PRIVACY POLICY

Last Updated: July 28, 2026

This Privacy Policy explains how Elowen Global Commerce Limited, operating under the brand name Virena, collects, uses, stores, shares, and protects personal information when you visit or make a purchase from virenawear.shop.

1. Who We Are

Legal Entity: Elowen Global Commerce Limited
Brand: Virena
Company Registration No.: 80353817
Registered Business Address: RM 12, 6/F, THE CLOUD, 111 TUNG CHAU ST, TAI KOK TSUI, HONG KONG
Email: service@virenawear.shop

For the purposes of applicable privacy and data-protection laws, Elowen Global Commerce Limited is responsible for determining how personal information collected through the website is used, except where another service provider acts independently under its own privacy terms.

2. Scope

This Privacy Policy applies to personal information collected when you:

• Visit our website;

• Browse products;

• Create an account;

• Place or attempt to place an order;

• Make a payment;

• Contact customer service;

• Request a cancellation, return, or refund;

• Subscribe to marketing communications;

• Submit a review or other content;

• Interact with our advertisements or social-media content.

It does not govern third-party websites or services that have their own privacy policies.

3. Information We Collect

Information You Provide

We may collect:

• Full name;

• Billing address;

• Shipping address;

• Email address;

• Telephone number;

• Account login information;

• Products ordered;

• Size, colour, and quantity selections;

• Order history;

• Customer-service messages;

• Cancellation and return details;

• Photographs or videos submitted for a product claim;

• Reviews and user-generated content;

• Marketing preferences;

• Other information you voluntarily provide.

Payment Information

Payments are processed through PayPal.

We may receive limited payment-related information such as:

• Payment status;

• Transaction reference;

• Payment amount;

• Payment date;

• PayPal account email where provided by PayPal;

• Card type or limited card details;

• Billing verification results;

• Fraud or risk indicators.

We do not normally receive or store your complete debit card or credit card number.

Information Collected Automatically

When you use the website, we and our service providers may automatically collect:

• IP address;

• Browser type;

• Device type;

• Operating system;

• Language;

• Approximate location;

• Referring website;

• Pages viewed;

• Products viewed;

• Links clicked;

• Cart activity;

• Checkout activity;

• Date and time of visits;

• Cookie identifiers;

• Advertising identifiers;

• Website performance and error information.

Information from Third Parties

We may receive information from:

• PayPal;

• SHOPLINE and other website service providers;

• Logistics and tracking providers;

• Fraud-prevention providers;

• Analytics providers;

• Advertising platforms;

• Social-media platforms;

• Customer-support providers;

• Publicly available sources where lawful.

4. How We Use Personal Information

We may use personal information to:

• Operate and maintain the website;

• Process orders and payments;

• Confirm payment status;

• Prepare, ship, and deliver orders;

• Provide tracking information;

• Communicate about orders;

• Verify customer identity or address;

• Prevent fraud and payment abuse;

• Process cancellations, returns, replacements, and refunds;

• Respond to customer-service requests;

• Maintain transaction and accounting records;

• Comply with tax, customs, legal, and regulatory obligations;

• Improve products, services, and website performance;

• Analyse shopping behaviour and website usage;

• Personalize website content;

• Measure advertising effectiveness;

• Send marketing communications where permitted;

• Protect our rights, customers, website, and business;

• Establish, exercise, or defend legal claims.

5. Legal Bases for Processing

Where applicable law requires a legal basis, we may process personal information on one or more of the following grounds:

Performance of a Contract

Processing necessary to:

• Accept and fulfil an order;

• Process payment;

• Arrange delivery;

• Provide customer service;

• Handle returns and refunds.

Legitimate Interests

Processing reasonably necessary to:

• Operate and improve the website;

• Prevent fraud;

• Protect network and payment security;

• Analyse business performance;

• Maintain records;

• Resolve complaints;

• Protect legal rights.

We consider the effect on your rights before relying on legitimate interests.

Consent

We may rely on consent for:

• Optional marketing communications;

• Non-essential cookies;

• Certain advertising or analytics technologies;

• Other activities where consent is required.

You may withdraw consent at any time, although withdrawal will not affect processing already carried out lawfully.

Legal Obligations

We may process information to comply with:

• Accounting and tax obligations;

• Customs requirements;

• Consumer-protection obligations;

• Court orders;

• Regulatory requests;

• Anti-fraud and payment requirements;

• Other applicable laws.

6. Cookies and Similar Technologies

We and our service providers may use cookies, pixels, tags, local storage, and similar technologies.

These technologies may be used for:

• Essential website operation;

• Cart and checkout functionality;

• Security and fraud prevention;

• Remembering preferences;

• Website analytics;

• Advertising measurement;

• Personalization;

• Social-media integration.

Where required by law, non-essential cookies will be used only after obtaining appropriate consent.

You may manage cookies through:

• The website’s cookie banner or settings tool, where available;

• Your browser settings;

• Your device settings;

• Relevant advertising-platform controls.

Blocking essential cookies may prevent parts of the website or checkout from working correctly.

7. Marketing Communications

Where permitted, we may use your contact information to send:

• Product news;

• Promotional offers;

• Abandoned-cart reminders;

• Restock notifications;

• Other Virena marketing communications.

You may unsubscribe at any time by:

• Using the unsubscribe link in the message;

• Changing your account preferences, where available;

• Emailing service@virenawear.shop.

We will not use personal information for direct marketing where valid consent or another required legal basis has not been obtained.

