1. Data Controller

The data controller responsible for your personal data is:

2. What Data We Collect

We collect only the data necessary to process your orders, provide our services, and improve your experience. This may include:

• Identity data: First name, last name
• Contact data: Email address, phone number, shipping and billing address
• Transaction data: Order history, payment method (we do not store full card numbers), purchase amounts
• Communication data: Messages you send us via contact forms, email, or social media
• Technical data: IP address, browser type, device information, pages visited, referring URL
• Preference data: Language preference, currency, marketing opt-in status

3. How We Use Your Data

We use your personal data for the following purposes:

• Order fulfillment: Processing and shipping your purchases, sending order confirmations and tracking information
• Customer service: Responding to your inquiries, handling returns and warranty claims
• Legal obligations: Tax compliance, fraud prevention, and legal record-keeping
• Marketing: Sending newsletters and promotional offers (only with your explicit consent, and you can unsubscribe at any time)
• Website improvement: Analyzing usage patterns to improve our website, products, and services

4. Legal Basis for Processing (GDPR)

Under the EU General Data Protection Regulation, we process your personal data on the following legal grounds:

• Contract performance (Art. 6(1)(b)): Processing necessary to fulfill your order and deliver your purchases
• Legitimate interest (Art. 6(1)(f)): Improving our website, preventing fraud, and ensuring security
• Consent (Art. 6(1)(a)): Marketing communications and non-essential cookies (you may withdraw consent at any time)
• Legal obligation (Art. 6(1)(c)): Tax and accounting requirements, regulatory compliance

5. Cookies

Our website uses cookies to ensure basic functionality and to improve your browsing experience.

• Essential cookies: Required for the website to function (shopping cart, session management, language preference). These cannot be disabled.
• Analytics cookies: Help us understand how visitors interact with our website (e.g., Google Analytics). These are only set with your consent.
• Marketing cookies: Used to deliver relevant advertisements. These are only set with your explicit consent.

You can manage your cookie preferences through your browser settings or our cookie consent banner. Disabling non-essential cookies will not affect the core functionality of our website.

6. Third-Party Services

We share your data with trusted third parties only as necessary to provide our services:

• Shopify: Our e-commerce platform, which processes and stores order data
• Payment processors: Shopify Payments, PayPal, and Stripe for secure transaction processing
• Shipping carriers: DHL, FedEx, UPS, and Cambodia Post for order delivery (name and address shared for shipping purposes)
• Google Analytics: Website traffic analysis (anonymized data, with your consent)
• Email service: For order confirmations and marketing communications (with consent)

We do not sell, rent, or trade your personal data to any third party for their own marketing purposes.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy:

• Order data: Retained for 7 years after the transaction for tax and legal compliance
• Customer account data: Retained for the duration of your account, plus 3 years after the last activity
• Marketing data: Retained until you withdraw consent or unsubscribe
• Website analytics: Anonymized data retained for up to 26 months

8. Your Rights (GDPR Articles 15–22)

Under the GDPR, you have the following rights regarding your personal data:

• Right of access (Art. 15): Request a copy of the personal data we hold about you
• Right to rectification (Art. 16): Request correction of any inaccurate or incomplete data
• Right to erasure (Art. 17): Request deletion of your personal data (“right to be forgotten”), subject to legal retention requirements
• Right to restriction (Art. 18): Request that we restrict the processing of your data in certain circumstances
• Right to data portability (Art. 20): Receive your data in a structured, commonly used, machine-readable format
• Right to object (Art. 21): Object to processing based on legitimate interest or for direct marketing purposes
• Right to withdraw consent (Art. 7): Withdraw your consent at any time, without affecting the lawfulness of processing based on consent before withdrawal

9. International Data Transfers

As we operate from Cambodia, your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data outside the EEA, we ensure adequate protection through:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Working with service providers who are certified under recognized data protection frameworks
• Implementing appropriate technical and organizational security measures

10. Children’s Privacy

Our website and services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child under 16, we will take steps to delete that information promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. Any significant changes will be communicated via our website or by email. We encourage you to review this page periodically. The date of the last update is indicated at the bottom of this page.

12. Contact Us

For any questions about this Privacy Policy or to exercise your data protection rights, please contact us: