Privacy policy

Who we are and the scope of this policy

LANTHEA STUDIO LIMITED (“we”, “us” or “our”) operates this Shopify store and its brands, including Shell Oracle and Lambwick, together with the related shopping, inquiry and customer-support services (the “Services”). We are the controller of personal information processed for our own operation of these Services, subject to the separate responsibilities of Shopify and other providers described below.

This policy explains how personal information is collected, used, disclosed and protected when you browse the store, use the shared checkout, place an order, contact us, submit a commission inquiry or receive communications from us. If our Terms of Service conflict with this policy about personal-information processing, this policy governs that processing. Nothing in this policy removes rights provided by applicable law.

Personal information we process

Depending on your interaction with the Services, we process:

Contact and delivery information: your name, email address, telephone number, billing address and shipping address when supplied for an order, account or inquiry.
Order and payment information: items selected or purchased, order and transaction identifiers, payment status, delivery details, returns and refunds. Shopify and the payment providers involved in checkout process the payment credentials needed for the selected payment method; we use the transaction information made available to us to administer your order.
Account information: information associated with your customer account, preferences and authentication, where you use account features.
Communications and commission information: messages, support conversations, commission type, request descriptions and optional reference images or other information you submit.
Marketing and offer information: subscription and consent status, communication preferences, coupon eligibility, coupon and redemption-related records, and email-delivery status.
Technical and usage information: device and browser information, IP address, identifiers, pages and products viewed, cart activity and interactions with the Services, including information collected through cookies and similar technologies.

Personal information does not include information that has been anonymized so that it cannot reasonably be linked to an individual.

Where information comes from

We obtain information directly from you, automatically through use of the Services, and from Shopify, payment, communication, fulfillment and other service providers involved in providing the Services. We receive information from partners or other third parties where relevant to your transaction or interaction and permitted by applicable law.

Why we use information

We use personal information to operate the store and shared checkout; process payments and orders; arrange production and delivery; handle returns, refunds and support; assess and respond to commission inquiries; administer accounts and preferences; provide eligible offers; send relevant communications; improve and personalize the Services; prevent fraud and misuse; and meet legal, accounting and dispute-resolution requirements.

Where a legal basis is required, we rely on performance of our contract with you or steps you request before a contract, compliance with legal obligations, legitimate interests such as operating and securing the Services where those interests are not overridden by your rights, and consent where required. Reading this policy or submitting an inquiry does not itself constitute consent to every form of marketing.

Service providers and operational tools

We use the following services in the operation of this store:

Shopify: storefront, shared checkout, customer and order administration, payments-related infrastructure, privacy preferences and other store services. Shopify and payment providers process information needed for your selected payment method.
Shopify Inbox: customer chat and support. Information you provide in a chat, and relevant store or order context available to the support service, is used to respond to your inquiry.
Hulk Form Builder: commission inquiry forms and optional reference-image uploads. The form processes the information and files you submit so that we can receive, review and respond to the request.
Cloudflare Workers and D1: operation and storage for our coupon and email-delivery workflows, including relevant customer/order identifiers, offer records, processing status and delivery records. We use these records to administer eligible offers and avoid duplicate processing.
Resend: delivery of the coupon emails sent through our coupon workflow. Sending requires the recipient address and email content, including the relevant offer and unsubscribe link; provider delivery identifiers and status support delivery administration.
Shopify communication services, including Messaging where used: store communications and their associated delivery administration.

We also disclose information as needed to payment providers, carriers and fulfillment providers, and to personnel or makers involved in responding to your request or fulfilling your order. The information disclosed depends on their role and the service required. Administrative tools used to maintain the store do not create a separate permission to use customer information for unrelated purposes.

Commission reference images

Reference images are optional inquiry materials. We use them to review your commission request and communicate about its feasibility and details. If you place a commission order, the relevant agreed specifications and reference material may also be used to fulfill it. We do not publish your reference images without permission.

Please provide only information and images relevant to the request, and ensure that you are entitled to share them. An inquiry or image upload does not create an order or enroll you in marketing by itself.

Marketing and coupon communications

We use the marketing preferences recorded for you to administer promotional communications. Our automated coupon-email workflow checks the customer's current Shopify marketing subscription status before sending, including before a retry, and uses Shopify's unsubscribe link.

