Privacy & GDPR
Last updated: September 13, 2026
This notice explains what personal data Taverlyn collects, why we collect it, and the rights you have over it. It applies to visitors, registered accounts, and customers of taverlyn.com.
1. Who we are
[Taverlyn's registered legal entity name] ("Taverlyn", "we", "us", "our") is the data controller responsible for the personal data described in this notice. Registered address: [registered business address] We primarily serve customers in Taiwan and the wider Asia-Pacific region. Where the EU's General Data Protection Regulation applies to you, we intend to meet its requirements; where Taiwan's Personal Data Protection Act applies instead, we intend to meet those requirements too.
2. What personal data we collect
We collect the following categories of personal data: • Account data — your phone country code and number (used as your login identifier), a system-generated password, your account ID (UID), and any referral code you use or share. • Order data — shipping name and address, an email address if you provide one, the products and quantities you order, and your order status. • Referral data — if someone invited you, we record who invited you; if you invite others, you can see their UID, join date, and order count (not their shipping details or full order history). • Payment data — we do not handle or store your card or wallet details ourselves. Payments are processed by our payment provider, NOWPayments, who share only a payment status and transaction reference with us. • Technical data — your IP address, standard server request logs, and the cookies described in "Cookies & analytics" below.
3. Why we process your data
We process your data to: • Create and manage your account, and process and fulfil your orders — necessary to perform our contract with you. • Detect fraud, prevent abuse, and keep our systems secure — our legitimate interest in protecting the service and other users. • Measure how our website is used, via Google Analytics — based on your consent, where required. • Meet our tax, accounting, and consumer-protection obligations — necessary for legal compliance.
4. Cookies & analytics
We use a small number of cookies: • A session cookie that keeps you signed in. This is strictly necessary for the site to work. • Google Analytics cookies, which help us understand how visitors use the site. You can block or delete cookies at any time through your browser settings. Blocking the session cookie will sign you out; blocking analytics cookies does not affect how the site works.
5. Who we share your data with
We share personal data only with the service providers who help us run Taverlyn, never for their own marketing purposes. These providers are contractually required to protect your data and use it only to provide their service to us: • Neon — our database provider, which stores account and order data. • Vercel — our website hosting provider. • NOWPayments — our cryptocurrency payment processor. • Google — for website analytics (Google Analytics). We do not sell your personal data.
6. International data transfers
Our database is hosted in Singapore. If you are located in the European Economic Area, this means your data is transferred outside the EEA; where that applies, we rely on our providers' Standard Contractual Clauses or another lawful transfer mechanism to protect your data.
7. How long we keep your data
We keep account data for as long as your account is active, and order data for as long as required by applicable tax and accounting law. Once data is no longer needed for these purposes, we delete or anonymize it.
8. Your rights
Depending on where you live, you may have the right to: • Access the personal data we hold about you • Correct inaccurate data • Request deletion of your data • Restrict or object to certain processing • Receive your data in a portable format • Withdraw consent at any time, where processing is based on consent • Lodge a complaint with your local data protection authority To exercise any of these rights, contact us using the details below.
9. Children
Taverlyn is not directed at children, and we do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, please contact us and we will delete it.
10. Changes to this notice
We may update this notice from time to time. The date at the top shows when it was last revised. Material changes will be reflected on this page.
Contact us
For any question about this notice or your personal data, email us at support@taverlyn.com.