1. Personal Information We Collect

“Personal information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or can reasonably be linked to an individual or household.

Depending on how you interact with the Site, we may collect or process the following categories of information:

We do not intentionally collect personal information that is unrelated to operating, securing, improving or marketing the Services.

2. Sources of Personal Information

We may obtain personal information from the following sources:

• Directly from you, such as when you place an order, create an account, subscribe to marketing, contact customer support, request a return or submit a review.
• Automatically through the Site, including through cookies, pixels, tags, local storage and similar technologies.
• Shopify, which hosts and supports the ecommerce functions of our Site.
• Payment providers, such as providers used to authorize and process payments and help prevent fraud.
• Manufacturers, authorized fulfillment partners and logistics providers, where information is needed to fulfill, track, support or resolve an order.
• Analytics, advertising and marketing partners, where permitted by applicable law and your privacy choices.
• Other service providers that help us operate, secure and improve the Services.

3. How We Use Personal Information

We may use personal information for the following purposes:

Provide & Fulfill the Services

• Process and confirm orders
• Process payments
• Arrange shipping and delivery
• Provide order tracking
• Manage customer accounts
• Process returns, refunds and cancellations
• Provide warranty and after-sales assistance
• Respond to product and order questions

Personalize & Improve the Site

• Remember preferences and shopping activity
• Recommend relevant products
• Understand how visitors use the Site
• Improve website layout, content and product offerings
• Measure website and marketing performance

Marketing & Advertising

Where permitted by law and subject to your choices, we may use personal information to:

• Send promotional emails
• Send SMS marketing where offered and where you have provided any required consent
• Provide abandoned-cart or product reminder communications
• Measure advertising effectiveness and attribution
• Display personalized or targeted advertising
• Create audiences or advertising segments

Security & Fraud Prevention

• Authenticate accounts and transactions
• Detect suspected fraud or unauthorized payments
• Protect customers and the Site from malicious activity
• Investigate security incidents
• Prevent abuse of promotions or Site functionality

Legal & Business Purposes

We may also process information to comply with legal obligations, respond to lawful requests, enforce our terms and policies, resolve disputes, maintain business records, protect legal rights and establish, exercise or defend legal claims.

4. Cookies & Similar Technologies

XVELO, Shopify and our service providers may use cookies, pixels, tags, local storage and similar technologies when you interact with the Site.

These technologies may be used for:

• Essential website functionality
• Shopping-cart and checkout functionality
• Account authentication
• Fraud prevention and security
• Analytics and website measurement
• Remembering preferences
• Advertising attribution
• Personalization
• Remarketing and targeted advertising

Certain cookies are necessary for the Site to operate and may not be capable of being disabled through our privacy controls.

Where applicable, you may control non-essential cookies and similar technologies through the cookie or privacy controls presented on the Site.

You may also configure your browser to block or delete cookies. Blocking certain cookies may affect Site functionality or prevent some features from working correctly.

5. How We Disclose Personal Information

We may disclose personal information to third parties where reasonably necessary to operate the Services or for the purposes described in this Policy.

6. Brand, Warehouse & Fulfillment Partners

XVELO operates as an authorized multi-brand retailer. Depending on the product you purchase, your order may be fulfilled or supported by an authorized manufacturer, distributor, warehouse or logistics partner.

To fulfill or support an order, we may provide the applicable partner with information reasonably necessary for that purpose, such as:

• Customer name
• Shipping address
• Telephone number
• Email address where necessary for delivery or support
• Order number
• Product model, variant and quantity
• Delivery instructions
• Information relevant to a warranty, return or support request

Some orders may be fulfilled from a U.S. warehouse, while others may be fulfilled from an international warehouse. Personal information necessary to fulfill those orders may therefore be transferred across national borders.

7. Sale, Sharing & Targeted Advertising

XVELO may use analytics and advertising technologies to understand how visitors interact with the Site, measure advertising performance and provide advertising that is more relevant to users.

