PRIVACY POLICY

Last updated: August 10, 2026

This Privacy Policy describes how Warisan Sari Legacy (“Site”, “we”, “us”, or “our”) collects, uses, and discloses your personal information when you visit, use our services, make a purchase from our Site, or otherwise communicate with us (collectively, the “Services”).

For purposes of this Privacy Policy, “you” and “your” means you as the user of the Services, whether you are a customer, website visitor, or another individual whose information we have collected pursuant to this Privacy Policy.

Please read this Privacy Policy carefully. By using or accessing any of the Services, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your information as described herein, to the extent permitted by applicable law. If you do not agree with this Privacy Policy, please do not use or access the Services.

CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes to our business practices, technology, operational requirements, or legal and regulatory requirements.

When we make changes, we will post the revised Privacy Policy on this page and update the “Last updated” date. We may also take any additional steps required by applicable law.

We encourage you to review this Privacy Policy periodically to stay informed about how we handle your personal information.

HOW WE COLLECT AND USE YOUR PERSONAL INFORMATION

To provide our Services, we collect personal information about you from different sources, depending on how you interact with our Site.

In addition to the specific uses described below, we may use personal information we collect to:

• Provide and improve our Services

• Process and fulfill orders

• Process payments and refunds

• Arrange shipping and delivery

• Communicate with you about your orders and account

• Provide customer support

• Send marketing communications where permitted

• Detect and prevent fraud, abuse, or other unlawful activity

• Comply with applicable laws and legal obligations

• Enforce our Terms of Service and other policies

• Protect our rights, property, and users

WHAT PERSONAL INFORMATION WE COLLECT

The types of personal information we collect depend on how you interact with our Site and Services.

When we use the term “personal information”, we mean information that identifies, relates to, describes, or can reasonably be associated with you.

INFORMATION WE COLLECT DIRECTLY FROM YOU

Information that you provide directly to us may include:

Basic contact details:
Your name, billing address, shipping address, email address, telephone number, and other contact information.

Order information:
Your name, billing address, shipping address, order details, payment confirmation, email address, telephone number, and other information necessary to process and fulfill your order.

Account information:
If you create an account, we may collect information such as your username, password, and account preferences.

Shopping information:
Information about products you view, add to your cart, purchase, or add to a wishlist.

Customer support information:
Information you choose to provide when contacting us, including emails, messages, photographs, videos, and other information relating to your inquiry or order.

Some features of our Services may require you to provide certain personal information. You may choose not to provide this information, but doing so may prevent you from using certain features or completing certain transactions.

INFORMATION WE COLLECT AUTOMATICALLY AND THROUGH COOKIES

When you visit or interact with our Site, we may automatically collect certain information about your device and interaction with our Services.

This may include:

• IP address

• Browser type and version

• Device type

• Operating system

• Network information

• Pages visited

• Products viewed

• Referring websites

• Date and time of visits

• Information about how you interact with our Site

We may collect this information using cookies, pixels, web beacons, and similar technologies (“Cookies”).

INFORMATION WE OBTAIN FROM THIRD PARTIES

We may receive personal information from third parties, including vendors and service providers that support our business.

These may include:

• Shopify, which provides the e-commerce platform used to operate our online store

• Payment processors that process payments on our behalf

• Shipping and fulfillment providers

• Customer support providers

• Analytics and technology providers

• Marketing and advertising providers

When you make a purchase, payment information such as credit or debit card details may be collected and processed directly by our payment processors. We generally do not have access to your complete payment card information.

Information obtained from third parties will be handled in accordance with this Privacy Policy and applicable law.

HOW WE USE YOUR PERSONAL INFORMATION

Providing Products and Services

We use your personal information to provide our Services and fulfill our obligations to you, including:

• Processing and fulfilling orders

• Processing payments

• Arranging shipping and delivery

• Sending order confirmations and shipping notifications

• Processing returns, refunds, and exchanges

• Providing customer support

• Managing customer accounts

• Responding to inquiries

• Enabling product reviews and other features

Marketing and Advertising

Where permitted by applicable law and, where required, with your consent, we may use your personal information to send promotional communications or display advertisements for our products and Services.

You may unsubscribe from promotional emails at any time using the unsubscribe link included in the communication.

Even if you opt out of marketing communications, we may continue to send non-promotional communications relating to your orders, account, transactions, or other necessary matters.

Security and Fraud Prevention

We may use personal information to detect, investigate, prevent, or take action regarding suspected fraudulent, illegal, malicious, or unauthorized activity.

If you create an account, you are responsible for keeping your account credentials confidential. We recommend that you do not share your username, password, or other access information with anyone.

If you believe your account has been compromised, please contact us immediately.

Communicating With You

We may use your personal information to communicate with you about your orders, provide customer support, respond to inquiries, and maintain our business relationship with you.

COOKIES

Like many websites, we use Cookies on our Site.

For information about Cookies used by Shopify and its services, please refer to Shopify's Cookie Policy.

We use Cookies and similar technologies to:

• Operate and maintain our Site

• Remember your preferences

• Keep items in your shopping cart

• Improve website functionality

• Understand how visitors use our Site

• Analyze website traffic and performance

• Improve our products and Services

• Support marketing and advertising activities

Most web browsers automatically accept Cookies by default. You can usually configure your browser to remove or reject Cookies.

Please note that blocking or deleting Cookies may affect your experience and may cause certain features of our Site to function incorrectly or become unavailable.