You can unsubscribe from promotional emails through the unsubscribe option in the email or contact us about your preferences. Unsubscribing from marketing does not prevent necessary non-promotional communications about an order, an inquiry or an account. Coupon eligibility and coupon administration may require records even where no promotional email is sent.

Cookies, personalization and Shopify enhanced services

Shopify and the services used by this store use cookies and similar technologies for store functionality, checkout, security, remembering preferences, analytics and, where applicable, personalization and advertising. Where consent is required, the relevant non-essential uses are subject to the applicable consent requirements. You can use the privacy and cookie controls presented on the Services and your browser's controls to manage preferences; disabling necessary storage may affect functionality.

Shopify Network Intelligence is enabled for this store. Shopify may use information about your interactions with this store, other merchants and Shopify to support enhanced services such as security, product improvement, personalization and advertising. Shopify has its own responsibilities for that processing, including responding to relevant privacy-rights requests. Other merchants do not receive access to our customer records through this feature.

Learn more in the Shopify Consumer Privacy Policy and exercise applicable rights through the Shopify Privacy Portal.

Where applicable, you may opt out of uses considered a sale or sharing of personal information or targeted advertising under your local law. Store controls are available through Shell Oracle's data-sharing opt-out page and Lambwick's data-sharing opt-out page. These are brand entry points for this store's privacy controls, not separate contracting entities. Use the controls on the website and browser you are using; this policy does not promise that all browser-level cookie choices automatically synchronize across domains.

Where applicable, Global Privacy Control signals are treated as opt-out requests for the device and browser used, and may be applied to an associated Shopify account where Shopify can make that association. Other browser “Do Not Track” signals are not generally recognized by the Services. More information about Global Privacy Control is available at https://globalprivacycontrol.org/.

International processing

Our Services and providers may process or store information outside your country of residence. Where applicable law requires safeguards for international transfers, the relevant transfer must be covered by an appropriate mechanism, such as an adequacy decision, recognized standard contractual clauses or another legally available safeguard. You can contact us for information about the safeguards relevant to your information.

Security and retention

We use measures appropriate to the operation of the Services to protect personal information, but no transmission or storage system is completely secure. Please do not send unnecessary sensitive information through an inquiry or chat.

We retain information according to the purpose for which it is held, including fulfilling orders and commissions, maintaining necessary business records, handling support and disputes, complying with legal obligations, respecting communication preferences and preventing duplicate or abusive offer processing. Different records and providers may have different retention requirements. We do not represent that every record is deleted automatically when a coupon expires or an inquiry closes.

Children

The Services are not intended for children, and we do not knowingly collect personal information directly from children under the age of majority in their jurisdiction. If you are a parent or guardian and believe a child has provided us with personal information, contact us to request appropriate action. We do not have actual knowledge that we sell or share, as those terms are defined by applicable law, personal information of individuals under 16.

Your rights and choices

Depending on your location and applicable law, you may have rights to access information about the personal information we hold, obtain a copy, correct it, request deletion, receive portable information, restrict processing, object to processing, withdraw consent, or opt out of sale, sharing or targeted advertising. These rights are subject to applicable conditions and exceptions. Withdrawing consent does not affect the lawfulness of processing before withdrawal.

You can use the available website and email controls or contact us to exercise rights. We may need to verify your identity and, where an authorized agent acts for you, their authority. We will not discriminate against you for exercising applicable privacy rights and will respond within the requirements of applicable law.

If you have a concern, contact us first so that we can respond. You may also have the right to appeal a decision or complain to your local data-protection authority. Information about European supervisory authorities is available from the European Data Protection Board.

Updates and contact

We may update this policy to reflect changes in our Services, practices or legal requirements. The published policy will show its revision date, and we will provide any notice required by applicable law.

For privacy questions or requests, contact LANTHEA STUDIO LIMITED at finance@lantheastudio.com, or write to:

LANTHEA STUDIO LIMITED
RM D07, 8/F KAI TAK FTY BLDG
NO. 99 KING FUK ST
SAN PO KONG
HONG KONG

Shell Oracle inquiries may also be sent to shelloracle@lantheastudio.com.