Privacy policy

Last updated: January 2, 2026

1. Who we are (Data Controller)

The website www.elevia.ro ("the Website") is operated by CEVA DIFERIT YSN S.R.L. ("Elevia", "we"), with its registered office in Bucharest, Sector 2, Strada Opanez, No. 11, Block 77, Staircase 1, Floor 2, Apt. 11, Tax ID (CUI) 51755152, registered with the Trade Register under no. J2025032621007.
Privacy contact email: shopelevia@gmail.com.

This Privacy Policy describes how we collect, use and disclose personal data when you visit the Website, place an order, create an account or communicate with us.

2. What data we collect

By "personal data" we mean information that identifies you or can reasonably be associated with you. We may collect:

a) Contact and delivery/billing data: first name, last name, delivery address, billing address, email, phone.
b) Account data (if any): username, password (stored securely/encrypted), preferences.
c) Transaction/order data: products viewed, added to cart, ordered, returned, order history, delivery status.
d) Communication: the messages you send us (email, contact form, support requests).
e) Technical and usage data: IP address, browser type, device, pages visited, cookies and similar identifiers.

Important: Online payments are processed by authorised providers (payment processor). We do not store and do not have access to your full card details.

3. Where we collect data from

We collect data:

directly from you (when you place orders, create an account or contact us);
automatically (through cookies/similar technologies when you use the Website);
from providers (couriers, payment processors, IT/hosting services) when necessary for delivery and operation.

4. Why we use the data (purposes)

We use the data for:

processing and delivering orders, including order-related communications;
issuing tax documents and complying with legal obligations;
customer support, returns, complaints;
security and fraud prevention;
improving the Website and services (traffic analysis, performance);
marketing (newsletter / SMS / ads) only if you have given your consent, where applicable.

5. Legal basis (GDPR)

We process data on the basis of:

performance of the contract (your order);
legal obligations (accounting/taxation, warranties);
legitimate interest (security, fraud prevention, service improvement);
consent (for marketing communications/non-essential cookies).

6. Who we disclose data to

We may disclose data, strictly as necessary, to:

courier companies (for delivery);
payment processors (for collecting payments);
IT/hosting providers and technical services;
the Shopify platform (hosting of the store);
public authorities where there is a legal obligation.

We do not sell or rent your data to third parties.

7. International transfers

As the store is hosted on Shopify, some data may be processed/transferred outside the EEA. In such cases, transfers are carried out through mechanisms recognised by the GDPR (e.g. standard contractual clauses) to ensure an adequate level of protection.

8. Cookies

We use cookies necessary for the operation of the Website and, optionally, analytics/marketing cookies only with your consent, according to the settings in the cookie banner. Further details may be included in the Website's Cookie Policy.

9. How long we keep data

We keep data only for as long as necessary:

for order fulfilment and support;
to meet legal obligations (e.g. accounting/tax documents);
to defend our rights in possible disputes.

10. Your rights

Under the GDPR you have the right to:

access your data;
rectification;
erasure (where applicable);
restriction of processing;
objection;
portability;
withdrawal of consent (for marketing/cookies), without affecting the lawfulness of prior processing;
lodging a complaint with the Romanian data protection authority (ANSPDCP) or with your local supervisory authority.