Privacy Policy

Last Updated: July 16, 2026

Introduction

Ironwoodora operates an online store offering products, shopping tools, website features, and related services. The store uses Shopify to support its ecommerce operations.

This Privacy Policy explains how customer information is collected, processed, used, stored, and shared when customers browse the website, make purchases, create accounts, or contact the business.

Where the Privacy Policy and Terms of Service differ regarding personal information, the Privacy Policy governs those matters.

1. Personal Information We Collect or Process

Depending on customers' activities and applicable laws, the store may collect the following information:

• Contact Information: Names, email addresses, telephone numbers, billing addresses, and shipping addresses.

• Payment Information: Payment methods, transaction records, payment confirmations, and relevant financial details.

• Account Information: Account usernames, passwords, security information, preferences, and settings.

• Shopping Information: Products viewed, cart contents, wishlists, purchases, returns, exchanges, cancellations, and transaction history.

• Customer Communications: Messages, customer service requests, and other information customers provide.

• Device Information: IP addresses, browser information, devices, network connections, and identifiers.

• Website Usage Information: Browsing behavior, interactions with website features, and usage patterns.

Information may also include relevant inferences developed from customer activity.

2. Personal Information Sources

Personal information may be collected through:

• Information customers submit directly when purchasing, registering, or contacting support.

• Automatic collection through website technology, cookies, and similar tracking tools.

• Third-party service providers supporting store operations.

• Business partners and other third parties where permitted by law.

3. How We Use Personal Information

Providing and Improving Services

Customer information is used to process transactions, fulfill orders, arrange delivery, handle returns and exchanges, maintain accounts, provide customer service, remember preferences, and improve shopping experiences.

Marketing and Advertising

Information may be used to deliver promotional emails, text messages, postal communications, and relevant online advertisements. Advertising may be personalized based on browsing or shopping activity.

Security and Fraud Prevention

Customer data may be processed to protect accounts, verify transactions, investigate suspicious activities, prevent fraud, and maintain a secure shopping environment.

Customers are responsible for keeping their account login information confidential.

Customer Communications

Information is used to answer inquiries, provide order assistance, resolve problems, and maintain customer relationships.

Legal Compliance

Information may be processed to satisfy legal obligations, respond to government requests, participate in legal proceedings, and enforce store policies.

4. How We Disclose Personal Information

Personal information may be shared with:

• Shopify and service providers responsible for hosting, payments, analytics, customer support, fulfillment, and shipping.

• Advertising and marketing partners supporting promotional campaigns.

• Third parties when customers provide consent or request particular services.

• Related companies and corporate affiliates.

• Relevant parties during mergers, restructurings, bankruptcy proceedings, or other business transactions.

• Government authorities or legal parties when required by applicable laws.

Customers in certain jurisdictions may be entitled to opt out of information sharing for targeted advertising.

5. Relationship with Shopify

The website operates using Shopify's ecommerce services.

Shopify may collect and process customer information to provide platform functionality, support transactions, enhance services, and improve shopping experiences.

Information may be processed or transferred to service providers in other countries.

Certain Shopify features may use information associated with customer interactions across participating stores and Shopify services.

For processing activities managed by Shopify, Shopify may handle applicable privacy rights requests directly.

Additional information is available through Shopify's consumer privacy resources.

6. Third-Party Websites and Links

The website may contain links to external websites and online platforms.

Third-party services operate under their own privacy policies and terms.

Customers should review these policies before sharing personal information.

The store does not guarantee the privacy, security, accuracy, or reliability of external websites.

Information posted in public or semi-public online spaces may also be accessible to others.

7. Children's Data

The store's services are not intended for children.

The business does not knowingly collect information from individuals who are under the applicable age of majority.

Parents or legal guardians may contact the store to request deletion of information submitted by a child.

The policy also states that the business has no actual knowledge of selling or sharing personal information belonging to individuals under 16.

8. Security and Retention of Information

The store uses measures intended to protect personal information, but no security system can guarantee complete protection.

Customers should avoid sending sensitive information through insecure communication channels.

Personal information may be retained for periods necessary to:

• Maintain customer accounts.

• Provide products and services.

• Meet legal and regulatory obligations.

• Resolve disputes.

• Enforce contracts and business policies.

Retention periods depend on the type of information and applicable requirements.

9. Your Rights and Choices

Depending on the laws where a customer lives, available privacy rights may include:

Right to Access

Request information about the personal data the business holds.

Right to Delete

Request deletion of eligible personal information.

Right to Correct

Request corrections to inaccurate personal data.

Right to Data Portability

Request a copy of personal information or, where applicable, its transfer to another party.

Right to Opt Out

Request that personal information not be sold or shared for certain targeted advertising purposes.

Global Privacy Control

Where applicable, the store may recognize Global Privacy Control signals as requests to opt out of eligible information sharing.

Other browser-based Do Not Track signals are not necessarily recognized.

Marketing Preferences

Customers may unsubscribe from promotional emails using the unsubscribe option provided in those messages. Transactional and account-related emails may still be sent.

Additional UK and European Economic Area Rights

Eligible customers may have rights to object to processing, request restrictions on processing, or withdraw consent.

Withdrawal does not invalidate processing that lawfully occurred before consent was withdrawn.

The store may verify a customer's identity before fulfilling a privacy request and may accept properly authorized representatives.

Privacy rights are subject to applicable legal requirements and exceptions. Exercising these rights must not result in unlawful discrimination.

10. Complaints

Customers who have concerns about the processing of their personal information may contact the business.

Depending on their location, customers may have the right to appeal a privacy-related decision or submit a complaint to a relevant data protection authority.

Customers in the European Economic Area may contact their appropriate supervisory authority.

11. International Transfers

Personal information may be transferred, stored, or processed outside the customer's country of residence.

For certain transfers originating in the European Economic Area or the United Kingdom, appropriate legal safeguards may be used.

These may include approved contractual protections or transfers to countries recognized as providing adequate data protection.

12. Changes to This Privacy Policy

The business may revise its Privacy Policy to reflect operational changes, updated data practices, legal requirements, or regulatory developments.

When changes are made, the updated policy will be published on the website with a revised date.

Additional notifications may be provided where required by law.

13. Contact

For questions, privacy concerns, or requests involving personal information, customers may contact:

Company: Ironwoodora

Email: help@virtueia.com

Mailing Address: 57 Tong Shui Road, North Point, Hong Kong Island, Hong Kong SAR

The business identifies itself as the controller of personal information for applicable data protection purposes.