Privacy Policy

Vista Innovations Limited, trading as Imagelet, respects your privacy and is committed to handling personal data responsibly.

This Privacy Policy explains how we collect, use, disclose, store, and protect personal data when you:

• Visit or use the Imagelet website
• Create or use an Imagelet account
• Purchase Imagelets, frames, artwork, accessories, or other products
• Upload photographs, artwork, text, or other content
• Contact customer support
• Subscribe to marketing communications
• Participate in surveys, promotions, reviews, or collaborations
• Otherwise interact with Imagelet

It also explains the choices and rights that may be available to you.

By using Imagelet, you acknowledge that your personal data will be handled as described in this Privacy Policy.

Imagelet is operated by:

Vista Innovations Limited

Trading as Imagelet

Flat A, 12/F, ZJ 300

300 Lockhart Road

Wan Chai, Hong Kong

Business Registration Number: 75910565

Privacy contact: info@imagelet.com

For the purposes of applicable privacy and data-protection laws, Vista Innovations Limited is generally the organization responsible for determining why and how personal data is processed through Imagelet.

Our service providers may separately act as processors, contractors, service providers, or independent controllers of personal data, depending on their role and applicable law.

This Privacy Policy applies to personal data processed through:

• The Imagelet website
• Imagelet customer accounts
• Imagelet checkout and order services
• Image upload and customization tools
• The Imagelet Art Marketplace
• Customer-service communications
• Marketing emails and other communications
• Imagelet surveys, reviews, promotions, and collaborations
• Related services that link to this Privacy Policy

This Policy does not govern third-party websites, services, platforms, or applications that have their own privacy policies.

For example, payment processors, shipping carriers, social-media platforms, and external websites may process your personal data under their own terms and privacy notices.

The personal data we collect depends on how you interact with Imagelet.

3.1 Contact and Identity Information

We may collect:

• Full name
• Email address
• Telephone number
• Billing address
• Shipping address
• Country or region
• Company name, where provided
• Account username
• Other contact details you choose to provide

3.2 Account Information

If you create an account, we may collect:

• Account login details
• Encrypted or hashed password information
• Saved addresses
• Order history
• Account preferences
• Wishlist or saved-product information
• Communication preferences
• Account activity
• Authentication and security information

You are responsible for keeping your account credentials confidential.

3.3 Order and Transaction Information

When you place or attempt to place an order, we may collect:

• Products ordered
• Product sizes, styles, colors, finishes, and quantities
• Uploaded content associated with the order
• Personalization instructions
• Order number
• Purchase date
• Order value
• Currency
• Discounts and promotional codes
• Billing and delivery information
• Payment status
• Refund and replacement information
• Shipping method
• Tracking information
• Customs and import information
• Customer-service history relating to the order

3.4 Payment Information

Payments may be processed through third-party payment providers, including Stripe, Airwallex, or other payment services made available at checkout.

Depending on the payment method, these providers may collect:

• Payment-card details
• Bank or wallet information
• Billing information
• Transaction identifiers
• Device and fraud-prevention information
• Payment authorization results

Imagelet does not ordinarily receive or store complete payment-card numbers or card security codes when payments are processed directly by a third-party payment provider.

We may receive limited payment information, such as:

• Payment status
• Card type
• Last four digits of a payment card
• Payment-provider reference number
• Billing name and address
• Fraud or risk indicators
• Refund and dispute information

Payment providers process personal data under their own privacy policies and legal obligations.

3.5 Uploaded Photographs and Other Content

When you create a custom Imagelet or use another upload feature, we may collect and process:

• Photographs
• Artwork
• Illustrations
• Graphics
• Text
• Designs
• Logos
• Personalization instructions
• File names and metadata
• Image dimensions and technical properties
• Other material you choose to upload

Uploaded content may include identifiable individuals, children, locations, personal events, or other personal information.

You should upload content only where you have the right and permission to do so.

You are responsible for obtaining any permissions required from people shown or identified in your uploaded content.

