Privacy Policy

1. Introduction

1.1 Who We Are. This Privacy Policy (“Policy”) describes how Ryden Store Ltd, trading as Ryden (“we,” “us,” “our,” or “Ryden”), collects, uses, shares, and protects personal data of individuals interacting with our wholesale operations at ryden.store/business, our wholesale services, or our communications.

1.2 Data Controller. Ryden is the data controller of personal data collected through our operations. Our contact details:

Ryden Store Ltd (trading as Ryden)
Based in Pakistan
Email: contact@ryden.store
Privacy requests: contact@ryden.store

1.3 Scope. This Policy applies to:

1. Wholesale buyers and prospective wholesale buyers;
2. Authorized representatives, employees, and agents of wholesale buyer entities;
3. Visitors to our wholesale website;
4. Recipients of our communications.

1.4 Multi-Jurisdiction Compliance. This Policy is designed to comply with privacy regulations applicable to our global operations, including:

1. General Data Protection Regulation (GDPR): for personal data of individuals in the European Union and European Economic Area;
2. UK General Data Protection Regulation (UK GDPR): for personal data of individuals in the United Kingdom;
3. California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA): for personal data of California residents;
4. Personal Information Protection Law (PIPL): for personal data of individuals in the People’s Republic of China;
5. Personal Information Protection and Electronic Documents Act (PIPEDA): for personal data of individuals in Canada;
6. Act on the Protection of Personal Information (APPI): for personal data of individuals in Japan;
7. Lei Geral de Proteção de Dados (LGPD): for personal data of individuals in Brazil;
8. Australia Privacy Act 1988: for personal data of individuals in Australia;

Jurisdiction-specific provisions are addressed in Section 11.

1.5 Modification. Ryden may amend this Policy from time to time. Material changes are communicated to active wholesale buyers with thirty (30) days’ notice. The “Last Updated” date at the top of this Policy reflects the most recent revision. Continued use of our services after the effective date of changes constitutes acceptance.

2. Personal Data We Collect

2.1 Categories of Personal Data Collected. We collect personal data in the following categories:

2.1.1 Business Contact Information

1. Business name and registered entity details;
2. Contact person name, job title, and role;
3. Business address (registered, billing, delivery);
4. Business contact phone numbers;
5. Business email addresses.

2.1.2 Account Details

1. Wholesale account application details and approval status;
2. Account preferences, such as product categories of interest and preferred contact channel.

2.1.3 Transaction Data

1. Purchase history including products ordered, quantities, prices, and dates;
2. Quote requests and pricing history;
3. Shipping addresses and delivery details;
4. Bank transfer details needed to match payments to orders (payer name, amount, and transfer reference). We take payment by bank transfer and do not collect payment card data;
5. Returns, defects, and credit history.

2.1.4 Communication Data

1. Email correspondence with our sales, support, and account management teams;
2. Messages sent through our website contact, quote, and wholesale enquiry forms;
3. WhatsApp messages exchanged with our team;
4. Notes from calls arranged with our team, where applicable;
5. Meeting notes from sales discussions.

2.1.5 Marketing Data

1. Marketing communications preferences and consents;
2. Newsletter subscriptions and engagement metrics;
3. Event participation and follow-up data;
4. Response to marketing communications.

2.1.6 Behavioral Data

1. Website usage data including pages visited, time spent, navigation patterns, and (with your consent) Microsoft Clarity heatmaps and session recordings;
2. Search queries on our website;
3. Product views and catalog engagement;
4. Device information including IP address, browser type, operating system, screen resolution;
5. Referrer information indicating how you arrived at our website;
6. Cookie and similar tracking technology data per Section 6.

2.1.7 Financial Data (Net Terms Applicants)

1. Banking details and bank reference letters;
2. Trade reference contact details and reference information;
3. Financial statements where requested as part of credit verification;
4. Credit history and payment performance data;
5. Credit insurance information where applicable.

2.2 Categories of Data We Do Not Collect.

1. Sensitive Personal Data: We do not intentionally collect special categories of personal data under GDPR Article 9 (data revealing racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data, health data, sex life, or sexual orientation). If you provide sensitive personal data in unstructured communications (e.g., mentioning a health condition affecting a business decision), please be aware we have no operational basis for processing such data and request that you not share sensitive data through our communication channels.
2. Children’s Data: Our wholesale operation serves business buyers exclusively. We do not knowingly collect personal data from individuals under sixteen (16) years of age. Where we become aware that we have collected data from a child without appropriate parental consent, we delete such data.
3. Government-Issued Identifiers: We do not collect government-issued identifiers (national ID numbers, social security numbers, passport numbers) except where specifically required for export documentation or regulatory compliance (e.g., tax registration numbers for business entities).

