Privacy Policy

01 Personal Information We Collect

When we use the term "personal information", we mean information that identifies you or can reasonably be associated with you.

Depending on how you interact with our website and services, we may collect the following categories of personal information.

Contact Information

This may include:

• Full name
• Billing address
• Shipping address
• Email address
• Telephone number
• Other contact details you provide to us

Payment and Transaction Information

When you place an order, payment information may be collected and processed through our payment providers.

This may include:

• Payment method
• Transaction details
• Payment confirmation
• Billing information
• Other information necessary to process your payment

We generally do not directly store your full payment card details. Payment information may be securely processed by Shopify and/or third-party payment providers.

Account Information

If you create an account with us, we may collect information such as:

• Username
• Password
• Account preferences
• Account settings
• Other information associated with your customer account

Order and Shopping Information

We may collect information relating to your interactions with our store, including:

• Products you view
• Products added to your shopping cart
• Products purchased
• Returns, refunds, exchanges, or cancellations
• Previous orders and transactions
• Product preferences and shopping activity

Communications

When you contact us, we may collect the information you provide, including the contents of emails, customer support enquiries, or other communications.

Device and Technical Information

When you visit our website, certain information may be collected automatically, including:

• IP address
• Browser type
• Device type
• Operating system
• Network information
• General location information
• Unique device or browser identifiers

Usage Information

We may collect information about how you interact with our website, including pages viewed, links clicked, products viewed, and other browsing activity.

02 How We Collect Personal Information

We may collect personal information from the following sources.

Directly From You

We collect information when you:

• Create an account
• Place an order
• Complete checkout
• Subscribe to marketing communications
• Contact us
• Submit a form
• Request customer support
• Otherwise provide information to us

Automatically

Some information may be collected automatically when you use our website through cookies, pixels, web beacons, log files, and similar technologies.

These technologies help us operate, secure, analyse, and improve our website and services.

From Service Providers

We may receive personal information from companies that provide services on our behalf, such as Shopify, payment processors, delivery providers, analytics providers, hosting providers, and customer support services.

From Other Third Parties

We may also receive information from business partners, advertising providers, social media platforms, or other third parties where permitted by applicable law.

03 How We Use Your Personal Information

Depending on how you interact with Alishan, we may use your personal information for the following purposes.

Providing and Managing Our Services

We use personal information to:

• Process and fulfil orders
• Process payments
• Arrange delivery
• Manage returns, refunds, and exchanges
• Provide customer support
• Maintain customer accounts
• Remember your preferences
• Improve our website and services
• Provide product recommendations and a personalised shopping experience

Marketing and Advertising

Where permitted by law and where appropriate, we may use your information to:

• Send promotional emails
• Send information about products, offers, and promotions
• Provide personalised marketing
• Display advertisements that may be relevant to your interests

You can unsubscribe from promotional emails at any time by using the unsubscribe link included in our marketing communications.

Security and Fraud Prevention

We may use personal information to:

• Protect our website and customers
• Detect and prevent fraud
• Investigate suspicious or unlawful activity
• Protect against security threats
• Maintain the security and integrity of our services

If you create an account, you are responsible for keeping your account credentials confidential.

Communicating With You

We may use your personal information to:

• Respond to enquiries
• Provide customer support
• Send order confirmations
• Send shipping and delivery updates
• Communicate regarding returns or refunds
• Provide other service-related communications

Legal and Regulatory Purposes

We may process personal information where necessary to:

• Comply with applicable laws and regulations
• Respond to lawful requests from authorities
• Establish, exercise, or defend legal claims
• Enforce our terms, policies, and agreements
• Protect our rights, property, customers, or other individuals

04 How We Share Personal Information

We may share personal information with trusted third parties where necessary to operate our business and provide our services.

Shopify

Our online store is powered by Shopify. Shopify may process personal information on our behalf and provide services including website hosting, checkout, order management, analytics, security, and other ecommerce functionality.

Payment Providers

Payment information may be processed by Shopify or third-party payment providers to securely process transactions.

Delivery and Fulfilment Providers

We may share relevant information, such as your name, address, email address, and order details, with delivery or fulfilment providers so that your order can be delivered.

Service Providers

We may share information with companies that provide services such as:

• Website hosting
• IT services
• Analytics
• Customer support
• Cloud storage
• Fraud prevention
• Marketing and advertising
• Business administration

These providers are expected to process information only as necessary to provide their services and in accordance with applicable legal requirements.

Legal Requirements

We may disclose personal information where required or permitted by law, including in response to lawful requests from courts, regulators, law enforcement agencies, or other governmental authorities.

Business Transactions

If Alishan is involved in a merger, acquisition, restructuring, sale of assets, insolvency, or similar business transaction, personal information may be transferred as part of that transaction, subject to applicable law.

05 Shopify and Our Online Store

Our website is hosted and powered by Shopify.