Some disclosures of identifiers, device information, commercial information or online activity to advertising or marketing partners may be considered a “sale”, “sharing” or processing for “targeted advertising” under certain U.S. state privacy laws, even where no money is exchanged for the information.

Depending on the services enabled on the Site, information involved in these activities may include:

• Cookie and advertising identifiers
• IP address and device information
• Website browsing and interaction information
• Products viewed or added to a cart
• Purchase or conversion activity
• Inferred product interests

We do not disclose payment card credentials, account passwords or similar authentication credentials for targeted advertising.

8. Your Privacy Choices

Depending on where you reside and whether the applicable privacy law applies to XVELO, you may have the right to opt out of:

• The sale of personal information
• The sharing of personal information
• Processing of personal information for targeted advertising

Where available, you may exercise these choices using the “Your Privacy Choices”, “Do Not Sell or Share My Personal Information”, or equivalent data-sharing opt-out control provided on the Site.

You may also contact support@xvelogo.com for assistance with a privacy request.

9. Global Privacy Control & Do Not Track

Global Privacy Control (GPC)

Where required by applicable law, XVELO treats a recognized Global Privacy Control (GPC) signal as a request to opt out of applicable sale, sharing or targeted-advertising processing for the browser or device from which the signal is received.

Because GPC is generally browser- or device-specific, you may need to enable the signal separately on each browser or device you use.

Traditional Do Not Track Signals

Some browsers offer a legacy “Do Not Track” or “DNT” signal. Because there is not a uniform industry standard governing how traditional DNT signals must be interpreted, the Site may not respond to traditional DNT signals in the same manner as GPC.

Where applicable law recognizes a particular universal opt-out mechanism such as GPC, we process that signal in accordance with applicable requirements.

10. Relationship With Shopify

The Site is hosted and powered by Shopify. Shopify processes personal information relating to your access to and use of the Services in order to provide ecommerce, checkout, security, analytics and related functionality.

Information submitted through the Site may be transmitted to Shopify and to service providers used in connection with Shopify's platform.

XVELO may also use Shopify services that help personalize, protect, analyze and improve the shopping experience.

Where Shopify independently processes information for its own applicable purposes, Shopify's processing is governed by its own privacy terms.

You can learn more through the Shopify Consumer Privacy Policy and the Shopify Privacy Portal .

XVELO remains responsible for responding to applicable privacy requests concerning personal information processed by XVELO for its own business purposes.

11. Sensitive Personal Information

Certain information used to provide the Services may be considered “sensitive personal information” or “sensitive data” under some U.S. state privacy laws.

Depending on applicable law, this may include certain account authentication information or payment-related information.

XVELO uses sensitive information only for purposes reasonably necessary to provide, secure and support the Services, process transactions, prevent fraud or comply with legal obligations, unless we separately disclose another purpose and obtain any consent required by law.

We do not use sensitive personal information for the purpose of inferring characteristics about consumers where such use would require a separate right to limit or consent under applicable law, unless clearly disclosed.

12. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to provide the Services, maintain business records and comply with legal obligations.

Retention periods may vary according to the type of information and the reason it is processed.

For example:

• Order and transaction records may be retained as necessary for accounting, tax, warranty, fraud prevention, dispute resolution and legal compliance.
• Account information may be retained while an account remains active and for a reasonable period afterward.
• Customer-support communications may be retained while necessary to resolve the issue and maintain appropriate service records.
• Marketing information may be retained until you unsubscribe, opt out or the information is no longer reasonably needed.
• Cookie and analytics information may be retained according to the expiration period or retention setting associated with the applicable technology.

We may retain information for a longer period where reasonably necessary to comply with law, enforce agreements, resolve disputes, prevent fraud or establish, exercise or defend legal claims.

13. Security

XVELO uses reasonable administrative, technical and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration or disclosure.

We also rely on service providers, including Shopify and payment providers, to maintain security controls appropriate to the services they provide.

However, no method of transmitting information over the Internet or storing information electronically can be guaranteed to be completely secure.

Please do not send passwords, full payment card information or other highly sensitive information to XVELO through ordinary email or other unsecured communication channels.

