Version of Sept. 26, 2026

The same people who answer the email can see the order records, so this page is written by the people who actually hold the data, about what they hold and for how long.

How safe my details are with a small shop

Every page runs over an encrypted connection. A card number is typed into the processor’s embedded fields and travels to the processor, not to the shop; what the shop retains is the card brand and four digits. Access to the order system is limited to the store’s own staff, each under an individual login. Perfect security doesn’t exist. Should a breach ever expose personal information, the people affected are emailed inside 45 days of the breach being confirmed, and earlier where possible.

How long you hold my record

  1. The order itself (name, both addresses, titles, amount, last four digits): 7 years, because tax and accounting law says so.
  2. Emails and form messages to the desk: 2 years after the last one in the thread.
  3. Server and security logs: 12 months.
  4. Cart and session cookies: 48 hours, or until the browser closes.

When a period ends the record is deleted or anonymized, unless a legal hold applies.

Who this page is written for

Visitors to and customers of ovexik.com, a site run by TEARA NAJEA WRIGHT FUNY LLC, 206 Arbor Creek Dr, Dallas, GA 30157, United States. The site sells books to adults in the United States. The rights below are open to every visitor regardless of state. When this page changes, the date at the top moves.

What I type in at checkout

A name, where to deliver, where the card is billed, an email address, a phone number if the customer types one, plus the titles and the amount. The contact form asks for four things only: who’s writing, an address to reply to, a subject line, and the message. No account is needed to buy, and nothing else is asked.

What the site notices by itself

The visitor’s IP address and browser, which pages were opened and when. Two places hold it: the hosting server’s logs and Cloudflare’s. They exist to keep the site up and to look into attacks. They’re not joined to an order unless a fraud check calls for it.

What arrives from your partners

The carrier: tracking number and scan history. The payment processor: payment status and last four digits. The distribution partner: delivery confirmation. All three land on the order record, which is how the desk answers a question about a specific order.

Sensitive things I’d rather not share

None are collected. No precise location, no government ID numbers, no health information, nothing about race, religion or sexual orientation. No field on the site asks for any of it.

Why you need any of it

Four reasons only: to pack and deliver an order, to take payment and return money, to answer support mail, and to satisfy tax and accounting law. No marketing profiles are built. No newsletter list exists. Personal information from this site trains no artificial intelligence model, here or anywhere, since it’s never sold on.

Who else sees my order

Six companies, one job each, each bound by contract to that job:

  1. The book distribution partner in the United States: name, delivery address, titles. Packing and shipping.
  2. USPS or UPS: name, delivery address, package weight. Delivery.
  3. Stripe and PayPal, reached through the checkout provider: whatever the customer types into their forms, plus the amount and billing address. Taking the payment.
  4. Brevo: email address and the order emails. Sending confirmations and tracking.
  5. Cloudflare: IP address and request logs. Serving pages, blocking attacks.
  6. The WordPress and WooCommerce hosting: the order record. Running the store.

Nothing is sold. Nothing goes to ad networks or data brokers.

There isn’t one, because nothing here needs consent. Two cookies exist, a cart cookie and a session cookie, so a basket outlives a page change; each dies when the browser closes or at 48 hours. No ad pixel, no cross-site tracker, no analytics cookie. Blocking cookies in the browser still leaves the site usable, minus a cart that remembers items. If a tag is ever installed, three things change the same day: this section, the opt-out page and how the site treats the Global Privacy Control signal.

A copy of my data, or all of it deleted

Send the request to contact@ovexik.com. Mark the subject “Privacy request” and name which of the three below you’re after.

  1. Asking for a copy, a correction, or deletion of whatever the law doesn’t oblige the shop to hold: the desk acknowledges inside 3 weekdays and finishes inside 45 days, with one 45-day extension if it warns you first.
  2. Stopping any sale or sharing: recorded inside 15 weekdays, though there’s nothing to stop today.
  3. Appealing a refusal: reply to the refusal with “Appeal” in the subject; answered inside 45 days.

Identity is checked by matching the email to the order. No ID document is asked for. An authorized agent may write with the customer’s written permission. No request changes a customer’s price or service.

Living in California

Two California statutes, the CCPA and the CPRA, add two things: knowing which categories of information are collected (this page lists them) and opting out of any sale or sharing. The shop neither sells nor shares personal information in the sense those laws use. The opt-out page explains the route anyway.

Living in another state with a privacy law

By 2026, nineteen states beyond California had privacy statutes of their own; Texas, Virginia, Colorado and Connecticut are the best known, and Indiana, Kentucky and Rhode Island switched theirs on with the new year. Georgia residents’ requests are handled the same way as everyone else’s. The same inbox and the same clocks serve every state. Rhode Island and Connecticut ask sellers to disclose who they sell customer data to; the answer here is nobody.

Buying for a child, or being one

The shop sells to adults. Nothing is knowingly gathered from a child under 13, and no marketing points at children. A parent who finds a child has used the contact form emails the desk, and the message is deleted inside 2 weekdays. The teenagers who read the manga aren’t shown targeted advertising and their data isn’t sold; nobody’s is.

Tracking pages run by the carrier, and payment pages run by the processor, have privacy terms written by those companies. Beyond ovexik.com, those terms take over from this page.

Where the data actually sits

Order data lives on servers in the United States. A Cloudflare data center outside the United States may handle a request for the moment it takes to serve a page. The partner warehouse, both carriers and both payment processors named above work inside the United States.

Where to go from here

The opt-out page for California-style requests. Payment Policy for what happens to card details. Contact for the form and the company details. Or email contact@ovexik.com with the subject “Privacy request”, or ring +1 (770) 768-1723 on a weekday between 8:00 AM and 4:30 PM ET. Someone who read the message writes back inside one business day.