Privacy Policy

Last updated: October 13, 2026

This Privacy Policy explains how BloomFrame Studio (“we”, “us”, “our”) collects, uses, and shares personal data when you visit cloudelys.com or buy our downloadable floral design assets and photos. It is written to meet common United States transparency expectations and European Union / UK GDPR-style requirements.

1. Data controller (who we are)

The data controller is:

HePing Peng (individual), trading as BloomFrame Studio
Website: https://cloudelys.com
Privacy & support email: gzwyxc@aol.com (we aim to respond within 3 business days)

We are a sole-proprietor digital goods seller of ready-made design assets and photos (not a generative AI app). We are not a registered company named EVOXEN LLC or any other entity under that name. A phone number is not required; email is our public support channel for download and license help.

2. What personal data we collect

• Purchase & account data from checkout: When you buy through Creem (our Merchant of Record / payment processor), Creem collects payment details and may share with us information needed to fulfill and support your order — typically name, email address, order ID, product purchased, amount paid, and delivery status. We do not receive or store full payment card numbers on this website.
• Communications: Content of emails you send to gzwyxc@aol.com (and our replies).
• Technical / log data: Standard server and CDN logs that may include IP address, approximate location derived from IP, browser/user-agent, referrer, pages requested, and timestamps. These come from our hosting/CDN provider Cloudflare.
• We do not currently collect: marketing newsletter sign-ups, account passwords on this site, government ID numbers, or precise geolocation beyond what IP-based logs may imply.

3. Purposes of processing

• Process orders and deliver digital downloads
• Send order confirmations and download links (often via Creem)
• Provide customer support and resolve defects or delivery issues
• Prevent fraud, abuse, and security incidents
• Operate, secure, and improve the website
• Keep records needed for accounting, tax, and legal compliance
• Respond to lawful requests from authorities

4. Legal bases (EU / UK GDPR)

Where the GDPR (or UK GDPR) applies, we rely on these legal bases:

• Contract (Art. 6(1)(b)): processing needed to take steps at your request and to perform the purchase contract (checkout, delivery, support for that order).
• Legitimate interests (Art. 6(1)(f)): securing the site, preventing fraud, basic analytics from server logs, and improving the store — balanced against your rights.
• Legal obligation (Art. 6(1)(c)): retaining records where tax, consumer, or other law requires it.
• Consent (Art. 6(1)(a)): only if we later introduce optional cookies or marketing that require consent; we will ask clearly before doing so.

5. Payment processor — Creem (Merchant of Record)

Payments are processed by Creem, which acts as Merchant of Record for qualifying transactions. Creem may be the seller of record on your receipt/statement and processes your payment data under its own terms and privacy policy. Refunds, chargebacks, and many payment disputes are typically handled by Creem; please use Creem checkout or Creem support flows where available. We receive order details needed to fulfill downloads and support. Please also review Creem’s privacy documentation on creem.io when you check out.

6. Who we share data with

We share personal data only as needed to run the store:

• Creem — payments, Merchant of Record, refunds/disputes, and often download delivery
• Cloudflare — website hosting, CDN, DNS, and security
• Email providers — to receive and send support email to gzwyxc@aol.com
• Authorities — only if legally required

We do not sell your personal information. We do not share it for cross-context behavioral advertising.

7. Cookies, analytics & tracking (honest disclosure)

At present, this website does not use third-party advertising trackers, marketing pixels, or analytics cookies (for example we do not load Google Analytics, Meta Pixel, or similar tools).

Cloudflare and the browser may still use strictly necessary technical cookies or similar storage for security, load balancing, or basic site operation. Those are not used to profile you for ads.

If we later add non-essential analytics or marketing cookies, we will update this policy and, where required by EU/UK ePrivacy rules, obtain consent before setting them.

8. International transfers

Our operators, Creem, and Cloudflare may process data in the United States and other countries. Where GDPR applies and data leaves the EEA/UK, we rely on appropriate safeguards used by our providers (such as Standard Contractual Clauses) and on necessity for performing your contract (delivery of digital goods).

9. Retention

• Orders & delivery records: kept as long as needed for fulfillment, support, accounting, tax, and dispute resolution (typically at least the period required by applicable tax/consumer rules; often up to several years).
• Support emails: kept while the conversation is active and for a reasonable period afterward for follow-up and fraud prevention.
• Server / CDN logs: retained according to Cloudflare’s and our operational needs, usually for a short period unless needed for security investigation.

