Privacy Policy

Privacy Policy

Last updated: October 23, 2026

1. Data Controller

The entity responsible for processing personal data in connection with the Raleria online store is:

Pruckner Limited
Unit 903A, 9/F., Cameron Comm Centre
458–468 Hennessy Road
Causeway Bay, Hong Kong

Represented by: Anonas Khesiah Hisuler (Director)

2. Representative in the European Union under Article 27 GDPR

Where required under Article 27 of the General Data Protection Regulation (GDPR), the details of our designated representative in the European Union must be provided here.

EU representative: To be appointed or legally confirmed before publication, including the representative's name, full EU address, and contact information.

3. General Information About Data Processing

We process personal data only to the extent necessary to operate our online store, process orders, communicate with customers, comply with legal obligations, or carry out activities for which your consent is required.

The legal bases for processing personal data include:

  • Article 6(1)(b) GDPR – Processing necessary to perform a contract or take steps prior to entering into a contract.

  • Article 6(1)(c) GDPR – Processing necessary to comply with legal obligations.

  • Article 6(1)(f) GDPR – Processing necessary for our legitimate interests, provided these are not overridden by your rights and freedoms.

  • Article 6(1)(a) GDPR – Processing based on your consent.

4. Shopify – Store Operations and Hosting

Our online store is powered by Shopify, which provides the technical infrastructure required to operate our website.

In providing these services, Shopify may process personal data, including device and browser information, IP addresses, order details, contact information, and other information you provide when using our store.

For customers in the European Economic Area (EEA), the United Kingdom, and Switzerland, data processing within Shopify's corporate structure generally involves Shopify International Limited, based in Ireland. Other Shopify entities and subprocessors may also be involved.

Processing necessary for store operations, shopping carts, checkout functionality, security, and order fulfillment is based on Article 6(1)(b) and/or Article 6(1)(f) GDPR.

Where Shopify features involve non-essential cookies or similar technologies, these features are activated only in accordance with applicable consent requirements.

Shopify may also process personal data outside the EEA or Switzerland. According to Shopify, appropriate international data transfer safeguards are used, including Binding Corporate Rules and, where necessary, Standard Contractual Clauses.

5. Orders and Contract Fulfillment

When you place an order, we may process the following personal information:

  • Full name

  • Billing and shipping addresses

  • Email address

  • Telephone number, where applicable

  • Products ordered

  • Prices and payment status

  • Order number

  • Shipping and tracking information

  • Communications relating to your order

This information is processed to fulfill your purchase agreement and respond to order-related inquiries under Article 6(1)(b) GDPR.

Where commercial, tax, or other statutory retention obligations apply, we retain the necessary information for the legally required period under Article 6(1)(c) GDPR.

6. Shipping Providers

To deliver your order, we share the information necessary for shipping with the relevant delivery service providers, which may include DHL, DPD, or Hermes.

This information generally includes the recipient's name, shipping address, and, where necessary and legally permitted, contact details for delivery notifications.

The legal basis for this processing is Article 6(1)(b) GDPR.

7. Payment Processing

We use the payment services offered during checkout, which may include Shopify Payments, PayPal, and other available payment providers.

When you select a payment method, the information necessary to process your payment is shared with the relevant payment provider.

Depending on the payment method, this may include:

  • Name and billing information

  • Order amount and transaction details

  • Payment information

  • Device information

  • Fraud prevention and security-related data

For customers in the EEA, PayPal payments are generally processed by PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg.

Other payment providers displayed during checkout process personal data in accordance with their respective privacy policies.

Our legal basis for transferring payment-related information is generally Article 6(1)(b) GDPR. Payment providers may conduct additional security, identity verification, or fraud prevention checks under their own responsibility and applicable legal bases.

8. Contact and Customer Support

If you contact us by  a contact form provided on our website, we process the personal information you provide to respond to your inquiry.

For inquiries relating to an existing or potential contract, processing is based on Article 6(1)(b) GDPR.

For other inquiries, processing is based on Article 6(1)(f) GDPR, reflecting our legitimate interest in providing efficient customer communication and support.

9. Newsletter and Email Marketing

If you subscribe to our newsletter, we use your email address to send promotional messages based on your consent, unless another legal basis permits such communication.

Where consent is required, the legal basis is Article 6(1)(a) GDPR.

You may withdraw your consent at any time with effect for the future by clicking the unsubscribe link included in our marketing emails or by contacting us directly.

To document your consent, we may retain information such as the date, time, source, and technical confirmation details, where necessary to demonstrate compliance with applicable legal requirements.

10. Cookies and Shopify Privacy Settings

Our website uses cookies and similar technologies to provide essential functionality and improve the shopping experience.

