Privacy Policy

PRIVACY POLICY

Last Updated: August 20, 2026

This Privacy Policy describes how OREVYNA, operated by HONG KONG LEISHI TECHNOLOGY TRADING LIMITED ("OREVYNA," "we," "us," or "our"), collects, uses, discloses, stores, transfers, and otherwise processes personal information when you visit our website, purchase our products, create an account, contact us, subscribe to communications, exercise privacy rights or choices, or otherwise interact with our online services (collectively, the "Services").

By using the Services, you acknowledge the practices described in this Privacy Policy.

Depending on where you live, applicable privacy and data protection laws may provide you with additional rights regarding your personal information. This Privacy Policy includes information regarding rights that may apply under laws such as the General Data Protection Regulation ("GDPR"), the UK General Data Protection Regulation ("UK GDPR"), and the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA"), where applicable.

1. PERSONAL INFORMATION WE COLLECT

Depending on how you interact with OREVYNA, we may collect the following categories of personal information.

Contact Information

We may collect information such as:

  • Name;

  • Email address;

  • Telephone number;

  • Billing address; and

  • Shipping address.

Order and Transaction Information

We may collect information relating to:

  • Products viewed;

  • Products purchased;

  • Order numbers;

  • Order history;

  • Shipping;

  • Tracking;

  • Returns;

  • Refunds;

  • Exchanges;

  • Cancellations; and

  • Customer service interactions.

Payment Information

Payments are processed through Shopify and/or independent payment service providers.

Payment providers may collect payment card details, billing information, account information, and other information required to process transactions.

OREVYNA does not ordinarily receive or store complete payment card numbers, CVV security codes, or complete payment authentication credentials.

Account Information

If you create an account, we may collect:

  • Name;

  • Email address;

  • Account credentials;

  • Order history;

  • Saved preferences; and

  • Account settings.

Communications

We may collect information you provide when contacting us, including:

  • Questions;

  • Complaints;

  • Product inquiries;

  • Return requests;

  • Refund requests;

  • Photographs;

  • Feedback; and

  • Other information you voluntarily provide.

Website and Device Information

When you visit our website, we and our service providers may automatically collect information such as:

  • IP address;

  • Browser type;

  • Device type;

  • Operating system;

  • Approximate location derived from IP address;

  • Referring page;

  • Pages viewed;

  • Products viewed;

  • Links clicked;

  • Shopping cart activity;

  • Checkout activity;

  • Date and time of access;

  • Cookie identifiers;

  • Device or online identifiers; and

  • Other technical information.

2. HOW WE COLLECT PERSONAL INFORMATION

We may collect personal information:

  • Directly from you;

  • Automatically through our website;

  • Through cookies and similar technologies;

  • From Shopify;

  • From payment processors;

  • From shipping and fulfillment providers;

  • From fraud prevention providers;

  • From analytics providers;

  • From customer support providers; and

  • From marketing, advertising, attribution, or measurement providers where applicable.

3. HOW WE USE PERSONAL INFORMATION

We may use personal information to:

  • Operate and maintain our website;

  • Process and fulfill orders;

  • Process payments;

  • Arrange shipping and delivery;

  • Provide order tracking;

  • Create and manage customer accounts;

  • Process returns, refunds, exchanges, and cancellations;

  • Respond to customer service requests;

  • Communicate with you regarding purchases;

  • Authenticate users and protect accounts;

  • Prevent, detect, and investigate fraud;

  • Maintain website and information security;

  • Analyze website usage and performance;

  • Improve our products and Services;

  • Personalize your experience where appropriate;

  • Send marketing communications where permitted;

  • Measure advertising and marketing performance where applicable;

  • Comply with applicable legal and regulatory requirements;

  • Establish, exercise, or defend legal rights; and

  • Carry out other purposes disclosed to you at the time information is collected.

Legal Bases for Processing Under GDPR / UK GDPR

Where the GDPR, UK GDPR, or another applicable law requires us to identify a legal basis for processing, we may rely on one or more of the following legal bases depending on the circumstances:

Performance of a Contract

We may process personal information where necessary to enter into or perform a contract with you, including processing orders, payments, deliveries, returns, refunds, and customer service requests.