When data is no longer needed, we delete or anonymize it where practicable.

10. Your rights (EU / UK and similar laws)

If EU/UK GDPR (or comparable law) applies to you, you may have the right to:

• Access the personal data we hold about you
• Rectification of inaccurate data
• Erasure (“right to be forgotten”) in certain cases
• Restriction of processing in certain cases
• Data portability for data you provided, where processing is based on contract or consent and carried out by automated means
• Object to processing based on legitimate interests
• Withdraw consent at any time where processing is based on consent (without affecting prior lawful processing)
• Lodge a complaint with your local data protection supervisory authority

To exercise these rights, email gzwyxc@aol.com with the subject “Privacy request”. We may need to verify your identity. We will respond within the time required by applicable law (typically within one month under GDPR).

11. United States privacy notes

We provide this notice so you can understand what we collect and why. Depending on your U.S. state, you may have additional rights (for example access or deletion). Email gzwyxc@aol.com to make a request. We do not sell personal information as that term is commonly used under state privacy laws.

12. Children

Our products and website are not directed to children under 13 (or under 16 where a higher digital-consent age applies). We do not knowingly collect personal data from children. If you believe a child has provided data, contact us and we will delete it where appropriate.

13. Security

We use HTTPS and reputable providers (Cloudflare, Creem) to help protect data in transit and at payment. No method of transmission or storage is 100% secure; please use a strong unique password on any Creem or email accounts you use with us.

14. Changes

We may update this Privacy Policy. The “Last updated” date at the top will change when we do. Continued use of the site after changes means you are informed of the updated policy; where consent is required, we will ask again.

15. Contact for privacy questions

HePing Peng, trading as BloomFrame Studio
Email: gzwyxc@aol.com
Website: https://cloudelys.com

隱私權政策

最後更新：2026 年 10 月 13 日

本隱私權政策說明 BloomFrame Studio（「我們」）於您造訪 cloudelys.com 或購買我們可下載的花卉設計素材與照片時，如何蒐集、使用與分享個人資料。內容符合美國常見資訊透明要求，以及歐盟／英國 GDPR 類型規範。

1. 資料控管者（我們是誰）

資料控管者為：

HePing Peng（個人），以 BloomFrame Studio 名義經營
網站：https://cloudelys.com
隱私與客服信箱：gzwyxc@aol.com（目標於 3 個營業日內回覆）

我們是個人經營的數位商品賣家，販售現成設計素材與照片（非生成式 AI 應用）。我們並非名為 EVOXEN LLC 或其他該名稱之註冊公司。電話非必要；電子郵件為公開客服管道，主要用於下載與授權協助。

2. 我們蒐集哪些個人資料

• 結帳產生的購買與帳戶資料：當您透過 Creem（我們的 Merchant of Record／付款處理方）購買時，Creem 會蒐集付款細節，並可能與我們分享履行與支援訂單所需資訊——通常包括姓名、電子郵件、訂單編號、購買產品、金額與交付狀態。本網站不會接收或儲存完整信用卡卡號。
• 通訊內容：您寄至 gzwyxc@aol.com 的郵件內容（以及我們的回覆）。
• 技術／日誌資料：標準伺服器與 CDN 日誌，可能包含 IP、由 IP 推估的大致位置、瀏覽器／user-agent、來源網頁、請求頁面與時間戳。來自我們的託管／CDN 供應商 Cloudflare。
• 目前不蒐集：行銷電子報註冊、本站帳戶密碼、政府身分證件號碼，或超出 IP 日誌可能推估範圍的精確定位。

3. 處理目的

• 處理訂單並交付數位下載
• 寄送訂單確認與下載連結（常經由 Creem）
• 提供顧客支援並處理瑕疵或交付問題
• 防範詐欺、濫用與資安事件
• 營運、保全並改進網站
• 保存會計、稅務與法律遵循所需紀錄
• 回應主管機關合法要求

4. 法律依據（歐盟／英國 GDPR）

於 GDPR（或英國 GDPR）適用時，我們依據：

• 契約（第 6(1)(b) 條）：履行購買契約所需（結帳、交付、該訂單支援）。
• 正當利益（第 6(1)(f) 條）：網站安全、防詐欺、基本伺服器日誌分析與商店改進——並與您的權利平衡。
• 法定義務（第 6(1)(c) 條）：稅務、消費者或其他法律要求之紀錄保存。
• 同意（第 6(1)(a) 條）：僅於日後導入需同意的選用 Cookie 或行銷時；屆時會事先明確徵求。