3.6 Customer-Service Information

When you contact us, we may collect:

• Your name and contact information
• Order details
• The contents of your message
• Photographs or videos of a product or package
• Shipping labels
• Screenshots
• Call, chat, or email history
• Complaint information
• Refund or replacement requests
• Other information you choose to provide

3.7 Reviews, Feedback, and Survey Information

When you submit a review, survey response, suggestion, or other feedback, we may collect:

• Your name or chosen display name
• Review content
• Ratings
• Photographs or videos
• Survey responses
• Product preferences
• Experience information
• Consent to publish or use your submission

Do not include sensitive or unnecessary personal information in public reviews.

3.8 Marketing Information

If you subscribe to marketing or interact with our promotional communications, we may collect:

• Email address
• Subscription status
• Marketing preferences
• Consent records
• Email delivery information
• Opens and clicks, where permitted
• Campaign engagement
• Unsubscribe requests
• Promotion participation

3.9 Device, Website, and Technical Information

When you use our website, we or our service providers may automatically collect:

• IP address
• Browser type and version
• Device type
• Operating system
• Language
• Approximate location derived from an IP address
• Referring webpage
• Pages viewed
• Links clicked
• Date and time of access
• Session duration
• Shopping-cart activity
• Checkout activity
• Error logs
• Cookie and similar-technology identifiers
• Security and fraud-prevention signals

3.10 Information from Third Parties

We may receive information from third parties such as:

• Payment processors
• Shipping and delivery providers
• Printing and production partners
• Email and customer-support providers
• Account authentication providers
• Fraud-prevention providers
• Business partners
• Artists, publishers, licensors, or collaborators
• Publicly available sources
• Social-media platforms, when you interact with us through them

The information received depends on the third party, your settings, and your interaction with that service.

You may choose not to provide personal data, but certain information is required for us to provide particular services.

For example, we generally need:

• Contact details to communicate with you
• Delivery information to ship an order
• Billing or payment information to process payment
• Product selections to fulfil an order
• Uploaded content to manufacture a custom Imagelet
• Relevant evidence to investigate a damaged, defective, missing, or incorrect product

If required information is not provided, we may be unable to:

• Create or maintain your account
• Process payment
• Accept or fulfil your order
• Deliver a product
• Respond to a support request
• Provide a refund or replacement
• Offer a requested service

Optional information will be identified where reasonably practical.

We may use personal data for the purposes described below.

5.1 Providing Our Services

We use personal data to:

• Operate the Imagelet website
• Create and manage customer accounts
• Display product and account information
• Maintain shopping carts
• Process orders
• Personalize products
• Manufacture custom Imagelets
• Package and ship products
• Provide tracking information
• Process refunds, replacements, and cancellations
• Maintain order records
• Provide customer support

5.2 Processing Uploaded Content

We may process uploaded content to:

• Store the file temporarily or for an appropriate retention period
• Check file type, dimensions, and technical suitability
• Resize, crop, format, or convert the file
• Create website previews
• Prepare print-ready production files
• Print and manufacture the ordered product
• Conduct production and quality-control checks
• Resolve a complaint or production issue
• Produce an authorized replacement or reorder
• Detect prohibited, unlawful, or infringing material
• Protect customers, rights holders, Imagelet, and our service providers

Uploaded content may be accessed by authorized personnel or service providers where reasonably necessary for production, quality control, customer support, security, or legal compliance.

5.3 Payment and Fraud Prevention

We use relevant information to:

• Process and confirm payments
• Verify transactions
• Prevent unauthorized purchases
• Detect fraud and abuse
• Manage refunds and chargebacks
• Resolve payment disputes
• Protect our customers and business
• Comply with financial and legal obligations

5.4 Shipping and Fulfilment

We use personal data to:

• Prepare orders for shipment
• Generate shipping documents and labels
• Arrange carrier collection
• Deliver products
• Provide tracking information
• Process customs documentation
• Investigate delayed or missing packages
• Manage returned, refused, or undeliverable shipments

5.5 Customer Service

We use personal data to:

• Respond to questions
• Investigate problems
• Verify orders
• Provide technical or installation guidance
• Review damaged or defective product claims
• Process returns, replacements, and refunds
• Maintain records of customer communications
• Improve support quality

