01. Personal Information We May Collect

Depending on how you interact with our website, the personal information collected may include:

• Contact information: Name, email address, telephone number, billing address, and shipping address.
• Order information: Products purchased, quantities, transaction amounts, shipping choices, purchase history, and order status.
• Payment-related information: Payment method type, transaction identifiers, payment status, and limited billing information provided by payment processors.
• Account information: Customer account details, preferences, and authentication information where customer accounts are available.
• Technical information: IP address, browser type, device characteristics, operating system, language preferences, and website usage information.
• Customer communications: Messages, support requests, reviews, submitted photographs, and other information you voluntarily share.
• Marketing preferences: Newsletter subscriptions, communication choices, and related consent records where applicable.

We aim to collect only the information reasonably necessary for the relevant business or customer service purpose.

02. Sources of Personal Information

We may obtain information directly from you when you place an order, create an account, contact customer support, subscribe to communications, or interact with our website.

Additional information may be generated automatically through website functionality, cookies, analytics technologies, and transaction processing.

We may also receive relevant data from Shopify, payment providers, shipping partners, and service providers involved in fulfilling orders or supporting store operations.

03. How We Use Personal Information

We may process personal information for the following purposes:

• Processing, confirming, and fulfilling customer orders.
• Arranging payment verification, delivery, returns, and refunds.
• Communicating about purchases, shipping updates, and customer service requests.
• Providing, maintaining, and improving our website and customer experience.
• Understanding website performance and shopping preferences.
• Detecting unauthorized transactions, fraud, abuse, and technical security threats.
• Complying with legal, tax, accounting, and regulatory obligations.
• Providing marketing communications where permitted and subject to applicable consent and opt-out requirements.

We do not use personal information for materially unrelated purposes without providing any notice or obtaining any consent required by law.

04. Legal Bases for Processing

Where relevant privacy laws require a legal basis, we process personal information based on one or more applicable grounds.

These may include performance of a purchase contract, compliance with legal obligations, legitimate business interests that are not overridden by individual rights, or consent where required.

You may withdraw consent for consent-based processing where applicable. Withdrawal does not invalidate processing lawfully conducted before the withdrawal and may not affect processing supported by another lawful basis.

05. Cookies and Similar Technologies

Our Shopify-powered website may use cookies and similar technologies to maintain shopping cart functions, remember preferences, support account authentication, improve site performance, and understand visitor interactions.

Cookies may include essential cookies necessary for store operation, analytics cookies that help evaluate website use, and advertising or personalization technologies where enabled.

Depending on your location and our active website configuration, you may be offered controls for optional cookies or certain data-sharing activities.

You may also manage cookies through your browser settings. Disabling essential technologies may interfere with checkout, account access, or other website functions.

06. Sharing Personal Information

We may disclose personal information to service providers and partners where reasonably necessary to operate our business, including:

• Shopify and related ecommerce infrastructure providers.
• Payment processors, financial institutions, and fraud prevention providers.
• Delivery companies, shipping coordinators, and fulfillment service providers.
• Customer support, technical maintenance, and business software providers.
• Analytics and advertising partners where such services are enabled and legally permitted.
• Professional advisers, regulatory authorities, and other parties where disclosure is legally required or necessary to protect lawful interests.

Recipients may handle information under their own privacy policies or under contractual obligations applicable to the services they provide.

We do not authorize service providers to use customer information for unrelated purposes merely because they process it on our behalf.

07. International Data Transfers

Elberwick™ serves customers through an internationally accessible ecommerce website. Personal information may be transferred to, stored in, or accessed from countries different from your country of residence.

For example, our business is operated by Xuzhou Bensong Trading Co., Ltd. in China, while Shopify and other technology, payment, or fulfillment providers may operate in additional jurisdictions.

Where applicable law requires specific safeguards for international transfers, we seek to rely on appropriate legal transfer mechanisms and contractual or organizational protections.

08. Data Retention and Security

Personal information is retained for as long as reasonably necessary to provide services, fulfill transactions, maintain business records, resolve disputes, prevent fraud, and satisfy legal requirements.

Retention periods may vary according to the type of information and the purposes for which it is processed.

We use reasonable administrative, technical, and organizational safeguards appropriate to the nature of the information. However, no method of internet transmission or electronic storage can be guaranteed completely secure.

Customers should protect account credentials and notify us if they suspect unauthorized account activity.

09. Your Privacy Rights and Choices

Depending on applicable law and your place of residence, you may have rights to request access to, correction of, deletion of, or copies of certain personal information.

You may also have rights to object to certain processing, restrict processing, withdraw consent, or request data portability where legally available.

To submit a request, email service@elberwick.com with the subject line "Privacy Request" and a description of the right you wish to exercise.

We may need to verify your identity before fulfilling sensitive requests. Certain information may need to be retained where required for legal compliance, security, or legitimate transaction records.

Marketing emails, when sent, should include an unsubscribe option or another method to manage communication preferences.

10. California and Other U.S. State Privacy Notices

Residents of certain U.S. states may be entitled to additional privacy rights under applicable state consumer privacy laws, subject to eligibility conditions and statutory exceptions.

These may include rights to know about personal information practices, access or delete covered information, correct inaccurate data, and opt out of specified targeted advertising, sales, or sharing of personal information where those legal definitions apply.

Some advertising and analytics practices may qualify as sharing or targeted advertising under particular state laws even where no money is exchanged for the information.

Where such practices are used and applicable law requires it, we will provide relevant privacy choice mechanisms. You may also contact us directly to inquire about rights available to you.

We will not unlawfully discriminate against customers for exercising protected privacy rights.

11. Children's Privacy

Our website and products are intended for a general consumer audience and are not specifically directed to children under the age of 13.

We do not knowingly solicit personal information directly from children under 13. If we become aware that information has been collected from a child in a manner that violates applicable law, we will take appropriate steps to address the situation.

Parents or guardians may contact our support team if they have concerns about a child's information.

12. Third-Party Websites and Policy Updates

Our website may contain links to third-party websites and services. Their privacy practices are governed by their respective policies, and we encourage customers to review them before providing information.

We may revise this Privacy Policy to reflect changes in technology, service providers, business practices, or legal requirements.

The updated version will be posted on this page with a revised effective or last-updated date. Where applicable law requires additional notice or consent, we will take the appropriate steps.