Privacy Policy

This Privacy Policy describes how Byronbaywear (the 'Site', 'we', 'us' or 'our') collects, uses and shares your personal information when you visit, use our services or make a purchase at www.byronbaywear.com (the 'Site') or communicate with us in any other manner about the Site (collectively the 'Services'). For the purposes of this Privacy , 'you' and 'your' refer to you as a user of the Services, whether you are a customer, a visitor to the Site, or another person from whom we have collected information in accordance with this Policy.

Please read this Privacy Policy carefully.

Changes to this Privacy Policy
We may update this Privacy Policy from time to time, including to reflect changes in our practices or for other operational, legal or regulatory reasons. We will post the updated Notice on the Site, update the date under 'Last Updated' and take any other steps required by applicable law.

How we collect and use your personal data
To provide the Services, we collect personal information about you from a variety of sources, as described below. The information we collect and use depends on your interactions with us.

In addition to the specific uses noted below, we may use the information we collect about you to communicate with you, provide or improve the Services, fulfill legal obligations, enforce applicable terms of service, and protect or defend the Services, our rights, and the rights of users or others.

What personal data we collect
The types of personal data we collect depend on your interactions with our Site and use of our Services. When we use the term 'personal data,' we mean information that identifies you, relates to you, describes you, or may be linked to you. The specific categories and types personal data we collect are described below.

Information we collect directly from you
Information you provide directly through our Services may include:

• Contact information, including your name, address, phone number, and e-mail address. • Order data, including name, billing address, shipping address, payment confirmation, e-mail, and phone number.

• Account-related data, including user name, password, security questions, and other information used to protect the account.

• Customer support information, including communications you choose to send us, such as when you contact us through the Services.

For some features of the Services, we may require you to provide us with certain personal information directly. You can choose not to provide such information, but this may prevent you from using certain features or accessing the Services.

Information we collect about your use of the Service
We may automatically collect certain information about your interactions with the Services ('Usage Data'). To do this, we may use cookies, pixels and similar technologies ('Cookies'). Usage Data may include information about how you access and use our Site and your account, including information about your device, browser, network connection, IP address, and other information about your interactions with the Services.

Information we receive from third parties
Finally, we may collect information about you from third parties, including vendors and service providers who collect information on our behalf, such as:

• Companies that support our Site and Services, such as Shopify.

• Payment processors that collect payment data (e.g., bank account details, credit or debit card, billing address) to process payments, complete orders, and provide requested products or services in order to fulfill their contract with you.

• When you our Site, open or click on our emails, or interact with the Services or our advertisements, we or third parties we partner with may automatically collect certain information through online tracking technologies, such as pixels, web beacons, software development kits, third-party libraries, and cookies.

Any information we collect from third parties is treated in accordance this Privacy Policy. See also the section below 'Third Party Websites and Links'.

How we use your personal data

• Provision of Products and Services - We use your personal information to provide you with the Services in accordance with your contract with you. This includes processing your payments, fulfilling orders, sending notifications about your account, purchases, returns, exchanges or other transactions, and creating, maintaining and managing your account, managing shipmentsorganizing returns and exchanges, and other features related your account. We may also enhance your shopping experience by allowing Shopify to link your account to other Shopify services you may wish to use. In this case, Shopify will process your data as described in their Policy on the Privacy and in the Consumer Privacy Policy.

• Marketing and advertising - We may use your personal information for marketing and promotional purposessuch as sending advertising, promotional and marketing communications via e-mail, SMS or regular mail, and to show you product announcements or

services. This may involve using your personal data to personalize the Services and advertisements on our Site and other websites. If you reside in the European Economic Area (EEA), the legal basis for these processing activities is our legitimate interest in selling our products, pursuant to Art. 6 (1) (f) of the GDPR.

• Security and Fraud Prevention - We use your personal information to detect, investigate, or take action against fraudulent, illegal, or harmful activities. If you choose to use the Services and register an account, you are responsible for the security of your account credentials. We strongly advise you not to share your username, password, or other login credentials with anyone. If you believe your account has been compromised, contact us immediately. If you reside in the EEA, the legal basis for these processing activities is our legitimate interest in

Keep our site secure, in accordance Art. 6 (1) (f) of the GDPR.

Communication and Service Improvement - We use your personal information to provide you with customer support and improve our Services. This is in our best interest legitimate to communicate with you, provide you with efficient services and maintain our business relationship, according Art. 6 (1) (f) of the GDPR.

Cookie
Like many other platforms, we use cookies on our Site. You can find specific information about the cookies we use in connection with our Shopify store by visiting: https://www.shopify.com/legal/cookies.

use cookies to support and improve our Site and Services (including to remember your actions and preferences), to perform analytics, and to better understand users' interaction with the Services (in our legitimate interest to manage, improve and optimize the Services). We may also authorize third parties and service providers to Use cookies on our Site to personalize services, products, and advertising on this and other websites.

Most browsers automatically accept cookies, but you can configure your browser settings to delete or reject cookies. Keep in mind that

Deleting or blocking cookies could adversely affect your

user experience and may prevent some features and services from working properly. In addition, blocking cookies may not completely prevent the

Sharing information with third parties, such as our advertising partners.

How we disclose personal data
Under certain circumstances, we may disclose your personal information to third parties to fulfill contracts, pursue legitimate interests, and for other reasons described in this Privacy Policy. These circumstances include:

• Service providers and third parties - We may share your data with vendors or third parties who provide services on our behalf (e.g. IT management, payment processing, data analytics, customer support, cloud storage, management and shipping).

• Business and marketing partners - We may share your data with business and marketing partners to offer services and show you advertisements. Our partners will use your data in accordance with their privacy statements.