Shopify processes personal information in connection with providing and improving its ecommerce platform and related services.

Information submitted through our website may therefore be processed by Shopify and its service providers.

For more information about how Shopify handles personal information, please review Shopify's Privacy Policy.

Depending on your location, Shopify may also provide tools that allow you to exercise certain privacy rights in relation to information processed by Shopify.

06 Cookies and Similar Technologies

We use cookies and similar technologies to help operate our website and improve your shopping experience.

Cookies may be used to:

• Keep your shopping cart functioning
• Remember your preferences
• Understand how visitors use our website
• Improve website performance
• Provide security
• Analyse website traffic
• Support marketing and advertising activities where permitted

You can control or disable certain cookies through your browser settings and, where applicable, our cookie consent tools.

Please note that disabling certain cookies may affect the functionality of our website.

07 Third-Party Websites and Links

Our website may contain links to third-party websites, services, or platforms.

If you follow a link to a website that we do not operate or control, we recommend reviewing that website's privacy policy and terms.

We are not responsible for the privacy, security, content, or practices of third-party websites.

The inclusion of a third-party link does not necessarily mean that we endorse or are affiliated with that third party.

08 Children's Privacy

Our website and services are intended for adults and are not directed towards children.

We do not knowingly collect personal information from children where such collection is prohibited by applicable law.

If you believe that a child has provided us with personal information, please contact us using the details provided below. We will take appropriate steps to review and, where required by law, delete the information.

09 Security of Your Information

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration, or disclosure.

However, no method of transmission over the internet or electronic storage system is completely secure.

Therefore, while we take reasonable steps to protect your information, we cannot guarantee absolute security.

Please avoid sending sensitive or confidential information through unsecured communication channels.

10 Retention of Personal Information

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

The length of time we retain information may depend on factors including:

• Whether we need the information to provide our services
• Whether you maintain an account with us
• Whether we need the information to complete a transaction
• Legal and regulatory requirements
• Accounting and tax obligations
• Dispute resolution
• Fraud prevention
• Enforcement of agreements and policies

When personal information is no longer required, we will take reasonable steps to securely delete or anonymise it, subject to applicable legal requirements.

11 Your Privacy Rights

Depending on your location and applicable law, you may have certain rights regarding your personal information.

Right to Access

You may have the right to request access to the personal information we hold about you.

Right to Correction

You may have the right to request correction of inaccurate or incomplete personal information.

Right to Deletion

In certain circumstances, you may have the right to request deletion of your personal information.

Right to Restrict Processing

In certain circumstances, you may have the right to request that we restrict the processing of your personal information.

Right to Object

You may have the right to object to certain types of processing, including certain direct marketing activities.

Right to Data Portability

In certain circumstances, you may have the right to receive your personal information in a structured, commonly used, and machine-readable format.

Right to Withdraw Consent

Where we rely on your consent to process personal information, you may withdraw your consent at any time.

Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.

Marketing Preferences

You can opt out of promotional emails by clicking the unsubscribe link included in our marketing emails.

Even if you opt out of marketing communications, we may still send necessary non-promotional communications, such as order confirmations, shipping updates, or information relating to your account or transactions.

12 UK and EEA Privacy Rights

If you are located in the United Kingdom or European Economic Area (EEA), you may have additional rights under applicable data protection laws, including the UK GDPR or EU GDPR, as applicable.

These rights may include the right to:

• Access your personal information
• Correct inaccurate information
• Request deletion of your information
• Restrict processing
• Object to certain processing
• Request data portability
• Withdraw consent where processing is based on consent

These rights are subject to certain exceptions and limitations under applicable law.

We may need to verify your identity before responding to a privacy request.

You may exercise your rights by contacting us using the contact details provided in this Privacy Policy.

13 International Data Transfers

Because we use service providers such as Shopify and other technology providers, your personal information may be processed or stored outside the United Kingdom or the country in which you live.

Where personal information is transferred internationally, we will take appropriate steps to ensure that the transfer is carried out in accordance with applicable data protection laws.

Where required, we may rely on recognised safeguards such as adequacy regulations, Standard Contractual Clauses, the UK International Data Transfer Agreement, or other legally recognised transfer mechanisms.

14 Complaints

If you have concerns about how we collect, use, or process your personal information, please contact us first so that we can investigate and attempt to resolve your concern.

If you are located in the UK and remain dissatisfied with how your personal information has been handled, you may have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection supervisory authority.

If you are located in the EEA, you may also have the right to contact your local data protection supervisory authority.

15 Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business practices, services, technology, or applicable legal and regulatory requirements.

When we make changes, we will update the "Last Updated" date at the top of this page.

Where required by applicable law, we will provide additional notice of material changes.

We encourage you to review this Privacy Policy periodically to remain informed about how we protect your personal information.

16 Contact Us

If you have any questions about this Privacy Policy, our privacy practices, or would like to exercise any applicable privacy rights, please contact us.