Privacy policy

Drýs Privacy Policy


Last Updated: February 14, 2026

Drýs operates this store and website, including all related information, content, features, tools, products and services, to provide you (the customer) with a high-quality shopping experience (the "Services"). This website is technically supported by Shopify.

This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use the Services, make a purchase or other transaction, or communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy shall prevail with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using or accessing the Services, you acknowledge that you have read and understood the rules for the collection, use, and disclosure of information as described in this policy.

Personal Information We Collect or Process


"Personal information" refers to information that identifies or can be reasonably linked to you. Information that is anonymized, de-identified, and cannot identify you is not considered personal information.

We may collect the following categories of information:

  • Contact details: name, address, billing address, shipping address, phone number, email address
  • Financial information: credit/debit card details, payment information, transaction details, payment confirmations
  • Account information: username, password, security questions, preferences and settings
  • Transaction information: browsing history, cart additions, wishlist items, purchases, returns, exchanges, order cancellations
  • Communication information: content you provide when contacting customer support
  • Device information: device type, browser, IP address, network information, unique identifiers
  • Usage information: how you interact with the website, browsing behavior, usage times

Sources of Personal Information


  • Directly from you: when you create an account, place an order, fill in information, or contact us
  • Automatically: through your device, browser, cookies, and similar technologies
  • From service providers: e.g., Shopify, payment processors, logistics providers collecting on our behalf
  • From business partners and other third parties

How We Use Your Personal Information


We only use your information within legal and reasonable limits:

  1. Provide, Process, and Improve the Services

    Process orders, payments, shipping, returns and exchanges, manage accounts, remember preferences, recommend products, and provide a personalized shopping experience.

  2. Marketing and Advertising

    Send promotional messages, new product notifications, and special offers; display personalized advertisements based on your browsing and purchase behavior.

  3. Security and Fraud Prevention

    Verify accounts, ensure payment security, detect suspicious/fraudulent/illegal activity, and protect the platform and user safety.

  4. Customer Service

    Respond to inquiries, handle after-sales issues, and maintain service quality.

  5. Comply with Legal Obligations

    Comply with applicable laws, respond to legal requirements and judicial processes, enforce terms and policies, and protect legitimate rights and interests.


How We Disclose Personal Information


We only disclose your information to third parties under the following legitimate circumstances:

  • Disclose to Shopify, payment processors, logistics providers, cloud storage providers, customer support systems, and other service providers to enable them to perform services on our behalf
  • Disclose with your consent or at your direction
  • Share with affiliated companies within our corporate group
  • Disclose as required by law, in response to legal processes, to prevent fraud, and to ensure safety
  • Disclose in connection with business transactions such as mergers, acquisitions, or reorganizations

We will not "sell" your personal information without your explicit permission.

Relationship with Shopify


The Services are hosted and technically supported by Shopify.

Shopify collects and processes your information to provide and improve the Services.

Information you submit may be transmitted to Shopify and its partners, which may be located outside your country/region.

Shopify's Privacy Policy:

https://www.shopify.com/legal/privacy

Third-Party Websites and Links


This website may contain links to third-party websites. We are not responsible for the privacy policies of these third-party websites.

Information you disclose on public or semi-public platforms (e.g., social media) may be viewed by others.

Children's Information


The Services are not intended for minors.

If you are a parent/guardian and become aware that a child has provided us with information, please contact us to have it deleted.

Information Security and Retention Period


We implement reasonable security measures to protect your information, but cannot guarantee absolute security.

We will retain your information for the period necessary to achieve the purposes described in this policy, or as required by law.

In general:

  • Order/transaction information: retained for 7 years after order completion (for tax, legal, and after-sales purposes)
  • Account information: retained during the account's active period, and deleted in accordance with regulations after account closure

Your Rights


Depending on your region (EU, UK, California, USA, etc.), you may have the following rights:

  • Access the personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your personal information
  • Request portability of your personal information
  • Opt out of marketing emails
  • Opt out of targeted advertising
  • Object to or restrict our processing of your information
  • Withdraw your consent

You may exercise these rights by contacting us using the details below.

We will respond within the time required by law and will not discriminate against you for exercising your rights.

International Data Transfers


Your information may be transferred to and processed in regions outside Hong Kong (e.g., USA, Canada, EU, etc.).

If transferring data from the European Economic Area/UK, we will use approved mechanisms such as the European Commission's Standard Contractual Clauses to protect data.

Policy Updates


We may update this Privacy Policy from time to time. Updated versions will be posted on this page with the "Last Updated" date revised.

Contact Us


If you have any questions about this Privacy Policy or wish to exercise your rights, you may contact us at:

Company Name: Drýs

Email: nanayang@nanadrys.com

Address: UNIT 11, 9/F THE CLOUD NO.111 TUNG CHAU STREET, TAI KOK TSUI, KOWLOON, HONG KONG SAR

Under applicable data protection laws, we are the data controller of your personal information.