5.6 Website Operation and Improvement

We may use website and device information to:

• Maintain and secure the website
• Diagnose technical problems
• Prevent attacks and misuse
• Understand how customers use our website
• Improve navigation, checkout, and product presentation
• Measure website performance
• Test new features
• Analyze product interest and demand
• Develop and improve products and services

5.7 Marketing

Where permitted by law, we may use your contact and engagement information to:

• Send product news
• Announce new collections
• Promote artists and marketplace content
• Offer discounts and promotions
• Send abandoned-cart or product reminder communications
• Personalize marketing
• Measure campaign performance
• Invite you to participate in surveys or events

You can unsubscribe from marketing emails at any time by using the unsubscribe link in the email or contacting us.

Unsubscribing from marketing does not prevent us from sending transactional or service-related messages about your account or orders.

5.8 Legal, Safety, and Compliance Purposes

We may use personal data to:

• Comply with laws and lawful requests
• Enforce our Terms of Service
• Protect intellectual-property rights
• Investigate suspected infringement
• Prevent illegal, harmful, or abusive activity
• Establish, exercise, or defend legal claims
• Respond to regulators, courts, law-enforcement agencies, or government authorities
• Protect the rights, safety, property, and security of customers, Imagelet, our partners, and others

5.9 Business Administration

We may use personal data to:

• Maintain business and accounting records
• Conduct audits
• Manage suppliers and service providers
• Assess business performance
• Complete corporate transactions
• Obtain professional advice
• Maintain insurance
• Meet tax and reporting obligations

Depending on your location and the applicable law, we may process personal data under one or more of the following legal grounds.

6.1 Performance of a Contract

We process information where necessary to:

• Accept and fulfil your order
• Manufacture a custom product
• Deliver products
• Manage your account
• Process payments
• Provide customer support
• Handle returns, refunds, and replacements

6.2 Legitimate Interests

We may process information where necessary for legitimate business interests, provided those interests are not overridden by your rights.

These interests may include:

• Operating and improving our business
• Securing the website
• Preventing fraud
• Understanding product demand
• Providing effective customer support
• Maintaining business records
• Protecting intellectual-property rights
• Establishing and defending legal claims
• Communicating with existing customers about related products, where permitted

6.3 Consent

We may rely on consent for activities such as:

• Certain marketing communications
• Optional cookies
• Publishing customer photographs or testimonials
• Using uploaded content in advertising or social media
• Other processing where consent is required

You may withdraw consent at any time. Withdrawal will not affect processing that occurred lawfully before consent was withdrawn.

6.4 Legal Obligations

We may process information where necessary to comply with:

• Tax obligations
• Accounting requirements
• Consumer-protection laws
• Court orders
• Regulatory requirements
• Lawful government requests
• Fraud-prevention obligations
• Other applicable legal duties

6.5 Protection of Rights and Safety

Where permitted by law, we may process information to protect the vital interests, safety, rights, or property of an individual, Imagelet, or another party.

Private uploaded content is used to provide the services you request, including creating, manufacturing, fulfilling, and supporting your order.

Imagelet does not use private customer-uploaded photographs or artwork to train generative artificial intelligence models unless the customer has separately and expressly authorized that use.

We may use automated systems for limited operational purposes, such as:

• File validation
• Image sizing
• Cropping previews
• Resolution warnings
• Content safety or fraud checks
• Spam detection
• Website security
• Customer-support routing

Automated tools may not always be accurate. Where appropriate, an authorized person may review a file, decision, or warning.

We will not publicly display, advertise, license, or sell your private uploaded content unless:

• You request or authorize that use
• The content was submitted through a feature intended for public display
• The use is required by law
• The use is reasonably necessary to investigate misuse, infringement, or a legal claim

Imagelet is not intended to be used independently by children who are not legally capable of entering into a contract.

A parent or legal guardian may purchase products containing photographs of children, provided that the purchaser has the right and authority to upload and use those photographs.

