1. Who Is Responsible for Your Data

This Site is operated by Harmony Global Trading Inc, 30 N Gould St Ste R, Sheridan, WY 82801, United States (“we”, “us”, “our”). We are the organisation that decides how and why your personal data is collected and used in connection with the Site and our store.

If you have any question about this policy or your data, contact us at [email protected].

2. Personal Data We Collect

We collect only the personal data needed to run the store and serve you. This includes:

• Account and order data — your name, email address, delivery and billing addresses, order history and preferences.
• Payment data — handled by our payment providers; we generally do not see or store full card numbers.
• Communications — emails and form messages you send us, including through our contact form.
• Technical data — IP address, browser type, device information and pages visited, collected through cookies and similar technologies (see our Cookie Policy).

We do not intentionally collect sensitive personal data (such as health, religious or biometric data).

3. How We Use Your Data

• To process, fulfil and deliver your orders, and manage payments.
• To provide customer support and respond to enquiries and complaints.
• To send order updates, shipping confirmations and service messages.
• To prevent fraud and abuse, and to keep the Site secure.
• To improve our products, services and the Site experience.
• Where you have consented, to send marketing communications. You can opt out at any time.
• To comply with our legal and regulatory obligations.

4. Legal Bases and Consent

Where U.S. state privacy laws apply to you — such as the California Consumer Privacy Act as amended (CCPA/CPRA), the Wyoming Consumer Data Privacy Act (Wyo. Stat. § 40-12-501 et seq.) and similar laws in other states — we process your personal data for the purposes described in this policy, including to fulfil your requests, provide support and improve our store, and we obtain your consent where the law requires it. Where the law grants you the right to opt out of targeted advertising, profiling or the sale of personal data, you may exercise that right at any time by contacting us.

Where other laws apply (for example, the GDPR for users in the European Economic Area), we process personal data on the basis of contract performance, legitimate interests, legal obligation or consent, as applicable.

5. Who We Share Your Data With

We only share personal data where necessary and only to the extent required:

• Payment providers — to process your payment securely.
• Logistics and fulfilment partners — to deliver your order to you.
• Hosting and IT providers — to operate the Site and store data.
• Professional advisers and authorities — where required or permitted by law, or to protect our rights.

We do not sell or rent your personal data to third parties.

6. Cross-Border Transfers

Our business operates internationally. Your personal data may be transferred to, and processed in, countries other than your own — including the United States — for the purposes described above. We take reasonable steps to ensure that recipients provide appropriate protection (for example, through contractual safeguards), and we comply with applicable U.S. state privacy laws on data transfers where they apply.

7. Data Retention

We keep personal data only as long as necessary for the purposes described in this policy, including for accounting, tax and legal purposes, and to handle warranty, return and dispute matters. After that period, data is securely deleted or anonymised.

8. Your Rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Withdraw consent or object to certain processing.
• Request deletion of your data (subject to legal obligations).
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, email [email protected]. If you are in the United States and are not satisfied with our response, you may contact your state Attorney General or the Federal Trade Commission at www.ftc.gov; California residents may also contact the California Privacy Protection Agency.

9. Marketing and the DNC Registry

We only send marketing emails where you have opted in, and every marketing email includes a simple opt-out, in line with the U.S. CAN-SPAM Act (15 U.S.C. § 7701 et seq.). We do not make telemarketing calls or send marketing texts to numbers registered on the U.S. National Do Not Call Registry (see www.donotcall.gov) unless you have given clear consent, consistent with the Telephone Consumer Protection Act (47 U.S.C. § 227).

10. Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit (SSL/TLS), access controls and secure storage by our providers. No method of transmission or storage is completely secure, but we work to keep your data safe.

11. Children

The Site is not directed at children under 16, and we do not knowingly collect personal data from children, consistent with the Children’s Online Privacy Protection Act (COPPA) and applicable state laws. If you believe a child has provided us with personal data, contact us so we can delete it.

12. Changes to This Policy

We may update this policy from time to time. The latest version is always published on this page with the “Last updated” date above.