Compliance With Legal Obligations

We may process personal information where necessary to comply with applicable laws, accounting requirements, tax obligations, valid legal requests, or regulatory requirements.

Legitimate Interests

We may process personal information where necessary for our legitimate business interests, including maintaining and securing the Services, preventing fraud, improving our website and products, providing customer support, and understanding the effectiveness of our business operations, provided that those interests are not overridden by your applicable rights and interests.

Consent

Where required, we may rely on your consent, including for certain marketing activities, non-essential cookies, or other processing that requires consent under applicable law.

Where processing is based on consent, you may withdraw your consent at any time, subject to applicable law.

4. COOKIES AND SIMILAR TECHNOLOGIES

Our website and service providers may use cookies, scripts, tags, local storage, pixels, and similar technologies.

These technologies may be used for:

  • Shopping cart functionality;

  • Checkout functionality;

  • Account login;

  • Security;

  • Fraud prevention;

  • Remembering preferences;

  • Personalization;

  • Website analytics;

  • Website performance;

  • Marketing or advertising where applicable; and

  • Measuring advertising or campaign performance where applicable.

Some technologies are required for the website to function properly.

Other technologies may be optional or subject to consent or opt-out requirements depending on your location and applicable law.

In applicable regions, our Shopify-powered cookie consent and privacy preference tools allow users to accept, decline, or manage applicable non-essential cookie categories, including personalization, marketing, and analytics preferences.

You may also manage certain cookies through your browser settings. Disabling some cookies may affect the functionality or availability of certain parts of the Services.

For more information about cookie controls and how to exercise applicable privacy rights, please review our Privacy Rights & Requests page.

5. ADVERTISING AND MEASUREMENT SERVICES

OREVYNA may use third-party advertising, analytics, attribution, and measurement services from time to time.

These services may help us:

  • Promote our products;

  • Understand website activity;

  • Measure advertising performance;

  • Attribute purchases or conversions;

  • Prevent advertising fraud; and

  • Improve marketing effectiveness.

The specific providers and technologies we use may change as our business develops.

Where applicable advertising technologies require notice, consent, or opt-out rights under applicable law, we will take reasonable steps to provide appropriate notice and privacy controls.

Depending on applicable law, certain disclosures involving cookies, identifiers, advertising providers, analytics providers, or similar technologies may be considered a "sale," "sharing," or processing for targeted or cross-context behavioral advertising even if no money is exchanged.

6. APPLOVIN

OREVYNA may use AppLovin as an advertising, attribution, measurement, or marketing technology provider.

If and when AppLovin technology is enabled on our website, AppLovin may collect or receive information associated with website and advertising interactions, including information such as:

  • IP address;

  • Browser information;

  • Device information;

  • Cookie identifiers;

  • Device identifiers;

  • Page views;

  • Product views;

  • Shopping cart activity;

  • Checkout activity;

  • Purchase or conversion events;

  • Advertising interactions;

  • Technical information; and

  • Applicable privacy and consent signals.

Such information may be processed for advertising, campaign measurement, attribution, optimization, fraud prevention, and related advertising services.

Before enabling AppLovin technologies where applicable law requires consent or other privacy controls, OREVYNA will take reasonable steps to implement appropriate notice, consent, and privacy-choice mechanisms.

OREVYNA does not intend to provide AppLovin with:

  • Protected health information;

  • Sensitive personal information for targeted advertising purposes;

  • Complete payment credentials;

  • Account passwords; or

  • Personal information relating to children whom we know are protected under applicable child privacy laws.

We also do not intend to configure advertising events or custom parameters to transmit unnecessary sensitive personal information.

For more information about AppLovin's collection and use of information, please review the AppLovin Privacy Policy.

7. HOW WE DISCLOSE PERSONAL INFORMATION

We may disclose personal information to the following categories of recipients where reasonably necessary for the purposes described in this Privacy Policy.