We ask customers not to upload:

• Images that exploit or endanger a child
• Sexual or intimate images of a minor
• Images uploaded without appropriate authority
• Unnecessary sensitive information about a child

If we learn that a child has provided personal data without required parental or guardian authorization, we may delete the information or take other appropriate action.

A parent or guardian who believes that a child has provided personal data improperly may contact us at info@imagelet.com.

We do not disclose personal data except as described in this Privacy Policy or as otherwise communicated at the time of collection.

We may share personal data with the following categories of recipients.

9.1 Website and Commerce Providers

We use WordPress, WooCommerce, hosting providers, database providers, security services, and related technology providers to operate our website and store.

These providers may process:

• Account information
• Order information
• Uploaded content
• Website activity
• Device information
• Customer communications

9.2 Payment Providers

We may share transaction and checkout information with payment providers such as Stripe, Airwallex, banks, card networks, digital-wallet providers, and fraud-prevention services.

These providers may independently determine how certain payment and compliance information is processed.

9.3 Printing and Production Partners

We may share information with printing, manufacturing, production, and quality-control providers where necessary to create your order.

Information shared may include:

• Uploaded content
• Product specifications
• Order identifiers
• Production instructions
• Limited contact or delivery information, where necessary
• Replacement or quality-control information

Printing and production providers are expected to process customer information only for authorized business purposes and to apply appropriate confidentiality and security protections.

9.4 Shipping and Logistics Providers

We may share:

• Recipient name
• Delivery address
• Telephone number
• Email address
• Order or package reference
• Customs information
• Delivery instructions

with shipping carriers, freight providers, fulfilment partners, customs brokers, postal services, and other logistics providers.

9.5 Email and Customer-Support Providers

We may use third-party providers for:

• Transactional emails
• Marketing communications
• Customer-service email
• Helpdesk or chat tools
• Survey delivery
• Communication management

These providers may process contact details, message content, order references, and communication activity.

9.6 Professional Advisers

We may share information with:

• Lawyers
• Accountants
• Auditors
• Insurers
• Consultants
• Tax advisers
• Other professional advisers

where reasonably necessary for professional services, compliance, or legal claims.

9.7 Government and Legal Recipients

We may disclose personal data to:

• Courts
• Regulators
• Tax authorities
• Customs authorities
• Law-enforcement agencies
• Government departments
• Intellectual-property rights holders

where required by law or reasonably necessary to protect legal rights, investigate wrongdoing, or respond to a valid request.

9.8 Corporate Transactions

If Vista Innovations Limited or the Imagelet business is involved in a merger, acquisition, financing, restructuring, insolvency, sale of assets, or similar transaction, personal data may be disclosed to potential and actual purchasers, investors, lenders, advisers, and transaction participants.

Any recipient will be expected to handle personal data appropriately and use it only for legitimate transaction-related purposes.

9.9 With Your Direction or Consent

We may share information when you ask us to do so or give us permission.

For example, we may publish a customer photograph, testimonial, or social-media submission where the customer has authorized public use.

Imagelet sells and ships products internationally.

Our website, cloud systems, payment providers, email providers, printing providers, customer-support providers, and shipping partners may operate in multiple countries.

As a result, personal data may be:

• Collected in one country
• Stored in another country
• Accessed from another country
• Transferred between countries
• Processed by international service providers

These countries may have privacy and data-protection laws that differ from those in your country.

Where required by applicable law, we use appropriate measures designed to protect personal data during international transfers. These measures may include:

• Contractual data-protection terms
• Standard contractual clauses
• Service-provider security obligations
• Data-processing agreements
• Access controls
• Encryption
• Transfer-risk assessments
• Other recognized legal mechanisms

You may contact us for more information about safeguards relevant to your personal data.

We may use your name, email address, product interests, order relationship, and marketing engagement to send information about:

• Imagelet products
• Frames and accessories
• Art Marketplace releases
• Artist collaborations
• New collections
• Product updates
• Promotions
• Surveys
• Events
• Related Imagelet services

Where consent is required, we will seek your consent before using personal data for direct marketing.

We will not provide personal data to another business for that business’s own direct marketing without any consent required by applicable law.

