information, such as products viewed, added to your cart, purchased, returned, exchanged, or canceled; order history; delivery information; discounts; and transaction details.

• Payment information, such as payment method, payment status, billing details, and limited payment information made available to us. Complete card or financial account information is generally processed directly by payment providers such as Shopify Payments or PayPal and may not be visible to us.

• Account information, such as your account identifier, preferences, saved details, and account settings.

• Communications, including information you provide when contacting customer support, submitting a return request, responding to a survey, or posting a product review.

• Device and network information, such as IP address, device type, browser type, operating system, network connection, and unique device or online identifiers.

• Usage information, such as how you access, browse, search, and interact with the Services; referring pages; viewed products; cart activity; and timestamps.

• Marketing and advertising information, such as email engagement, advertising identifiers, cookie preferences, and inferred interests based on your interactions with our store and advertisements.

Please do not send us sensitive health or medical information unless it is reasonably necessary for us to respond to your specific customer-support request.

Sources of Personal Information

We may collect personal information:

• Directly from you when you place an order, create or use an account, contact us, submit a return request, subscribe to marketing, or otherwise provide information.

• Automatically from your browser or device through cookies, pixels, tags, local storage, and similar technologies.

• From Shopify and service providers that support payments, order fulfillment, shipping, customer support, analytics, fraud prevention, email marketing, and advertising.

• From advertising, marketing, and business partners, where permitted by law.

How We Use Personal Information

We may use personal information to:

• Provide, operate, and improve the Services.

• Process payments, orders, deliveries, returns, exchanges, cancellations, and refunds.

• Create and manage customer accounts and remember preferences.

• Communicate about orders, accounts, customer-support requests, security, and policy updates.

• Send marketing communications where permitted and manage marketing preferences.

• Measure website performance, understand customer activity, personalize experiences, and recommend relevant products.

• Deliver and measure advertising, including interest-based or targeted advertising where permitted.

• Detect, investigate, and prevent fraud, abuse, security incidents, and unlawful activity.

• Comply with legal, tax, accounting, regulatory, and law-enforcement requirements.

• Establish, exercise, or defend legal claims and enforce our terms and policies.

Legal Bases for Processing in the EEA and United Kingdom

Where the European Economic Area ("EEA") or United Kingdom data protection laws apply, we rely on one or more of the following legal bases:

• Performance of a contract, including processing orders, payments, delivery, accounts, returns, exchanges, and customer-service requests connected with a purchase.

• Consent, including for certain marketing communications, non-essential cookies, and targeted advertising where consent is required. You may withdraw consent at any time without affecting processing that occurred before withdrawal.

• Legitimate interests, including operating and improving our business, responding to customers, protecting the Services, preventing fraud, understanding performance, and marketing our products, provided those interests are not overridden by your rights and interests.

• Compliance with legal obligations, including tax, accounting, consumer-protection, product-safety, and lawful government requirements.

• Establishment, exercise, or defense of legal claims, where necessary.

Cookies and Similar Technologies

We and our service providers use cookies, pixels, tags, and similar technologies to operate the store, remember preferences, understand site usage, prevent fraud, measure performance, and support advertising.

Where required by law, non-essential cookies and similar technologies are used only after you provide consent. You can manage available choices through our cookie banner or browser settings. Disabling certain technologies may affect some features of the Services.

We may recognize a valid Global Privacy Control signal as a request to opt out of the sale or sharing of personal information or targeted advertising where required by applicable law. More information about Global Privacy Control is available at https://globalprivacycontrol.org/.

Marketing and Advertising

With your consent where required, we may send promotional email communications through service providers such as Klaviyo. You can unsubscribe at any time by using the unsubscribe link in a marketing email. We may still send non-promotional messages about your orders, account, returns, security, or customer-support requests.

We may use advertising services, including Meta, to display and measure advertisements. Depending on applicable law, this activity may be considered targeted advertising or the "sale" or "sharing" of personal information. You may submit an applicable opt-out request at https://tevanly.com/pages/data-sharing-opt-out or use the controls made available through our cookie banner.

How We Disclose Personal Information

We may disclose personal information when reasonably necessary to:

• Shopify, which hosts our store and processes information to provide and improve ecommerce services.

• Payment providers, including Shopify Payments and PayPal, to authorize and process payments, refunds, and fraud checks.

• Fulfillment, shipping, and logistics providers to prepare, deliver, track, and return orders.

• Customer-support, email, analytics, security, and technology providers, including Klaviyo and other vendors used to operate the Services.

• Advertising and marketing partners, including Meta, to deliver, personalize, and measure advertising where permitted.

• Professional advisers and authorities, such as lawyers, accountants, insurers, regulators, courts, law enforcement, and government agencies, when reasonably necessary or legally required.

• A buyer, successor, or other relevant party in connection with a merger, financing, reorganization, sale of assets, insolvency, or similar business transaction.

• Other parties at your direction or with your consent, such as when you request a particular delivery or integration.

