(Status: June 2026)
Notice at Collection (U.S.) We collect the categories of personal information listed in § 20 for the purposes in § 4 and § 20, and retain them as described in § 17. We do NOT sell your personal information for money. We may "share" certain online identifiers for cross-context behavioral advertising (e.g., advertising pixels); you can opt out at any time using the "Do Not Sell or Share My Personal Information" link in our footer or by enabling Global Privacy Control (see § 22). We do not use or disclose sensitive personal information beyond the purposes permitted by law (see § 21). To learn about your rights and how to exercise them, see §§ 24–25
§ 1 Controller, Scope, Definitions
The party responsible for processing personal data is: ALPHA ALLIN Company Limited, 46 Bich Cau, O Cho Dua Ward, Dong Da District, Hanoi, Vietnam. Operational office & privacy contact: Avielora Operations Center, 46 Bich Cau, O Cho Dua Ward, Dong Da District, Hanoi, Vietnam. Email:
support@avielora.com. Scope: This Privacy Policy applies to all processing of personal data in connection with our online shop, mobile displays, newsletters, support/service communication, social media presences, marketing measures, and offline interactions (e.g., returns processing). Personal data means any information relating to an identified or identifiable natural person.
We process personal data in accordance with applicable U.S. data-protection laws, including the California Consumer Privacy Act, as amended by the CPRA (CCPA), where applicable.
§ 2 Principles of Processing
We process personal data for specified purposes, based on necessity and a valid legal basis. We collect only the data we actually need for the respective purposes (data minimization). We use technical and organizational measures (e.g., SSL encryption) to protect your data.
§ 3 Categories of Data Processed
Master data: name, email, phone number (optional), billing/delivery address. Order/contract data: cart, order number, items, prices, payment status, production status (hybrid: on-demand/ready-to-ship), return data. Payment data: pseudonymized payment references from the payment service provider; no access to full card data. Technical usage data: IP address, timestamp, user agent, device info, session IDs, log files. Marketing/tracking data: consent/preference status, pixel IDs, events.
§ 4 Purposes & Legal Bases (Overview)
Shop provision: technical delivery, security. Contract & production: order process, hybrid production (in Vietnam & China), quality control, shipping. Payment processing: PayPal. Shipping/logistics: address data to shipping providers; email to providers for tracking updates. Customer service: inquiries, complaints, returns. Marketing: Meta Pixel, Klaviyo. Legal obligations: commercial/tax law (retention). We rely on the bases permitted under applicable U.S. law — primarily performance of our contract with you, our legitimate business interests, your consent where required, and compliance with legal obligations.
§ 5 Provision of the Website, Log Files & Hosting
When you access our pages, technical data is automatically processed (IP address, time, URL, user agent) for the stability and security of the site. Storage period: log files are regularly deleted within 7–30 days.
§ 6 Cookies & Tracking Technologies
We use cookies and similar technologies. Strictly necessary cookies (e.g., cart, checkout) are always active. For analytics/marketing cookies (e.g., pixels), U.S. visitors may opt out at any time. You can manage your preferences via the "Cookie Settings" link in the footer, and California residents can use the "Do Not Sell or Share My Personal Information" link to opt out of the sale or sharing of personal information.
§ 7 Contract Processing & Hybrid Production
Process: order → payment release → production release (in Vietnam or China) → quality control → shipping. Data: master data, delivery address, ordered items/sizes. Note: As we use a hybrid model (on-demand & in-stock), your data is transmitted to our operational locations in Vietnam and China for production and shipping (see § 16).
§ 8 Customer Account (optional)
If you create an account, we store your data (order history, addresses) for faster processing of future purchases. The account can be deleted at any time.
§ 9 Customer Service
Inquiries via email or contact form are stored for processing.
§ 10 Payment Processing — PayPal
Purpose: purchase via PayPal. Data: transaction data is transmitted to the relevant PayPal entity. PayPal acts as an independent controller for the processing of payment data and may transmit data for risk analysis to other countries (e.g., USA, Singapore). Please see PayPal's privacy policy.
§ 11 Shipping & Delivery
For delivery, we pass on name, address, and phone number (if necessary) to our shipping partners (e.g., DHL, FedEx, YunExpress, and partners in Vietnam/China). Tracking updates: we share your email address with the shipping provider so they can inform you about delivery status by email. This is necessary for transparent contract processing.
§ 12 Newsletter (Klaviyo)
Purpose: sending newsletters and updates. Only with your consent (double opt-in). Provider: Klaviyo (USA). Withdrawal: you can unsubscribe at any time via the link in the newsletter.