You can opt out of email marketing at any time by:

• Clicking the unsubscribe link in a marketing email
• Changing available account preferences
• Contacting info@imagelet.com

We may retain limited suppression information to ensure that we respect your opt-out request.

Even after opting out, you may continue to receive non-marketing communications relating to:

• Orders
• Payments
• Shipping
• Product safety
• Account security
• Customer support
• Changes to terms or policies
• Other service-related matters

We use cookies and similar technologies to operate, protect, understand, and improve our website.

These technologies may include:

• Browser cookies
• Local storage
• Pixels
• Tags
• Software development kits
• Server logs
• Similar identifiers

12.1 Necessary Technologies

Necessary cookies and technologies may be used to:

• Keep the website functioning
• Maintain a shopping cart
• Process checkout
• Remember account sessions
• Prevent fraud
• Protect website security
• Balance website traffic
• Store privacy preferences

These technologies may be required for the website to work properly.

12.2 Preference Technologies

Preference cookies may remember:

• Language
• Region
• Currency
• Display preferences
• Product selections
• Other settings

12.3 Analytics Technologies

Analytics technologies may help us understand:

• How visitors reach our website
• Which pages are viewed
• How customers navigate the website
• Whether errors occur
• How checkout performs
• Which products and features attract interest

12.4 Advertising Technologies

If Imagelet uses advertising or retargeting technologies, those technologies may be used to:

• Measure advertising performance
• Limit repeated advertisements
• Understand campaign effectiveness
• Show more relevant advertising
• Create or use advertising audiences

Where required, we will request consent before enabling optional analytics or advertising technologies.

12.5 Cookie Choices

Depending on your location and our website configuration, you may be able to manage optional cookies through:

• A cookie banner
• A privacy-preference center
• Browser settings
• Device settings
• Provider opt-out tools

Blocking some technologies may affect website functionality.

A separate Cookie Policy or cookie-preference interface may provide additional information about specific technologies currently in use.

Imagelet does not sell personal data to third parties in exchange for money.

Some privacy laws define “sale,” “sharing,” or “targeted advertising” more broadly and may include certain uses of advertising cookies or disclosures to advertising partners.

Where Imagelet engages in activity treated as a sale, sharing, or targeted advertising under applicable law, eligible users may have the right to opt out.

Where required, we will provide an appropriate privacy-choice mechanism, such as:

• “Your Privacy Choices”
• “Do Not Sell or Share My Personal Information”
• Cookie or advertising preference controls

We will also recognize browser-based opt-out preference signals where required by applicable law and technically applicable to our website.

We retain personal data only for as long as reasonably necessary for the purposes described in this Policy, including legal, accounting, security, customer-service, and dispute-resolution requirements.

Retention periods vary depending on the type of information.

14.1 Account Information

Account information may be retained while your account remains active and for an appropriate period after closure to:

• Complete outstanding orders
• Respond to support requests
• Prevent fraud
• Resolve disputes
• Meet legal obligations

14.2 Order and Transaction Records

Order, payment, invoice, tax, shipping, and refund records may be retained for the period required by applicable tax, accounting, consumer-protection, anti-fraud, and legal requirements.

14.3 Uploaded Content

Uploaded content may be retained for:

• Order production
• Quality control
• Delivery
• Customer support
• Replacements
• Authorized reorders
• Fraud or infringement investigation
• Legal compliance

We aim not to retain private uploaded production files longer than reasonably necessary for these purposes.

The exact period may vary depending on:

• The type of product
• Production and fulfilment arrangements
• Whether you maintain an account
• Whether a reorder feature is offered
• Whether an issue or dispute remains open
• Backup and system-deletion cycles
• Legal requirements

You may contact us to ask whether particular uploaded content remains associated with your account or order and to request deletion where applicable.

14.4 Customer-Service Records

Support communications may be retained for an appropriate period to:

• Resolve current and future issues
• Train and supervise support operations
• Establish a record of agreed remedies
• Prevent fraud
• Defend legal claims

14.5 Marketing Information

Marketing information may be retained while you remain subscribed.

After you unsubscribe, we may retain limited information in a suppression list so that we do not send marketing communications against your wishes.

