Privacy Policy

Aveleea operates this shop and this website, including all related information, content, features, tools, products and services, to provide you as a customer with a personalised shopping experience (the "Services"). Aveleea is built on Shopify, which enables us to provide these Services to you. This Privacy Policy describes how we collect, use and share personal data when you visit or use the website, make a purchase or other transaction using the Services, or otherwise communicate with us. If there is any conflict between our general terms and conditions and this Privacy Policy, this Privacy Policy will take precedence with respect to the collection, processing and sharing of your personal data.

Please read this Privacy Policy carefully. By accessing or using any of the Services, you confirm that you have read this Privacy Policy and agree to the collection, use and sharing of your data as described in this Privacy Policy.

What personal data do we collect or process?

When we use the term "personal data", we mean information that identifies you or another person, or that can reasonably be linked to you. Personal data does not include information that is collected anonymously or anonymised so that it can no longer be used to identify you. Depending on how you interact with the Services, where you live, and as permitted or required by applicable law, we may collect or process the following categories of personal data, including inferences drawn from this personal data:

• Contact details, including name, postal address, billing address, shipping address, telephone number and email address.
• Financial data, including credit and debit card and bank account numbers, payment card details, bank account information, transaction details, payment method, payment confirmation and other payment details.
• Account information, including username, password, security questions, configurations and settings.
• Transaction information, including items you view, add to your basket, add to your wishlist or purchase, return, exchange or cancel, as well as your past transactions.
• Communications with us, including information you provide when communicating with us, for example when you send a customer support request.
• Device information, including information about your device, browser or network connection, IP address and other unique identifiers.
• Usage information, including information about your interaction with the Services, such as how and when you interact with or browse the Services.

Sources of personal data

We may collect personal data from the following sources:

• Directly from you — when you create an account, access or use the Services, communicate with us, or otherwise provide your personal data to us.
• Automatically via the Services — from your device or when you use our products or Services or visit our website, as well as through the use of cookies and similar technologies.
• From our service providers — when we engage service providers to enable certain technologies and when they collect or process your personal data on our behalf.
• From our partners and other third parties.

How do we use your personal data?

Depending on how you interact with us or which of the Services you use, we may use personal data for the following purposes:

• Providing, tailoring and improving the Services — including fulfilling our contract with you, processing your payments, fulfilling your orders, storing your configurations and the items you are interested in, sending you notifications related to your account, managing your account, organising shipping, facilitating returns and exchanges, enabling you to leave reviews, and creating a personalised shopping experience.
• Marketing and advertising — for example to send you marketing and promotional communications by email, SMS or post, and to show you online advertising for products or services related to the Services or other websites.
• Security and fraud prevention — to authenticate your account, provide a secure payment and shopping experience, and detect, investigate or take action against potentially fraudulent, illegal, unsafe or malicious activity. If you register an account, you are responsible for protecting your login details.
• Communicating with you — to provide customer support, respond to your enquiries and maintain our business relationship with you.
• Legal reasons — to comply with applicable law or respond to lawful processes, and to investigate potential violations of, or enforce, our terms or policies.

How do we share personal data?

In certain circumstances, we may share your personal data with third parties for legitimate purposes in accordance with this Privacy Policy. Such circumstances may include:

• With Shopify, service providers and other third parties that provide services on our behalf (e.g. IT management, payment processing, data analytics, customer support, cloud storage, fulfilment and shipping).
• With business and marketing partners that provide marketing services and show you advertising, in accordance with their own privacy policies. Depending on where you live, you may have the right to instruct us not to share information about you for targeted advertising.
• When you ask us to share certain information with third parties or otherwise give your consent.
• With our affiliates or otherwise within our corporate group.
• In connection with a business transaction such as a merger or insolvency, to comply with applicable legal obligations, to enforce applicable terms, and to protect the Services and the rights of our users or others.

Relationship with Shopify

The Services are hosted by Shopify. Shopify collects and processes personal data about your access to and use of the Services to provide and improve the Services. Data you submit to the Services is shared with Shopify and with third parties that may be located in countries other than your country of residence. For more information about how Shopify uses your personal data and what rights you have, please refer to Shopify's Consumer Privacy Policy, and, depending on where you live, the Shopify Privacy Portal.

Third-party websites and links

The Services may provide links to websites or online platforms operated by third parties. If you follow links to sites we do not control, you should review their privacy and security policies. We are not responsible for the privacy or security of such websites.

Children's data

The Services are not intended for use by children, and we do not knowingly collect personal data from children who have not reached the age of majority in your country. If you are the parent or guardian of a child who has provided personal data to us, contact us using the details below to request deletion.

Security and retention of your data

No security measures are perfect or impenetrable, and we cannot guarantee "perfect security". How long we retain your personal data depends on factors such as whether we need it to manage your account, provide Services, comply with legal obligations, resolve disputes or enforce our contracts and policies.

Your rights and choices

Depending on where you live, you may have some or all of the following rights: access, deletion, rectification, data portability, the right to opt out of "sale"/"sharing" or targeted advertising, and the ability to manage marketing communication preferences (you can unsubscribe at any time via the link in our emails).

Where required by applicable law, we may need to verify your identity before processing your request. You may appoint an authorised representative to submit requests on your behalf, subject to proof of authorisation.

Complaints

If you have complaints about how we process your personal data, please contact us using the details below. Depending on where you live, you may also have the right to lodge a complaint with the competent data protection authority.

International transfers

We may transfer, store and process your personal data outside the country in which you reside. Where required, we rely on recognised transfer mechanisms.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will publish the revised version on this website and update the "Last updated" date accordingly.

Contact

If you have any questions about our privacy practices or this Privacy Policy, or if you wish to exercise any of your rights, please contact us by email at info@aveleea.com or by post at Unit 909, Prosperity Millennia Plaza, 663 King's Road, Quarry Bay, Hong Kong. For the purposes of applicable data protection laws, we are the data controller of your personal data.