Privacy policy

IRONWOODORA — PRIVACY POLICY (PARAPHRASED REFERENCE)
Original policy update date: July 16, 2026
Source: https://ironwoodora.com/policies/privacy-policy

NOTICE: This document is an independently worded summary of the published policy, not a verbatim copy, not an official replacement, and not legal advice. Refer to the source for the legally operative wording.

OVERVIEW
Ironwoodora runs an online storefront and related customer services using Shopify. Its policy explains what identifiable information may be obtained when visitors browse, order products, use the storefront, or contact the business. The policy addresses the handling and sharing of this information and takes precedence over conflicting Terms of Service provisions regarding personal-information processing.

1. PERSONAL INFORMATION COLLECTED OR PROCESSED
The categories of information may vary with a person's activities, location, and relevant legal requirements. They include contact and delivery details; payment and other financial transaction information; account credentials and settings; product browsing, carts, wish lists, purchases, cancellations, returns and exchanges; messages sent to customer support; details associated with devices, network connections and IP addresses; and records of how visitors interact with the website. The business may also develop inferences based on such data. Information that is anonymized so it cannot reasonably identify anyone is excluded from its definition of personal information.

2. WHERE INFORMATION COMES FROM
Information may be supplied by customers directly, gathered automatically through website technologies such as cookies, received from vendors providing services on Ironwoodora's behalf, or obtained from business partners and other third parties.

3. PURPOSES FOR USING INFORMATION
Customer information supports checkout, payments, shipping, account management, returns, exchanges, review functions, personalized shopping and improved services. It may also be used for promotional email, text, postal communications and advertising based on shopping behavior, subject to applicable choices. Additional uses include detecting fraud, protecting accounts and transactions, providing customer support, communicating about orders, meeting legal duties, responding to formal requests and enforcing the store's rules. Customers should protect their account passwords and access credentials.

4. DISCLOSURE TO OTHERS
Information can be provided to Shopify and operational providers handling payment, technology, analytics, support, storage, shipping and order fulfillment. Advertising and marketing partners may receive data for marketing-related services; their own privacy notices may govern their handling of it. Sharing may also occur when requested or authorized by a customer, among associated companies, as part of corporate transactions, or when necessary for legal compliance and protection of rights. Certain users may have legal rights to object to sharing or processing for targeted advertising.

5. SHOPIFY'S ROLE
The store uses Shopify infrastructure. Shopify processes information necessary to deliver and improve shopping services and may use interactions from this and other Shopify stores for certain enhanced features. Cross-border handling can occur. Shopify may be independently responsible for particular processing operations and related consumer requests. Further information is available at https://www.shopify.com/legal/privacy/consumers and https://privacy.shopify.com/en.

6. EXTERNAL WEBSITES
Links to independent sites and social services can lead to platforms with their own practices. Customers should check those platforms' policies. Information publicly posted through social platforms or similar venues may be seen by others, and a link from the store does not automatically mean the business endorses the destination.

7. INFORMATION ABOUT CHILDREN
The services are not meant for minors. Ironwoodora states it does not intentionally gather personal data from children below the applicable age of majority. A parent or guardian may seek deletion of data a child has supplied. As of the policy's effective date, the business states it is not aware of selling or sharing the personal information of anyone under 16 as defined by applicable law.

8. INFORMATION SECURITY AND RETENTION
Safeguards are used, but no system can promise absolute protection. Sensitive material should not be sent through insecure channels. Storage periods depend on business needs, customer accounts, service delivery, statutory requirements, disputes and the enforcement of agreements or policies.

9. RIGHTS AND PRIVACY CHOICES
Depending on jurisdiction, individuals may ask to see their information, correct inaccuracies, request deletion, obtain a portable copy, or object to certain sales, sharing or targeted advertising practices. Marketing emails may be unsubscribed from without stopping essential order or account messages. The policy describes recognition of Global Privacy Control opt-out preferences where applicable; it does not generally honor other browser Do Not Track signals. UK and EEA residents may also have qualifying rights to oppose or limit processing or withdraw consent. Certain requests require identity checks, and authorized representatives may need proof of their authority. Rights are subject to legal limits, and the business says it does not retaliate against customers for exercising them.

10. COMPLAINTS
Privacy concerns may be brought to Ironwoodora using the contact details below. Depending on local rules, customers may appeal a decision or complain to an appropriate privacy regulator, including data protection authorities in the European Economic Area.

11. INTERNATIONAL DATA TRANSFERS
Customer information may be held or handled in jurisdictions other than the customer's home country. Where required for transfers out of the EEA or United Kingdom, the policy identifies recognized transfer measures, including relevant standard contractual clauses, unless the receiving destination has an adequacy determination.

12. POLICY CHANGES
The business may revise the policy to reflect legal, operational or practical changes, update the revision date, publish the amended policy and provide additional notice when legally required.

13. CONTACT INFORMATION
Business: Ironwoodora
Email: help@ironwoodora.com
Postal address: 57 Tong Shui Road, North Point, Hong Kong Island, Hong Kong SAR
The policy identifies the business as the data controller for purposes of applicable data-protection laws.

SOURCE DOCUMENT
https://ironwoodora.com/policies/privacy-policy

END OF PARAPHRASED REFERENCE