Privacy Policy

This Privacy Policy explains how BLUE RIVER HANDMADE MARKET (“we,” “us,” or “our”) collects, uses, stores, shares, and protects personal information when you visit or use vaxlro.com. It also explains how we handle personal information when you place an order, contact customer support, request delivery, submit a return or refund request, or otherwise interact with our services.

1. Overview

This Privacy Policy applies to personal information collected through vaxlro.com and related customer service, payment, shipping, and after-sales processes. By using our website or placing an order, you acknowledge that your information may be processed as described in this Privacy Policy and in our Terms of Service.

2. Who We Are

BLUE RIVER HANDMADE MARKET operates vaxlro.com as a textile and lifestyle retail website serving customers in multiple regions. If you have questions about this Privacy Policy, your personal information, or our privacy practices, you may contact us through info@vaxlro.com, +1 (712) 218-1502, or 601 Locust St, Dubuque, IA 52001, US.

3. Delivery Regions and Privacy Context

We currently provide delivery services to customers in the United States, Europe, and other international destinations worldwide (“Rest of World”). Because we serve customers across multiple regions, the way personal information is processed, disclosed, or retained may vary depending on the order destination, applicable law, payment review requirements, shipping requirements, or dispute-handling needs.

4. Information You Provide Directly

We may collect personal information that you provide directly to us when you place an order, contact us, subscribe to communications, request support, or send documents or photos for review. This may include your name, email address, phone number, billing address, shipping address, order details, return-related information, and any information you choose to include in your messages.

5. Order, Delivery, and Customer Service Information

When you place an order, we may collect and maintain records relating to the products ordered, quantities, prices, discounts, payment status, shipping method, delivery region, shipment status, delivery progress, and after-sales support history. We may also keep records of return requests, refund decisions, support tickets, complaint handling, and communication history to help us manage transactions and provide customer service.

6. Technical, Device, and Usage Information

When you visit or use vaxlro.com, certain technical information may be collected automatically for operational, analytical, and security purposes. This may include your IP address, browser type, device type, operating system, approximate location inferred from IP, referral source, pages viewed, timestamps, click behavior, and other website interaction or diagnostic data.

7. Cookies and Similar Technologies

We may use cookies, pixels, tags, session tools, and similar technologies to operate the website, remember preferences, measure website performance, improve user experience, and support fraud prevention and advertising or analytics activities where applicable. You can control certain cookie settings through your browser or device settings, although disabling some cookies may affect the functionality or performance of the website.

8. Payment Information and Third-Party Payment Processing

Payments on vaxlro.com are processed by third-party payment service providers, including Stripe and PayPal. We do not store or have direct access to full card numbers, CVV/security codes, PayPal account passwords, or other complete payment credentials on our own servers.

Instead, we receive only limited transaction-related information that is necessary to confirm payment status, reconcile orders, process refunds where applicable, respond to customer service requests, prevent fraud, and handle payment-related disputes or chargebacks. Payment information submitted during checkout is processed directly through the relevant third-party payment platform in accordance with its own security and privacy practices.

9. Information Used for Payment Verification

To reduce fraud and unauthorized use, we may use payment-related information together with order and device information to verify transactions before or after an order is accepted. This may include reviewing the billing and shipping match, order value, destination risk indicators, prior transaction history, IP-related signals, customer communication history, and other information reasonably necessary to evaluate whether a transaction appears legitimate.

10. How We Use Personal Information

We use personal information to process orders, arrange payment confirmation, provide shipping and delivery updates, respond to customer inquiries, manage returns and refunds, and maintain normal website operations. We may also use personal information to improve our services, prevent fraud, enforce our policies, maintain records, comply with legal obligations, and protect our rights, customers, and business operations.

11. Shipping, Fulfillment, and Delivery Support

We use personal information to prepare shipments, coordinate with warehouses and carriers, generate shipping labels, provide tracking details, and support delivery completion. We may also use this information to investigate delayed parcels, delivery exceptions, damaged shipments, signature issues, lost parcel claims, and matters arising under our Shipping Policy.

