Who is responsible

JOINT PEACE ASIA PACIFIC LIMITED operates Hyssopdell and is responsible for the personal information collected through this website. Privacy questions can be sent to info@hyssopdell.com.

Information you give us

• When you order: your name, delivery and billing addresses, email address, and what you bought.
• When you email us: your address and anything you write.
• When you sign up for our newsletter: your email address.

Information collected as you browse

As you move around the site, our platform and the tools on it log technical details such as your device, browser, an approximate location worked out from your IP address, the pages you visit and the link that brought you here. This comes from cookies and similar technologies, explained further down.

What we use it for

• Taking payment, packing and shipping your order, and sending tracking updates.
• Answering messages, arranging returns and fixing anything that went wrong.
• Sending our newsletter if you asked for it; every issue has an unsubscribe link.
• Protecting the shop and our customers against fraud and misuse.
• Learning which designs are popular so we can improve the collection and the site.
• Measuring and targeting our advertising, as described in the Meta pixel section.
• Keeping the tax and accounting records the law requires.

Companies that process data for us

A handful of service providers handle information on our behalf, each only to the extent their job requires:

• Shopify runs our online store, checkout and order records. Its own privacy policy explains how it treats data.
• Payment processors, such as Shopify Payments, PayPal and the card networks, process your payment. Card numbers go straight to them and never reach us.
• Meta Platforms receives browsing and purchase events through the Meta pixel.
• Delivery carriers receive your name, address and sometimes your email so they can bring and track your parcel.
• Our newsletter service stores subscriber emails in order to send each issue.

We may also disclose information when the law obliges us to, or where it is needed to prevent fraud or protect our rights and those of our customers.

The Meta pixel

This website uses the Meta pixel, a snippet of code supplied by Meta Platforms, which owns Facebook and Instagram. It reports events such as viewing a page, adding a set to your bag or completing an order. That lets us judge whether our adverts are working and show them to people likely to enjoy our designs. Meta may connect these events to a Facebook or Instagram account you hold.

Cookies

Shopify places cookies that the shop needs to function, for example to remember the contents of your bag, along with others that provide basic visit statistics. You can block non-essential cookies in your browser settings or using the options on our Your Privacy Choices page. Advertising preferences can also be adjusted inside your Meta account.

Selling and sharing

We do not sell customer information, and we do not trade or rent mailing lists. Under some US state laws, advertising cookies like the Meta pixel count as "sharing" personal information. You may opt out of that at any time, and we respect the Global Privacy Control signal sent by supporting browsers.

How long we keep it

Order records stay on file for as long as tax and accounting rules require, which is usually several years. Newsletter emails are kept until you unsubscribe. Customer emails are cleared once we no longer need them to help you.

Your rights

Depending on where you live, you may have the right to see the personal information we hold about you, to correct or delete it, to receive a copy, or to object to particular uses. Send your request to info@hyssopdell.com. We may ask you to confirm your identity, and we reply within the period the law sets, which is normally well under 30 days. You may also complain to the data protection authority in your country.

Security

Checkout runs on Shopify's encrypted, PCI-compliant platform, and on our side only the people who need order details can see them. No online system can be guaranteed perfectly secure, but we take reasonable care.

Transfers abroad

Our company is registered in Hong Kong SAR and our service providers operate internationally, so your information may be processed outside the country where you live. When that happens we use providers that apply recognised safeguards to it.

Children

This shop is intended for adults. We do not knowingly collect information from anyone under 16, and if we discover that we have, we delete it.

Changes to this policy

If we change this policy, the updated version will be posted here with a new date at the top. Questions are welcome at info@hyssopdell.com; our customer service email is available 24/7.