Privacy Policy

Cardivexa operates this online store and website, including its related content, products, features, tools, and customer services (collectively, the “Services”).

Cardivexa is powered by Shopify, which provides the ecommerce platform that enables us to offer the Services.

This Privacy Policy explains how Cardivexa collects, uses, discloses, stores, and protects personal information when you:

• Visit https://cardivexa.com
• Create or use an account
• Place or manage an order
• Request a return or refund
• Contact customer support
• Subscribe to marketing
• Submit a review or other content
• Otherwise interact with the Services

If this Privacy Policy conflicts with our Terms of Service regarding the collection, use, or disclosure of personal information, this Privacy Policy will control for that matter.

Please read this policy carefully.

Last updated: August 11, 2026

1. Who We Are

Store Name: Cardivexa
Business Type: Online Retail Store
Primary Category: Cardio Fitness Equipment and Accessories
Website: https://cardivexa.com
Email: arshaborly@gmail.com
Phone: +1 (936) 260-5549

Business Address:

Cardivexa
Unit 809, 8/F, Brill Plaza
84 To Kwa Wan Road
To Kwa Wan, Hong Kong

For purposes of applicable privacy law, Cardivexa is generally responsible for determining how personal information collected directly through our store is used, except when another party—such as Shopify or an independent payment provider—acts as a separate controller under its own privacy policy.

2. Meaning of Personal Information

“Personal information” means information that identifies, relates to, describes, or can reasonably be linked to an individual or household.

Depending on applicable law, it may also be referred to as:

• Personal data
• Personally identifiable information
• Customer data

Personal information generally does not include information that has been lawfully aggregated, anonymized, or de-identified so that it cannot reasonably be linked to an individual.

3. Personal Information We Collect

The information we collect depends on how you interact with Cardivexa, the features you use, your location, and applicable law.

Contact Information

We may collect:

• Full name
• Email address
• Telephone number
• Billing address
• Shipping address
• Country, state, city, and postal code

Order and Transaction Information

We may collect:

• Products viewed or purchased
• Shopping-cart contents
• Wishlist information
• Order number
• Transaction date and amount
• Discount or promotional code
• Shipping selection
• Order status
• Fulfillment and tracking information
• Returns, exchanges, cancellations, and refunds
• Previous transactions with Cardivexa

Payment Information

Payment information may include:

• Payment method
• Billing details
• Payment authorization status
• Transaction reference
• Limited payment-card details made available by the payment provider

Complete card numbers and card security codes are generally collected and processed directly by authorized payment providers rather than stored by Cardivexa.

Account Information

If account features are available, we may collect:

• Username or account identifier
• Encrypted or protected login credentials
• Account preferences
• Saved addresses
• Saved products
• Communication settings
• Account activity

Customer Communications

We may collect information you provide through:

• Email
• Telephone
• Contact forms
• Customer-support requests
• Return or refund requests
• Product questions
• Reviews and feedback
• Dispute communications

This may include photographs, videos, documents, or other information submitted to support an order or product claim.

Device and Technical Information

We may collect:

• IP address
• Browser type
• Device type
• Operating system
• Network connection information
• Device or advertising identifiers
• Cookie identifiers
• Language and time-zone settings
• Approximate location inferred from IP address
• Referring website
• Website error and diagnostic information

Website Usage Information

We may collect information about:

• Pages visited
• Products viewed
• Searches performed
• Links selected
• Items added to or removed from a cart
• Time spent on pages
• Website navigation
• Checkout interactions
• Advertising interactions
• Date and time of visits

Fraud and Security Information

We may collect information used to:

• Verify transactions
• Detect suspicious activity
• Prevent account takeover
• Identify unauthorized payments
• Protect customers and the website
• Comply with payment-provider requirements

Reviews and User Content

When you submit a review, photograph, video, comment, or other content, we may collect:

• Display name
• Review text
• Rating
• Submitted media
• Product and order association
• Submission date
• Information needed to verify that the review reflects a genuine interaction

Do not include unnecessary personal, financial, medical, or confidential information in a public review.

4. Health and Medical Information

Cardivexa sells fitness and exercise-related products, but we do not require customers to provide medical diagnoses or detailed health records to make an ordinary purchase.