We do not disclose personal information to third parties for their own purposes except as described in this policy, with your direction or consent, or as permitted or required by law.

Relationship with Shopify

Shopify collects and processes personal information about your access to and use of the Services to provide and improve its platform and related features. Information submitted through our store may be transmitted to Shopify and its service providers in countries other than where you live.

In some circumstances, Shopify acts as an independent controller of personal information and is responsible for responding to requests concerning its own processing. You can learn more in the Shopify Consumer Privacy Policy and use the Shopify Privacy Portal.

Third-Party Websites and Services

The Services may contain links to websites, applications, or platforms operated by third parties. Their privacy and security practices are governed by their own policies. We are not responsible for third-party services that we do not control. Please review their policies before providing personal information.

International Transfers

We may transfer, store, and process personal information outside the country where you live, including in the United States and other countries where Shopify and our service providers operate.

Where EEA or United Kingdom law requires safeguards for an international transfer, we rely on recognized mechanisms such as an adequacy decision, the European Commission's Standard Contractual Clauses, the United Kingdom International Data Transfer Agreement or Addendum, or another lawful transfer mechanism, as applicable.

Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including:

• Order, payment, return, and transaction records for the periods required by tax, accounting, consumer-protection, chargeback, and legal obligations.

• Account information while the account remains active and for a reasonable period afterward.

• Customer-support communications for as long as needed to resolve the request, maintain service records, and address disputes.

• Marketing information until you unsubscribe or withdraw consent, subject to retaining a limited suppression record so we can honor your choice.

• Cookie and advertising information according to the duration disclosed through our consent tools and the settings of the relevant technology.

We may retain information longer when required by law, necessary to establish or defend legal claims, or needed to prevent fraud or abuse. When information is no longer required, we take reasonable steps to delete or de-identify it.

Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. However, no system or transmission method is completely secure, and we cannot guarantee absolute security. Please do not send sensitive or confidential information through unsecured channels and keep your account access credentials secure.

Children's Privacy

The Services are intended for adults and are not directed to children. We do not knowingly collect personal information from children under the age required to consent to data processing in their jurisdiction. If you believe a child has provided personal information to us, please contact us so that we can review and, where appropriate, delete it.

We do not have actual knowledge that we sell or share, as those terms are defined by applicable law, personal information of individuals under 16 years of age.

Your Privacy Rights and Choices

Depending on where you live and subject to applicable exceptions, you may have the right to:

• Request access to or information about personal information we hold about you.

• Request correction of inaccurate personal information.

• Request deletion of personal information.

• Receive a portable copy of certain personal information.

• Object to or request restriction of certain processing.

• Withdraw consent where processing is based on consent.

• Opt out of certain targeted advertising or the sale or sharing of personal information.

• Appeal a decision concerning a privacy request where applicable.

• Lodge a complaint with an applicable privacy or data-protection authority.

To exercise a right, email support@tevanly.com. We may need to verify your identity and request information reasonably necessary to locate your records. Where permitted, an authorized agent may submit a request on your behalf, but we may require proof of authorization and direct verification from you.

We will not unlawfully discriminate against you for exercising an applicable privacy right.

EEA and United Kingdom

If you are located in the EEA or United Kingdom, you may have rights of access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. You may also lodge a complaint with the data-protection authority in the country where you live, work, or believe a violation occurred. United Kingdom residents may contact the Information Commissioner's Office. A list of EEA supervisory authorities is available from the European Data Protection Board.

Canada

Canadian residents may have rights to access and correct personal information and to withdraw consent, subject to legal and contractual restrictions. You may also contact the Office of the Privacy Commissioner of Canada or the applicable provincial privacy authority.

Australia

Australian residents may request access to or correction of personal information and may submit a privacy complaint to us. If you are not satisfied with our response, you may be able to contact the Office of the Australian Information Commissioner.

United States

Residents of certain U.S. states may have additional rights to know, access, correct, delete, or obtain a copy of personal information and to opt out of targeted advertising, sale, or sharing where those rights apply. You can submit an opt-out request at https://tevanly.com/pages/data-sharing-opt-out.

Complaints

If you have a concern about our handling of personal information, please email support@tevanly.com with enough information for us to understand and investigate the issue. We will review and respond within a reasonable period as required by applicable law.

Depending on where you live, you may also have the right to contact your local privacy or data-protection authority. We encourage you to contact us first so that we have an opportunity to address your concern.

Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to our Services, practices, technologies, or legal obligations. We will post the revised policy on this page, update the "Last updated" date, and provide additional notice where required by law.

Contact Us

For questions, privacy requests, or complaints, contact:

TEVANLY, operated by Nova Transit Inc
Email: support@tevanly.com
Phone: +852 5307 8646
Registered business address: 25 1st Ave SW, STE N54, Watertown, SD 57201, United States

The registered business address above is not a return address and cannot accept customer correspondence. Please submit privacy requests and questions by email or phone. The applicable return address is provided separately after a return request is approved.