3. Sources of Personal Data

3.1 Direct Collection. We collect personal data directly from you when you:

1. Submit a wholesale application or inquiry;
2. Register a wholesale buyer account;
3. Place orders or request quotes;
4. Communicate with our teams via email, WhatsApp, calls arranged with our team, or in person;
5. Subscribe to marketing communications;
6. Visit our website (behavioral data per Section 6);
7. Provide feedback or participate in surveys.

3.2 Indirect Collection from Authorized Parties. We may collect personal data from authorized parties acting on your behalf:

1. Customs brokers handling import documentation;
2. Freight forwarders coordinating shipments;
3. Bank communications regarding bank transfer payments;
4. Trade references and bank references provided during credit verification.

3.3 Public Sources. We may collect personal data from publicly available business sources:

1. Business registration databases;
2. Industry directories;
3. Trade publications;
4. Public records of business contact information.

3.4 Third-Party Sources. We may receive personal data from third-party sources with appropriate legal basis:

1. Credit reference checks, only where we consider net terms for your account;
2. Industry trade associations where membership data is shared;
3. Marketing data providers (where data is supplied with verifiable opt-in consent and we conduct due diligence).

4. Purposes and Legal Bases for Processing

4.1 Purposes of Processing. We process personal data for the following purposes:

4.1.1 Wholesale Operations

1. Processing wholesale applications and account approval;
2. Managing wholesale buyer accounts;
3. Processing quotes, orders, payments, and shipments;
4. Providing customer service and account management;
5. Handling returns, defects, and quality issues;
6. Conducting credit verification and managing payment terms.

4.1.2 Communications

1. Responding to inquiries and support requests;
2. Providing order updates and shipment notifications;
3. Issuing invoices and account communications;
4. Communicating policy changes and operational updates.

4.1.3 Marketing (Where Permitted)

1. Sending newsletters and product updates (with appropriate consent or legitimate interest basis);
2. Promoting new products and categories;
3. Inviting buyers to industry events;
4. Conducting market research and buyer satisfaction surveys.

4.1.4 Service Improvement

1. Analyzing website usage to improve user experience;
2. Analyzing buyer behavior patterns to improve catalog and operations;
3. Conducting market research and analytics;
4. Developing new products and services.

4.1.5 Legal, Regulatory, and Operational Compliance

1. Complying with tax, accounting, and regulatory recordkeeping requirements;
2. Complying with export, customs, and trade compliance regulations;
3. Responding to lawful requests from regulatory authorities;
4. Establishing, exercising, and defending legal rights;
5. Preventing fraud and protecting against unauthorized access.

4.2 Legal Bases for Processing (GDPR / UK GDPR). We process personal data on the following legal bases under GDPR Article 6:

1. Steps Before a Contract (Article 6(1)(b)): Processing needed to take steps at your request before entering into a contract: our quote request, lead, contact, and wholesale enquiry or application forms, and our replies to them.
2. Performance of a Contract (Article 6(1)(b)): Processing necessary to perform our wholesale supply contracts: handling orders and sending order emails, matching bank transfer payments, shipments, returns, and defect claims.
3. Legitimate Interests (Article 6(1)(f)): Processing necessary for our legitimate interests where these do not override your fundamental rights: basic business communications, security, fraud prevention, and certain types of business-to-business marketing.
4. Compliance with Legal Obligations (Article 6(1)(c)): Processing required to comply with legal obligations: tax and accounting records, export documentation, regulatory compliance.
5. Consent (Article 6(1)(a)): Processing based on your consent: Microsoft Clarity analytics (cookies, heatmaps, and session recordings) and marketing communications where consent is required.

You may withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

4.3 Processing of Special Categories. As stated in Section 2.2, we do not intentionally process special categories of personal data.

