Privacy Policy

1.Introduction

This Privacy Policy (“Policy”) describes how Evervale (operated by ELEVAN plus s.r.o.) collects, uses, protects, and processes your personal data when you visit our website at https://evervale.org, place an order, or interact with our blog and other content. This Policy is issued in compliance with the EU General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) and applicable Czech law.

2.Data Controller

The data controller responsible for processing your personal data is:

3.Personal Data We Collect

We collect only personal data that you voluntarily provide when placing an order, creating an account, or contacting us:

• -Full name
• -Email address
• -Phone number
• -Delivery address (country, city, postal code, street)
• -Payment information (processed by Stripe; we do not store card details)

We do not collect sensitive personal data such as health information or other special categories of data under Article 9 GDPR.

Blog and website usage: When you visit our website and blog, anonymised analytical data (page views, session duration, traffic sources) may be collected automatically via Google Analytics. This data is not linked to your identity and is used solely for website performance analysis.

4.Purpose and Legal Basis for Processing

We process your personal data for the following purposes and on the following legal bases (GDPR Article 6):

We do not use your personal data for marketing and do not send unsolicited newsletters.

5.Data Sharing and Third Parties

We do not sell or rent your personal data. We share data only with service providers strictly necessary to operate the Website and fulfil orders:

All third-party service providers are bound by data processing agreements and/or their own GDPR-compliant privacy policies.

6.Data Storage and Retention

Your personal data is stored securely in our internal systems. We retain data only as long as necessary for the purposes described in this Policy and as required by applicable law:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.

7.Cookies and Consent Management

We use cookies and similar tracking technologies on the Website. Cookies are managed through CookieYes, our cookie consent management platform. When you first visit the Website, a cookie banner is displayed allowing you to accept, reject, or customise your cookie preferences.

We use the following categories of cookies:

You can change or withdraw your cookie consent at any time by clicking the cookie settings link in the website footer, or by adjusting your browser settings. Withdrawing consent does not affect the lawfulness of processing carried out prior to withdrawal.

8.Your Data Rights (GDPR)

Under the GDPR, you have the following rights regarding your personal data:

• -Access - request a copy of the personal data we hold about you;
• -Rectification - request correction of inaccurate or incomplete data;
• -Erasure (“right to be forgotten”) - request deletion of your data where it is no longer necessary;
• -Portability - receive your data in a structured, machine-readable format;
• -Restriction - request that we restrict processing of your data in certain circumstances;
• -Objection - object to processing based on legitimate interests;
• -Withdrawal of consent - where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at: privacy@evervale.org. We will respond within 30 days as required by the GDPR.

9.Right to Lodge a Complaint with a Supervisory Authority

10.International Data Transfers

Your personal data is primarily stored and processed within the European Economic Area (EEA). Where data is transferred outside the EEA (for example, via Google Analytics servers), such transfers are carried out in compliance with the GDPR, including through Standard Contractual Clauses (SCCs) or equivalent safeguards.

11.Children’s Privacy

This Website is intended exclusively for individuals aged 21 and over. We do not knowingly collect personal data from anyone under the age of 21. If we become aware that personal data has been collected from someone under 21, we will delete it promptly. If you believe we have inadvertently collected such data, please contact us at privacy@evervale.org.

12.Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or Website functionality (including blog-related data processing). Updates are effective upon posting to the Website. We recommend reviewing this Policy periodically. The version date at the top of this page indicates when the Policy was last updated.

13.Contact Us

For questions about this Policy or to exercise your data rights, contact:

©2026 EVERVALE. All rights reserved. Sold strictly as collectible or souvenir seeds. Not intended for illegal use where prohibited by law.