How we look after your information

Privacy Policy

Last updated: November 12, 2025

We collect only what we need to take your order, deliver it and run a small online shop well. We do not sell or rent your personal information to anyone. Below is what we collect, who helps us process it and the choices you have.

The company responsible

HANCO POOL & FOUNTAIN ENGINEERING CO. LIMITED operates Rivvyna at rivvyna.com and is responsible for your personal information. Contact us at support@rivvyna.com, or write to Room M, 16/F, Block 1, Kinho Industrial Building, 14-24 Au Pui Wan Street, Sha Tin, Hong Kong.

What we collect

Your card number is typed into a secure form run by the payment processor, so it never reaches us.

Why we use it

• to process payment, pack and deliver your order, and keep you updated about it;
• to answer your questions and handle returns, refunds and replacements;
• to protect the shop and our customers against fraud and misuse;
• to see which pages and products people find useful, so we can improve the shop;
• to measure the results of our advertising and show our ads to people who may like our products;
• to send our newsletter, only if you signed up. You can unsubscribe from any email.

We rely on the need to perform our contract with you, our legitimate interest in running and improving a secure shop, our legal obligations, and your consent where it is required.

Who processes it for us

Personal information goes only to the service providers that keep the shop running, and each receives just the part it needs:

• Shopify hosts our online store, runs our checkout and stores order data.
• Our payment processor handles your payment and screens it for fraud.
• Delivery carriers receive your name, address and, where needed, your phone number or email to deliver and track your parcel.
• Meta Platforms receives browsing and purchase events through the Meta pixel on our site, which we use to measure and improve our Facebook and Instagram advertising.
• Theme and app providers may process limited data to make features such as newsletter sign-up work.

We may also disclose information if the law requires it, to protect our rights or safety, or to a buyer if the business is ever sold. Selling or renting customer data is something we simply do not do.

Cookies and the Meta pixel

Some cookies are essential: without them your cart and checkout would not work. Others, including Shopify's analytics cookies and the Meta pixel, help us understand visits and measure ads. You can delete or block cookies in your browser settings and limit advertising cookies through the options on Your Privacy Choices. Blocking essential cookies may stop the cart from working.

How long we keep it

• Orders and payments: for the period tax and accounting rules require, usually up to seven years.
• Customer service emails: up to two years after our last exchange.
• Newsletter address: until you unsubscribe. After that we keep it on a do-not-email list so you are not contacted again.
• Analytics data: in summary form, for as long as it is useful.

Your rights

Depending on your state or country, you may have the right to know what we hold about you, receive a copy, correct it, delete it, restrict or object to some uses, withdraw consent, and opt out of targeted advertising or the "sale" or "sharing" of personal information as defined by US state privacy laws. Email support@rivvyna.com to use any of these rights. We may need to confirm your identity first. We will never treat you differently for exercising them, and you may also complain to your local data protection authority.

Global Privacy Control

We treat a Global Privacy Control (GPC) signal from your browser as your request to stop advertising "sharing" from that browser.

Children

Our shop is for adults and we do not knowingly collect information from anyone under 16. If a child's details have reached us by mistake, tell us and we will erase them.

Transfers abroad

We are based in Hong Kong and the companies that help us run the shop work from different countries, the United States and Canada among them. Your information may therefore be processed outside your own country. Where required, we use recognised safeguards such as standard contractual clauses.

Security

The site uses encrypted HTTPS connections, card payments run through a PCI DSS compliant processor, and access to customer information is limited to the people who need it. No system is completely secure, but we take reasonable steps to protect your information.

Updates

Any revision to this policy changes the "Last updated" line above. If a change is significant, we will also tell newsletter subscribers.

Contact

Privacy questions or requests: support@rivvyna.com. Our customer service email is available 24/7.