Shopify and Ecommerce Providers

Our online store uses Shopify services.

Shopify may process personal information in connection with ecommerce functionality, checkout, website operation, security, analytics, customer accounts, and related services.

Payment Providers

Payment processors may receive information necessary to:

  • Authorize payments;

  • Complete transactions;

  • Prevent fraud;

  • Process refunds; and

  • Perform related payment services.

Shipping and Fulfillment Providers

We may provide information such as:

  • Name;

  • Shipping address;

  • Telephone number;

  • Email address; and

  • Order information

to shipping, warehouse, logistics, and fulfillment providers where necessary to deliver orders or provide related services.

Technology and Business Service Providers

We may use providers that support:

  • Website hosting;

  • Information technology;

  • Customer support;

  • Communications;

  • Analytics;

  • Security;

  • Fraud prevention;

  • Data storage; and

  • Other business operations.

Advertising, Analytics, Attribution, and Measurement Providers

Where applicable, information may be made available to advertising, analytics, attribution, and measurement providers to measure campaigns, understand website activity, prevent fraud, or improve marketing performance.

Any use of AppLovin will be subject to this Privacy Policy and applicable law.

Legal and Business Purposes

We may disclose personal information where reasonably necessary to:

  • Comply with applicable law;

  • Respond to valid legal process;

  • Respond to lawful government requests;

  • Protect our legal rights;

  • Protect customers or other persons;

  • Investigate fraud or security incidents;

  • Enforce agreements and policies; or

  • Complete a merger, acquisition, financing, restructuring, sale, or transfer of all or part of our business or assets.

8. TARGETED ADVERTISING, SALE, AND SHARING

Some privacy laws use terms such as:

  • Sale;

  • Sharing;

  • Targeted advertising; and

  • Cross-context behavioral advertising

to describe certain advertising-related practices.

OREVYNA does not sell personal information for money in the conventional sense.

However, depending on applicable law, certain disclosures of identifiers, cookie information, device information, or website activity to advertising, analytics, attribution, or measurement providers may be considered a "sale," "sharing," or processing for targeted advertising even when no money is exchanged.

Where applicable law provides a right to opt out of these activities, eligible users may exercise applicable data-sharing and targeted-advertising choices through our Your Privacy Choices tool.

For additional information regarding privacy rights and request procedures, please review our Privacy Rights & Requests page.

You may also contact:

Email: support@orevyna.com

Subject: Privacy Request

9. GLOBAL PRIVACY CONTROL

Global Privacy Control ("GPC") is a browser-based privacy preference signal that may communicate a user's request to opt out of certain sale, sharing, or targeted-advertising activities.

Where required by applicable law and in regions where applicable data-sharing opt-out functionality is enabled, OREVYNA uses Shopify's customer privacy functionality to process qualifying GPC signals.

A GPC signal generally applies to the browser or device from which the signal is sent.

If you use multiple browsers or devices, you may need to enable GPC separately for each browser or device.

10. MARKETING COMMUNICATIONS

If you subscribe to marketing emails, we may send information regarding:

  • Products;

  • Promotions;

  • Offers; and

  • Updates.

You may unsubscribe at any time using the unsubscribe option contained in the applicable marketing communication.

You may also contact:

Email: support@orevyna.com

Opting out of marketing communications does not prevent us from sending necessary transactional, administrative, security, or service-related communications relating to:

  • Orders;

  • Payments;

  • Shipping;

  • Returns;

  • Refunds;

  • Account security; and

  • Customer service.

Where applicable law requires consent for electronic marketing, we will seek such consent before sending applicable communications.

11. DATA RETENTION

We retain personal information for as long as reasonably necessary for the purposes for which it was collected and for legitimate business or legal purposes, including:

  • Fulfilling orders;

  • Maintaining customer accounts;

  • Providing customer service;

  • Processing refunds and returns;

  • Maintaining transaction records;

  • Tax and accounting requirements;

  • Preventing and detecting fraud;

  • Maintaining security;

  • Resolving disputes;

  • Enforcing agreements; and

  • Complying with applicable law.