5. Third-Party Sharing

5.1 Categories of Third Parties. We share personal data with the following categories of third parties:

5.1.1 Hosting, Database, and Email

1. Hostinger: website hosting and content delivery network (CDN), including the server and access logs described in Section 6.4;
2. Supabase (Postgres database): stores orders, contact form submissions, and wholesale enquiry submissions;
3. Resend: sends order emails and replies to form submissions.

5.1.2 Analytics

1. Microsoft Clarity: website analytics using cookies, heatmaps, and session recordings, on a consent basis (see Section 6). Our website runs no advertising pixels and shares no data with advertising platforms.

5.1.3 Customer Support and Messaging

1. Email: we do not use a third-party help-desk; messages are answered from contact@ryden.store;
2. WhatsApp (Meta): WhatsApp messages you exchange with our team are carried and processed by WhatsApp, operated by Meta.

5.1.4 Banks

1. Our bank and yours: payer name, amount, and transfer reference, used to match bank transfers to orders.

5.1.5 Shipping and Logistics

1. Manufacturers and suppliers: delivery details needed to ship your order directly from the origin warehouse or factory;
2. Freight forwarders and carriers: the tracked courier, sea freight forwarder, or air freight forwarder named in your quote, as needed for a specific shipment;
3. Customs brokers: Where Ryden engages customs brokers for export documentation, broker information sharing as needed.

5.1.6 Credit Verification (Net Terms Only)

1. References: the trade and bank references you provide, contacted only where we consider net terms for your account;
2. Trade credit insurer: only if we arrange credit insurance on your account, and after telling you.

5.1.7 Legal Services

1. Legal counsel: External legal counsel, where engaged for legal matters affecting buyer relationships.

5.1.8 Regulatory and Governmental Authorities

1. Tax authorities: tax authorities as legally required;
2. Customs authorities: customs authorities (origin and destination) as legally required;
3. Privacy and data protection authorities: Privacy regulators as legally required;
4. Law enforcement: Where legally required to respond to lawful requests.

5.2 Purpose of Each Sharing. Each third-party sharing serves specific operational, regulatory, or legitimate business purposes. Sharing is limited to the personal data necessary for the specific purpose.

5.3 Data Processor Agreements. Where service providers process personal data on Ryden’s behalf, we rely on their data processing terms, which require the provider to:

1. Process personal data only on Ryden’s documented instructions;
2. Maintain confidentiality;
3. Implement appropriate technical and organizational security measures;
4. Cooperate with Ryden’s privacy obligations.

5.4 International Data Transfers. Personal data may be transferred to and processed in countries outside the data subject’s country of residence, including Pakistan, where Ryden’s team is based, and the countries where our service providers operate. Where personal data is transferred from jurisdictions with data transfer restrictions (notably EU/EEA, UK, and certain other markets), we rely on the following safeguards:

1. Standard Contractual Clauses (SCCs): the EU SCCs (2021 version) included in our service providers’ data processing terms, for transfers from the EU/EEA;
2. UK Addendum to the EU SCCs: included in those data processing terms, for transfers from the UK;
3. Adequacy decisions: only where the destination country has an adequacy decision from the relevant authority. Pakistan does not have an EU or UK adequacy decision, and we do not rely on one;
4. Other appropriate safeguards as required by applicable law.

5.5 No Sale of Personal Data. Ryden does not sell personal information or share it for cross-context behavioral advertising. Our website runs no advertising pixels. California residents’ rights are described in Section 11.3.

6. Cookies and Similar Tracking Technologies

6.1 Cookies and Trackers Used. Our website uses cookies and similar tracking technologies for various purposes:

6.1.1 Strictly Necessary Cookies

Essential for website functionality, security, and user authentication. These cannot be disabled without affecting website function.

6.1.2 Functional Cookies

Remember user preferences and improve user experience. Includes language preferences, currency preferences, and similar functional settings.

6.1.3 Analytics Cookies

Help us understand how users interact with our website (Microsoft Clarity cookies, heatmaps, and session recordings). Analytics cookies are used on a consent basis.

6.1.4 No Advertising Cookies

Our website runs no advertising pixels or advertising cookies, and we do not share data with advertising platforms.

6.2 Cookie Consent. Upon visiting our website, you are presented with a cookie consent banner allowing you to:

1. Accept all cookies;
2. Reject all cookies except strictly necessary;
3. Customize cookie preferences by category;
4. Withdraw or modify cookie consent at any time through the “Cookie settings” link in the site footer.

