Legal
Privacy policy
This policy explains what personal data EvyStore collects, why, and what you can do about it.
What we collect
- Account data: your email address, name and password (stored only as a secure hash).
- Order data: the items you buy, your shipping address and phone number, and the order total.
- Messages: what you send us through the contact form.
- Newsletter: your email address, if you sign up.
- Security logs: sign-in events with the time and IP address, kept for 90 days to protect your account.
- Your cart is stored in your own browser (local storage), not on our servers, until you place an order.
Why we use it
- To process, ship and support your orders (performance of a contract).
- To keep your account and our store secure (legitimate interest).
- To send the newsletter, only if you signed up (consent).
Who we share it with
- Shipping partners and suppliers, who need your name, address and phone number to deliver your order.
- Our payment provider, which handles card payments. We never see or store your card number.
- Our hosting provider, which runs the store on our behalf.
We do not sell your personal data, and we do not use tracking or advertising cookies.
Cookies
We use only one essential cookie, which keeps you signed in. It is not used for tracking.
How long we keep it
Order records are kept as long as tax and accounting law requires. Account data is kept until you ask us to delete your account.
Your rights
You can ask for a copy of your data, a correction, or deletion, and you can object to processing or withdraw consent at any time. Contact us and we will reply within 30 days. You also have the right to complain to your data protection authority.