Service-related communications, such as order confirmations, shipping updates, security notices, and responses to customer-service requests, are not marketing communications.

8. How We Share Personal Information

We may share personal information with service providers that help us operate the business, including:

• SHOPLINE and website-hosting providers;

• PayPal and payment-service providers;

• Warehouses and fulfilment providers;

• Shipping, delivery, and tracking companies;

• Customs brokers and authorities;

• Customer-service providers;

• Email and communication providers;

• Analytics providers;

• Advertising and social-media platforms;

• Fraud-prevention and cybersecurity providers;

• Accountants, auditors, insurers, and professional advisers;

• Regulators, courts, law-enforcement agencies, and government authorities where legally required.

Service providers receive only the information reasonably necessary for their functions and are expected to handle it securely and lawfully.

9. Sale or Sharing of Personal Information

We do not sell personal information for money.

We may use analytics and advertising technologies that disclose identifiers or online activity to advertising or analytics providers.

Depending on the law of your jurisdiction, certain advertising disclosures may be considered “sharing,” “targeted advertising,” or a “sale” even when no money is exchanged.

Where applicable, you may manage these activities through our cookie settings or contact us at service@virenawear.shop.

10. International Data Transfers

Virena operates internationally.

Your personal information may be transferred to, accessed from, or stored in countries or regions different from where you live, including Hong Kong, mainland China, and locations where our service providers operate.

These locations may have different privacy laws.

Where required, we use appropriate contractual, technical, or organizational measures to protect personal information transferred internationally.

11. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy.

Retention periods may depend on:

• The duration of our relationship with you;

• Order and delivery requirements;

• Return and warranty periods;

• Fraud-prevention needs;

• Accounting and tax requirements;

• Legal limitation periods;

• Disputes or legal claims;

• Regulatory obligations.

When information is no longer reasonably required, we may delete, anonymize, or securely isolate it, subject to legal and technical limitations.

12. Data Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information against:

• Unauthorized access;

• Accidental loss;

• Misuse;

• Alteration;

• Disclosure;

• Destruction.

However, no internet transmission or storage system is completely secure.

You are responsible for protecting your account password and notifying us if you suspect unauthorized activity.

Do not send complete payment-card details or passwords by email.

13. Your Privacy Rights

Depending on where you live, you may have rights relating to your personal information, including the right to:

• Request access;

• Request correction;

• Request deletion;

• Request restriction of processing;

• Object to certain processing;

• Withdraw consent;

• Opt out of direct marketing;

• Request data portability;

• Opt out of certain targeted advertising or data sharing;

• Receive information about how your data is used;

• Submit a complaint to a privacy regulator.

These rights may be subject to legal conditions, exemptions, verification requirements, and record-retention obligations.

14. How to Exercise Your Rights

To submit a privacy request, email:

service@virenawear.shop

Please include:

• Your name;

• The email address connected with your account or order;

• Your order number, if relevant;

• The privacy right you wish to exercise;

• Enough information for us to understand and verify the request.

We may request reasonable information to verify identity and protect personal information from unauthorized disclosure.

We will not discriminate against you for exercising a valid privacy right.

15. European Economic Area and United Kingdom Users

Where applicable European or UK data-protection law applies, you may have rights to:

• Access your personal data;

• Correct inaccurate data;

• Request deletion;

• Restrict processing;

• Object to processing based on legitimate interests;

• Receive portable data;

• Withdraw consent;

• Complain to the competent supervisory authority.

You may contact us first so that we can attempt to address your concern.

16. California and Other United States Privacy Rights

Residents of certain United States jurisdictions may have rights to:

• Know what categories of personal information are collected;

• Request access to specific information;

• Request deletion;

• Request correction;

• Opt out of certain sales, sharing, or targeted advertising;

• Limit certain uses of sensitive personal information;

• Receive equal service when exercising privacy rights.

The availability and scope of these rights depend on whether the relevant law applies to Virena and the specific request.

17. Hong Kong Data Privacy Rights

Personal information is handled with regard to applicable requirements under Hong Kong’s Personal Data (Privacy) Ordinance.

You may request access to or correction of personal data held about you, subject to applicable requirements and exemptions.

Requests may be submitted to service@virenawear.shop.

18. Children’s Privacy

The website is not directed to children.

We do not knowingly collect personal information directly from children who are not legally permitted to provide it without parental or guardian authorization.

If you believe a child has submitted personal information improperly, contact us so that we can review and take appropriate action.

19. Third-Party Links

Our website may contain links to PayPal, social-media platforms, carriers, or other third-party websites.

We do not control the privacy practices of third parties.

You should review their privacy policies before providing personal information.

20. Business Transfers

If Virena or Elowen Global Commerce Limited is involved in a merger, acquisition, financing, restructuring, sale of assets, or similar transaction, personal information may be disclosed or transferred as part of that transaction, subject to appropriate confidentiality and legal protections.

21. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in:

• Our services;

• Website technologies;

• Service providers;

• Business practices;

• Legal requirements.

The updated version will be posted on this page with a revised “Last Updated” date.

Where required, we will provide additional notice or request consent.

22. Contact Us

Questions, complaints, or privacy requests may be sent to:

Email: service@virenawear.shop

Elowen Global Commerce Limited
Company Registration No.: 80353817
RM 12, 6/F, THE CLOUD, 111 TUNG CHAU ST, TAI KOK TSUI, HONG KONG