Effective date: July 13, 2026
IverDirect operates on a strict data-minimization principle. We collect and retain only the information reasonably necessary to accept, verify, fulfill, deliver and support an order; secure the storefront; resolve order or delivery issues; and satisfy non-waivable legal obligations. We do not treat customer information as a commercial asset.
We do not sell, rent, trade or license personal information. We do not disclose customer information for advertising, data brokerage, unrelated analytics, profiling or another company’s independent marketing. We do not build behavioral dossiers or monetize purchase history.
Our international operating structure
IverDirect is operated from corporate offices in Mexico. Our primary network infrastructure is located in Panama. Orders are fulfilled and shipped from the United States. This structure means that limited order information may move between these locations only when required to operate the storefront, confirm that the required cryptocurrency transfer has been received, fulfill and deliver an order, provide customer support or maintain security.
Information we collect
Depending on how you use the storefront, the information necessary to complete an order may include:
- Identity and contact information: name, email address, telephone number and account credentials.
- Delivery information: recipient name, shipping address, delivery instructions and information needed by the fulfillment operation or carrier.
- Order information: products, quantities, price, currency, order status, shipment status, customer-service communications and return or refund records.
- Order status: the order total and whether the order remains open or has been confirmed for fulfillment. This does not contain customer payment information, financial account information or payment credentials.
- Essential technical and security information: IP address, timestamps, browser or device information, session identifiers, authentication events and server logs reasonably required to operate the site, prevent abuse, investigate fraud and protect accounts.
We do not intentionally request medical records, diagnoses, prescriptions or unrelated health histories through the storefront. Please do not submit information that is not required for your order or support request.
Cryptocurrency payments
IverDirect accepts payment exclusively in cryptocurrency. IverDirect does not collect or retain customer payment information. We do not request, collect or store credit-card numbers, debit-card numbers, bank-account details, routing information, payment-app credentials or conventional billing credentials. We also never request or store cryptocurrency private keys, seed phrases, wallet passwords or custodial-exchange login credentials.
Customers initiate cryptocurrency transfers using a wallet or service of their own choosing, outside IverDirect’s control. Our order system records only the commercial order total and whether the order has been confirmed for fulfillment. It does not record the customer’s wallet credentials, financial-account information or other customer payment information.
Cryptocurrency networks are public ledgers. A transfer may create a publicly visible transaction hash, sending address, receiving address, amount and timestamp on the relevant blockchain independently of IverDirect. A wallet provider or exchange selected by the customer may separately collect information under its own terms; IverDirect does not receive the customer’s private account information from that provider.
How we use information
Customer information is used only to:
- create and administer an account when requested;
- accept, verify and process an order;
- confirm receipt of the required cryptocurrency amount and coordinate fulfillment, shipment and delivery;
- communicate transactional notices and respond to support requests;
- manage returns, refunds, order disputes and delivery problems;
- protect the storefront, customers and order process from fraud, abuse or unauthorized access; and
- meet accounting, tax, sanctions, recordkeeping or other obligations that cannot lawfully be waived.
We do not use order information for unrelated advertising or permit third parties to use it for their own marketing.
Strictly limited operational disclosure
Completing an online order necessarily requires limited disclosure to operational recipients. We provide only the minimum information needed for the specific task to our United States fulfillment operation, shipping carriers, network infrastructure providers and technical or security contractors acting on our behalf.
These recipients are not authorized by IverDirect to sell the information, advertise to customers, build independent profiles or use the information for unrelated purposes. We do not provide customer lists or browsing histories to data brokers, advertising networks, social-media platforms or unrelated commercial partners.
No privacy policy can honestly claim that an online order is completed without any third-party involvement: physical delivery and reliable network operation require carriers and infrastructure providers. Our commitment is narrower and stronger—we disclose nothing beyond what is required to complete and protect the transaction, and we do not authorize secondary commercial use.
Government and law-enforcement requests
IverDirect does not voluntarily disclose customer information to government agencies or law-enforcement bodies in response to informal inquiries. For customer data controlled by IverDirect and stored on infrastructure in Panama, our policy is to require a written, legally binding order or notice issued by a competent Panamanian governmental or judicial authority under Panamanian law and lawfully served on IverDirect at our corporate offices in Mexico.
We reject requests that are informal, overbroad, unsupported, directed to individual employees or lacking demonstrated legal authority and jurisdiction. Where legally permitted, we will seek to narrow a demand and will notify the affected customer before disclosure.
This policy describes IverDirect’s disclosure standard; it cannot override a non-waivable legal obligation imposed by a court or authority with lawful jurisdiction. A fulfillment provider, shipping carrier or network infrastructure provider may also be independently required to respond to lawful process concerning records under its own control. IverDirect cannot prevent or control such independent obligations.
Retention and deletion
We keep identifiable information only for the active order lifecycle and for the shortest additional period reasonably necessary to complete delivery, support the transaction, manage a return or dispute, protect against fraud and comply with mandatory accounting, tax or recordkeeping requirements. When information is no longer required, we delete it, anonymize it or isolate it from routine operational use.
Backup copies and security logs may persist temporarily until they rotate out of protected systems. We do not retain information indefinitely merely because storage is inexpensive or because it might have speculative future value.
Cookies and technical logs
The storefront uses session, cart, authentication, language, currency, security and other technologies necessary to provide the service. Essential cookies keep the cart functioning, preserve a secure session and support checkout. We do not use customer order information for behavioral advertising.
Infrastructure logs may record technical events needed to diagnose failures, maintain availability and detect attacks. Access to those logs is restricted, and they are retained only as long as reasonably necessary for operational and security purposes.
Security
We use technical and organizational safeguards designed to limit unauthorized access, alteration, disclosure or destruction. These measures include encrypted network transport, access controls, restricted administrative access, system monitoring, backups and security maintenance. No internet service can promise absolute security, but minimizing the information we collect reduces both exposure and incentive.
Your privacy choices
You may request access to, correction of or deletion of personal information controlled by IverDirect. You may also request a copy of relevant order information or closure of your customer account. We may need to verify identity before acting, and we may retain narrowly limited records where deletion would conflict with an active order, dispute, fraud-prevention need or mandatory legal obligation.
Privacy requests may be submitted through the website contact form. Please do not send identity documents or sensitive medical information unless we specifically request a limited item needed to verify the request.
Children
IverDirect is intended for adults. We do not knowingly solicit or accept orders from children. If we learn that a child submitted personal information, we will remove it unless retention is legally required.
Policy changes
If this policy changes, the revised version will be published on this page with a new effective date. We will not retroactively convert information collected for order fulfillment into advertising or data-brokerage material.
Contact
Questions or privacy requests should be submitted through the IverDirect contact form and directed to our corporate offices in Mexico. Please include only the information necessary for us to identify the relevant account or order.