Privacy policy

Last updated: June 3, 2026

Oryzom AU operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). Oryzom AU is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy describes how we collect, use, hold, process, transfer and disclose your personal data when you visit, use, or make a purchase or other transaction using the Services, or otherwise communicate with us. This Privacy Policy is intended to comply with the Personal Data (Privacy) Ordinance, Cap. 486 of the Laws of Hong Kong, including the Data Protection Principles under that Ordinance.

If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, use, holding, processing, transfer and disclosure of your personal data.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand how we collect, use, hold, process, transfer and disclose your personal data as described in this Privacy Policy.

Personal Data We Collect or Process

When we use the term "personal data," we mean any data relating directly or indirectly to a living individual, from which it is practicable for the identity of the individual to be directly or indirectly ascertained. Personal data does not include information that has been anonymized or aggregated so that it can no longer identify you.

We may collect or process the following categories of personal data, depending on how you interact with the Services and as permitted or required by applicable law:

Contact details including your name, address, billing address, shipping address, phone number, and email address.
Payment and transaction information including payment details, transaction details, form of payment, payment confirmation, order history, refunds, returns, exchanges and cancellations. We do not directly store full payment card details unless expressly stated. Payment processing may be handled by our payment providers.
Account information including your username, password, security information, preferences and settings.
Order and shopping activity including the products you view, put in your cart, add to your wishlist, purchase, return, exchange or cancel.
Communications with us including the information you provide when contacting customer support or otherwise communicating with us.
Device and technical information including information about your device, browser, network connection, IP address, cookies, identifiers and similar technologies.
Usage information including information about how and when you interact with or navigate the Services.

Personal Data Sources

We may collect personal data from the following sources:

Directly from you when you create an account, place an order, visit or use the Services, contact us, submit information, or otherwise provide us with your personal data.
Automatically through the Services including through cookies, pixels, analytics technologies and similar tools when you use our website or services.
From our service providers including Shopify, payment providers, shipping providers, analytics providers, customer support providers, marketing providers and technology providers.
From partners or other third parties where permitted by applicable law.

How We Use Your Personal Data

Depending on how you interact with us or which of the Services you use, we may use personal data for the following purposes:

Provide, Tailor, and Improve the Services. We use your personal data to provide you with the Services, including to perform our contract with you, process your payments, fulfill your orders, remember your preferences and items you are interested in, send notifications related to your account, process purchases, returns, exchanges or other transactions, create, maintain and otherwise manage your account, arrange shipping, facilitate returns and exchanges, enable you to post reviews, and create a customized shopping experience for you, such as recommending products related to your purchases.
Marketing and Direct Marketing. We may use your personal data for marketing, advertising and promotional purposes, such as sending marketing communications by email, SMS, postal mail or other channels, and showing you online advertisements for products or services on the Services or other websites. Where required by applicable law, we will only use your personal data for direct marketing after informing you of the intended use and obtaining your consent or indication of no objection. You may opt out of direct marketing communications at any time.
Security and Fraud Prevention. We use your personal data to authenticate your account, provide a secure payment and shopping experience, detect, investigate or take action regarding possible fraudulent, illegal, unsafe or malicious activity, protect public safety, and secure our Services. If you choose to use the Services and register an account, you are responsible for keeping your account credentials safe. We recommend that you do not share your username, password or other access details with anyone else.
Communicating with You. We use your personal data to provide customer support, respond to your inquiries, provide effective services to you and maintain our business relationship with you.
Legal and Compliance Reasons. We use your personal data to comply with applicable laws and regulations, respond to valid legal process, including requests from law enforcement or government authorities, investigate or participate in civil discovery, potential or actual litigation, or other legal proceedings, and enforce or investigate potential violations of our terms or policies.

How We Disclose Personal Data

We may disclose your personal data to third parties for purposes directly related to the purposes described in this Privacy Policy, including:

With Shopify, vendors and other third parties who perform services on our behalf, such as IT management, payment processing, data analytics, customer support, cloud storage, fulfillment and shipping.
With payment providers, banks and fraud prevention providers in order to process payments and protect against fraudulent transactions.
With shipping, logistics and fulfillment partners in order to deliver your order.
With business and marketing partners to provide marketing services, measure advertising performance and advertise to you, where permitted by applicable law.
When you direct, request or consent to our disclosure of certain information to third parties, such as to ship products to you or through your use of social media widgets or login integrations.
With our affiliates or otherwise within our corporate group.
With professional advisers, including lawyers, auditors, accountants and insurers, where necessary for business, legal or compliance purposes.
In connection with a business transaction such as a merger, acquisition, restructuring, sale of assets, financing, insolvency or similar transaction.
Where required or permitted by law, including to comply with legal obligations, respond to subpoenas, search warrants, court orders, regulatory requests or similar requests, enforce applicable terms of service or policies, and protect or defend the Services, our rights, and the rights of our users or others.

We do not sell your personal data. We will only transfer or disclose your personal data for purposes that are directly related to the purposes for which the data was collected, unless we have obtained your consent or are otherwise permitted or required by law.