Retention periods may vary depending on the type of information, our relationship with you, applicable legal obligations, contractual requirements, potential disputes, security considerations, and applicable limitation periods.

When personal information is no longer reasonably necessary, we may delete, anonymize, or otherwise dispose of it in accordance with our legal obligations and business practices.

12. DATA SECURITY

We use reasonable administrative, organizational, and technical safeguards designed to protect personal information against unauthorized access, disclosure, loss, misuse, alteration, or destruction.

However, no electronic transmission, website, network, or storage system can be guaranteed to be completely secure.

Please do not send complete payment card information, CVV codes, passwords, government identification documents, or other unnecessary sensitive credentials through ordinary email.

13. INTERNATIONAL DATA TRANSFERS

OREVYNA operates an international ecommerce business and may use service providers located in different countries.

Personal information may therefore be transferred to, stored in, or processed in countries other than the country or region in which you reside. The privacy and data protection laws of those countries may differ from those of your home jurisdiction.

Where applicable law requires specific safeguards for international transfers, we will take reasonable steps to use appropriate legal, organizational, or contractual mechanisms.

EEA and UK International Transfers

Where personal information protected by the GDPR or UK GDPR is transferred from the European Economic Area ("EEA") or United Kingdom to a jurisdiction that has not been recognized as providing an adequate level of data protection, we may, where required by applicable law, rely on appropriate safeguards such as:

  • An applicable adequacy decision;

  • The European Commission's Standard Contractual Clauses ("SCCs");

  • Applicable UK international data transfer mechanisms;

  • Contractual or other safeguards recognized by applicable law; or

  • Another legally permitted transfer mechanism.

Where required, additional safeguards may be used to help protect personal information transferred internationally.

14. YOUR PRIVACY RIGHTS

Depending on your location and applicable law, you may have certain rights regarding your personal information.

These rights may include the right to:

  • Request access to personal information we maintain about you;

  • Request correction of inaccurate or incomplete information;

  • Request deletion of certain personal information;

  • Request a portable copy of certain personal information;

  • Restrict certain processing;

  • Object to certain processing;

  • Withdraw consent where processing is based on consent;

  • Opt out of certain targeted advertising;

  • Opt out of certain sale or sharing activities;

  • Limit certain uses or disclosures of sensitive personal information where applicable;

  • Appeal certain privacy decisions where applicable; and

  • Lodge a complaint with an appropriate regulatory or supervisory authority where applicable.

These rights are not absolute and may be subject to limitations, exemptions, verification requirements, or other conditions under applicable law.

To submit a privacy request, contact:

Email: support@orevyna.com

Subject: Privacy Request

Please provide sufficient information for us to understand the nature of your request.

We may take reasonable steps to verify your identity before processing certain privacy requests.

15. EU/EEA AND UK PRIVACY RIGHTS — GDPR / UK GDPR

If you are located in the European Union, European Economic Area, or United Kingdom and the GDPR, UK GDPR, or other applicable data protection law applies to our processing of your personal information, you may have additional rights.

Where applicable, HONG KONG LEISHI TECHNOLOGY TRADING LIMITED is responsible for personal information for which it determines the purposes and means of processing.

Subject to applicable law, your rights may include the following.

Right of Access

You may have the right to request confirmation as to whether we process your personal information and to obtain access to personal information we maintain about you.

Right to Rectification

You may have the right to request correction of inaccurate personal information and completion of incomplete personal information.

Right to Erasure

You may have the right to request deletion of personal information in certain circumstances, including where the information is no longer necessary for the purposes for which it was collected.

The right to deletion may be subject to legal exceptions, including where continued processing is necessary to comply with legal obligations, establish or defend legal claims, prevent fraud, or complete certain transactions.

Right to Restrict Processing

You may have the right to request that we restrict processing of your personal information in certain circumstances.

Right to Data Portability

Where applicable, you may have the right to receive certain personal information that you provided to us in a structured, commonly used, and machine-readable format and, where technically feasible and legally required, to have that information transmitted to another organization.