6.3 Cookie Retention Periods. Cookie retention periods vary by cookie type:

1. Session cookies: Deleted when you close your browser;
2. Persistent cookies: Retained for periods ranging from 30 days to 2 years depending on the specific cookie purpose.

The cookie preference center provides specific retention information for each cookie.

6.4 Server Logs. Our hosting providers log technical information including IP addresses, browser types, request times, and pages requested for security, debugging, and operational purposes. Server logs are kept for a limited period set by our hosting providers for security, then deleted.

7. Data Retention

7.1 Retention Principles. We retain personal data only as long as necessary for the purposes for which it was collected, subject to legal, regulatory, or operational requirements requiring longer retention.

7.2 Specific Retention Periods.

1. Active Wholesale Account Data: Retained for the duration of the active wholesale relationship;
2. Order, Invoice, and Payment Records (Including Closed Accounts): Kept for as long as tax and accounting law requires (up to six (6) years). After this period, the records are deleted or anonymized. Other data from a closed account is deleted or anonymized once it is no longer needed.
3. Quote Requests Without Subsequent Order: Retained for two (2) years from submission date, allowing for follow-up and account development.
4. Marketing Communications Data: Retained until consent is withdrawn or, where processing is based on legitimate interest, for two (2) years from last engagement.
5. Cookie Data: Per the retention periods specified in the cookie preference center.
6. Communication Records: Retained for the longer of (i) as long as the related account, order, or enquiry records are kept under this Section, or (ii) the duration of any active dispute or legal matter affected by the communication.
7. Financial and Credit Data: Bank transfer and payment records are kept as described in item (b). Credit application data (trade and bank references) is kept for the duration of any net terms arrangement, then deleted or anonymized unless tax or accounting law requires it to be kept longer (up to six (6) years).
8. Server Logs: Kept for a limited period set by our hosting providers for security, then deleted.

7.3 Retention Beyond Standard Periods. Personal data may be retained beyond standard periods where required for:

1. Active legal proceedings or disputes;
2. Regulatory investigations or inquiries;
3. Establishment, exercise, or defense of legal claims;
4. Specific legal obligations requiring longer retention.

7.4 Data Deletion. Upon expiration of the applicable retention period, personal data is deleted, anonymized, or aggregated such that the individual is no longer identifiable.

8. Data Subject Rights

8.1 Rights Available to Data Subjects. Subject to applicable law and jurisdiction-specific variations, you have the following rights regarding your personal data:

1. Right of Access: To know what personal data we hold about you and to receive a copy;
2. Right to Rectification: To request correction of inaccurate or incomplete personal data;
3. Right to Erasure (“Right to be Forgotten”): To request deletion of your personal data in certain circumstances;
4. Right to Restrict Processing: To request restriction of processing in certain circumstances;
5. Right to Data Portability: To receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller;
6. Right to Object: To object to processing based on legitimate interest, processing for direct marketing, or processing for scientific / historical research;
7. Rights Related to Automated Decision-Making: To not be subject to a decision based solely on automated processing with significant legal effects;
8. Right to Withdraw Consent: Where processing is based on consent, to withdraw consent at any time;
9. Right to Lodge a Complaint: With the supervisory authority in your jurisdiction.

8.2 How to Exercise Rights. To exercise your rights, email contact@ryden.store with subject line “Data Subject Rights Request”. Email is our channel for rights requests.

We respond to rights requests within thirty (30) days of receipt. Complex requests may require additional time, in which case we notify you and explain the reason.

8.3 Identity Verification. To protect against unauthorized rights requests, we may require identity verification before processing your request. Verification methods include:

1. Confirming details from your active account;
2. Requesting copies of identification documents (limited to what’s necessary);
3. Confirming the request from the email address we already hold for you.

8.4 No Fee for Rights Requests. Rights requests are generally provided free of charge. Excessive or unfounded requests (particularly repetitive requests) may be subject to a reasonable administrative fee or refusal, as permitted by applicable law.

8.5 Limits on Rights. Some rights are subject to legal limits:

1. Right of access does not include third parties’ personal data;
2. Right to erasure does not apply where data must be retained for legal compliance or for establishment, exercise, or defense of legal claims;
3. Other limits apply per applicable law.

