ORMIXA

Privacy Policy

Updated: May 17, 2026

Data Controller

The data controller for customer data collected through this storefront is ECE Innovate Homes LLC. Mailing address: 1207 Delaware Ave #3186, Wilmington, DE 19806, United States. ECE Innovate Homes LLC operates the ORMIXA® trademark under license from Guangzhou Yanyang Technology Co., Ltd., the trademark owner and manufacturer in Guangzhou, China.

What We Collect

We may collect: name, email address, shipping and billing addresses, phone number, order contents and value, shipping and tracking data, session identifiers, cookie and session data, device, browser and IP information, fraud signals, and support messages.

Payment Processing

Payment execution is handled by Stripe. ORMIXA does not store full card numbers. Stripe's privacy policy governs payment data processing.

Cart and Session Data

Cart truth is server-owned. Browser storage is used only for non-authoritative UI preferences when needed. In jurisdictions requiring consent for non-essential tracking, browser identifiers beyond essential storage remain disabled until consent is granted.

Specifically, the storefront sets the following essential cookies and session identifiers:

  • __ormixa_cart — HMAC-signed HTTP-only cookie that stores the server-owned cart state.
  • Cloudflare Turnstile — bot-challenge cookies set when you interact with a form (early-access signup, cart checkout, contact). Used solely to verify you are a human and prevent automated abuse.
  • Stripe — payment-session cookies set by Stripe Checkout when you proceed to pay. Governed by Stripe's privacy policy.
  • Trustpilot — third-party cookies set by Trustpilot’s Invitation script (invitejs.trustpilot.com) to enable post-purchase organic-review invitations and to verify reviewer authenticity against your order number. Used solely for review collection and verification. Governed by Trustpilot’s privacy policy (https://legal.trustpilot.com/end-user-privacy-terms).
  • Google Customer Reviews — third-party cookies and storage set by Google’s survey opt-in module (apis.google.com/js/platform.js) on the order-confirmation page and by the Google Customer Reviews store widget (www.gstatic.com/shopping/merchant/merchantwidget.js) loaded site-wide. Used solely to (a) offer you an optional post- purchase survey delivered by Google on or around your estimated delivery date, and (b) display aggregated seller ratings. Governed by Google’s privacy policy (https://policies.google.com/privacy).

Google Customer Reviews

After your order is placed, Google may email you an optional Google Customer Reviews survey on or around your estimated delivery date. Participation is voluntary; opting out has no effect on your order or any other aspect of our service.

To enable the survey, the following data is sent to Google: your order number, email address, delivery country, and estimated delivery date. Google may also derive aggregate seller ratings shown in the Footer of this site and on Google Shopping listings. Google’s handling of this data is governed by Google’s privacy policy (https://policies.google.com/privacy).

Data Sharing

We may share data only with: Stripe (payment processing), Trustpilot (post-purchase review invitations — only your name, email, and order number are sent so the resulting review can be tagged as a verified buyer review), Google (Customer Reviews survey opt-in — only your order number, email, delivery country, and estimated delivery date are sent so Google can email you an optional post-purchase survey), carriers and logistics partners (shipping and fulfillment), infrastructure providers (hosting and email), and advisers or authorities where legally required or reasonably necessary.

Your Rights (GDPR / CCPA / DSAR)

You may request access to, correction of, or deletion of your personal data. This policy follows the principles of the EU General Data Protection Regulation (GDPR), the UK GDPR, and the California Consumer Privacy Act (CCPA), which establish standardized data subject access rights including the right to know, right to delete, right to correct, and right to data portability.

A privacy request becomes actionable only after identity verification succeeds. Our default target for responding to verified data subject access requests (DSAR) is 30 days from verification. Any lawful extension will be logged with reason before the due date changes.

Privacy and data requests: privacy@ormixa.com

Data Retention

Retention is tied to operational necessity, accounting and tax duty, fraud prevention, warranty and returns handling, or legal obligation. Stale operational data is deleted or de-identified.

Trademark

ORMIXA® is a trademark owned by Guangzhou Yanyang Technology Co., Ltd. and exclusively operated in the United States by ECE Innovate Homes LLC under license.