Strictly necessary technologies may be used where required to provide a digital service explicitly requested by you, including shopping cart functionality, checkout processes, security features, and language preferences.

Non-essential analytics and marketing technologies are activated only after obtaining your consent.

In Germany, accessing or storing information on your device is additionally governed by Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG).

Where personal data is processed based on consent, the relevant legal basis is generally Article 6(1)(a) GDPR.

You can change or withdraw your cookie preferences at any time with effect for the future through the cookie and privacy settings available on our website.

11. Meta Pixel

Where you have consented to marketing and tracking technologies, we may use the Meta Pixel.

For users in the EEA, the relevant provider is generally Meta Platforms Ireland Limited, Ireland.

The Meta Pixel may collect and transmit information about:

  • Page views and website interactions

  • Purchases and shopping activities

  • Device and browser information

  • Online identifiers and tracking information

This information may be used to measure advertising performance, create advertising audiences, and optimize marketing campaigns.

The Meta Pixel is activated only after obtaining your consent, based on Article 6(1)(a) GDPR and, where applicable, Section 25(1) TDDDG.

Meta may combine this information with other data collected through its services and may process personal data in countries outside the EEA.

Meta is responsible for applying the relevant safeguards and international data transfer mechanisms to processing activities under its responsibility.

12. TikTok Pixel

Where you have consented to marketing and tracking technologies, we may use the TikTok Pixel.

For users in the EEA and Switzerland, TikTok Technology Limited, Ireland, may be involved in processing personal data.

The TikTok Pixel may collect and transmit information about:

  • Website visits and page views

  • User interactions

  • Purchases and order-related activities

  • Device and browser information

  • Online identifiers

This information may be used to measure advertising performance, create target audiences, and improve advertising campaigns.

The TikTok Pixel is activated only after obtaining your consent, based on Article 6(1)(a) GDPR and, where applicable, Section 25(1) TDDDG.

TikTok may process personal data outside the EEA and, according to its privacy information, uses the applicable international data transfer mechanisms.

13. Data Recipients and International Data Transfers

Depending on how you use our website, personal data may be shared with the following categories of recipients:

  • Shopify and related service providers

  • Payment processing providers

  • Shipping and logistics companies

  • IT and hosting service providers

  • Customer communication service providers

  • Meta and TikTok, where you have provided the necessary consent

As the data controller is established in Hong Kong, personal data may also be processed in Hong Kong for contract fulfillment, customer support, and related business operations.

Where Articles 44 et seq. GDPR apply to transfers of personal data from the EEA to third countries, appropriate transfer mechanisms and safeguards are used where required.

Depending on the recipient and circumstances, these may include adequacy decisions, Standard Contractual Clauses, Binding Corporate Rules, or other legally recognized safeguards.

14. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected.

Contractual, transaction, and invoicing information may be retained for longer periods where required by applicable commercial, tax, or other legal obligations.

Personal data processed on the basis of consent is generally retained until consent is withdrawn or the relevant processing purpose no longer applies, unless legal retention or documentation requirements require otherwise.

15. Your Rights Under the GDPR

Subject to the applicable legal requirements, you have the following rights regarding your personal data:

  • Right of access (Article 15 GDPR): You may request information about the personal data we process about you.

  • Right to rectification (Article 16 GDPR): You may request the correction of inaccurate personal data.

  • Right to erasure (Article 17 GDPR): You may request the deletion of your personal data where the legal requirements are met.

  • Right to restriction of processing (Article 18 GDPR): You may request restrictions on the processing of your personal data.

  • Right to data portability (Article 20 GDPR): You may request to receive certain personal data in a structured, commonly used, machine-readable format, where applicable.

  • Right to object (Article 21 GDPR): You may object to processing based on Article 6(1)(e) or Article 6(1)(f) GDPR, subject to the applicable legal conditions.

  • Right to withdraw consent (Article 7(3) GDPR): You may withdraw your consent at any time with effect for the future, without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact us at:

16. Right to Lodge a Complaint

You have the right to lodge a complaint with a competent data protection supervisory authority if you believe that the processing of your personal data violates applicable data protection laws.

Within the EEA, you may contact a supervisory authority in the country of your habitual residence, your place of work, or the location of the alleged infringement.

Individuals in Switzerland may also have additional rights and complaint options under applicable Swiss data protection legislation.

17. Data Security

We and our technical service providers implement appropriate technical and organizational security measures designed to protect personal data against loss, unauthorized access, alteration, and misuse.

However, no method of transmitting information over the internet can be guaranteed to be completely secure.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our online store, service providers, data processing activities, or applicable legal requirements.

The most current version of this Privacy Policy will always be available on our website.

Raleria

Data Controller: Pruckner Limited