Privacy policy
Last updated: July 16, 2026
Ironwoodora operates the store and website and provides related information, content, features, tools, products, and services. The store is powered by Shopify. The Privacy Policy explains how personal information is collected, used, and disclosed when customers visit, use, purchase from, transact with, or communicate through the Services.
If the Terms of Service conflict with the Privacy Policy regarding personal information, the Privacy Policy controls. Users are asked to read the policy carefully and acknowledge its practices by using the Services.
Personal Information We Collect or Process
“Personal information” means information that identifies or can reasonably be linked to a person. Anonymous or de-identified information is excluded.
The categories collected or processed may include:
- Contact details: name, address, billing address, shipping address, phone number, email address.
- Financial information: credit/debit card details, financial account information, transaction and payment details.
- Account information: username, password, security questions, preferences, settings.
- Transaction information: products viewed, cart or wishlist activity, purchases, returns, exchanges, cancellations, and transaction history.
- Communications with the company.
- Device information: device, browser, network connection, IP address, unique identifiers.
- Usage information concerning interaction with and navigation of the Services.
Personal Information Sources
Personal information may be collected:
- Directly from users.
- Automatically through the Services, devices, cookies, and similar technologies.
- From service providers.
- From partners or other third parties.
How We Use Your Personal Information
The company may use personal information to:
Provide, Tailor, and Improve the Services
Process payments and orders, remember preferences, manage accounts, arrange shipping, handle returns/exchanges, enable reviews, and provide customized shopping experiences and product recommendations.
Marketing and Advertising
Send promotional communications by email, text message, or postal mail, and display advertisements based on purchases, cart activity, and other activity.
Security and Fraud Prevention
Authenticate accounts, support secure payment and shopping, and detect or investigate fraudulent, illegal, unsafe, or malicious activity. Users are responsible for keeping account credentials secure.
Communicating with You
Provide customer support, respond to users, and maintain the business relationship.
Legal Reasons
Comply with applicable law, respond to legal processes or government/law-enforcement requests, participate in legal proceedings, and enforce terms and policies.
How We Disclose Personal Information
Personal information may be disclosed:
- To Shopify, vendors, and service providers, including IT, payment processing, analytics, customer support, cloud storage, fulfillment, and shipping providers.
- To business and marketing partners for marketing and advertising.
- To third parties when directed, requested, or consented to by the user.
- To affiliates or members of the corporate group.
- In connection with mergers, bankruptcy, legal obligations, subpoenas, search warrants, enforcement of terms, or protection of rights and Services.
Depending on residence, users may have rights to opt out of sharing information for targeted advertising.
Relationship with Shopify
The Services are hosted by Shopify. Shopify collects and processes personal information relating to access and use of the Services.
Information submitted through the Services may be shared with Shopify and third parties located in other countries. Ironwoodora also uses Shopify enhanced features based on interactions with the store, other merchants, and Shopify.
For certain processing activities, Shopify is responsible for handling personal information and related privacy-right requests.
Third Party Websites and Links
The Services may contain links to third-party websites or platforms.
Users are advised to review third-party privacy and security policies. Ironwoodora does not guarantee or accept responsibility for the privacy, security, accuracy, completeness, or reliability of third-party sites.
Information shared in public or semi-public spaces, including third-party social networks, may be visible to other users.
Children's Data
The Services are not intended for children, and the company states that it does not knowingly collect personal information from children under the age of majority in the applicable jurisdiction.
Parents or guardians may request deletion of a child's personal information.
The policy states that, as of its effective date, the company does not have actual knowledge that it “share[s]” or “sell[s]” personal information of individuals under 16 years old.
Security and Retention of Your Information
No security measures are described as perfect or impenetrable, and the company cannot guarantee “perfect security.”
Information may also be insecure while in transit, so users are advised not to communicate sensitive or confidential information through unsecured channels.
Retention periods depend on factors including account maintenance, provision of Services, legal obligations, dispute resolution, and enforcement of agreements or policies.
Your Rights and Choices
Depending on location, users may have:
- Right to Access / Know.
- Right to Delete.
- Right to Correct.
- Right of Portability.
- Right to Opt out of Sale or Sharing for Targeted Advertising.
- Rights related to communication preferences.
The policy says that a Global Privacy Control signal may automatically be treated as an opt-out request for the relevant device and browser, depending on jurisdiction.
Other “Do Not Track” signals are not recognized.
Promotional emails can be unsubscribed from, although non-promotional account or order emails may still be sent.
UK / European Economic Area Rights
Users in the UK or EEA may additionally have:
- Objection to Processing and Restriction of Processing.
- Withdrawal of Consent.
The company may verify identity before processing privacy-right requests. Authorized agents may also submit requests, subject to authorization and identity verification.
Complaints
Users may contact Ironwoodora about complaints concerning the processing of personal information.
Depending on location, users may have rights to appeal a decision or file a complaint with their local data protection authority.
International Transfers
Personal information may be transferred, stored, or processed outside the user's country.
For transfers outside the European Economic Area or United Kingdom, the company may rely on recognized mechanisms such as the European Commission's Standard Contractual Clauses or equivalent UK mechanisms, unless the destination country is recognized as providing adequate protection.
Changes to This Privacy Policy
The Privacy Policy may be updated to reflect operational, legal, regulatory, or practice-related changes.
The revised policy will be posted on the website, the “Last updated” date will be changed, and notice will be provided where legally required.
Contact
For questions about privacy practices, the policy, or privacy rights:
Email: udehfhjuvc738@quiddityto.com
Address: 57 Tong Shui Road, North Point, Hong Kong Island Hong Kong SAR
For applicable data protection laws, the page states that Ironwoodora is the data controller of personal information.