Privacy Policy
Last updated: September 9, 2026
This policy explains what information Hyloxs collects when you use hyloxs.com, why we collect it, who we share it with, and the choices you have.
1. Information We Collect
- Order information: your name, shipping address, email address, and order details. Payments are processed securely by PayPal — we never see or store your full card numbers.
- Contact information: the email address you provide for support, returns, or (if you opt in) our newsletter.
- Customization content: photos, names, or text you upload so we can produce your personalized item.
- Usage data: pages viewed and basic interactions, collected via privacy-friendly, self-hosted analytics (Koko Analytics) and Google Analytics — the latter only after you consent.
- Cookies: strictly necessary cookies keep your cart and session working; analytics/marketing cookies are used only with your consent.
2. How We Use Information
- To process, produce, and ship your order, and to provide customer support.
- To handle returns, refunds, and order updates (including transactional emails).
- To improve the store, and — only with your consent — to measure traffic and marketing performance.
- To prevent fraud and keep the Site secure.
We do not use your data for automated decision-making or profiling that produces legal effects.
3. Who We Share It With
We only share what is necessary, with:
- PayPal — payment processing (they act as the data controller for their own services).
- Shipping carriers — name, address, and contact details, to deliver your order.
- Service providers: our hosting/CDN (Cloudflare), email provider (Zoho, for order and support emails), and analytics (Google Analytics, consent-based; Koko Analytics, self-hosted).
- Authorities — only where required by law.
We never sell your personal data.
4. Cookies & Analytics
Essential cookies (cart/session) are always on because the store cannot function without them. Analytics and marketing cookies load only after you accept them in the consent banner, and you can change your choice any time by clearing site data in your browser. Google Analytics is configured with IP anonymization and consent signals.
5. Data Retention
Order records are kept for as long as needed to fulfill orders, handle returns/warranties, and meet accounting and tax obligations. Analytics data is kept in aggregate form. You can request deletion at any time (see below), subject to legal record-keeping requirements.
6. Security
The Site is served over HTTPS. Access to order data is limited to team members who need it to serve you, and payment details are handled entirely by PayPal’s secure infrastructure.
7. Children’s Privacy
The Site is not directed to children under 13, and we do not knowingly collect their data. If you believe a child provided us information, contact us and we will delete it.
8. Your Rights & Choices
- Access, correction, deletion: email [email protected] and we will respond within 30 days.
- Marketing opt-out: every newsletter email has an unsubscribe link; you can also opt out of analytics via the consent banner.
- U.S. state privacy rights: residents of states with privacy laws (e.g., California, Virginia, Colorado) may request to know, delete, or correct their personal data, and may not be discriminated against for exercising these rights. We do not sell or share personal data for cross-context behavioral advertising.
- EEA/UK visitors: where GDPR applies, our legal bases are contract (fulfilling your order), legitimate interest (Site security and improvement), and consent (analytics/marketing). You may also lodge a complaint with your local supervisory authority.
9. Changes to This Policy
We may update this policy as the store evolves. The “Last updated” date above always reflects the current version, and material changes will be highlighted on this page.
10. Contact
Privacy questions? Email [email protected] or visit our Contact page.