HOW WE DISCLOSE PERSONAL INFORMATION

We may disclose your personal information to third parties where reasonably necessary to operate our business, provide our Services, fulfill your orders, or comply with legal obligations.

These parties may include:

Service Providers:
Companies that provide services on our behalf, including payment processing, shipping, fulfillment, customer support, website hosting, cloud storage, IT services, analytics, and fraud prevention.

Shopify and Technology Providers:
We use Shopify and other technology providers to operate and maintain our online store and related Services.

Shipping and Fulfillment Partners:
We may provide your name, address, telephone number, email address, order information, and other necessary information to shipping carriers and fulfillment providers to deliver your order.

Payment Providers:
Payment processors may receive information necessary to process your payment and complete your transaction.

Marketing and Advertising Partners:
Where permitted by law, we may share certain information with marketing and advertising providers to help us promote our products and Services.

Legal and Regulatory Authorities:
We may disclose information where required by law, legal process, court order, governmental request, or where reasonably necessary to protect our rights, property, users, or others.

Business Transactions:
If our business is involved in a merger, acquisition, restructuring, sale of assets, bankruptcy, or similar transaction, personal information may be transferred as part of that transaction, subject to applicable law.

We do not sell your personal information in exchange for money.

USER-GENERATED CONTENT

Our Services may allow you to post product reviews or other user-generated content.

If you choose to submit content to a public area of our Services, that content may be visible to other users and the general public.

Please do not include sensitive or confidential personal information in public reviews or other publicly accessible content.

We cannot control how other people may use information that you voluntarily make publicly available.

THIRD-PARTY WEBSITES AND LINKS

Our Site may contain links to websites or online platforms operated by third parties.

If you follow a link to a third-party website that is not operated or controlled by us, we recommend reviewing that website's privacy policy, security practices, and terms of use.

We are not responsible for the privacy, security, content, accuracy, or practices of third-party websites.

Our inclusion of a third-party link does not necessarily constitute an endorsement of that website, its content, products, or services.

CHILDREN'S DATA

Our Services are not intended for children who are unable to legally consent to the processing of their personal information under applicable law.

We do not knowingly collect personal information from children in violation of applicable law.

If you are a parent or legal guardian and believe that a child has provided us with personal information without appropriate consent, please contact us using the information below.

We will take reasonable steps to review and, where legally required, delete such information.

SECURITY AND RETENTION OF YOUR INFORMATION

We take reasonable administrative, technical, and organizational measures to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

However, no method of transmission over the Internet or electronic storage system is completely secure. Therefore, we cannot guarantee absolute or perfect security.

We recommend that you avoid sending sensitive or confidential information through unsecured communication channels.

We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

• Provide our Services

• Maintain customer and transaction records

• Comply with legal and regulatory obligations

• Resolve disputes

• Prevent fraud

• Enforce our agreements and policies

• Protect our legal rights

The specific retention period may vary depending on the type of information and the purpose for which it was collected.

YOUR PRIVACY RIGHTS AND CHOICES

Depending on where you live and subject to applicable law, you may have certain rights regarding your personal information.

These may include:

Right to Access

You may have the right to request access to personal information we hold about you and information about how we use it.

Right to Delete

You may have the right to request deletion of personal information we maintain about you, subject to applicable legal exceptions.

Right to Correct

You may have the right to request correction of inaccurate or incomplete personal information.

Right to Data Portability

In certain circumstances, you may have the right to receive a copy of your personal information in a structured and commonly used format.

Right to Restrict Processing

Depending on applicable law, you may have the right to request that we restrict or stop certain processing of your personal information.

Right to Withdraw Consent

Where we rely on your consent to process personal information, you may have the right to withdraw that consent.

Marketing Preferences

You may opt out of promotional emails at any time by using the unsubscribe link included in our marketing communications.

Please note that even if you opt out of promotional communications, we may still send you essential non-promotional communications, such as order confirmations, shipping updates, refund notifications, or account-related messages.

HOW TO EXERCISE YOUR RIGHTS

To make a privacy-related request, please contact us using the information provided below.

For security purposes, we may need to verify your identity before processing certain requests.

Depending on applicable law, we may be permitted to refuse or limit certain requests.

We will respond to valid requests within the timeframe required by applicable law.

We will not discriminate against you for exercising any privacy rights available to you under applicable law.

COMPLAINTS

If you have concerns or complaints about how we handle your personal information, please contact us first using the contact information below.

We will review your concern and make reasonable efforts to address it.

Depending on where you live, you may also have the right to lodge a complaint with the relevant data protection or privacy authority in your jurisdiction.

INTERNATIONAL USERS

Because we use international service providers and shipping partners, your personal information may be transferred to, stored in, or processed in countries outside your country of residence.

These countries may have privacy laws that differ from those in your country.

Where required by applicable law, we will take appropriate measures to protect your personal information when it is transferred internationally.

For customers in the European Economic Area, United Kingdom, or other jurisdictions with specific international data transfer requirements, we will use appropriate legal mechanisms where required by applicable law.

CONTACT US

If you have questions about our privacy practices, this Privacy Policy, or would like to exercise any privacy rights available to you, please contact us at:

Email: support@warisansarilegacy.com

Warisan Sari Legacy

We will make reasonable efforts to respond to your inquiry as soon as practicable and in accordance with applicable law.