9. Data Security

9.1 Security Measures. We use the following technical and organizational security measures to protect personal data:

1. Encryption in Transit: HTTPS/TLS encryption for data in transit;
2. Access Limits: Access to personal data is limited to authorized team members;
3. Password-Protected Admin: Our order and enquiry admin area is password-protected;
4. Provider Security: Our hosting and database providers’ own physical and infrastructure security.

9.2 Data Breach Notification. In the event of a personal data breach, we will:

1. Investigate the breach scope and impact;
2. Notify supervisory authorities within seventy-two (72) hours of becoming aware of the breach where required by applicable law;
3. Notify affected data subjects without undue delay where the breach is likely to result in high risk to the rights and freedoms of natural persons;
4. Document the breach, its effects, and remediation actions.

9.3 No Guarantee of Absolute Security. While we take reasonable security measures, no system is absolutely secure. We cannot guarantee against all possible security risks. You are responsible for maintaining the confidentiality of your account credentials.

10. International Data Transfers

10.1 Locations of Processing. Personal data is processed in:

1. Pakistan: where Ryden’s team is based and accesses personal data;
2. Service Provider Locations: the locations set out in the terms of Hostinger (hosting and CDN), Supabase (database), Resend (email), Microsoft Clarity (analytics), and WhatsApp (messaging), which may include the United States and the European Union;
3. Order-Specific Locations: the countries of origin, transit, and destination of a specific shipment, where manufacturers, carriers, customs brokers, and banks handle the data needed for that order.

10.2 Transfer Safeguards. For transfers from jurisdictions with data transfer restrictions, we use the following safeguards:

1. From EU/EEA: the Standard Contractual Clauses (SCCs, 2021 version) in our service providers’ data processing terms;
2. From UK: the UK Addendum to the EU SCCs in those data processing terms;
3. From China: transfers out of mainland China only under a mechanism PIPL permits, such as the Standard Contract approved by the Cyberspace Administration of China (CAC Standard Contract), with separate consent where PIPL requires it;
4. From other jurisdictions: Appropriate safeguards as required by applicable law.

10.3 Right to Information. You have the right to be informed of the specific safeguards used for international transfers of your data. Email contact@ryden.store for the transfer mechanism information applicable to your data.

11. Jurisdiction-Specific Provisions

11.1 European Union and European Economic Area (GDPR).

1. Data Controller: Ryden Store Ltd (trading as Ryden), contact details per Section 1.2;
2. Lead Supervisory Authority: Ryden has no establishment in the EU/EEA, so no lead supervisory authority applies; you may complain to the supervisory authority in your member state;
3. EU Representative: We have not yet appointed an EU representative. Until we do, contact us directly at contact@ryden.store; the representative’s details will be published here once appointed;
4. Your Rights: All rights specified in Section 8 are available to EU/EEA data subjects;
5. Right to Complaint: You have the right to lodge a complaint with the supervisory authority in your EU/EEA member state of residence.

11.2 United Kingdom (UK GDPR).

1. Data Controller: Ryden Store Ltd (trading as Ryden), contact details per Section 1.2;
2. UK Supervisory Authority: Information Commissioner’s Office (ICO);
3. UK Representative: We have not yet appointed a UK representative. Until we do, contact us directly at contact@ryden.store; the representative’s details will be published here once appointed;
4. Your Rights: All rights specified in Section 8 are available to UK data subjects.

11.3 California (CCPA and CPRA). California residents have the following specific rights:

1. Right to Know: Categories of personal information collected, sources, purposes, third parties to whom it is shared;
2. Right to Delete: Request deletion of personal information subject to exceptions;
3. Right to Correct: Request correction of inaccurate personal information;
4. Right to Opt-Out of Sale / Sharing: Ryden does not sell personal information or share it for cross-context behavioral advertising, so there is nothing to opt out of. Questions: contact@ryden.store;
5. Right to Limit Use of Sensitive Personal Information: Direct businesses to limit use of sensitive personal information;
6. Right to Non-Discrimination: Not be discriminated against for exercising your rights;
7. Authorized Agent: You may designate an authorized agent to make requests on your behalf;
8. Verification: We will verify your identity before processing requests using methods commensurate with the data sensitivity.

California residents can make requests by email to contact@ryden.store with subject line “California Privacy Request”.

