Privacy policy

Effective date: 07/10/2026

1. Introduction
   SHAMSEILI (“we”, “us”, “our”) respects your privacy. This Privacy Policy explains what personal data we collect, how we use it, who we share it with, your rights, and how to contact us.
   
   
2. Scope
   This policy applies to personal data collected when you visit shamseili.com or purchase, repair or request services from SHAMSEILI, sign up for marketing, contact customer care, or otherwise interact with us.
   
   
3. Data We Collect
   1. Identity: name, date of birth (when required).
   2. Contact: email, shipping and billing addresses, phone number.
   3. Payment: billing information and payment details (processed by third-party payment processors); we do not store your credit card details. Payment information is securely transmitted to our authorized payment processors (such as PayPal or Stripe) and is not retained by us.
   4. Order and transaction: order history, returns, refunds, repairs, personalization text.
   5. Technical: IP address, device and browser data, cookies and usage metrics.
   6. Communications: customer service correspondence, emails, chat logs.
   7. Marketing preferences.
      
      
4. Purposes of Processing
   We process personal data to:
   1. Fulfil and manage orders, shipping, returns, repairs and warranties;
      
   2. Process payments, verify identity and prevent fraud;
      
   3. Provide customer service and respond to enquiries within stated service times;
      
   4. Send transactional and (where consented) marketing communications;
      
   5. Personalise your experience and improve our services;
      
   6. Comply with legal obligations and protect our rights.
      
      
5. Legal Bases
   Where applicable, processing is based on: performance of a contract (order fulfilment), legitimate interests (fraud prevention, service improvement), and consent (marketing and non-essential cookies).
   
   
6. Disclosure and Recipients
   We share data with:
   1. Service providers required to fulfil orders (carriers, logistics, payment processors, repair partners, IT/hosting providers);
   2. Professional advisors (legal, audit) as necessary;
   3. Law enforcement or regulators where required by law.
      We require third parties to apply appropriate confidentiality and security measures.
      
      
7. International Transfers
   Personal data may be transferred to and processed in jurisdictions outside your country (including Hong Kong SAR). We adopt safeguards (e.g., contractual clauses) to protect data when transferred.
   
   
8. Cookies & Tracking
   We use cookies and similar technologies for site functionality, analytics and marketing. You may manage cookie preferences via our cookie banner or browser settings. Essential cookies are required for site operation.
   
   
9. Data Security & Retention
   We implement reasonable technical and organisational measures to protect data. We retain personal data only as long as necessary to fulfil processing purposes and legal obligations. Retention periods vary by data type.
   
   
10. Your Rights
    Subject to local law, you may: access, correct, delete, request restriction of processing, object to processing (including profiling), request portability, and withdraw consent. To exercise rights contact concierge@shamseili.com. We may require identity verification.
    
    
11. Children
    We do not knowingly collect data from persons under the legal majority required to contract. If you believe we have data for a minor, contact us to request removal.
    
    
12. Changes
    We may update this policy from time to time without prior notice. The effective date at the top will indicate revisions. Significant changes will be communicated as required.
    
    
13. Contact
    Privacy inquiries and requests: concierge@shamseili.com