PRIVACY POLICY
The privacy policy was last updated June 23 2024.
Our website is https://carmenmwong.com.
How We Collect Personal Information
Information you gave us
Personal information is collected when you make an inquiry through email, send us a message using the website’s contact form, have placed an order through the shop or purchased item(s) in-person.
Information from the use of our website and services
Information from known third parties or social media
When you engage with us using social media platforms (e.g. tag us in an Instagram post), we may receive your personal information. The information we receive will depend on the privacy preferences you have set on those platforms.
What We Collect And Store
When you purchase item(s) from us in-person, we will collect information including:
- Your name
- Billing address
- Email address
- Phone number
- Credit card/payment details
While you visit our website, we track:
- Products you have viewed: Show you products you have recently viewed
- Shipping address: For estimating shipping costs before you place an order, and to send you the order
- Cart items: To keep track of cart contents while you are browsing our website
- Location, IP address and browser type: For purposes like estimating taxes and shipping, fraud prevention
- Please refer to our Cookie Policy for detailed information about cookies used on this website.
When you send us an email or message us through the website’s contact form, we store your name and email address in order to respond to your inquiry and to monitor ongoing interactions.
When you place an order from us, we will ask you to provide information including:
- Your name
- Billing address
- Shipping address
- Email address
- Phone number
- Credit card/payment details
This website uses the Privacy Suite for WordPress by Complianz to collect and record Browser and Device-based Consent. For this functionality, your IP address is anonymized and stored in our database. This service does not process any personally identifiable information and does not share any data with the service provider. For more information, see the Complianz Privacy Statement.
This website utilizes caching in order to facilitate a faster response time and better user experience. Caching potentially stores a duplicate copy of every web page that is on display on this site. All cache files are temporary, and are never accessed by any third party, except as necessary to obtain technical support from the cache plugin vendor. Cache files expire on a schedule set by the site administrator, but may easily be purged by the admin before their natural expiration, if necessary. We may use QUIC.cloud services to process & cache your data temporarily. Please see https://quic.cloud/privacy-policy/ for more details.
This website uses hCaptcha to prevent bots and spam. For this functionality, information such as IP address, mouse movements, scroll position, keypress events, touch events, and gyroscope / accelerometer information may be collected. For more information, please see https://www.hcaptcha.com/privacy.
How we use your information
Financial Payments
We will use your information for purposes such as:
- Send you information about your account, purchase, or order
- Process payments through our payment processor and prevent fraud
- Comply with any legal obligations we have, such as calculating taxes
Administrative purposes
We will use your information for purposes such as:
- Respond to your requests, inquiries
- Record keeping of interactions, including refunds and complaints
- Fraud protection
Website Management
We will use your information for purposes such as:
- Improve our store offerings
- Estimate shipping and taxes for your purchase or order
- Website caching
- Block disruptive use
How we protect your personal information
We protect your information by:
- Using encryption when collecting or transferring sensitive information, such as credit card details
- Limiting access to information we collect about you
- Ensuring that we and our business partners have appropriate security safeguards to keep personal information safe
How long we store your personal information
We retain your personal information based on legal and operational requirements. For example, we are required to keep records for at least 6 years for tax purposes.
We keep your information for no longer than is necessary for the purposes it was collected for. If it is no longer need, it is deleted and/or anonymized so individuals can no longer be identified. This will always be done in compliance with data protection law.
Who we share your information with
We will never sell your information to third parties or share your information with anyone for marketing purposes.
We share information with third party suppliers who help us provide our services to you, such as Square, WooCommerce and Stripe.
We use Square for payment, analytics, and other business services. Square collects and processes personal data to operate and improve the services it provides to us, including for fraud protection and prevention. Please refer to Square’s Privacy Policy for more information.
We use Stripe for payment, analytics, and other business services. Stripe collects and processes personal data, including identifying information about the devices that connect to its services. Stripe uses this information to operate and improve the services it provides to us, including for fraud detection and prevention. Please refer to Stripe’s Privacy Policy for more information about its processing activities.
Aside from our third party suppliers, we will not disclose your information to outside organizations unless we are required by law.
Legal Basis For Processing your Information
We will collect and use your data on the legal bases outlined below.
Consent
Contractual Relationship
Legal Obligation
We may need to collect, process and disclose personal information to comply with a legal obligation. For example, tax and accounting purposes.
Vital Interests
Personal information may be used in order to protect your vital interests or those of another person.
Legitimate Interests
We may collect and use your personal information for legitimate interests. For example, to monitor and maintain website security and its services.
International Data Transfers and Processing
Your personal information may be used, stored, and/or accessed by our service providers and third party suppliers who are located outside your country of residence or region. We take steps to make sure safeguards are in place to protect your personal information.
Your Rights with Respect to Personal Information
You have the following rights with respect to your personal information:
- You have the right to know why your personal information is needed, what will happen to it, and how long it will be retained for.
- Right of access: You have the right to access your personal information that is known to us.
- Right to rectification: you have the right to supplement, correct, have deleted or blocked your personal information whenever you wish.
- If you give us your consent to process your personal information, you have the right to revoke that consent and to have your personal information deleted.
- Right to transfer your data: you have the right to request all your personal information from the controller and transfer it in its entirety to another controller.
- Right to object: you may object to the processing of your information. We comply with this, unless there are justified grounds for processing.
To exercise these rights, please contact us. If you have a complaint about how we handle your data, we would like to hear from you. You also have the right to submit a complaint to the appropriate supervisory authority.
Concerns or Questions
Contact us for concerns or questions related to our privacy policy.