Privacy Policy - AmzRover

FREE RETURNS. STANDARD SHIPPING ORDERS $99+

Shopping Cart

  • Your cart is empty.

Almost there, add more items to get FREE SHIPPING!

Subtotal $0.00 USD

Tax included shipping calculator at checkout.

Category

Wishlist

  • Your wishlist is empty.

Now that you have products in your wishlist, remember to put them in your cart later.

Privacy Policy

Protecting your personal data and giving you meaningful control over it is central to how Amzrover ("we", "us", "our") runs our store. This Privacy Policy explains what personal information we collect, why we collect it, how we use and share it, and what rights you have under international privacy laws — including the EU General Data Protection Regulation (GDPR), the UK GDPR, the California Consumer Privacy Act / California Privacy Rights Act (CCPA/CPRA), and Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

Last updated: October 15, 2026. Previous versions available upon request.

Privacy at a glance (one-page summary)

What we collect
  • Name, email, billing & shipping address, phone (checkout)
  • Payment card / wallet tokens (never raw PAN — via Stripe/PCI PSP)
  • Device, IP, browser, pages visited (analytics)
  • Support tickets, product reviews, survey responses
Your rights
  • Access, correct, delete ("right to be forgotten")
  • Restrict or object to processing
  • Data portability (export as JSON)
  • Withdraw consent any time
  • CCPA "Do Not Sell / Share My Personal Information"
  • Respects Global Privacy Control (GPC) browser signal

1. Data Controller & How to Contact Us

For the purposes of the GDPR, UK GDPR, CCPA/CPRA and other applicable global privacy laws, the data controller responsible for your personal information is:

Amzrover, Inc. (or Amzrover trading entity named on your invoice)
Email: privacy@amzrover.com (DPO line)
Support: support@amzrover.com · Phone: +1 (405) 540-6350

If you are located in the EU/EEA or the United Kingdom, our designated EU/UK representative for GDPR Article 27 purposes, and our registered Data Protection Officer (DPO), may be reached at privacy@amzrover.com or by email marked (FAO: DPO). You may also lodge a complaint with your local supervisory authority — we ask that you contact us first so we can resolve any concern directly.

2. What Personal Information We Collect

A. Information you provide directly

  • Account & registration: first & last name, email address, password (hashed — we never store plaintext), phone, avatar.
  • Checkout & orders: billing address, shipping address, phone number, tax ID / VAT number, gift message, order notes.
  • Payment data: we do NOT store your full credit card number or CVV. Payment is handled entirely by PCI-DSS Level 1 compliant service providers (Stripe, PayPal Inc.). We only receive a masked card last-4, brand, expiry year, and a payment-token.
  • Post-purchase: product reviews and ratings, survey responses, support tickets, warranty registrations, competition entries.

B. Information collected automatically

  • Device & usage data: IP address, browser user-agent, screen resolution, locale, pages visited, referral URL, exit page, search keywords, click-stream, checkout funnel steps.
  • Cookies & LocalStorage: session id, cart id, anonymous visitor id, currency / language preferences, analytics identifiers, A/B experiment buckets.
  • Geolocation: coarse country / region derived from IP. We never ask for device GPS for a storefront experience.
  • Email interaction: open rates, click rates via tracking pixels (can be disabled per-message in your email client).

3. Why We Use Your Information — Purposes & Legal Basis

Under the GDPR every processing activity must have a valid legal basis. We rely primarily on: (a) Contract — to deliver orders; (b) Consent — for marketing and non-essential cookies; (c) Legitimate interest — for anti-fraud and UX improvement; (d) Legal obligation — for tax / accounting / customs retention.

Purpose Data categories involved Legal basis Retention
Process & deliver your order Name, address, phone, email, payment token Contract performance 7 years (tax/accounting)
Customer support / returns Order #, email, photos, messages Contract + Legitimate interest 3 years after case closed
Account sign-in & security Hashed password, IP, device fingerprint Contract + Legitimate interest (anti-fraud) Until account closed + 30d grace
Marketing (promo emails / SMS — only if opted-in) Email, phone, country, order history Explicit consent (GDPR/PECR/CASL) Until unsubscribe + 30 days
Web analytics & UX improvement IP (pseudonymized), page views, events Consent (analytics cookies) 14 months raw, 26 months aggregated
Personalized ads / retargeting Pseudonymized visitor id, product views Consent (marketing cookies) Up to 13 months or until opt-out
Fraud / chargeback prevention IP, device, email, payment token metadata Legitimate interest + legal obligation 10 years after payment settled
Legal / tax / customs compliance Invoice data, billing address, VAT id Legal obligation 7–10 years (per jurisdiction)

4. Cookies, Pixels & Similar Tracking Technologies

The first time you visit Amzrover.com a transparent Cookie Preferences panel appears at the bottom of your screen, from which you can Accept all, Reject all, or Customize categories in a granular way. We store your preferences locally in your browser for 12 months, and you can re-open the panel any time using the Cookie Preferences footer link.