12. Returns, Refunds, and After-Sales Handling

When you request a return, refund, cancellation review, or product-related support, we may use your personal information and order history to assess eligibility and process the request. This may include reviewing order details, item condition evidence, shipment history, customer messages, photos, refund method, and related records under our Return & Refund Policy.

13. Chargebacks, Payment Disputes, and Stripe Evidence Records

Where reasonably necessary to respond to chargebacks, payment disputes, unauthorized transaction claims, or Stripe-related reviews, we may retain and use relevant transaction evidence associated with the order. This may include order confirmation records, billing and shipping details, payment status records, device or IP indicators, shipment tracking, delivery confirmation, signature records where available, customer communications, refund history, and other records reasonably necessary to demonstrate order fulfillment, customer authorization, or post-purchase support activity.

14. Legal Bases and Compliance Purposes

Depending on your location and the nature of the processing, we may process personal information because it is necessary to perform a contract, comply with legal obligations, protect legitimate business interests, prevent fraud, resolve disputes, or act on your consent where consent is required. We may also process personal information where necessary to maintain business records, respond to regulatory requests, handle tax or accounting matters, or protect our legal rights and defenses.

15. Sharing with Service Providers

We may share personal information with service providers that help us operate the website and fulfill our services. These may include payment processors, fraud-prevention providers, website hosting and technical support providers, analytics providers, email or communication providers, shipping carriers, logistics partners, return-processing partners, and professional advisors where reasonably necessary for business operations or compliance.

16. International Transfers

Because we provide services to customers in multiple regions and work with international service providers, personal information may be transferred to, stored in, or accessed from countries outside your place of residence. Where required, we take reasonable steps to ensure that such transfers are handled with appropriate safeguards, contractual protections, or operational controls appropriate to the nature of the information and the processing involved.

17. Information Security Measures

We implement reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized access, accidental loss, misuse, alteration, disclosure, or destruction. These measures may include encrypted data transmission, restricted staff access, password controls, role-based permissions, system monitoring, record logging, website maintenance, backup procedures, data minimization practices, and internal review procedures intended to reduce unnecessary exposure of personal information.

18. Payment Security Measures

To help protect payment-related information, payment transactions are handled through secure third-party payment infrastructure such as Stripe rather than through direct storage of full card data on our own systems. We also limit internal access to payment-related transaction records, review suspicious orders where appropriate, keep only limited payment-status information needed for operations, and use transaction, delivery, and support records to respond to payment disputes, fraud checks, and chargeback claims.

19. Data Minimization and Need-to-Know Access

We aim to collect only the personal information that is reasonably necessary for order processing, customer support, payment verification, delivery, fraud prevention, legal compliance, and related business functions. Access to personal information is limited, where reasonably practicable, to personnel, contractors, or service providers who need the information to perform their assigned duties or provide services to us.

20. Data Retention

We generally retain customer personal information for 1 year from the date it is collected or from the completion of the relevant transaction or customer interaction, unless a longer retention period is required or permitted by law. In certain situations, relevant records may be retained for a longer period where reasonably necessary to complete an active order, resolve a return or refund request, respond to a chargeback or Stripe dispute, investigate fraud, comply with tax or accounting obligations, enforce our policies, or protect our legal rights.

21. Your Privacy Rights and Choices (GDPR)

Depending on your location and applicable law, you may have rights relating to access, correction, deletion, restriction, objection, portability, or withdrawal of consent in certain circumstances, including rights available under the General Data Protection Regulation (“GDPR”) where applicable. You may also request information about how your personal information is used or shared, and you may contact us at info@vaxlro.com to submit a privacy-related request; we may need to verify your identity before completing certain requests.

22. Children, Policy Updates, and Contact

vaxlro.com is not intended for children, and we do not knowingly collect personal information from children under the age required by applicable law without appropriate authorization where such authorization is required. We may update this Privacy Policy from time to time to reflect operational, legal, or service changes, and the updated version will be posted on vaxlro.com; if you have any questions, you may contact us at info@vaxlro.com, +1 (712) 218-1502, or 601 Locust St, Dubuque, IA 52001, US.