Please do not send us:

• Medical records
• Diagnostic results
• Detailed treatment information
• Health insurance information
• Other unnecessary sensitive health information

If you voluntarily include health information in a customer-support message, we will use it only as reasonably necessary to understand and respond to your inquiry, comply with law, protect safety, or establish and defend legal rights.

Cardivexa does not provide medical diagnosis or treatment.

5. Sources of Personal Information

We may collect personal information from:

Directly from You

For example, when you:

• Place an order
• Create an account
• Contact customer support
• Request a return
• Subscribe to marketing
• Submit a review
• Participate in a promotion
• Provide delivery information

Automatically Through the Services

We may collect information automatically through:

• Cookies
• Pixels
• Tags
• Software development kits
• Local storage
• Log files
• Analytics tools
• Similar technologies

Shopify and Service Providers

We may receive information from providers that support:

• Website hosting
• Ecommerce functionality
• Payment processing
• Shipping and fulfillment
• Fraud prevention
• Analytics
• Advertising
• Customer support
• Email communications

Business and Marketing Partners

We may receive information from advertising platforms, analytics partners, referral sources, social media services, and other partners where permitted by law.

Public and Lawful Sources

We may receive information from publicly available or legally permitted sources for fraud prevention, identity verification, dispute resolution, intellectual-property claims, or legal compliance.

6. How We Use Personal Information

We may use personal information for the following purposes.

Providing the Services

We may use information to:

• Process orders
• Authorize payments
• Arrange fulfillment and shipping
• Send order and tracking notifications
• Process returns, refunds, and cancellations
• Provide customer support
• Maintain customer accounts
• Remember preferences
• Display saved products
• Provide requested website functions

Improving and Personalizing the Services

We may use information to:

• Analyze website performance
• Understand customer interests
• Improve navigation and checkout
• Recommend related products
• Diagnose technical problems
• Develop new features
• Improve products and customer support

Marketing and Advertising

Subject to applicable law and your choices, we may use information to:

• Send promotional emails or messages
• Measure advertising effectiveness
• Understand interactions with advertisements
• Display contextual advertising
• Display targeted or personalized advertising
• Create or use advertising audiences
• Recommend products based on website or purchase activity

Security and Fraud Prevention

We may use information to:

• Authenticate users
• Verify payments
• Detect unauthorized transactions
• Investigate suspected fraud
• Prevent account abuse
• Protect customer and website security
• Enforce store policies

Communications

We may use information to:

• Respond to questions
• Send transactional messages
• Provide shipping updates
• Communicate return decisions
• Send account notices
• Provide product-safety or recall information
• Resolve complaints and disputes

Legal and Compliance Purposes

We may use information to:

• Maintain tax and transaction records
• Respond to lawful legal requests
• Comply with court orders
• Enforce our Terms and policies
• Protect legal rights
• Investigate claims
• Establish or defend legal proceedings
• Comply with product-safety obligations
• Meet regulatory requirements

7. Legal Bases for Processing

Where applicable law requires a legal basis, we may process personal information based on:

Performance of a Contract

We process information when necessary to:

• Accept and fulfill an order
• Process payment
• Deliver products
• Provide customer support
• Handle returns and refunds

Legitimate Interests

We may process information for legitimate business purposes such as:

• Improving the Services
• Preventing fraud
• Protecting security
• Understanding website performance
• Managing customer relationships
• Establishing or defending legal rights

We consider the impact on individual privacy where this basis applies.

Consent

We may rely on consent for:

• Certain marketing communications
• Non-essential cookies
• Targeted advertising
• Other processing where consent is legally required

You may withdraw consent at any time, subject to applicable law and processing already lawfully completed.

Legal Obligations

We may process information to comply with:

• Tax laws
• Accounting requirements
• Consumer-protection laws
• Product-safety requirements
• Court orders
• Valid government requests
• Other applicable legal duties

8. Cookies and Similar Technologies

Cardivexa, Shopify, and our service providers may use cookies and similar technologies to:

• Operate the shopping cart
• Maintain login sessions
• Remember preferences
• Support checkout
• Prevent fraud
• Measure website traffic
• Understand website activity
• Improve performance
• Support advertising
• Measure marketing campaigns

Cookies may be categorized as:

• Strictly necessary
• Functional
• Analytics or performance
• Advertising or targeting

Where required by law, non-essential cookies will be used based on the privacy choices or consent provided through our cookie preference tool.