11.4 China (PIPL).

1. Cross-Border Transfers: Personal information of individuals in mainland China is transferred out of mainland China only under a mechanism PIPL permits (such as the CAC Standard Contract), with separate consent where PIPL requires it;
2. PIPL Representative: We have not appointed a representative in mainland China; contact contact@ryden.store;
3. Your Rights: PIPL provides rights similar to GDPR; specific rights and exercise methods detailed in Section 8.

11.5 Canada (PIPEDA).

1. Privacy Officer: Privacy requests for PIPEDA purposes go to contact@ryden.store;
2. Your Rights: Access, correction, withdrawal of consent;
3. Right to Complaint: Office of the Privacy Commissioner of Canada (OPC).

11.6 Japan (APPI).

1. APPI Compliance: Ryden complies with APPI requirements for personal information handling;
2. Your Rights: Access, correction, and use suspension rights per APPI;
3. Right to Complaint: Personal Information Protection Commission (PPC).

11.7 Brazil (LGPD).

1. LGPD Compliance: Ryden complies with LGPD requirements;
2. LGPD Contact Channel: contact@ryden.store;
3. Your Rights: LGPD provides comprehensive data subject rights similar to GDPR;
4. Right to Complaint: National Data Protection Authority (ANPD).

11.8 Australia.

1. Australia Privacy Act Compliance: Ryden complies with Australian Privacy Principles (APPs);
2. Your Rights: Access and correction rights per Australia Privacy Act;
3. Right to Complaint: Office of the Australian Information Commissioner (OAIC).

12. Children’s Privacy

12.1 Age Limitation. Our wholesale services are intended for business buyers. We do not knowingly collect personal data from individuals under sixteen (16) years of age (or higher age threshold as required by applicable law in specific jurisdictions).

12.2 Discovery of Child Data. Where we discover that we have inadvertently collected data from a child without appropriate parental consent, we delete the data and terminate any associated account.

12.3 Reporting Suspected Child Data. If you believe we have collected personal data from a child, please contact us immediately at contact@ryden.store.

13. Automated Decision-Making

13.1 Limited Automated Decision-Making. We do not currently use automated decision-making with significant legal effects on data subjects. Credit verification (Section 3 of the Net Terms Policy) involves human review of automated credit reports rather than purely automated decision-making.

13.2 Profiling. We conduct limited profiling for analytics and marketing purposes, such as segmenting buyers by purchase categories or geographic regions. Such profiling does not result in automated decisions with significant effects.

13.3 Future Changes. If we implement automated decision-making with significant effects in the future, we will update this Policy and provide notice to affected data subjects.

14. Contact Information

14.1 Privacy Inquiries.

Ryden Store Ltd (trading as Ryden)
Privacy requests: contact@ryden.store

14.2 Data Subject Rights Requests.

Email: contact@ryden.store with subject line “Data Subject Rights Request”

14.3 California Consumer Rights.

California-Specific Requests: contact@ryden.store (subject line “California Privacy Request”)

14.4 EU Representative. We have not yet appointed an EU representative. Until we do, contact us directly at contact@ryden.store; the representative’s details will be published here once appointed.

14.5 UK Representative. We have not yet appointed a UK representative. Until we do, contact us directly at contact@ryden.store; the representative’s details will be published here once appointed.

14.6 China PIPL Representative. We have not appointed a representative in mainland China; contact contact@ryden.store.

14.7 LGPD Contact Channel. LGPD contact channel: contact@ryden.store.

15. Updates to This Policy

15.1 Periodic Review. We review this Policy at least annually and update it as our practices change, as third-party service providers change, or as applicable law evolves.

15.2 Material Changes. Material changes to this Policy are communicated through:

1. Email notification to active wholesale buyers;
2. Prominent notice on our website;
3. Updated “Last Updated” date at the top of the Policy.

15.3 Continued Use. Continued use of our services after the effective date of policy changes constitutes acceptance of the updated Policy. Where consent is the legal basis for specific processing, we obtain renewed consent for new processing purposes.

Exercising your rights or have a privacy question?

Email contact@ryden.store with subject line “Data Subject Rights Request” or your question. We respond within 30 days for rights requests under GDPR, UK GDPR, CCPA/CPRA, and other applicable regimes.

Related policies: Net Terms Policy (credit verification data handling), Customs and Import Documentation Policy (data shared with customs brokers and authorities), Quality Testing Policy (buyer-specific quality data confidentiality), Return and Defect Policy, and Shipping and Freight Policy.