Privacy Policy

This Privacy Policy describes how Artobic ("Artobic", "we", "us", or "our"), operating at artobic.art, collects, uses, and protects your personal information. We are committed to the highest standards of data privacy and comply with the European Union General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA), and the Hong Kong Personal Data (Privacy) Ordinance (PDPO, Cap. 486).

If you have any questions, contact us at: privacy@artobic.art

1. Information We Collect

We collect the following categories of personal data:

Identity & Contact Data: Name, email address, billing and shipping address, phone number
Transaction Data: Purchase history, payment method details (processed securely by Shopify Payments — we do not store card numbers)
Technical Data: IP address, browser type, device information, cookies and usage data
Communications Data: Emails or messages you send us

We do not collect sensitive personal data (e.g. health, biometric, or financial account data beyond what is needed to process your order).

2. How We Use Your Information

We use your personal data for the following purposes:

To process and fulfil your orders (including sharing with SF Express for delivery)
To manage your account and provide customer support
To send transactional emails (order confirmations, shipping updates)
To comply with legal obligations
To improve our website and services (analytics)
To send marketing communications — only with your explicit consent

We rely on the following legal bases (GDPR Article 6):

Contract performance — to fulfil your orders
Legal obligation — to comply with applicable laws
Legitimate interests — to improve our services and prevent fraud
Consent — for marketing communications (you may withdraw at any time)

3. Cookies

We use cookies and similar tracking technologies to operate our website. These include:

Essential cookies: Required for the website to function (e.g. shopping cart, login)
Analytics cookies: To understand how visitors use our site (e.g. Google Analytics)
Marketing cookies: To deliver relevant advertising (only with your consent)

You can manage your cookie preferences through your browser settings. Withdrawing consent for non-essential cookies will not affect your ability to shop with us.

4. Sharing Your Information

We share your personal data only with trusted third parties as necessary:

Shopify Inc. — our e-commerce platform and payment processor (Shopify Payments). Shopify is GDPR-compliant and acts as a data processor on our behalf.
SF Express — for order fulfilment and delivery. Your name, address, and contact details are shared for shipping purposes only.
Email service providers — for transactional and marketing emails
Analytics providers — for website performance analysis
Legal authorities — where required by law

We do not sell your personal data to third parties.

5. International Data Transfers

Artobic is based in Hong Kong. If you are located in the EU/EEA, your data may be transferred to and processed in countries outside the EU. Where this occurs, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission.

6. Data Retention

We retain your personal data only for as long as necessary:

Order and transaction records: 7 years (for tax and legal compliance)
Account data: Until you request deletion or close your account
Marketing data: Until you withdraw consent or unsubscribe
Technical/log data: Up to 12 months

7. Your Rights

Depending on your location, you have the following rights regarding your personal data:

EU/EEA Residents (GDPR)

Right to access your personal data
Right to rectification (correct inaccurate data)
Right to erasure ("right to be forgotten")
Right to restrict processing
Right to data portability
Right to object to processing
Right to withdraw consent at any time
Right to lodge a complaint with your local supervisory authority

California Residents (CCPA/CPRA)

Right to know what personal information is collected and how it is used
Right to delete personal information
Right to opt-out of the sale or sharing of personal information (we do not sell your data)
Right to correct inaccurate personal information
Right to limit use of sensitive personal information
Right to non-discrimination for exercising your rights

Hong Kong Residents (PDPO)

Right to access personal data held about you
Right to correct inaccurate personal data
Right to be informed of the purpose of data collection

To exercise any of these rights, please contact us at privacy@artobic.art. We will respond within 30 days.

8. Children's Privacy

Our website is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately and we will delete it.

9. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. All payment transactions are encrypted and processed securely by Shopify Payments. However, no method of transmission over the internet is 100% secure.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated date. We encourage you to review this page periodically.