14. Children's Privacy

The Site is not directed to children under 13 years of age, and XVELO does not knowingly collect personal information from children under 13.

If you are a parent or legal guardian and believe that a child under 13 has provided personal information to XVELO, please contact us so that we can review and, where appropriate, delete the information.

We do not knowingly sell or share personal information of consumers under 16 years of age where applicable law requires affirmative authorization before such processing.

Product-purchase or rider-age requirements are governed separately by our Terms & Conditions and applicable product or local legal requirements.

15. Your U.S. Privacy Rights

Depending on your state of residence and whether the applicable state privacy law applies to XVELO, you may have some or all of the following rights:

• Right to Know / Access — request information about personal information we collect, use or disclose.
• Right to Delete — request deletion of certain personal information, subject to applicable exceptions.
• Right to Correct — request correction of inaccurate personal information.
• Right to Data Portability — request a portable copy of certain personal information.
• Right to Opt Out — opt out of certain sale, sharing or processing for targeted advertising.
• Right to Limit Certain Uses of Sensitive Information where applicable.
• Right to Appeal — where provided by applicable state law, appeal our decision concerning a privacy-rights request.
• Right to Non-Discrimination — exercise applicable privacy rights without unlawful discrimination.

These rights are not absolute. We may deny or limit a request where an exception applies, including where information must be retained to complete a transaction, provide warranty support, comply with law, prevent fraud or establish or defend legal claims.

16. How to Exercise Your Privacy Rights

To submit a privacy-rights request, you may:

• Use the applicable privacy controls or Your Privacy Choices feature made available on the Site; or
• Email support@xvelogo.com .

When contacting us, please state that your message concerns a Privacy Request and describe the right you wish to exercise.

We may need to verify your identity before completing certain requests. Verification may involve matching information you provide with information associated with your account or past transactions.

We will use information provided for verification only as reasonably necessary to process the request and prevent fraud.

We will respond within the period required by applicable law.

Authorized Agents

Where permitted by applicable law, you may designate an authorized agent to submit a privacy request on your behalf.

We may require evidence that the agent has authority to act for you and may also ask you to verify your identity or confirm the request directly with us.

17. Marketing Communications

If you receive promotional emails from XVELO, you may unsubscribe at any time using the unsubscribe link included in the message.

Where SMS marketing is offered, you may opt out using the method identified in the applicable message or consent flow.

Opting out of promotional communications does not prevent XVELO from sending non-promotional messages reasonably necessary for an existing customer relationship, including:

• Order confirmations
• Shipping and delivery notifications
• Payment or refund information
• Security messages
• Warranty and after-sales communications
• Responses to customer-support requests

18. International Data Processing

XVELO operates an international ecommerce business and uses service providers, manufacturers, warehouses and logistics partners located in multiple countries.

As a result, personal information may be transferred to, stored in or processed in countries outside your state or country of residence, including the United States, China, Canada and other locations where XVELO or its service providers and business partners operate.

Privacy and data-protection laws in those locations may differ from the laws applicable where you live.

We take reasonable steps to use service providers and processing arrangements appropriate to the nature and purpose of the information being processed.

19. Third-Party Websites & Services

The Site may contain links, embedded content or integrations relating to manufacturers, payment providers, social-media platforms, review services or other third-party websites and services.

When you leave the XVELO Site or interact directly with a third-party service, that third party may process personal information according to its own privacy policy.

XVELO does not control the privacy or security practices of independent third parties and encourages you to review their applicable privacy policies before providing personal information.

20. Business Transactions

Personal information may be disclosed or transferred in connection with a proposed or completed merger, acquisition, financing, reorganization, sale of assets, bankruptcy or similar corporate transaction.

Where required by applicable law, we will provide appropriate notice or otherwise protect applicable privacy rights in connection with such a transaction.

21. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, Services, technologies, advertising practices, fulfillment relationships or applicable legal requirements.

When we update this Policy, we will revise the “Last updated” date shown at the top of the page.

Where required by applicable law, we will provide additional notice of material changes.