Datenschutzerklärung

Privacy Policy

Last updated: October 19, 2026

1. Introduction

Welcome to REVOXYZ.

REVOXYZ operates the website and online store at https://www.revoxyz.com, offering physical products, aftermarket replacement parts, accessories and downloadable 3D-printable STL files.

REVOXYZ is a sole proprietorship registered in Sweden. Our online store is powered by Shopify.

This Privacy Policy explains how we collect, use, process, store and share personal information when you:

  • Visit or interact with our website.

  • Purchase physical products or digital downloads.

  • Create or access a customer account.

  • Contact us with questions or inquiries.

  • Request returns, refunds or customer support.

  • Subscribe to marketing communications.

  • Interact with cookies, privacy controls or services provided through our online store.

We process personal information in accordance with the EU General Data Protection Regulation (GDPR), applicable Swedish data protection legislation and other applicable privacy requirements.

These protections also extend to relevant processing involving customers in Norway, which is part of the European Economic Area (EEA).

REVOXYZ is the data controller for personal information processed in connection with operating our business. Certain service providers, including Shopify, may also process personal information as independent data controllers for their own purposes.

Our contact information is provided at the end of this policy.

2. Personal Information We Collect

Depending on how you interact with our website, we may collect or process the following categories of personal information.

Contact Information

Your name, email address, telephone number, billing address and delivery address.

Order Information

Purchased products, quantities, prices, order numbers, payment status, shipping information, returns, refunds and related transaction records.

Payment Information

Payment methods, transaction references, payment confirmations and information required to administer payments.

Payments are processed through Shopify Payments or other payment providers available at checkout.

REVOXYZ does not independently store complete payment card numbers or card security codes.

Customer Account Information

Account identifiers, contact details, preferences, order history and other information associated with your customer account.

Customer account authentication is managed through Shopify. REVOXYZ does not independently maintain customer account passwords.

Communications

Information you provide when contacting customer support, requesting assistance, submitting inquiries or communicating with us about an order.

Technical and Device Information

IP addresses, browser information, device details, technical identifiers and security-related information.

Website Usage Information

Information about how visitors interact with our website, where collected through permitted cookies, analytics tools or similar technologies.

Digital Product Information

Information about purchased STL files, download access, delivery of digital content and related order records.

Marketing Information

Email subscription preferences, permitted marketing interactions and information relevant to marketing communications, where applicable.

We aim to collect only the information reasonably necessary to operate our business, fulfil orders and meet applicable legal obligations.

3. Sources of Personal Information

We may receive personal information from:

  • You directly when placing orders, creating accounts or contacting us.

  • Shopify and the technical systems supporting our online store.

  • Payment providers involved in processing transactions.

  • Shipping providers involved in delivering orders.

  • Service providers assisting with accounting, digital downloads or business operations.

  • Cookies and similar technologies, subject to applicable consent requirements.

Shopify may also process information relating to your interactions with other Shopify merchants and Shopify services, as explained in Section 6.

4. How and Why We Process Personal Information

We process personal information only where we have an applicable legal basis under GDPR.

4.1 Processing and Fulfilling Orders

We use customer information to:

  • Process purchases and payments.

  • Manufacture and prepare physical products.

  • Arrange delivery through shipping providers.

  • Provide access to purchased digital STL files.

  • Send order confirmations and delivery notifications.

  • Manage returns, cancellations, refunds and complaints.

  • Communicate with customers about their purchases.

Legal basis: Performance of a contract, Article 6(1)(b) GDPR.

4.2 Information Required to Complete a Purchase

To process an order, customers must provide the information necessary for payment and order fulfilment.

Physical orders require appropriate delivery information, while digital purchases require an email address for delivery and order communication.

If the required information is not provided, we may be unable to complete the purchase or deliver the product.

4.3 Accounting and Legal Compliance

We process information required to maintain accounting records, comply with tax obligations and fulfil other applicable legal requirements.

This includes relevant transaction details, payments, refunds and financial documentation.

Legal basis: Compliance with a legal obligation, Article 6(1)(c) GDPR.

4.4 Customer Support and Inquiries

We process information provided through customer inquiries to respond to questions, resolve problems and manage customer relationships.