5. 付款處理方 — Creem（Merchant of Record）

付款由 Creem 處理，其於適格交易中擔任 Merchant of Record。收據／帳單上可能顯示 Creem 為銷售紀錄方，並依其條款與隱私政策處理您的付款資料。退款、拒付及多數付款爭議通常由 Creem 處理；請優先使用 Creem 結帳或 Creem 客服流程。我們僅取得履行下載與支援所需之訂單資料。結帳時請一併參閱 creem.io 上之 Creem 隱私文件。

6. 我們與誰分享資料

僅於營運商店所需範圍內分享：

• Creem — 付款、Merchant of Record、退款／爭議，以及常負責下載交付
• Cloudflare — 網站託管、CDN、DNS 與安全
• 電子郵件服務商 — 收發 gzwyxc@aol.com 客服郵件
• 主管機關 — 僅於法律要求時

我們不出售您的個人資訊，亦不為跨情境行為廣告而分享。

7. Cookie、分析與追蹤（誠實揭露）

目前本網站未使用第三方廣告追蹤器、行銷像素或分析 Cookie（例如未載入 Google Analytics、Meta Pixel 等）。

Cloudflare 與瀏覽器仍可能使用嚴格必要的技術 Cookie 或類似儲存，用於安全、負載平衡或基本運作，不會用於廣告剖析。

若日後新增非必要分析或行銷 Cookie，我們會更新本政策，並於歐盟／英國電子隱私規範要求時事先取得同意。

8. 國際傳輸

我們的營運者、Creem 與 Cloudflare 可能於美國及其他國家處理資料。於 GDPR 適用且資料離開 EEA／英國時，我們依賴供應商的適當保障措施（例如標準契約條款），以及履行契約（數位商品交付）之必要性。

9. 保存期間

• 訂單與交付紀錄：於履行、支援、會計、稅務與爭議解決所需期間保存（通常至少符合稅務／消費者法規；可能長達數年）。
• 客服郵件：於對話進行中及之後合理期間保存，以便追蹤與防詐欺。
• 伺服器／CDN 日誌：依 Cloudflare 與營運需要保存，通常較短，除非用於資安調查。

資料不再需要時，我們會在可行範圍內刪除或匿名化。

10. 您的權利（歐盟／英國及類似法律）

若歐盟／英國 GDPR（或類似法律）適用於您，您可能有權：

• 近用我們持有關於您的個人資料
• 更正不正確資料
• 刪除（「被遺忘權」）於特定情形
• 限制處理於特定情形
• 資料可攜：您所提供、基於契約或同意且以自動化方式處理的資料
• 異議基於正當利益的處理
• 撤回同意（不影響撤回前合法處理）
• 向當地資料保護主管機關提出申訴

行使權利請寄信至 gzwyxc@aol.com，主旨「Privacy request」。我們可能需驗證身分，並於適用法定期限內回覆（GDPR 通常為一個月內）。

11. 美國隱私說明

本通知旨在讓您了解我們蒐集什麼及原因。依您所在美國州別，您可能另有近用或刪除等權利。請來信 gzwyxc@aol.com。我們不出售州隱私法通常所稱之個人資訊。

12. 兒童

本產品與網站非針對 13 歲以下兒童（或適用較高數位同意年齡時之 16 歲以下）。我們不會故意蒐集兒童個人資料。若您認為兒童已提供資料，請聯絡我們，我們將於適當情形刪除。

13. 安全

我們使用 HTTPS 與可靠供應商（Cloudflare、Creem）協助保護傳輸中與付款時的資料。任何傳輸或儲存方式皆非百分百安全；請對 Creem 或與我們往來之電子郵件帳戶使用強而獨特的密碼。

14. 變更

我們可能更新本政策。更新時頂部「最後更新」日期會變更。變更後繼續使用本站即表示您已知悉更新；若需同意，我們會再次徵求。

15. 隱私問題聯絡方式

HePing Peng，以 BloomFrame Studio 名義經營
電子郵件：gzwyxc@aol.com
網站：https://cloudelys.com