Blocking certain cookies may affect website functions, account access, saved preferences, cart contents, or checkout.

9. Global Privacy Control and Do Not Track

Where required by applicable law and when our systems detect a valid Global Privacy Control (“GPC”) or other legally recognized universal opt-out signal, we will process it as a request to opt out of applicable sale, sharing, or targeted-advertising activity for the browser and device sending the signal.

You may need to enable the signal separately on each browser and device.

Because there is no universally accepted standard for ordinary “Do Not Track” browser signals, we do not respond to those signals unless applicable law requires otherwise.

GPC is treated separately from a general Do Not Track setting.

10. How We Disclose Personal Information

We may disclose personal information for legitimate business purposes to the following categories of recipients.

Shopify

Shopify hosts and supports the ecommerce platform used by Cardivexa.

Payment Providers

Payment providers process payments, authorizations, refunds, chargebacks, and fraud checks.

Fulfillment and Shipping Providers

We may disclose order and contact information to:

• Suppliers
• Warehouses
• Fulfillment partners
• Shipping carriers
• Customs intermediaries
• Delivery providers

This information is used to prepare, ship, track, and deliver orders.

Technology and Hosting Providers

We may use providers for:

• Cloud hosting
• Data storage
• Website functions
• Security
• Error monitoring
• Technical support

Analytics and Advertising Partners

Subject to applicable law and your privacy choices, we may disclose identifiers, device information, website activity, and transaction-related information to analytics or advertising partners.

Customer-Support Providers

We may use providers that help manage customer inquiries, communications, reviews, returns, and support records.

Professional Advisers

Information may be disclosed when reasonably necessary to lawyers, accountants, auditors, insurers, consultants, and other professional advisers.

Government and Legal Recipients

We may disclose information:

• In response to valid legal process
• To comply with law
• To protect customers or public safety
• To investigate fraud
• To establish or defend legal claims
• To report product-safety concerns where legally required

Business Transactions

Information may be transferred as part of a lawful:

• Merger
• Acquisition
• Financing
• Reorganization
• Sale of assets
• Insolvency or bankruptcy proceeding
• Transfer of store operations

Appropriate protections will apply where required.

At Your Direction

We may disclose information when you request, authorize, or intentionally direct us to interact with another party.

11. Sale, Sharing, and Targeted Advertising

Cardivexa does not sell personal information in the traditional sense of exchanging customer lists directly for money.

However, our use of certain advertising, analytics, pixels, cookies, Shopify features, or marketing services may be legally considered a “sale,” “sharing,” or processing for “targeted advertising” under certain U.S. state privacy laws.

Depending on where you live, you may have the right to opt out.

You can exercise applicable rights by visiting our Your Privacy Choices page or contacting:

Email: arshaborly@gmail.com
Subject: Privacy Choices Request

Opting out of targeted advertising does not necessarily stop all advertising. You may continue to receive contextual or less-personalized advertisements.

12. Relationship With Shopify

The Services are hosted by Shopify. Information submitted through Cardivexa may be transmitted to and processed by Shopify to provide and improve ecommerce services.

Shopify may process information as:

• A service provider or processor acting for Cardivexa
• An independent controller for certain Shopify services and features

Certain Shopify features may use information about interactions with Cardivexa, other Shopify merchants, and Shopify services to provide security, analytics, personalization, advertising, or platform improvements.

Shopify’s use of information under its independent responsibility is governed by its own privacy policies.

You can review:

• Shopify Consumer Privacy Policy
• Shopify Privacy Controls

Requests concerning information controlled by Cardivexa should be directed to Cardivexa. Requests concerning information independently controlled by Shopify may need to be submitted through Shopify’s privacy portal.

13. Shopify Network Intelligence

If Shopify Network Intelligence or related enhanced Shopify services are enabled for Cardivexa, Shopify may use information about customer interactions with Cardivexa, other participating Shopify merchants, and Shopify services to provide enhanced features.

These features may include:

• Fraud prevention
• Store and product personalization
• Advertising measurement
• Targeted advertising
• Analytics
• Platform improvement

Where applicable, Shopify may be independently responsible for certain processing.

Cardivexa will provide applicable privacy choices and disclosures as required by law. Our use of these features may change if they are enabled, disabled, or modified through Shopify’s settings.