§ 13 Meta/Facebook Pixel (Marketing)
Purpose: measuring advertising success and retargeting. Used subject to your choices; U.S. visitors may opt out as described in § 6. Data may be transferred to Meta Platforms Inc. (USA).
§ 14 User Content & Social Media
If you contact us on social media or share content (UGC), the privacy terms of the respective platforms (Meta, Instagram, etc.) apply.
§ 15 Processors & Recipients
We share data only with: hosting provider (Shopify), payment service provider (PayPal), shipping and fulfillment companies, marketing tools, and IT security service providers. All processors are contractually bound.
§ 16 International Data Processing
The controller is ALPHA ALLIN Company Limited, based in Vietnam. For contract, shipping, and fulfillment, personal data (in particular name and delivery address) is processed at our operational location in Vietnam and our fulfillment warehouse in China. Our production partners receive only order- and product-related details (e.g., item, size) and no further personal data. For service providers based in the USA (e.g., Shopify, PayPal, Klaviyo, Meta), data is processed in the United States.
§ 17 Storage Period
Contract/tax documents: 6–10 years. Support cases: after resolution/closure. Marketing data: until you opt out.
§ 18 Your Rights
Depending on where you live, you have the right to request access to, correction of, or deletion of your personal information, and to opt out of the sale or sharing of your personal information and of targeted advertising. California residents (under the CCPA/CPRA) also have the right not to be discriminated against for exercising these rights. To exercise any of these rights, contact us at support@avielora.com. You may withdraw consents you have given at any time.
§ 19 Privacy Contact
§ 20 Categories of Personal Information We Collect (CCPA)
In the last 12 months we have collected the following CCPA categories. We do not sell personal information for money. We may "share" online identifiers/internet activity for cross-context behavioral advertising (you may opt out — see § 22).
| CCPA category |
Collected? |
Examples |
Disclosed to (business purpose) |
| Identifiers |
Yes |
name, email, phone, billing/shipping address, IP address, account/order ID |
hosting, payment, shipping/fulfillment, marketing providers |
| Customer records (Cal. Civ. Code § 1798.80(e)) |
Yes |
name, address, phone, payment reference |
payment & shipping providers |
| Commercial information |
Yes |
products purchased/returned, order history |
hosting, fulfillment |
| Internet/electronic activity |
Yes |
site browsing, interactions, pixel events |
analytics & advertising providers (shared for ads only with opt-out) |
| Geolocation data |
Yes (approximate) |
region derived from IP |
hosting, security |
| Inferences |
Yes |
preferences for marketing |
marketing providers (with consent) |
| Sensitive personal information |
No |
— |
— |
| Biometric, audio, professional, education, protected classifications |
No |
— |
— |
We collect this information for the purposes in § 4 / § 20 and retain it per § 17.
§ 21 Sensitive Personal Information
We do not collect sensitive personal information (such as government IDs, precise geolocation, racial/ethnic origin, health, or financial account login) for the purpose of inferring characteristics, and we do not use or disclose it beyond the limited purposes permitted by the CCPA. You have the right to limit our use of any sensitive personal information.
§ 22 Targeted Advertising, "Do Not Sell or Share" & Global Privacy Control (GPC)
We use advertising technologies (e.g., the Meta Pixel) that may constitute "sharing" of personal information for cross-context behavioral advertising under the CCPA, or "targeted advertising" under other state laws. You can opt out at any time by: (1) clicking "Do Not Sell or Share My Personal Information" in our footer; (2) adjusting your Cookie Settings; or (3) enabling an opt-out preference signal such as Global Privacy Control (GPC) in your browser — we treat a valid GPC signal as a request to opt out of sale/sharing for that browser/device. We do not sell personal information for monetary value.
§ 23 Children's Privacy
Our website and products are intended for adults. We do not knowingly collect personal information from children under 16. If you believe a child has provided us personal information, contact support@avielora.com and we will delete it.
§ 25 How to Exercise Your Rights (and Authorized Agents)
You can submit a request through either of these methods: (1) email support@avielora.com; or (2) our ... (thêm 1 phương thức nữa) We will verify your identity before responding (we may ask you to confirm details associated with your order/account). An authorized agent may submit a request on your behalf with your written permission and proof of authorization. We aim to respond within the timeframe required by your state's law (generally 45 days, extendable). We will not discriminate against you for exercising any of these rights.