Right to Object

You may have the right to object to processing based on legitimate interests in certain circumstances.

You may also object at any time to processing of your personal information for direct marketing purposes.

Right to Withdraw Consent

Where we rely on your consent to process personal information, you may withdraw your consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

Automated Decision-Making

Where applicable, you may have rights relating to decisions based solely on automated processing, including profiling, that produce legal effects or similarly significantly affect you.

Exercising GDPR / UK GDPR Rights

To exercise an applicable right, contact:

Email: support@orevyna.com

Subject: Privacy Request

We may request information reasonably necessary to verify your identity and process the request.

We will respond to eligible requests within the period required by applicable law.

Right to Lodge a Complaint

If you are located in the EEA, EU, or United Kingdom and believe that our processing of your personal information violates applicable data protection law, you may have the right to lodge a complaint with the competent data protection supervisory authority in the country or region where you live, where you work, or where you believe an infringement occurred.

We encourage you to contact us first at support@orevyna.com so that we have an opportunity to address your concern.

16. CALIFORNIA PRIVACY RIGHTS — CCPA / CPRA

If you are a California resident and the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA"), applies to our processing of your personal information, you may have additional rights.

These rights are subject to applicable definitions, thresholds, exceptions, and limitations under California law.

Right to Know and Access

You may have the right to request information regarding personal information we have collected about you, including, where applicable:

  • Categories of personal information collected;

  • Categories of sources from which personal information was collected;

  • Business or commercial purposes for collecting, using, selling, or sharing personal information;

  • Categories of third parties to whom personal information is disclosed;

  • Categories of personal information sold or shared, if applicable; and

  • Specific pieces of personal information collected about you.

Right to Delete

You may have the right to request deletion of certain personal information we collected from you.

We may retain information where permitted by law, including where reasonably necessary to:

  • Complete transactions;

  • Fulfill orders;

  • Provide requested services;

  • Detect or prevent fraud;

  • Maintain security;

  • Exercise legal rights;

  • Comply with legal obligations;

  • Maintain tax or accounting records; or

  • Carry out another purpose permitted under applicable law.

Right to Correct

You may have the right to request correction of inaccurate personal information that we maintain about you.

Right to Opt Out of Sale or Sharing

OREVYNA does not sell personal information for money in the conventional sense.

However, certain disclosures involving advertising, analytics, attribution, cookies, pixels, online identifiers, or similar technologies may constitute a "sale" or "sharing" under the CCPA/CPRA even if no money is exchanged.

Where our activities are subject to such requirements, California residents may exercise applicable sale, sharing, and targeted-advertising opt-out rights through our Your Privacy Choices tool.

You may also contact:

Email: support@orevyna.com

Subject: Privacy Request

Where required by applicable California law and supported through our customer privacy functionality, qualifying Global Privacy Control ("GPC") signals may also be processed as applicable opt-out requests.

Right to Limit Use and Disclosure of Sensitive Personal Information

Where we collect or use sensitive personal information in a manner that gives rise to a right to limit its use or disclosure under applicable California law, you may have the right to exercise that choice.

OREVYNA does not intend to use sensitive personal information to infer characteristics about individuals for targeted advertising purposes.

Right to Non-Discrimination

We will not unlawfully discriminate against you for exercising privacy rights available under the CCPA/CPRA.

Subject to applicable law, exercising your privacy rights will not result in us unlawfully:

  • Denying goods or services;

  • Charging different prices or rates;

  • Providing a different level or quality of goods or services; or

  • Retaliating against you for exercising an applicable privacy right.

Authorized Agents

Where permitted by applicable law, you may designate an authorized agent to submit certain privacy requests on your behalf.

We may request reasonable evidence of the agent's authority to act for you and may also require you to verify your identity or confirm that you authorized the agent to submit the request where permitted by applicable law.

Verification and Response

To protect personal information from unauthorized access or disclosure, we may take reasonable steps to verify your identity before processing certain requests where verification is appropriate.

We will respond to eligible requests within the period required by applicable law.