14. Marketing Communications

Subject to applicable law, we may send promotional messages when you:

• Subscribe to marketing
• Provide valid consent
• Have an existing customer relationship that permits communication
• Otherwise qualify to receive the communication legally

You may opt out of marketing emails using the unsubscribe link in the message or by contacting us.

After opting out, you may continue to receive transactional messages concerning:

• Orders
• Payments
• Shipping
• Returns
• Refunds
• Account security
• Customer support
• Product safety or recalls

We do not condition incentives on a customer providing a positive review.

15. Third-Party Websites and Services

Cardivexa may contain links to independent websites, social media platforms, payment services, manufacturers, carriers, or other third-party services.

We do not control independent third parties and are not responsible for their separate privacy practices.

Before providing information to another service, review its:

• Privacy policy
• Cookie policy
• Security practices
• Terms of service

Including a link does not necessarily indicate endorsement, sponsorship, or affiliation.

16. Public Content

Information submitted through public or semi-public areas—such as product reviews, comments, or social media—may be visible to other users.

Do not publish:

• Full addresses
• Telephone numbers
• Order numbers
• Payment information
• Medical information
• Passwords
• Private information about another person

We may remove public content containing sensitive information when reasonably possible, but we cannot guarantee that copies have not been made by others.

17. Children’s Personal Information

The Services are not directed to children under 13, and Cardivexa does not knowingly collect personal information directly from children under 13 without legally required parental authorization.

If you are a parent or legal guardian and believe that a child has provided personal information, contact us so we can review and take appropriate action.

We do not knowingly sell or share the personal information of individuals under 16 where prohibited by applicable law.

Products that may be used by children must be purchased and supervised by an appropriate adult according to product instructions.

18. Data Security

Cardivexa and its service providers use reasonable administrative, technical, and organizational safeguards appropriate to the nature of the information and the Services.

These measures may include:

• Access controls
• Account authentication
• Payment-provider security
• Encryption in transit where supported
• Fraud-monitoring tools
• Service-provider controls
• Security review and incident response

No method of transmission or storage can be guaranteed completely secure.

You are responsible for:

• Protecting account credentials
• Using a strong and unique password
• Restricting device access
• Logging out of shared devices
• Reporting suspected unauthorized activity

Do not send complete card numbers, card security codes, passwords, banking credentials, or unnecessary sensitive information through ordinary email.

19. Security Incidents

If a security incident affects personal information, Cardivexa will investigate and take reasonable steps appropriate to the circumstances.

Where legally required, we will notify affected individuals, regulators, or other appropriate parties within the applicable timeframe.

A notification may be delayed when law enforcement or applicable law permits or requires a delay.

20. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including:

• Providing the Services
• Maintaining accounts
• Completing transactions
• Processing returns and refunds
• Providing customer support
• Preventing fraud
• Maintaining security
• Complying with tax and accounting obligations
• Resolving disputes
• Enforcing agreements
• Establishing or defending legal claims

Retention periods depend on:

• The type and sensitivity of information
• The length of our relationship
• Account and order status
• Legal and regulatory requirements
• Fraud and security needs
• Applicable limitation periods
• Backup and disaster-recovery schedules

When information is no longer reasonably required, we may delete, anonymize, or securely dispose of it.

21. International Data Transfers

Cardivexa operates from Hong Kong and uses service providers that may process information in the United States, Canada, Hong Kong, the European Economic Area, the United Kingdom, and other countries.

Your information may therefore be transferred to, stored in, or processed in a country different from your country of residence.

Privacy laws in another country may differ from those in your location.

Where legally required, we may rely on recognized transfer safeguards, such as:

• Adequacy decisions
• Standard contractual clauses
• Contractual data-protection terms
• Another legally approved transfer mechanism

Shopify and other independent service providers may apply their own transfer safeguards as described in their policies.

22. Your Privacy Rights

Depending on where you live and applicable law, you may have the right to:

• Know whether we process your personal information
• Access personal information
• Correct inaccurate information
• Delete certain information
• Receive certain information in a portable format
• Opt out of sale or sharing
• Opt out of targeted advertising
• Limit certain uses of sensitive personal information
• Withdraw consent
• Object to or restrict certain processing
• Appeal a privacy-request decision
• Complain to an appropriate privacy authority
• Receive equal service and pricing when exercising privacy rights

These rights may be subject to exceptions and verification requirements.

