Privacy policy

1. Identification, purpose and acceptance

This policy explains the conditions under which personal data is collected, used, stored, shared and protected.

Products are offered by: Iris Reveka HK Limited 78686179 2301, 23/F, BAYFIELD BUILDING, 99 HENNESSY ROAD, WAN CHAI, HONG KONG (hereinafter the "Seller")

Technical management is provided by: e-Namae OÜ (16133625) Harju maakond, Tallinn, Lasnamäe district, Lõõtsa tn 5, 11415, Estonia

Technical hosting is provided by Cloudways LLC. Some technical services may also be provided by third-party providers, including Shopify Inc.

By using the services, the user acknowledges having read this policy and accepts the processing of their data in accordance with the terms below.

e-Namae OÜ ensures the protection of personal data in compliance with applicable European and Estonian rules.

2. Data collected and collection methods

Personal data may be collected when browsing, placing an order, making a payment, or contacting customer support.

Data collected may include, in particular:

Identification data: first name, last name, billing address, shipping address, email, phone number.

Payment data: bank card number, expiration date, and bank information required for the transaction.

Commercial data: order number, purchase history, requests sent to customer support, and preferences/interests related to products or services.

Technical data: IP address, information related to the device used, browsing data and interactions.

3. Cookies and tracking technologies

Cookies and similar identifiers may be used to ensure service operation, improve user experience, analyze usage, remember certain preferences, and provide tailored content or advertising.

A cookie is a small file stored on the user's device during browsing.

Cookies used may be functional, analytical, advertising, social-network related, or content-related.

They may be:

• temporary, when they disappear when the browser is closed;

• persistent, when they remain stored until they expire or are deleted.

Retention duration varies by cookie type and may range from a few minutes to two years.

Users may accept, refuse, delete or configure cookies at any time through their browser or available management tools.

Refusing certain cookies may limit some features or prevent correct display of certain pages.

Cookies used do not transmit viruses, do not extract personal data from the hard drive, and do not personally identify users without consent.

Blocking cookies does not necessarily stop all data exchanges with third parties.

4. Purposes and legal bases of processing

Personal data is used in a limited way and only for specific purposes.

Data may be processed to:

• respond to information requests;

• manage orders;

• ensure delivery;

• process payments;

• apply warranties;

• secure transactions;

• prevent fraud and payment incidents;

• improve customer relationship management;

• analyze purchasing preferences and behavior;

• offer personalized services;

• send newsletters, offers or communications, with consent;

• improve technical operation;

• handle repair requests, complaints and after-sales requests.

These processing activities may be based on consent, contract performance, legitimate interest, or legal obligations.

5. Data sharing, service providers and international transfers

Data may be shared only when necessary for service performance, order management, or compliance with legal obligations.

Data may notably be shared with:

• carriers and postal services;

• payment providers;

• hosting and maintenance providers;

• analytics tools;

• fraud prevention organizations;

• technical providers responsible for email delivery;

• advertising partners;

• public, judicial or administrative authorities when required by law.

For delivery, certain information such as name, address, phone number and customs-related data may be shared with the carrier or the Seller.

Strictly necessary data may also be processed by Iris Reveka HK Limited in Hong Kong to prepare and ship orders.

Analytics tools, including Google Analytics, may be used to understand trends and improve services.

Information may also be shared with advertising partners to measure or personalize campaigns.

Some data may be processed in Ireland and then transferred outside the European Union, including to Canada, the United States, or Hong Kong.

These transfers are carried out in compliance with the GDPR and applicable safeguards.

6. Data retention and security

Personal data is retained only for as long as necessary for the purposes for which it was collected.

Data from contact requests is kept for the time necessary to process the request.

Order-related data may be kept for periods required by legal, tax, accounting obligations or applicable limitation periods.

Banking data is securely kept only as long as necessary to validate payment, then deleted when no longer required.

Users may request account closure or unsubscribe from commercial communications at any time.

Technical and organizational measures are implemented to protect data against unauthorized access, loss, alteration, or disclosure.

Transactions are secured through SSL encryption protocol.

7. User rights

In accordance with the GDPR and applicable regulations, users notably have the following rights:

• access to their data;

• rectification;

• deletion;

• objection;

• restriction of processing;

• portability;

• withdrawal of consent;

• objection to commercial profiling;

• instructions regarding data after death, where applicable.

Users may exercise their rights by sending a request to the company by email.

Users are invited to keep their information up to date, especially email and postal addresses, to ensure proper order processing.

e-Namae OÜ may keep a copy of exchanges with users, including messages sent to customer support and responses provided.

8. Applicable law, disputes, updates and contact

This policy is governed by Hong Kong law.

Any dispute related to its application or interpretation shall be submitted to the competent courts, subject to mandatory rules applicable to consumers residing in the European Union.

For European consumers, courts of the place of residence may remain competent where required by law.

This policy may be updated at any time to reflect legal, regulatory, technical or operational changes.

For any question, information request, rights request or complaint, users may contact the company by email.