Direct Marketing

We may use your name, email address, phone number, order history, product interests, website activity and similar information to send you direct marketing communications about our products, services, offers, promotions, discounts and related products or services.

We will not use your personal data for direct marketing unless we have informed you of the intended use and obtained your consent or indication of no objection, where required under applicable law.

You may opt out of direct marketing communications at any time by using the unsubscribe link in our emails, following the opt-out instructions in our messages, or contacting us using the contact details below. If you opt out, we may still send you non-marketing communications, such as order confirmations, shipping updates, account notices and customer service messages.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal data about your access to and use of the Services in order to provide and improve the Services for you. Information you submit to the Services will be transmitted to and shared with Shopify as well as third parties that may be located in countries or regions outside Hong Kong, in order to provide and improve the Services for you.

In addition, to help protect, grow and improve our business, we use certain Shopify enhanced features that incorporate data and information obtained from your interactions with our store, along with other merchants and with Shopify. To provide these enhanced features, Shopify may make use of personal data collected about your interactions with our store, along with other merchants and with Shopify.

In these circumstances, Shopify may be responsible for the processing of your personal data, including for responding to your requests to exercise your rights over the use of your personal data for these purposes. To learn more about how Shopify uses your personal data and any rights you may have, you can visit the Shopify Consumer Privacy Policy. Depending on where you live, you may exercise certain rights with respect to your personal data through the Shopify Privacy Portal.

Cookies and Similar Technologies

We and our service providers may use cookies, pixels, tags, analytics tools and similar technologies to operate the Services, remember your preferences, understand how visitors use our website, improve performance, measure marketing effectiveness and show relevant advertising.

You may be able to control cookies through your browser settings. If you disable cookies, some parts of the Services may not function properly.

Third Party Websites and Links

The Services may provide links to websites or other online platforms operated by third parties. If you follow links to websites not affiliated with or controlled by us, you should review their privacy policies, security policies and terms and conditions. We are not responsible for the privacy, security, accuracy, completeness or reliability of third-party websites or platforms.

Information you provide on public or semi-public venues, including information you share on third-party social networking platforms, may also be viewable by other users of the Services and/or users of those third-party platforms without limitation as to its use by us or by a third party. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators, except as disclosed on the Services.

Children's Data

The Services are not intended to be used by children, and we do not knowingly collect personal data from children under the age of majority in their jurisdiction. If you are the parent or guardian of a child who has provided us with their personal data, you may contact us using the contact details set out below to request that it be deleted.

Accuracy and Retention of Personal Data

We take reasonably practicable steps to ensure that personal data we hold is accurate, complete and up to date, taking into account the purposes for which the data is used.

We retain personal data only for as long as is necessary to fulfill the purposes for which it was collected, including to provide the Services, maintain business records, comply with legal obligations, resolve disputes, prevent fraud, enforce our agreements and protect our rights. When personal data is no longer required, we will take reasonably practicable steps to securely delete, anonymize or otherwise dispose of it.

Security of Personal Data

We take reasonably practicable steps to protect personal data against unauthorized or accidental access, processing, erasure, loss or use. These measures may include technical, administrative and physical safeguards.

Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee perfect security. In addition, any information you send to us may not be secure while in transit. We recommend that you do not use unsecured channels to communicate sensitive or confidential information to us.

If you choose to use the Services and register an account, you are responsible for keeping your account credentials confidential and should not share your password or other access details with anyone else.

International Transfers

We may transfer, store and process your personal data outside Hong Kong, including in jurisdictions where our service providers, Shopify, payment providers, shipping providers, cloud providers, analytics providers, marketing providers or other business partners are located.

Where we transfer personal data outside Hong Kong, we will take reasonably practicable steps to ensure that the personal data is protected in a manner consistent with this Privacy Policy and applicable data protection requirements.

Your Rights and Choices

Subject to the Personal Data (Privacy) Ordinance and other applicable laws, you may have certain rights in relation to your personal data, including:

Right to Access. You may request access to personal data that we hold about you.
Right to Correction. You may request correction of personal data that is inaccurate.
Right to Opt Out of Direct Marketing. You may opt out of direct marketing communications at any time.
Managing Communication Preferences. You may manage communication preferences by using unsubscribe links in our emails or by contacting us.

To exercise your rights, you may contact us using the contact details below. We may need to verify your identity before processing your request. We will handle your request within the time required by applicable law. Where permitted by law, we may charge a reasonable fee for processing a data access request.

We will not discriminate against you for exercising any rights available to you under applicable law.

Complaints

If you have complaints about how we collect, use, hold, process, transfer or disclose your personal data, please contact us using the contact details provided below.

If you are located in Hong Kong and are not satisfied with how we handle your complaint, you may have the right to contact the Office of the Privacy Commissioner for Personal Data, Hong Kong.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal or regulatory reasons. We will post the revised Privacy Policy on this website, update the "Last updated" date and provide notice where required by applicable law.

Contact

Should you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, please email us at support@oryzom-shop.com.