More information is available on our Your Privacy Choices page.

23. United States Privacy Rights

Residents of certain U.S. states may have rights concerning:

• Access
• Deletion
• Correction
• Portability
• Sale or sharing opt-outs
• Targeted-advertising opt-outs
• Sensitive-data processing
• Profiling
• Authorized agents
• Appeals
• Non-discrimination

The availability and scope of these rights depend on the applicable state law and whether that law applies to Cardivexa.

An activity involving advertising technology may qualify as a “sale” or “sharing” even when no money is exchanged.

24. European Economic Area, United Kingdom, and Switzerland

Where applicable, individuals in the European Economic Area, United Kingdom, or Switzerland may have rights to:

• Access personal information
• Correct inaccurate information
• Request deletion
• Restrict processing
• Object to processing
• Receive portable information
• Withdraw consent
• Submit a complaint to a local supervisory authority

Withdrawing consent does not affect processing lawfully completed before withdrawal.

Contractual, legal, fraud-prevention, and legitimate business requirements may limit certain requests.

25. Privacy Requests

To exercise an applicable privacy right, contact:

Email: arshaborly@gmail.com
Phone: +1 (936) 260-5549

Use the subject line:

Privacy Request

Please identify:

• Your name
• The right you wish to exercise
• The email address associated with your account or order
• Relevant order information, when necessary
• The state or country where you reside, when relevant to the request

Do not send passwords, full card numbers, card security codes, banking passwords, or government identification documents through ordinary email unless specifically requested through an appropriate secure method.

26. Verification

We may need to verify your identity before processing access, correction, deletion, or portability requests.

Verification may involve matching information you provide with information associated with your account, order, or previous interactions.

We will request only the information reasonably necessary for verification.

If we cannot verify a request, we may be unable to complete it. We will provide an explanation when required by law.

Simple opt-out requests generally will not require verification unless reasonably necessary and legally permitted.

27. Authorized Agents

Where permitted by law, an authorized agent may submit a request on your behalf.

We may request:

• Written proof of authorization
• Direct confirmation from you
• Verification of your identity
• A valid power of attorney where applicable

These steps help protect personal information from unauthorized access or deletion.

28. Appeals and Complaints

If we decline a privacy request, residents of certain jurisdictions may have the right to appeal.

Submit an appeal to:

Email: arshaborly@gmail.com
Subject: Privacy Request Appeal

Include the original request, our response, and the reason you believe the decision should be reconsidered.

You may also have the right to submit a complaint to a local privacy, data-protection, or consumer-protection authority.

29. Non-Discrimination

Cardivexa will not unlawfully discriminate against you for exercising an applicable privacy right.

We will not unlawfully:

• Deny products or services
• Charge a different price
• Provide a different quality of service
• Retaliate against you

This does not prevent lawful discounts, loyalty programs, or financial incentives that comply with applicable disclosure and consent requirements.

30. Communication Preferences

You may unsubscribe from promotional emails using the unsubscribe link included in those messages.

You may also contact us to update your communication preferences.

Even after opting out of marketing, we may send necessary non-promotional communications regarding:

• Orders
• Payments
• Shipping
• Returns and refunds
• Account security
• Customer-support requests
• Product recalls or safety notices
• Legal or policy updates when required

31. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in:

• Our business practices
• Shopify services
• Installed applications
• Advertising or analytics tools
• Legal requirements
• Products and services
• Security practices

The revised policy will be posted on this page with an updated date.

Where required by law, we will provide additional notice or obtain consent before applying a material change.

32. Contact Information

For questions about this Privacy Policy, Cardivexa’s privacy practices, or a privacy request, contact:

Cardivexa Privacy Support
Email: arshaborly@gmail.com
Phone: +1 (936) 260-5549
Website: https://cardivexa.com

Business Address:

Cardivexa
Unit 809, 8/F, Brill Plaza
84 To Kwa Wan Road
To Kwa Wan, Hong Kong

Use “Privacy Request” for a new privacy request and “Privacy Request Appeal” for an appeal.

Please do not send product returns to this address unless Cardivexa has provided written authorization and confirmed the correct return destination.