(a) Strictly Necessary Cookies — always ON

Required for the store to work. Cannot be disabled.

  • Session / cart id
  • Cross-Site Request Forgery (CSRF) tokens
  • Load balancer / CDN routing cookies
  • Remember-me + 2FA MFA tokens
  • Currency, language, region selections
(b) Analytics Cookies — opt-in only

Pseudonymized insights into traffic, drop-off funnels, and product popularity.

  • Google Analytics 4 (IP anonymized via _anonymizeIp)
  • Hotjar session heatmaps
  • Internal Amzrover analytics pipeline
(c) Marketing / Advertising Cookies — opt-in only

Used to show relevant Amzrover ads on other websites after you visit us.

  • Meta (Facebook) CAPI + Pixel
  • Google Ads remarketing / conversion linker
  • Pinterest / TikTok / Snapchat advertising pixels
  • Amazon Ads attribution

5. Sharing With Third Parties & International Transfers

5.1 Parties with whom we may share your data

  • Payment processors — Stripe, PayPal, Apple Pay, Google Pay (to charge for orders and handle refunds / disputes). Covered by their own DPA and PCI-DSS compliance.
  • Carriers & fulfillment partners — USPS, FedEx, DHL, YunExpress, UPS, and 3PL warehouses. We share only the minimum: recipient name, address, phone, product weight.
  • Cloud & hosting providers — Alibaba Cloud (ECS), Cloudflare (CDN, WAF, bot protection) — covered by EU SCC (Standard Contractual Clauses) and the EU–US / UK–US Data Privacy Frameworks.
  • Tax & accounting — our registered CPAs and automated tax software (TaxJar, Avalara) for invoice generation and compliance filing.
  • Legal / regulators — if required by a valid court order, subpoena, or binding governmental request, or as needed to protect our rights, users, or the public.

5.2 "Sale" / "Share" of Personal Information (CCPA / CPRA)

We do not sell personal information in the traditional sense (no lists of names or emails passed to data brokers). However, CCPA/CPRA broadly defines "selling or sharing" to include making a unique identifier (such as an advertising cookie id) available to a third party for "cross-context behavioral advertising". Under that expansive definition, our marketing pixels may constitute a "sale or share" of pseudonymous identifiers. To opt out, click Reject All or Customize → disable Marketing cookies in the Cookie Preferences panel. We also honor the Global Privacy Control (GPC) browser signal as a valid "Do Not Sell or Share My Personal Information" request under CCPA/CPRA. You may also email privacy@amzrover.com with subject line "CCPA Opt-Out Request", and we will honor it within 15 days (or 45 days for requests that require additional verification).

5.3 International Transfers & Adequacy

Your information may be processed in the United States (our primary region) and in any other country where we or our sub-processors maintain facilities. When we transfer EU/EEA or UK personal data outside of the EEA/UK, we rely on: (i) an adequacy decision by the European Commission / UK Secretary of State; (ii) the European Commission-approved Standard Contractual Clauses (SCC 2021/914); or (iii) Binding Corporate Rules approved by your lead Supervisory Authority. Transfers to the United States rely on the EU–US and UK–US Data Privacy Frameworks where applicable. A copy of the applicable safeguard is available upon written request to privacy@amzrover.com.

6. United States State Privacy Laws

Depending on where you live in the United States, you may have additional rights under state law. This Section describes those rights and how to exercise them.

6.1 California (CCPA/CPRA & "Shine the Light")

The California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), gives California residents the right to know (categories and specific pieces of personal information we collect, use, disclose, sell and share), delete, correct, and limit the use of sensitive personal information, the right to opt out of the sale or sharing of personal information, and the right to non-discrimination for exercising these rights. We do not "sell" personal information in exchange for money; as explained in Section 5.2, our advertising pixels may involve sharing pseudonymous identifiers for cross-context behavioral advertising. You may opt out via the Cookie Preferences panel, the Global Privacy Control (GPC) browser signal, or by emailing privacy@amzrover.com with subject "CCPA Opt-Out Request".

Under California Civil Code §1798.83 (the "Shine the Light" law), California residents may request a list of the categories of personal information we disclosed to third parties for their direct marketing purposes during the preceding calendar year, along with the names and addresses of those recipients. To request this information, email privacy@amzrover.com with subject "Shine the Light Request". We will respond within 30 days.