14.6 Website and Security Logs

Website, device, security, and fraud-prevention records may be retained for periods appropriate to system security, analysis, troubleshooting, and legal compliance.

14.7 Backups

Information removed from active systems may remain temporarily in encrypted or restricted backups until those backups are overwritten or deleted through ordinary retention cycles.

We use reasonable technical and organizational measures designed to protect personal data against:

• Unauthorized access
• Accidental loss
• Misuse
• Alteration
• Unauthorized disclosure
• Destruction

Depending on the system and data involved, measures may include:

• Encryption in transit
• Encryption at rest where appropriate
• Password hashing
• Restricted access
• Authentication controls
• Access logging
• Secure hosting
• Malware protection
• Software updates
• Backup controls
• Vendor assessment
• Confidentiality obligations
• Staff and contractor access limitations
• Incident-response procedures

No method of transmission or storage is completely secure. We cannot guarantee absolute security.

You should use a strong, unique password for your Imagelet account and notify us promptly if you suspect unauthorized access.

If we become aware of a personal-data breach, we will investigate and take reasonable steps to contain and address it.

Where required by applicable law, we will notify:

• Affected individuals
• Relevant regulators
• Law-enforcement agencies
• Other appropriate parties

The content and timing of any notice will depend on applicable legal requirements and the circumstances of the incident.

Privacy rights differ depending on where you live and which laws apply.

Subject to applicable law, you may have the right to:

• Request confirmation that we process your personal data
• Request access to personal data
• Request correction of inaccurate or incomplete information
• Request deletion of personal data
• Request restriction of processing
• Object to certain processing
• Withdraw consent
• Opt out of direct marketing
• Opt out of certain sales, sharing, or targeted advertising
• Request a portable copy of certain information
• Appeal a refusal of a privacy request
• Complain to a privacy or data-protection regulator
• Receive information about international transfers
• Receive information about categories of data and recipients
• Request information about automated decision-making, where applicable

These rights may be limited by exceptions under applicable law.

For example, we may need to retain information to:

• Complete an order
• Maintain transaction records
• Comply with tax or legal obligations
• Prevent fraud
• Resolve disputes
• Protect intellectual-property rights
• Establish or defend legal claims

Under Hong Kong’s Personal Data (Privacy) Ordinance, you may have the right to:

• Request access to personal data held about you
• Request correction of inaccurate personal data
• Request information about our personal-data policies and practices
• Opt out of direct marketing

A data-access request may need to be made in the form required by applicable law.

We may charge a fee for processing a data-access request where permitted. Any fee will not be excessive and will reflect the relevant processing cost.

Requests may be sent to:

Privacy Contact

Vista Innovations Limited

Flat A, 12/F, ZJ 300

300 Lockhart Road

Wan Chai, Hong Kong

Email: info@imagelet.com

Please identify the request as a Personal Data Access Request or Personal Data Correction Request and provide enough information for us to identify the relevant records.

Where the European Union General Data Protection Regulation, United Kingdom General Data Protection Regulation, or related laws apply, you may have rights including:

• Access
• Rectification
• Erasure
• Restriction
• Objection
• Data portability
• Withdrawal of consent
• Complaint to a supervisory authority

You may object to processing based on legitimate interests. We will stop the relevant processing unless we have compelling legitimate grounds or the processing is needed for legal claims.

You have an unconditional right to object to processing of personal data for direct marketing.

Where we rely on consent, you may withdraw it at any time.

You may lodge a complaint with the data-protection authority in the country where you live or work, or where you believe a violation occurred.

Because Vista Innovations Limited is established in Hong Kong, the availability and implementation of regional representatives, transfer mechanisms, and specific legal obligations may depend on the nature and scale of our activities in the relevant region.

This section applies to California residents where the California Consumer Privacy Act, as amended, applies to Imagelet.