Legal basis: Performance of a contract, Article 6(1)(b) GDPR, where the inquiry concerns an existing agreement, or legitimate interests, Article 6(1)(f) GDPR, where appropriate.

Our legitimate interest is providing customer assistance and responding to business-related inquiries.

4.5 Security and Fraud Prevention

We may process transaction, account and technical information to detect suspected fraud, prevent unauthorized activity and protect our website, customers and business.

Legal basis: Legitimate interests, Article 6(1)(f) GDPR, where appropriate, or compliance with a legal obligation, Article 6(1)(c), where applicable.

Our legitimate interest is maintaining secure services and preventing fraud or misuse.

4.6 Website Analytics and Improvements

Where enabled, we may use analytics information to understand website usage, identify technical problems and improve the functionality and customer experience of our store.

Where analytics require non-essential cookies or similar technologies, we obtain consent before using them.

Legal basis: Consent, Article 6(1)(a) GDPR, where required, or legitimate interests, Article 6(1)(f) GDPR, for other processing where legally permitted.

4.7 Marketing and Advertising

Where marketing services are enabled, we may process relevant personal information to communicate product updates, offers and other business-related information.

Marketing communications are sent in accordance with applicable marketing and data protection legislation.

Where consent is required, we obtain it before sending marketing communications.

Customers may unsubscribe from marketing emails through the unsubscribe link or by contacting us directly.

Personalized advertising and advertising-related tracking are subject to applicable consent requirements and privacy settings.

Legal basis: Consent, Article 6(1)(a) GDPR, or another applicable legal basis where permitted by law.

Acceptance of our purchase terms does not constitute general consent to optional marketing activities.

4.8 Abandoned Checkout Reminders

Where permitted by applicable law and customer communication preferences, REVOXYZ may send automated email reminders concerning an incomplete checkout.

These reminders may contain information about products left in the checkout and a link allowing the customer to resume the purchase.

Our abandoned checkout reminders are managed through Shopify Messaging.

Marketing-related reminders are sent according to applicable consent and marketing rules.

Customers can unsubscribe from these communications through the unsubscribe link provided in the email.

Personal information associated with incomplete checkouts is processed only for legitimate business purposes and in accordance with applicable legal requirements.

5. How We Share Personal Information

We share personal information where necessary to fulfil orders, operate our business, comply with legal requirements or provide permitted services.

Depending on the transaction and services used, recipients may include the following.

Shopify

Shopify provides our e-commerce platform, website hosting, checkout, customer accounts, order management, marketing tools and related infrastructure.

Shopify processes personal information in accordance with its applicable contractual obligations, data protection terms and privacy policies.

Shopify may act as a data processor on our behalf or as an independent data controller for certain activities.

Payment Providers

Payments are processed through Shopify Payments and other payment providers available at checkout.

These providers process information necessary to authorize, complete and administer payment transactions and may perform security or fraud-prevention checks.

PostNord and Delivery Providers

For physical purchases, relevant delivery information is shared with PostNord or another applicable shipping provider.

This may include your name, delivery address, email address, telephone number and other information necessary to deliver or track your shipment.

For international shipments, necessary shipment information may also be provided to customs authorities, customs representatives or other relevant parties where required.

Fortnox and Accounting Services

REVOXYZ uses Fortnox for accounting and financial administration.

Relevant information about orders, payments, refunds and financial transactions may be transferred to or processed through Fortnox for bookkeeping and compliance with applicable legal requirements.

Digital Download Services

For digital STL purchases, information necessary to provide access to purchased files may be processed through Shopify or an integrated digital delivery service.

Other Service Providers

We may use additional technical, security, hosting, support or operational service providers where necessary for legitimate business purposes.

Providers acting on our behalf are expected to process personal information under applicable data protection requirements.

We may also disclose personal information where required by law or where necessary to establish, exercise or defend legal claims.

REVOXYZ does not sell customer contact lists to third parties.

6. Shopify Network Intelligence and Enhanced Services

Our online store is hosted by Shopify, which provides the technical infrastructure for operating the website, processing purchases and managing customer interactions.

When you visit or make a purchase through our store, Shopify collects and processes personal information necessary to provide its services.

Shopify Network Intelligence is enabled for our store.

Through Shopify Network Intelligence, Shopify may securely use information about customer interactions with our store together with information from interactions with other Shopify merchants and Shopify services.

