Privacy policy

This page explains what personal information we collect when you shop with iotean, why we collect it, who we share it with, and what you can ask us to do with it.

1. Information We Collect

Information you give us:

Contact and order details — name, email address, shipping address, billing address and phone number.
Payment details — handled by our payment provider. We receive confirmation of the payment and the last few digits of the card, not the full number, expiry date or security code.
Account details — if you create an account, your login credentials and order history.
Messages — anything you send us by email, including the measurements you share when asking about sizing and photos you attach when reporting a problem with an order.
Reviews and content you submit — reviews, ratings, photos and any other content you choose to publish on the site.

Information collected automatically:

Device and technical data — IP address, browser type, operating system, device type and referring page.
Usage data — pages viewed, products viewed, items added to a cart, and how you arrived at the site.
Cookies and similar technologies — see section 6.

2. How We Use Your Information

To fulfil your order — process payment, pack and ship, send tracking, handle returns and refunds.
To communicate with you — order confirmations, dispatch notices, delivery updates, and replies to your questions.
To provide customer service — including looking up your order and advising on sizing when you contact us.
To improve the store — understanding which products are viewed and where shopping journeys break down.
To keep the store secure — detecting fraudulent orders, unauthorised access and abuse.
Marketing, only with your consent — if you subscribe to our newsletter, we send you new arrivals and promotions. Every email includes an unsubscribe link, and you can also ask us to stop at any time.
Record keeping — retaining the records we need to run the business, including order and transaction records.

We do not use your information to make automated decisions that have a legal or similarly significant effect on you.

3. Who We Share Information With

We do not sell, rent or trade your personal information. We share it only with the parties who need it to make the store work:

Payment providers — to process your payment and prevent fraud.
Shipping and logistics partners — to deliver your parcel and provide tracking.
E-commerce and hosting providers — the platform the store runs on, and the infrastructure behind it.
Analytics and advertising partners — to measure traffic and the performance of our marketing.
Professional advisers and authorities — where we are required to respond to a lawful request, or to establish or defend a legal claim.

Each of these parties is given only what they need to do their part, and is not permitted to use your information for their own purposes.

4. Your Privacy Rights

Depending on where you live, you may have the right to:

Access — ask what personal information we hold about you and receive a copy.
Correct — ask us to fix information that is inaccurate.
Delete — ask us to erase your personal information, subject to the records we are required to keep for orders, tax and dispute resolution.
Opt out of marketing — unsubscribe from promotional emails, or ask us to stop.
Object or restrict — ask us to stop or limit certain processing.
Data portability — receive your information in a portable format.

5. California Residents: Your CCPA/CPRA Rights

If you are a California resident, you have the following rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act:

Right to know — what personal information we collect, the sources, the purposes, and the categories of third parties we disclose it to.
Right to delete — request deletion of the personal information we hold, subject to the exceptions that apply to order, tax and security records.
Right to correct — request correction of inaccurate personal information.
Right to opt out of sale or sharing — we do not sell your personal information, and we do not share it for cross-context behavioural advertising. If that ever changes, we will provide a clear opt-out mechanism before doing so.
Right to limit use of sensitive personal information — we do not collect sensitive personal information beyond what is needed to process a payment, and we use it only for that purpose.
Right to non-discrimination — we will not deny you service, charge you a different price or give you a lower quality of service because you exercised a privacy right.

To exercise any of these rights, email service@iotean.com. We will need to verify your identity before acting — usually by confirming the email address and order details associated with your request. You may use an authorised agent, in which case we will ask for proof of their authority.

6. Cookies and Similar Technologies

We use cookies and similar technologies to:

Keep items in your cart and keep you signed in.
Remember your preferences, such as language and currency.
Understand how the site is used, so we can improve it.
Measure the performance of our advertising.

You can control cookies through your browser settings, including blocking or deleting them. Blocking essential cookies will stop parts of the store from working — the cart and checkout rely on them. Your browser settings apply to that browser on that device only.

7. How Long We Keep Information

We keep personal information for as long as we need it for the purposes described here:

Order and transaction records — retained for the period we need for accounting, tax and handling any dispute about an order.
Account information — kept while your account exists. You can ask us to delete it.
Marketing subscriptions — kept until you unsubscribe, after which we keep only a suppression record so we do not add you back.
Customer service correspondence — kept for a reasonable period so we have context if you contact us again.

When information is no longer needed, we delete it or de-identify it.

8. How We Protect Information

The site runs over an encrypted connection (SSL/HTTPS).
We do not store your full card number, expiry date or security code. Payment details go directly to our payment provider, which is PCI DSS compliant.
Access to personal information is restricted to the people who need it to do their job.
We keep administrative, technical and physical safeguards appropriate to the size of our business.

No method of transmission or storage is completely secure, and we will not claim otherwise. If a data breach affects your information, we will notify you and the relevant authorities as required.

9. Children's Privacy

Our store is not intended for children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us with information, email us and we will delete it.

10. Third-Party Links

Our site may link to other websites, including social platforms and payment services. We do not control those sites and are not responsible for their privacy practices. Please read their policies before giving them any information.

11. Changes to This Policy

We may update this policy for operational reasons, or when our practices or services change. The version published on this page is the one that applies. If a change is material, we will say so clearly on this page.

12. Contact

Questions about this policy, or to exercise any of your rights: service@iotean.com. Service hours are Monday to Friday, 9:00–18:00 (GMT+8), closed Saturdays, Sundays and public holidays. We reply within one business day.