This Privacy Policy describes how IOIHUB LTD ("we," "us," "our") collects, uses, and protects your personal information when you visit or make a purchase from vexatime.com (the "Site"), operated under the brand VEXA TIME.
By using the Site, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Site.
1. Who We Are
VEXA TIME is a brand operated by:
IOIHUB LTD Company Number: 16870349 Registered in: England, United Kingdom Contact: support@vexatime.com
2. Information We Collect
We collect the following information when you place an order or interact with the Site:
Information you provide:
- Name (first and last)
- Email address
- Phone number (optional)
- Shipping address (street, city, postal code, country, state/region)
- Order details (products, quantities, add-ons selected)
Information collected automatically:
- IP address and approximate location (country level)
- Browser and device information
- Pages visited on the Site
- Referring URL
Payment information:
- We do not collect or store credit card or bank account information.
- All payments are processed by Stripe, which collects this data directly. See Stripe's privacy practices at https://stripe.com/privacy
3. How We Use Your Information
We use your information to:
- Process and fulfill your orders
- Send order confirmations, shipping updates, and customer service emails
- Detect and prevent fraud
- Comply with legal obligations (tax records, accounting)
- Improve the Site and our services
- If you opt in: send marketing emails (you can unsubscribe at any time)
4. Who We Share Your Information With
We share your information only with the third parties necessary to operate the Site and fulfill your orders:
| Third Party | Purpose |
|---|---|
| Stripe | Payment processing (https://stripe.com/privacy) |
| Supabase | Database hosting (https://supabase.com/privacy) |
| Vercel | Website hosting (https://vercel.com/legal/privacy-policy) |
| Resend | Sending transactional emails (https://resend.com/legal/privacy-policy) |
| Geoapify | Address autocomplete (https://www.geoapify.com/privacy-policy) |
| Telegram (Bot API) | Internal admin notifications |
| Order fulfillment partners | Shipping your order |
We do not sell your personal information to data brokers.
If we add advertising or analytics tools (such as TikTok Pixel or Google Analytics) in the future, this Privacy Policy will be updated to reflect those changes.
5. International Data Transfers
We are based in the United Kingdom, and your information may be processed in the UK, the United States, or other countries where our service providers operate. We rely on appropriate safeguards (such as the UK International Data Transfer Agreement and standard contractual clauses) to protect your data when it leaves the UK or EEA.
6. How Long We Keep Your Information
| Type of data | Retention |
|---|---|
| Order records (name, address, purchase history) | 7 years (required for UK tax compliance) |
| Email correspondence | 3 years after the last interaction |
| Server logs (IP addresses) | 90 days |
| Marketing email subscribers | Until you unsubscribe |
After these periods, we delete or anonymize your data.
7. Your Rights
Depending on where you live, you have the following rights:
For all users:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data (subject to our retention obligations)
- Object to or restrict our use of your data
- Receive a copy of your data in a portable format
UK and EEA users (under UK GDPR / GDPR):
- Withdraw consent at any time where consent is the basis for processing
- Lodge a complaint with the UK Information Commissioner's Office (ICO) at https://ico.org.uk
California residents (under CCPA/CPRA):
- Know what personal information we collect, use, share, and sell
- Delete your personal information
- Opt out of the sale or sharing of personal information (we do not sell personal information)
- Non-discrimination for exercising your rights
- Limit the use of sensitive personal information (we do not collect sensitive personal information beyond what is necessary for orders)
Other US state residents (Virginia, Colorado, Connecticut, Utah, Texas, etc.): You have similar rights to those listed above. To exercise any rights, email us at support@vexatime.com.
8. Cookies and Tracking
The Site currently does not use tracking cookies, web beacons, or third-party analytics. We use only essential browser storage (localStorage) to remember your shopping cart between visits. This data stays on your device and is not transmitted to us as identifiable information.
If we add tracking technologies in the future (e.g., for advertising or analytics), this Privacy Policy will be updated and we will provide a cookie banner where required by law.
9. Children's Privacy
The Site is not intended for use by children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with information, contact us at support@vexatime.com and we will delete it.
10. Security
We use reasonable technical and organizational measures to protect your data, including:
- HTTPS/TLS encryption for all data in transit
- Encrypted database storage (provided by Supabase)
- Restricted access to production systems
- No storage of payment card details (handled entirely by Stripe, which is PCI DSS Level 1 certified)
No system is 100% secure. If we become aware of a security incident affecting your data, we will notify you and the relevant authorities as required by law.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of the page reflects the most recent change. Significant changes will be communicated by email or a notice on the Site.
12. Contact
For privacy questions, requests to exercise your rights, or any concerns:
Email: support@vexatime.com Postal: IOIHUB LTD, United Kingdom (Company No. 16870349)
We aim to respond to all privacy requests within 30 days.