• At your request or with your consent - We may disclose data to third parties when you explicitly authorize us to do so, such as for product delivery or through use of social media widgets or login integrations.

• Within our business group - We may share your data with our affiliates or related companies as part of our legitimate interests in running a successful business.

• Business transactions and legal obligations - We may disclose your personal information in connection with business transactions, such as mergers or bankruptcies, to fulfill legal obligations (such as responding to subpoenas, search warrants or similar requests), to enforce terms of service, or to protect our rights and those of our users or others.

Categories of personal data disclosed:

We share the following categories of personal data and sensitive user data for the purposes described above in "How we collect and use your personal data" and "How we disclose personal data."

• Contact information (name, address, phone number, e-mail)

• Order data (billing address, shipping, payment confirmations)

• Account information (user name, password, security questions)

• Usage data (IP, site interactions, browsing history)

• Payment information (credit card details, bank account)

All data shared is treated with the utmost care and in accordance with this Privacy Policy and applicable regulations.

We disclose the following categories of personal data and sensitive user data for the purposes described above in "How we collect and use your personal data" and "How we disclose personal data."

Category	Categories of recipients
Identification data such as basic contact information and certain information about orders and accounts	Service providers and third parties who provide services on our behalf (such as internet service providers, payment processors, partners for order management, customer service, and data analysis)
Commercial information such as data regarding orders, purchases, and customer service evaluations	Commercial and marketing partners
Network or internet activities such as usage and browsing data	Affiliates
Geolocation data such as positions determined by IP addresses or other technical measures

How we use and protect your personal data
Use of sensitive Data:
We do not use or disclose sensitive personal data without your consent or to infer personal characteristics about you. With your consent, we may share personal data for marketing and advertising purposes.

Third-party websites and links:

Our Site may contain links to websites or online platforms operated by third parties. If you follow these links to sites that are not affiliated with or operated by us, we recommend that you carefully read their privacy, security, and terms and conditions statements.

We do not guarantee nor are we responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of the information contained therein. The information you provide in public or semi-public areas, such as third social networks, may be visible to other users without restriction from us or the third parties involved. The inclusion of links to our Site does not imply endorsement of the content or owners of the linked sites, unless otherwise indicated in the Services.

Child data:

Our Services are not intended use by minors and we do not collect knowingly personal data of children. If you are a parent or guardian of a child who has provided us with personal data, please contact us to request removal of that data. As of the effective date of this Privacy Policy, we are not at knowledge of sharing or selling personal data of individuals under the age of 16, as defined by applicable laws.

Data security and retention:

Although we take security measures to protect your personal information, no measure is perfect or impenetrable. We cannot guarantee "perfect security." In addition, data sent online may not be completely secure during transmission. We advise you not to send sensitive information through unsecured channels.

The length of time your data retained depends on various factors, such as the need to maintain your account, provide the Services, comply with legal obligations, resolve disputes, or fulfill contracts.

Your rights:

Depending on your residence, you may have some or all of the following rights in relation to your personal information. However, these rights are not absolute and apply only in certain circumstances. In some cases, we may deny your request where allowed by law.

Rights you might have:

• Right of Access - You may request access to the personal information we keep about you, including information about how we use and share it.

• Right to erasure - You may request that your personal information be erased.

• Right of rectification - You can request correction of inaccurate or incomplete personal data.

• Right to portability - Under certain circumstances, you may receive a copy your data or request that it be transferred to a third party.

• Right to opt-out of selling or sharing data - You can request not to sell or share your data for targeted advertising. If you visit our Site with the signal "Global Privacy Control" enabled, we will treat it as an opt-out request where applicable.

• Limitation of processing - You can ask to limit the use of your personal data.

• Revocation of consent - If we process your data with your consent, you have the right to revoke it at any time.

• Right of appeal - If we reject your request, you can appeal by responding directly to our decision.

• Communications Management - You can unsubscribe from our promotional emails by using the opt-out link in our communications. However,

You will continue to receive non-promotional emails (such as updates on your account or orders).

Exercise of rights:

You can exercise your rights by contacting us through the information provided below or directly on our Site.

We will not discriminate against you for exercising your rights. We may ask for additional information to verify your identity (such as email or account information) before responding to your request.

If required by applicable law, you may appoint an authorized representative to submit requests on your behalf. Before accepting such requests, we will require proof of authorization and may directly verify your identity.

We will respond to your inquiries within the timeframe required by current regulations.

Complaints
If you have any complaints about the way we process your personal data, you can contact us using the contact information provided below. If you are not satisfied with our response to your complaint, depending on your residence, you have the right to appeal against the our decision by contacting us again through the contact details provided below.

Alternatively, you can file complaint with your local data protection authority.

For residents of the European Economic Area (EEA), you can find a list of competent data protection supervisory authorities here.

International users
Please note that we may transfer, store and process your personal data outside the country where you reside. Your personal data may also be processed by staff, external service providers and partners located in those countries.

When we transfer your personal data outside Europe, we use recognized transfer mechanisms, such as the Standard Contractual Clauses (SCCs) of the

European Commission or equivalent contracts issued by the competent authority in the United Kingdom, unless the data is transferred to a country that offers an officially recognized adequate level protection.

Contact
If you have questions about our privacy practices or this Privacy Policy, or if you wish to exercise any of your rights, you may contact us by phone, by e-mail at info@byronbaywear.com, or by writing to us at:

RM 509, 5/F THE CLOUD 111 TUNG CHAU ST TAI KOK TSUI HONG KONG

Pursuant to applicable data protection laws and unless explicitly stated otherwise, we are the controller of your personal data.