6.2 Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA) & Utah (UCPA)

Residents of Virginia, Colorado, Connecticut and Utah have rights under their respective comprehensive privacy laws, including the right to access, correct, delete, port (data portability), and opt out of targeted advertising and the sale of personal data. You can exercise these rights by emailing privacy@amzrover.com with subject "State Privacy Request". We will verify your identity using the email address on file and respond within the timeframe required by the applicable law (generally 45 days, extendable by an additional 45 days for complex requests). You also have the right to appeal a denial of your request; appeals should be sent to the same address with subject "Privacy Request Appeal".

6.3 Do Not Track (CalOPPA) & Global Privacy Control

Some browsers transmit a "Do Not Track" (DNT) signal. Because there is no uniform industry standard for interpreting DNT, we do not currently respond to DNT signals. However, we do honor the Global Privacy Control (GPC) signal sent by browsers or browser extensions as an opt-out from the sale/sharing of personal information for cross-context behavioral advertising (see Section 5.2 and 6.1), as required under CCPA/CPRA. GPC settings can be enabled in browsers such as Brave, DuckDuckGo, and Firefox, or via extensions such as Privacy Badger.

7. Canada — Personal Information Protection (PIPEDA)

If you are a resident of Canada, we collect, use, and disclose your personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation (e.g., Alberta's PIPA, British Columbia's PIPA, and Quebec's Law 25).

Under PIPEDA you have the right to know why your personal information is collected, how it will be used, and who it will be disclosed to; the right to withdraw consent at any time (subject to legal or contractual restrictions); the right to access and correct your personal information; and the right to challenge our compliance with PIPEDA. Our handling of personal information is governed by the ten fair information principles set out in Schedule 1 of PIPEDA — accountability, identifying purposes, consent, limiting collection, limiting use/disclosure/retention, accuracy, safeguards, openness, individual access, and challenging compliance.

Marketing communications are only sent with your consent and in accordance with the Canadian Anti-Spam Legislation (CASL) — every commercial electronic message includes a working unsubscribe mechanism. You may exercise any of your PIPEDA rights by emailing privacy@amzrover.com with subject "PIPEDA Request". If you are not satisfied with our response, you may file a complaint with the Office of the Privacy Commissioner of Canada.

8. Data Retention

We retain personal information no longer than is strictly necessary to fulfil the purposes described in Section 3 above, and to satisfy applicable legal / tax / accounting retention obligations. In general:

  • Order & invoices: 7 years from order completion (for tax, audit, and consumer-law warranty claims).
  • Customer-support tickets: 3 years after the case is closed with no further follow-up.
  • Marketing subscribers: Until you unsubscribe + 30 days (to suppress re-adding).
  • Analytics events: Raw events 14 months; aggregated summary tables 26 months.
  • Closed / inactive accounts: 30-day grace, then fully anonymized / hard-deleted.

9. Your Rights As A Data Subject

Most of these rights can be exercised directly from your account dashboard (My Account → Privacy) or by emailing privacy@amzrover.com with a clear subject. We verify all rights requests by confirming the email address on file. Response time: ≤ 30 calendar days (CCPA/GDPR statutory maximum), extendable by an additional 60 days only for unusually complex or voluminous cases (in which case we will notify you of the extension within the first 30 days).

Access & Portability

Receive a complete machine-readable (JSON) export of every personal record we hold on you, including order history, support tickets, reviews, and consent records — delivered by secure signed download link.

Erasure ("Right to be Forgotten")

Ask us to permanently delete your account and all associated personal data. Note: legal-obligation records (tax invoices, finalized chargeback evidence) must be retained per statute and will be deleted automatically at the end of their retention period.

Rectification

Update or correct any inaccurate or incomplete personal information (shipping address, phone, spelling of your name) instantly from My Account, or via support email if the record is already locked (invoiced order).

Restrict / Object / Withdraw Consent

Restrict processing of a specific category (e.g. marketing), object to legitimate-interest processing, or withdraw ANY consent you previously granted — with immediate effect and without affecting lawfully-performed prior processing.

10. Children's Privacy (COPPA)

Our site and services are not directed to children under the age of 13. We do not knowingly collect any personal information from children under 13. If you are a parent or legal guardian and believe your child has provided us with personal data, please contact privacy@amzrover.com immediately — we will delete the information from our systems within 10 business days and notify you in writing when complete.

11. Changes To This Privacy Policy & How to Reach Us

We may update this Privacy Policy periodically (for example, to reflect new legal requirements or changes in our processing activities). Material changes will be notified via a prominent site-wide banner at least 30 days before they take effect, and by email to registered account holders. Your continued use of Amzrover after the effective date of a revised policy constitutes acceptance of the updated terms.

For any privacy-related question, request, or complaint, please contact: