Privacy Policy

This explains what we hold about you, why, how long, and how to get rid of it. It is written to be read, not to be survived.

1. What we hold

• Your account: an Elysium identifier we issue, your email address, and a phone number only if you chose to add one. A phone number is never required.
• Your credentials: your password and any access ticket are stored only as one-way hashes. We cannot read them, recover them, or tell you what they were.
• Your orders: what you bought, the delivery address, the packages, and their tracking history.
• Your money with us: every movement of your balance, with its reason.
• Claims: what you reported and the photographs you attached.
• Messages: what you wrote, exactly as written, and any translation of it.
• Access records: the address and browser used to register, and the address and time of each sign-in. Kept for fraud and disputes.

We do not receive or store card numbers. Card payments happen on our payment provider's own page.

2. Why

To take and deliver your order, which is the contract between us. To detect fraud and protect the platform, which is our legitimate interest. To keep accounting records, which the law requires. We do not sell your data and do not use it to build advertising profiles.

3. Who else sees it

• The workshop making your item receives your delivery name and address — the minimum needed to send you a parcel. It does not receive your email address, your order history, or anything else.
• The carrier receives what a carrier needs to deliver.
• Our payment provider handles your card details directly; we never see them.
• Our email provider sends messages to your address.

Data may be processed outside your country, including in Singapore, the United States and the European Union, depending on where the item is made and where our services run.

4. Photographs in claims

Photographs you attach to a claim are stored privately and are never publicly accessible. They can be seen only by us, by you, and — for packing photographs — by the workshop that packed that specific parcel. They are served through an authorised route that checks who is asking, not from a public address.

5. Never anywhere permanent

We do not place personal data on a blockchain, on IPFS, or anywhere else it cannot be deleted. What cannot be erased cannot hold personal data, because your right to erasure is real. Where we need to prove a file has not been altered, we record a fingerprint of it, not the file.

6. How long

• Your account: until you close it.
• Orders and balance movements: kept as accounting records, with you removed from them after closure.
• Sign-in records: kept while the account exists.
• Closure archive: seven years, then deleted automatically.
• Error logs: deleted automatically once resolved.

7. Closing your account

You can start it yourself from your account page. Before you confirm, you are shown exactly what will be erased and what must be kept. Then:

• Nothing happens for 14 days, and you can cancel at any point in that time.
• After that, your name, email, phone, addresses, password, authenticator and access tickets are erased for good.
• Orders, packages and balance movements remain, because accounting records must — but with you removed from them. They stop being about a person.
• Everything we held about you is written to one encrypted archive first, kept seven years for tax and dispute purposes, then deleted.

If money is owed to you, or an order or claim is still open, we say so and ask you to settle it before closing — otherwise closing would lose it.

Step-by-step instructions, including for people who cannot sign in, are on the account deletion page. To remove particular data without closing the account, see delete specific data.

8. Your rights

You can ask for a copy of your data, correct it, have it erased, restrict how it is used, or object to it being used. You can change your email address yourself, at any time, from your account: a code goes to the new address and your old one is told, so nobody can move an account quietly. Write to us to exercise anything else; we answer within 30 days.

If you think we have handled your data badly, you can complain to the data protection authority where you live.

9. Children

Elysium is not for children. We do not knowingly collect data from anyone under the age of majority in their country. If you believe a child has an account, tell us and we will remove it.

10. Changes

The date at the top tells you which version you are reading. If a change affects your rights in a material way, we email you rather than quietly updating the page.