Privacy policy

1. Information We Collect and Why

We collect information that is reasonably necessary to operate our store and support customers. We do not request health information to process orders. Please avoid sending medical or other sensitive information unless it is necessary for your support request.

2. Our Legal Bases for Processing

Where the GDPR, UK GDPR, or similar law applies, we process personal information to perform our contract with you, comply with legal obligations, pursue legitimate interests in operating, securing, improving, and protecting our store, and, where required, with your consent, such as for non-essential cookies or marketing. You may withdraw consent at any time; withdrawal does not affect processing carried out before it was withdrawn.

3. Cookies, Advertising, and Your Privacy Choices

We and our service providers use cookies and similar technologies to keep the Site functioning, remember preferences, measure performance, prevent fraud, and, where permitted, measure and deliver advertising. Advertising technologies may share identifiers, such as a hashed email address or pages viewed, with advertising partners. Under certain US state privacy laws, this activity may be considered “sharing” for cross-context behavioral advertising or targeted advertising. We do not sell your personal information for money.

If your browser sends a Global Privacy Control (GPC) signal, we will treat that signal as an opt-out where required by applicable law and where supported by the relevant technology. Cookie and privacy controls may affect data available for advertising measurement and personalization.

4. How We Share Information

Each recipient receives information only as reasonably necessary for its function. Some third-party services have their own privacy policies and may process information under their own terms.

6. International Transfers

Because we operate internationally, your information may be processed outside your country of residence, including in Hong Kong, the United States, and countries where our service providers, fulfillment partners, or carriers operate. Where required for transfers of EU/EEA or UK personal information, we use appropriate safeguards, such as Standard Contractual Clauses or another lawful transfer mechanism.

7. How Long We Keep Information

8. Your Rights

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information; to restrict or object to certain processing; to opt out of targeted advertising or certain sharing; and to withdraw consent. We will not discriminate against you for exercising a privacy right. We may need to verify your identity before completing a request. We aim to respond within 30 days or within another period permitted or required by applicable law.

If you are in the EU/EEA or UK, you may also lodge a complaint with your local supervisory authority.

9. Children

Our Site is not directed to children. We do not knowingly collect personal information from anyone under 16, or under 13 in the United States. If you believe a child has provided personal information to us, please contact us and we will take appropriate steps to delete it.

10. Security and Changes to This Policy

We use reasonable organizational, technical, and physical measures designed to protect personal information, including TLS encryption in transit, access controls, and reputable infrastructure providers. No system is completely secure. If we make a material change to this Privacy Policy, we will post the updated version on this page with a new “Last Updated” date and provide any additional notice required by law.

5. Shopify and Optional Enhanced Services

Shopify provides store-hosting, checkout, account, fraud-prevention, and related e-commerce services. If we enable Shopify Network Intelligence, Enhanced Services, or another feature that results in additional Shopify processing, Shopify may process information as described in the Shopify Consumer Privacy Policy (opens in a new tab). Where required, we will provide the applicable notice and a method to object to or opt out of relevant processing. Settings for cookie consent, data sharing, and opt-out rights must be implemented through Shopify Customer Privacy or a properly integrated privacy tool; this Policy does not itself activate those controls.

11. EU/EEA, UK, and Switzerland Representation

Where applicable law requires us to appoint a data-protection representative in the EU/EEA, UK, or Switzerland, we will identify that representative and its contact details in the relevant regional notice or on this page. We will not present a third party as our representative unless it has been formally appointed.