Privacy Policy
We take your privacy seriously. This policy explains what personal data we collect, why we collect it, how we use it, who we share it with, and the rights you have over it — including under the EU/UK GDPR.
How we handle your data
This Privacy Policy is issued by Vzon.Tech, the operator of the website vzon.tech. Our business entity is registered in China, and we sell internationally through the website.
For any data protection matter — including access, correction, deletion, or complaints — contact us at support@vzon.tech.
We collect only the personal data needed to operate the website, process orders, communicate with you, and improve our service.
| Category | Examples | Source |
|---|---|---|
| Identity | First name, last name | You — reservation form, checkout, account |
| Contact | Email address, phone, shipping & billing address | You — reservation form, checkout, account |
| Order | Order details, items purchased, order history, customer notes | You + WooCommerce platform |
| Payment | Payment status, last 4 digits of card, transaction ID | Our payment processor (Airwallex). We never store full card numbers. |
| Technical | IP address, browser type, device type, pages visited, referring site | Automatically collected via cookies & logs |
| Marketing | Email subscription status, opt-in date, consent record | You — reservation form, account preferences |
Sensitive data. We do not knowingly collect special categories of personal data (e.g. health, religion, political opinions). Please do not submit such information to us.
Under the GDPR, every use of personal data requires a legal basis. Below is the full list of how we use your data and on what basis.
| Purpose | Legal basis (GDPR) |
|---|---|
| Process and deliver your order; handle returns and refunds | Performance of a contract (Art. 6(1)(b)) |
| Communicate about your order (confirmations, shipping updates, customer service) | Performance of a contract (Art. 6(1)(b)) |
| Send pre-launch reservations and marketing emails about Vzon.Tech | Your consent (Art. 6(1)(a)) — opt-in at signup, opt-out anytime |
| Operate, secure, and improve the website (incl. fraud prevention) | Legitimate interest (Art. 6(1)(f)) |
| Comply with tax, accounting, and other legal obligations | Legal obligation (Art. 6(1)(c)) |
| Analyse traffic with Google Analytics to understand visitor behaviour | Your consent (Art. 6(1)(a)) — via cookie banner |
We do not sell your data. We share it only with carefully selected service providers ("processors") who help us operate the website and fulfil your order, and only to the extent necessary.
| Recipient | Purpose | Location |
|---|---|---|
| Airwallex | Payment processing & fraud prevention | Hong Kong / global |
| Mailchimp (Intuit) | Email marketing, reservation list, transactional emails | United States |
| Google (Analytics) | Anonymised website analytics (with consent) | United States / global |
| Namecheap / Stellar Hosting | Website hosting & technical infrastructure | United States |
| Couriers / shipping carriers | Delivery of your order — name, address, phone shared | Varies by destination |
| Tax & legal authorities | Only where required by law | Varies |
We require all processors to handle your data securely and only for the purposes we instruct.
Because we operate from China and use international service providers, your data may be transferred outside the EU/EEA — including to China, the United States, and other jurisdictions where our service providers operate.
Where we transfer EU/UK personal data outside those regions, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or equivalent protections offered by the receiving processor (e.g. Mailchimp, Google, Airwallex all publish their own SCC commitments).
We keep personal data only as long as necessary for the purposes it was collected, or as required by law.
| Data type | Retention period |
|---|---|
| Order & transaction records | 10 years (tax & accounting requirements) |
| Customer account data (registered users) | While account is active + 2 years after last activity |
| Email subscription & marketing data | Until you unsubscribe, then 6 months for record-keeping |
| Reservation list (pre-launch) | Until launch + 6 months, or until you unsubscribe |
| Technical logs (IP, browser data) | Up to 12 months for security & fraud prevention |
| Customer support emails | 2 years after last contact |
Under the GDPR and similar laws, you have the following rights regarding your personal data:
- Right to access. Request a copy of the personal data we hold about you.
- Right to rectification. Correct any inaccurate or incomplete data.
- Right to erasure. Ask us to delete your data (subject to legal retention requirements — e.g. we cannot delete tax records).
- Right to restrict processing. Limit how we use your data in certain situations.
- Right to data portability. Receive your data in a structured, machine-readable format.
- Right to object. Object to processing based on our legitimate interests, including profiling.
- Right to withdraw consent. Where processing is based on consent (e.g. marketing emails), you can withdraw it at any time without affecting prior lawful processing.
- Right to lodge a complaint. You can complain to your local data protection authority if you believe we have not handled your data properly.
To exercise any of these rights, email support@vzon.tech. We respond within 30 days. We may need to verify your identity before acting on a request.
Our website uses cookies and similar technologies. A cookie is a small file stored on your device when you visit a website.
| Category | Purpose | Consent required? |
|---|---|---|
| Strictly necessary | Shopping cart, checkout session, login security | No (essential) |
| Functional | Remembering your preferences (e.g. dismissing the pre-launch banner) | No (set by your interaction) |
| Analytics | Google Analytics — anonymised traffic data | Yes |
| Marketing | None at this time. We will update this policy if added. | Yes (when added) |
You can control or delete cookies through your browser settings. Blocking strictly necessary cookies may prevent parts of the site (especially checkout) from working.
We apply industry-standard security measures, including:
- HTTPS encryption for all communications between your browser and our website.
- PCI-compliant payment processing — handled entirely by Airwallex; card details never reach our servers.
- Limited access to personal data — only authorised personnel for legitimate operational reasons.
- Two-factor authentication on all administrative accounts.
- Regular security updates to our website, plugins, and infrastructure.
- Login protection — rate-limiting, brute-force prevention, hidden admin URLs.
No system is perfectly secure. If you believe your data has been compromised, please contact us immediately at support@vzon.tech.
Our website is not directed to children under the age of 16. We do not knowingly collect personal data from anyone under 16. If you believe a minor has provided us with personal data, contact support@vzon.tech and we will delete it.
We may update this Privacy Policy from time to time. The "Effective" date at the top reflects the latest version. For material changes, we will notify you by email (if you have an account or are subscribed) or by a prominent notice on the website.
For any privacy question, request, or complaint, contact:
We aim to respond within 30 days.
Email us — we reply within 2 business days.
