Privacy Policy

1. Information we collect

Information you give us. When you create an account, place an order, request a trade-in quote or contact support we collect your name, email address, phone number, delivery address, order contents, trade-in device details (model, year, condition, accessories) and the content of your messages.

Payment information. Card payments are processed by a PCI DSS Level 1 certified payment provider. Your full card number and security code are entered into fields controlled by that provider and never reach Tectov servers; we receive only the card brand, the last four digits, the expiry month and year and the authorisation result. Cryptocurrency payments are processed by a licensed crypto payment processor; we receive the invoice identifier, asset, amount and status, not your wallet's private information beyond the public sending address.

Information collected automatically. Our servers log IP address, browser type, device identifiers, pages viewed, referring URL and timestamps. We use first-party cookies and local storage for the shopping cart, your session, your attached trade-in offer and anti-fraud measures (including hCaptcha on registration and checkout). With your consent, analytics cookies help us understand how the site is used.

2. How we use information

• To fulfil orders: process payment, arrange courier delivery, send order and delivery notifications, handle trade-ins, returns and warranty claims. Legal basis: performance of a contract.
• To operate your account and send the welcome promo code you requested when registering. Contract / consent.
• To prevent fraud, enforce our Terms, rate-limit abusive traffic and keep the site secure. Legitimate interests.
• To comply with tax, accounting, consumer-protection and anti-money-laundering obligations, including record-keeping for cryptocurrency transactions. Legal obligation.
• To improve the site, catalog and pricing through aggregated analytics. Legitimate interests / consent for analytics cookies.
• To send marketing emails only if you opt in; every email contains an unsubscribe link. Consent.

We do not sell personal information and we do not "share" it for cross-context behavioural advertising as those terms are defined by the CCPA. We do not use automated decision-making that produces legal or similarly significant effects.

3. Who we share information with

We share personal data only with service providers acting on our instructions under written contracts: our payment card processor and crypto payment processor (to take payment), courier partners (name, address, phone — to deliver), our transactional email provider (to send order emails), cloud hosting and database providers located in the United States, the hCaptcha anti-bot service, and professional advisers. We may disclose information when required by law, to protect our rights or users, or in connection with a merger or sale of the business, in which case this policy continues to apply.

4. International transfers

Our systems are hosted in the United States. If you access the site from the EU, UK or Switzerland, your data is transferred to the US under Standard Contractual Clauses or an adequacy mechanism such as the EU-US Data Privacy Framework where our providers participate. You can request a copy of the safeguards from privacy@tectov.shop.

5. Retention

Order, invoice and trade-in records are kept for seven years to meet tax and accounting rules. Account data is kept while your account is active and deleted or anonymised within 90 days of a deletion request, except where we must keep it for legal reasons. Server logs are kept for 12 months. Card payment attempt logs (brand, last four digits, result) are kept for 24 months for fraud prevention. Support messages are kept for three years.

6. Your rights

Depending on where you live you may have the right to access the personal data we hold about you, correct it, delete it, port it to another provider, restrict or object to certain processing, and withdraw consent at any time. California residents additionally have the right to know the categories of information collected and disclosed, the right to opt out of sale or sharing (we do neither), the right to limit the use of sensitive personal information (we collect none beyond what is needed for payment) and the right not to be discriminated against for exercising these rights.

To exercise a right, email privacy@tectov.shop from the address on your account or use the contact form. We verify requests by matching the details on file and respond within 30 days (45 days under the CCPA, extendable once). You may appoint an authorised agent under the CCPA. EU and UK residents may also complain to their local supervisory authority; we would appreciate the chance to resolve the issue first.

7. Cookies

You can block cookies in your browser; the cart and sign-in will stop working if strictly necessary storage is blocked. We honour the Global Privacy Control signal as an opt-out of analytics.

8. Security

All traffic is encrypted with TLS 1.2 or higher. Passwords are hashed with bcrypt. Access to production systems requires hardware-key multi-factor authentication and is logged. Card data never touches our infrastructure. If a breach affecting your data occurs we will notify you and the relevant regulators without undue delay as the law requires.

9. Children

The site is not directed at children under 16 and we do not knowingly collect their data. If you believe a child has provided personal information, contact us and we will delete it.

10. Changes and contact

We will post any changes to this policy here and update the date above; material changes will also be announced by email to account holders. Contact our privacy team at privacy@tectov.shop or by post at Tectov Commerce LLC, 2021 E 5th St, Suite 160, Austin, TX 78702, USA.