This processing supports additional Shopify features known as Enhanced Services.

These services may include:

  • Providing more personalized shopping experiences.

  • Improving store functionality and performance.

  • Improving checkout experiences.

  • Understanding interactions with stores and advertising.

  • Supporting more relevant advertising and marketing services.

  • Improving fraud prevention and security.

Information about your interactions with our store may be shared with Shopify and relevant third parties, including service providers located in other countries, to provide these services.

Shopify may process certain personal information as an independent data controller for its own purposes, subject to applicable laws and its privacy policies.

Where required under applicable European data protection and cookie laws, consent is obtained before using non-essential cookies or similar technologies for personalized advertising, analytics or other optional purposes.

Customers can manage or withdraw applicable cookie consent through the privacy controls available on our website.

Customers may also contact Shopify directly to learn about their privacy rights, request certain data-related actions, withdraw applicable consent or object to eligible processing associated with Shopify's Enhanced Services.

Shopify Consumer Privacy Policy:

https://www.shopify.com/legal/privacy/consumers

Shopify Privacy Portal:

https://privacy.shopify.com

These resources provide additional information about Shopify's data processing activities, privacy practices and available rights.

7. Cookies and Similar Technologies

Our website uses cookies and similar technologies to support website functionality, security and customer services.

Cookies may be used for purposes including:

Essential Website Functions

Operating the shopping cart, processing checkout, maintaining security, remembering necessary session information and supporting customer accounts.

Essential cookies are required for the proper operation of certain website features and may be used without consent where permitted by law.

Analytics and Performance

Understanding how visitors use our website, identifying errors and improving functionality, where these features are enabled.

Preferences and Personalization

Remembering certain preferences and supporting personalized website experiences, where enabled.

Marketing and Advertising

Supporting permitted marketing services and relevant advertising, where enabled.

Cookie Consent

Non-essential cookies and similar tracking technologies that require consent are not used until valid consent has been provided.

Our website uses Shopify's customer privacy tools to manage cookie consent preferences.

For visitors in the European Economic Area, including Sweden, other EU countries and Norway, applicable consent requirements are observed before using non-essential tracking technologies.

Visitors can manage their preferences and withdraw applicable cookie consent through the cookie banner or the Cookie preferences link available in our website footer.

Withdrawing consent does not affect the lawfulness of processing performed before withdrawal.

You may also manage cookies through your browser settings, although disabling certain cookies may affect website functionality.

For additional information about Shopify's privacy practices, visit:

https://privacy.shopify.com

If additional third-party tracking services are introduced, we will review their consent requirements and update our privacy information where necessary.

8. International Transfers of Personal Information

REVOXYZ is established in Sweden, and our Shopify settings specify the European Union as the selected data-hosting region.

However, the use of Shopify and other international service providers may involve access to, processing of or transfers of personal information outside Sweden or the European Economic Area (EEA).

Where transfers outside the EEA occur, appropriate legal safeguards must be in place in accordance with applicable data protection legislation.

Depending on the provider and destination, these safeguards may include:

  • An adequacy decision issued by the European Commission.

  • European Commission Standard Contractual Clauses.

  • Other legally recognized transfer mechanisms and supplementary safeguards where required.

The applicable safeguards depend on the relevant service provider and processing activity.

The selection of an EU data-hosting region does not necessarily prevent all processing of or access to personal information from outside the EEA.

For additional information about Shopify's international processing and privacy arrangements, please consult Shopify's privacy information.

You may also contact REVOXYZ for information about relevant transfers and available safeguards.

9. How Long We Keep Personal Information

We retain personal information only for as long as necessary to fulfil the purposes described in this policy, comply with legal obligations or protect legitimate legal interests.

Retention periods depend on the type of information and the purpose for which it is processed.

Order and Accounting Records

Information forming part of legally required accounting records is generally retained for seven years after the end of the calendar year in which the relevant financial year ended, in accordance with Swedish accounting legislation.

Customer Account Information

Account information is retained for as long as reasonably necessary to provide and administer customer accounts, unless a longer retention period is required by law.

Customers may request deletion of eligible personal information, subject to applicable legal obligations and exceptions.

