We collect only what we need to run Uldira, and we never sell or rent your personal information. Here is exactly what happens to it.

The company responsible

CARFORD DEVELOPMENT LIMITED operates Uldira at uldira.com and is responsible for your personal information. Write to us at support@uldira.com, or by post to Room C, 5/F, European Asian Bank Building, 749 Nathan Road, Yau Tsim Mong District, Hong Kong.

What we collect

Card details are typed into the payment processor's secure checkout form. We do not see or store your full card number.

Why we use it

• To process payment, pack and deliver your order.
• To email you about your order and reply when you contact us.
• To arrange returns, refunds and replacements.
• To prevent fraud and keep the site secure.
• To see which pages and products people find useful and improve the shop.
• To measure how our advertising performs and show our ads to people likely to be interested.
• To send our newsletter, only if you asked for it. Every email has an unsubscribe link.

We rely on the following legal bases: performing our contract with you, our legitimate interest in running a secure and useful shop, compliance with legal obligations, and your consent where the law requires it.

Who receives it

We pass personal information only to the service providers that help us run the shop, and only what each one needs:

• Shopify hosts our store and checkout.
• Our payment processor takes your payment and screens it for fraud.
• Delivery carriers receive your name, address and, where needed, your phone number or email to deliver and track your parcel.
• Meta receives browsing and purchase events from the Meta pixel on our site, which we use to measure and target our Facebook and Instagram ads.
• Theme and app providers may process limited data to run site features such as the newsletter sign-up.

We may also disclose information if the law requires it, to protect our legal rights, or if the business is sold or merged. We never sell your personal information and we never rent it out.

Cookies and the Meta pixel

Cookies are small files your browser saves. Some are essential: without them the cart and checkout do not work. Others help us understand site traffic or measure ads, including the Meta pixel. You can delete or block cookies in your browser and limit advertising cookies as explained on Your Privacy Choices. Blocking all cookies may stop the cart from working.

How long we keep it

• Order and payment records: as long as tax and accounting law requires, usually up to seven years.
• Support emails: up to two years after our last exchange.
• Newsletter: until you unsubscribe. We then keep your address on a suppression list only so we do not email you again.
• Analytics and advertising data: for the periods set by each provider.

Your rights

Depending on where you live, you may ask us to:

• tell you what personal information we hold and give you a copy;
• correct anything that is inaccurate;
• delete it, unless we are legally required to keep it;
• restrict or stop certain uses of it;
• stop using it for targeted advertising, or any "sale" or "sharing" as US state laws define those terms;
• withdraw consent you have given.

Email support@uldira.com to make a request. We may need to verify your identity first. We will not treat you differently for using your rights. You may also complain to the data protection authority where you live.

Global Privacy Control

We treat a Global Privacy Control (GPC) signal from your browser as a request to opt out of advertising "sharing" for that browser. See Your Privacy Choices.

Children

Uldira is intended for adults. We do not knowingly collect personal information from children under 13, or under 16 where local law sets that age. If you believe a child has shared their details with us, email us and we will delete them.

Transfers abroad

We are based in Hong Kong and our providers operate in several countries, including the United States. Your information may be processed outside your own country. Where the law requires it, we use appropriate safeguards such as standard contractual clauses.

Security

The whole site runs over an encrypted connection, payments go through a processor that meets card-industry security standards, and access to customer details is limited to the people who need it to help you. No system is completely secure, but we treat your information with care.

Updates

When we change this policy we update the date at the top of the page. If a change is significant, we will also tell newsletter subscribers.

Contact

For any privacy question, email support@uldira.com. Our customer service email is available 24/7.