1. Data Controller

The person responsible for processing your personal data is:

• VIVAZZ LLC — business name: Vela Vici
• Headquarters: 8206 Louisiana Blvd NE, Albuquerque, NM 87113, USA
• Website: velavici.com
• Contact: info@velavici.com

2. Representative in the EU (Art. 27)

When required by Article 27 of the GDPR, VIVAZZ LLC will appoint a representative in the European Union to serve as the interface with the authorities and data subjects. Representative's contact details: to be completed if applicable.

3. Legal basis & purposes

We process your data for the following purposes, on the legal bases indicated:

• Contract execution : order processing, payment, delivery, customer service, returns & refunds.
• Legitimate interest : improving the site and our services, preventing fraud, securing transactions, aggregated statistics.
• Legal obligation : accounting records, dispute management, compliance with requests from competent authorities.
• Consent : email prospecting/marketing (when required), non-essential cookies/trackers, advertising personalization.

4. Categories of data processed

• Identity & contact : name, surname, email, delivery/billing address.
• Order & delivery : products ordered, total amount including tax, shipping method, tracking number.
• Payment : Tokenized payment data via our service providers (we do not have access to full card data).
• Navigation : technical logs, browsing identifiers, cookies/trackers (see our Cookie Policy ).
• Customer service : content of your exchanges (emails).

5. Recipients & Subcontractors

Within the scope of their missions, your data may be transmitted to:

• Shopify Inc .: e-commerce platform and hosting.
• Payment providers : Shopify Payments/Stripe and other accepted methods (Visa, Mastercard, Amex, Apple Pay, Shop Pay).
• Carriers : logistics providers for transport and tracking.
• Analytics & advertising : Google Analytics 4, Google Ads, Meta Pixel (only with your consent, if applicable).
• Internal support & tools : email and anti-fraud solutions.

These service providers act as subcontractors on the instructions of VIVAZZ LLC and offer appropriate guarantees of security and confidentiality.

6. Transfers outside the EU/EEA

Some processing activities involve data transfers outside the European Union (e.g., to the United States and Canada) due to the location of certain service providers (Shopify, analytics/advertising, payment). When these transfers occur, we implement appropriate safeguards such as the European Commission's Standard Contractual Clauses (SCCs) and, where necessary, additional measures.

7. Shelf life

• Account & identity : up to 24 months of inactivity, then deletion or anonymization.
• Orders & invoicing : applicable legal duration (up to 10 years for accounting documents).
• Customer service : 24 months after the last interaction.
• Prospecting/marketing : 3 years after the last contact or until withdrawal of consent.
• Technical logs : up to 12 months.
• Cookies : according to the duration specified in the Cookie Policy .

8. Your GDPR rights

You have the rights of access , rectification , erasure , limitation , objection (in particular to processing based on legitimate interest) and portability , as well as the right to withdraw your consent at any time for processing based on it.

To exercise your rights, please write to us at: info@velavici.com . Proof of identity may be required if there is reasonable doubt. We will respond within one month (this may be extended depending on the complexity/volume of requests).

You also have the right to lodge a complaint with a supervisory authority, in France the CNIL : cnil.fr.

9. Security

We implement appropriate technical and organizational measures: encryption in transit (TLS/HTTPS), access control, data minimization, logging, and periodic audits. Payment data is processed by certified providers; we do not store your card numbers.

10. Minors

This site is not intended for children under 15 without parental consent. We do not knowingly collect data about children.

11. Cookies & Consent

We use a CMP: Shopify Privacy with Consent Mode v2 . You can accept, refuse, or customize your choices at any time via the "Manage my cookies" link in the footer.

• Consent Mode keys: ad_user_data , ad_personalization , ad_storage , analytics_storage .
• Trackers that may be placed (with your consent where applicable): Google Analytics 4 , Google Ads , Meta Pixel .

To learn more, see our Cookie Policy .

12. Contact & Complaints

For any questions relating to this policy or your data, contact us at: info@velavici.com .

13. Modifications

We may update this policy to reflect regulatory or organizational changes. The date of the update is shown in the header. In the event of significant changes, appropriate information will be posted on the website.