Customer Support Communications

Customer inquiries and related communications are retained for as long as reasonably necessary to resolve the matter, maintain appropriate records or address potential legal claims.

Marketing Information

Where personal information is processed based on marketing consent, we stop processing it for that purpose when consent is withdrawn, subject to any limited retention necessary to respect the withdrawal or comply with legal requirements.

Technical and Analytics Information

Technical logs, security information and analytics data are retained according to their purpose, applicable legal requirements and the retention settings of the relevant service providers.

Digital Product Records

Information about digital purchases and download access is retained as needed to provide purchased content, administer customer support, comply with accounting obligations and resolve potential claims.

When personal information is no longer required, we delete or anonymize it where appropriate.

10. Data Security

REVOXYZ takes reasonable organizational and technical measures to protect personal information against unauthorized access, misuse, alteration, loss and unlawful disclosure.

Our online store operates through Shopify, which provides security infrastructure for e-commerce transactions, customer accounts and payment processing.

Access to business and customer information is restricted according to operational needs.

We use established service providers and aim to maintain appropriate security practices.

However, no electronic system, online service or data transmission method can be guaranteed to be completely secure.

If you believe that your personal information or customer account has been compromised, please contact us promptly.

11. Your Rights Under GDPR

Where GDPR applies to the processing of your personal information, you have certain rights, subject to applicable legal conditions and exceptions.

These include:

Right of Access

You may request information about the personal data we process and obtain a copy where applicable.

Right to Rectification

You may request correction of inaccurate or incomplete personal information.

Right to Erasure

You may request deletion of personal information where the legal requirements are met.

Right to Restriction

You may request that certain processing activities be restricted in applicable circumstances.

Right to Data Portability

You may request relevant personal information in a structured, commonly used and machine-readable format where the legal requirements are met.

Right to Object

You may object to processing based on legitimate interests in applicable circumstances.

You also have the right to object to processing of your personal information for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time.

Withdrawal does not affect the lawfulness of processing performed before consent was withdrawn.

Right to Lodge a Complaint

You have the right to submit a complaint to a competent data protection supervisory authority.

Certain information may need to be retained even after a deletion request, including records required by Swedish accounting legislation or other applicable laws.

To exercise your rights concerning personal information processed by REVOXYZ, contact:

support@revoxyz.com

We may need to verify your identity before responding to certain requests.

We will respond without undue delay and generally within one month, subject to extensions permitted under GDPR.

For personal information independently processed by Shopify, you may also exercise applicable rights through:

https://privacy.shopify.com

12. Complaints and Supervisory Authority

If you have concerns about how REVOXYZ processes your personal information, you are welcome to contact us so we can investigate the matter.

You also have the right to lodge a complaint with a competent data protection supervisory authority.

In Sweden, the relevant authority is:

Integritetsskyddsmyndigheten (IMY)

Website: https://www.imy.se

Customers in other EEA countries may also contact their competent national data protection supervisory authority.

13. Children's Privacy

Our products and services are intended for customers who are legally capable of entering into purchase agreements.

Our website is not specifically directed at children.

We do not intentionally collect personal information from children in circumstances where such processing would be unlawful.

If you believe that a child has provided personal information to us inappropriately, please contact us so that we can investigate and take appropriate action.

14. Third-Party Websites and Links

Our website may contain links to websites or services operated by independent third parties.

These external services may have their own privacy policies and data processing practices.

REVOXYZ does not control the privacy practices of independent third-party websites.

We encourage visitors to review the applicable privacy policies before providing personal information to external services.

15. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our business operations, service providers, technologies, legal obligations or personal data processing activities.

The current version will be published on our website with an updated revision date.

Where required by applicable law, we will provide additional notice concerning significant changes.

16. Contact Information and Data Controller

For questions about personal information, privacy practices, data protection rights or this Privacy Policy, please contact:

REVOXYZ

Business structure: Sole proprietorship registered in Sweden

Email: support@revoxyz.com

Phone: +46 730 98 00 04

Website: https://www.revoxyz.com

Business address:

Ryttargatan 6
169 51 Solna
Sweden

REVOXYZ is the trading name of a Swedish sole proprietorship. The individual operating the business is the data controller for personal information processed in connection with its own business operations, subject to the respective responsibilities of service providers acting as independent data controllers under applicable law.