If we deny a request in whole or in part, we will provide an explanation where required by applicable law.

17. OTHER U.S. STATE PRIVACY RIGHTS

Residents of certain U.S. states may have privacy rights in addition to those described above.

Depending on applicable law, those rights may include:

  • Access to personal information;

  • Correction;

  • Deletion;

  • Data portability;

  • Opting out of targeted advertising;

  • Opting out of certain sales of personal information;

  • Opting out of certain profiling activities;

  • Limiting certain processing of sensitive personal information; and

  • Appealing certain decisions regarding privacy requests.

To exercise an applicable privacy right, contact:

Email: support@orevyna.com

Subject: Privacy Request

Where applicable law provides a right to appeal our decision regarding a privacy request, you may submit an appeal using the same contact information and identify your request as a Privacy Appeal.

18. CHILDREN'S PRIVACY

Our Services are not directed to children.

We do not knowingly collect personal information from children in violation of applicable law.

We do not intend to activate advertising technologies, including AppLovin integrations, in connection with users whom we know are children where doing so would violate applicable child privacy laws.

If you are a parent or legal guardian and believe that a child has provided personal information to us in violation of applicable law, please contact:

Email: support@orevyna.com

We may take reasonable steps to investigate and, where appropriate, delete the information.

19. SENSITIVE PERSONAL INFORMATION

We do not intend to use advertising technologies to collect, infer, share, or target advertising based on unnecessary sensitive personal information such as:

  • Health information;

  • Precise geolocation;

  • Government identification numbers;

  • Complete financial account credentials;

  • Account passwords;

  • Biometric information;

  • Racial or ethnic origin;

  • Religious or philosophical beliefs;

  • Political opinions;

  • Trade union membership;

  • Sexual orientation or sex-life information; or

  • Other information treated as sensitive personal information under applicable law.

We ask that you do not provide unnecessary sensitive personal information through ordinary email, customer service messages, reviews, uploads, or other communications with us.

20. PRIVACY RIGHTS & REQUESTS

Depending on applicable law, you may submit an eligible privacy request regarding access, correction, deletion, portability, consent, targeted advertising, sale, sharing, or other applicable privacy rights.

For additional explanations regarding your privacy rights, available controls, and request procedures, please review our Privacy Rights & Requests page.

How to Submit a Request

Email: support@orevyna.com

 Privacy Request

Where relevant, please include:

  • Your full name;

  • The email address associated with your account or order;

  • The type of privacy request you are making; and

  • Your order number if the request relates to a purchase.

Please do not send complete payment card numbers, CVV codes, passwords, government identification documents, or other unnecessary sensitive information through ordinary email.

Verification

To protect your personal information, we may take reasonable steps to verify your identity before processing certain privacy requests.

Verification may involve confirming information reasonably associated with your account, order, or previous interactions with OREVYNA.

We will not ask you to provide unnecessary sensitive information merely to submit a privacy request.

Response Timing

We will review eligible privacy requests and respond within the period required by applicable law.

Applicable law may permit us to request additional verification, extend a response period, charge a permitted fee for certain excessive requests, or deny all or part of a request in certain circumstances.

21. THIRD-PARTY WEBSITES AND SERVICES

Our website may contain links to independent third-party websites, social media platforms, payment services, advertising services, or other online services.

We are not responsible for the privacy, security, or data-processing practices of independent third parties.

When you leave our Services or interact directly with a third party, the third party's own terms and privacy policies may apply.

We encourage you to review the applicable privacy policies of third parties before providing personal information.

22. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes to:

  • Our Services;

  • Business practices;

  • Technologies;

  • Service providers;

  • Advertising services;

  • Privacy controls; or

  • Applicable legal requirements.

When material or other relevant changes are made, we will revise the Last Updated date at the top of this page and may provide additional notice where required by applicable law.

We encourage you to review this Privacy Policy periodically.

23. CONTACT US

If you have questions regarding this Privacy Policy, our privacy practices, international data transfers, cookies, marketing preferences, or a privacy request, please contact us using the information below.