1.0Who is responsible

FRELY TECHNOLOGY CO., LIMITED is the controller of the personal information collected through this store. You can reach us about privacy at info@chervilrow.com.

2.0What we collect

Information you give us

• Name, shipping and billing address, email and (if you enter one) a phone number for the carrier
• Order details: the designs you buy, amounts and delivery preferences
• Messages you send to customer service, and your email if you join our newsletter

Information collected automatically

• Device and browser type, IP address, approximate location and language
• Pages viewed, items added to your bag and how you arrived at the site
• Cookies and similar technologies, described below

We never see or store your full card number; that goes straight to the payment processor.

3.0How we use it

• To take payment, pack and ship orders and send order and tracking emails
• To handle returns, refunds and questions
• To prevent fraud and keep the store secure
• To understand which pages and designs people like, so we can improve the site
• To send marketing emails, only if you have signed up, and to show you relevant ads (see Meta below)
• To meet our legal, tax and accounting obligations

Depending on where you live, the legal bases for this are carrying out our contract with you, our legitimate interest in running and improving the store, your consent (for marketing and some cookies) and legal obligations.

4.0Who we share it with

We share only what each service needs to do its job:

• Shopify, which hosts our store, checkout and order records
• Payment processors, including Shopify Payments and PayPal, which handle card and wallet payments and fraud checks
• Shipping carriers, who receive your name, address and contact details to deliver your parcel
• Meta Platforms (Facebook and Instagram), through the Meta pixel, for advertising and measurement
• Email and analytics tools that send our newsletter and count site visits
• Professional advisers and authorities, where the law requires it

We do not sell your name or email address to data brokers.

5.0The Meta pixel and cookies

Our site uses cookies: small files that remember your bag, keep checkout working and measure traffic. We also use the Meta pixel, a piece of code from Meta that records actions such as viewing a board or completing a purchase. Meta uses this to show our ads to people likely to be interested and to tell us how well those ads work. Under some US state laws this may count as "sharing" personal information for targeted advertising.

You can opt out on our Your Privacy Choices page, through your browser's cookie settings, or in your Facebook and Instagram ad settings.

6.0How long we keep it

Order records are kept for as long as tax and accounting laws require, usually up to seven years. Customer service emails are kept for about two years after your last message. Newsletter details are kept until you unsubscribe. Analytics data is kept in aggregated or shortened form.

7.0Your rights

Depending on where you live, including California and other US states, the UK and the EU, you may have the right to know what we hold about you, get a copy, correct it, delete it, object to or restrict certain uses, withdraw consent, and opt out of targeted advertising or the "sale" or "sharing" of your information. To make a request, email info@chervilrow.com. We will verify your request using your order details and reply within the time the law allows. We will not treat you differently for using these rights, and you may use an authorised agent.

8.0Security

Checkout runs on Shopify's encrypted, PCI-compliant platform, and access to order information is limited to people who need it. No system is perfectly secure, but we take reasonable steps to protect your information and will notify you if a breach affects you where the law requires.

9.0International transfers

We are based in Hong Kong and our service providers operate in several countries, including the United States. When your information moves across borders, we rely on the safeguards those providers offer, such as standard contractual clauses.

10.0Children

This store is intended for adults. We do not knowingly collect information from children under 16; if you believe a child has given us information, email us and we will delete it.

11.0Changes

We will update this policy when our practices change and revise the date at the top. Significant changes will be highlighted on the site.