20.1 Categories of Personal Information

Depending on how you interact with us, we may collect the following categories:

• Identifiers
• Customer-record information
• Commercial information
• Internet or electronic-network activity
• Approximate geolocation
• Audio, electronic, visual, or similar information
• Professional information, where voluntarily provided
• Inferences based on product and website activity
• Sensitive personal information, where information such as account credentials or precise payment-related data falls within a legal definition

20.2 Sources

We may collect this information from:

• You
• Your device or browser
• Payment providers
• Shipping providers
• Production providers
• Customer-support providers
• Business partners
• Social-media or external platforms
• Fraud-prevention and security providers

20.3 Business and Commercial Purposes

We may collect, use, and disclose personal information to:

• Provide products and services
• Process and deliver orders
• Process payments
• Provide customer support
• Maintain accounts
• Secure the website
• Prevent fraud
• Conduct analytics
• Improve products
• Send marketing
• Comply with legal obligations
• Protect legal rights

20.4 Categories of Recipients

We may disclose personal information to:

• Website and hosting providers
• Payment providers
• Production and printing providers
• Shipping and logistics providers
• Customer-support and email providers
• Security and fraud-prevention providers
• Analytics or advertising providers
• Professional advisers
• Government and legal recipients
• Transaction participants

20.5 California Rights

Subject to applicable limitations, eligible California residents may have the right to:

• Know the categories and specific pieces of personal information collected
• Know the sources, purposes, and recipient categories
• Request deletion
• Request correction
• Opt out of sale or sharing
• Limit certain uses of sensitive personal information
• Receive equal service and pricing when exercising privacy rights
• Use an authorized agent

We do not discriminate against you for exercising applicable privacy rights.

20.6 Sensitive Personal Information

We use sensitive personal information only as reasonably necessary to:

• Provide requested products and services
• Process payments
• Maintain account security
• Prevent fraud
• Comply with law
• Protect customers and our systems
• Perform other legally permitted purposes

20.7 Shine the Light

California residents may also have rights under California’s “Shine the Light” law concerning certain disclosures for third-party direct marketing.

Imagelet does not disclose personal information to third parties for their own direct-marketing use without any consent required by applicable law.

Residents of other countries or regions may have additional rights under applicable laws.

These may include rights to:

• Access
• Correct
• Delete
• Withdraw consent
• Restrict processing
• Object to processing
• Opt out of marketing
• Complain to a regulator

We will respond to valid requests in accordance with the laws that apply to the request.

To submit a privacy request, email:

info@imagelet.com

Use a subject line such as:

• Privacy Request
• Data Access Request
• Data Correction Request
• Data Deletion Request
• Marketing Opt-Out
• California Privacy Request

Please provide:

• Your full name
• The email address associated with your account or order
• Your country or region
• Your order number, where relevant
• The type of request
• Enough detail for us to understand and locate the relevant information

Do not send complete payment-card information or government identification unless we specifically request an appropriate verification document through a secure method.

We may need to verify your identity before fulfilling a privacy request.

Verification may involve:

• Confirming your email address
• Requesting account information
• Confirming recent order details
• Asking for other information reasonably necessary to prevent unauthorized disclosure or deletion

We will request only the information reasonably necessary for verification.

If we cannot verify your identity, we may be unable to complete the request.

Authorized agents may submit requests where permitted by applicable law. We may require evidence that the agent is authorized and may also verify the identity of the individual concerned.

We aim to respond within the period required by applicable law.

We may need additional time where:

• The request is complex
• Multiple requests are involved
• Records are stored across multiple systems
• Additional verification is required
• An extension is permitted by law

Where applicable, we will inform you of an extension and the reason for it.

We may refuse or limit a request where permitted by law, including where it is:

• Manifestly unfounded
• Excessive
• Repetitive
• Fraudulent
• Impossible to verify
• In conflict with another person’s rights
• Subject to a legal exemption

Where required, we will explain the reason for refusal and any available appeal or complaint process.

Imagelet does not currently make decisions producing legal or similarly significant effects about customers solely through automated processing.

We may use automated tools for:

• Fraud-risk analysis
• Payment authorization support
• Website security
• Spam detection
• File validation
• Product recommendations
• Marketing segmentation
• Customer-support routing

These tools may influence how a transaction or request is reviewed, but significant issues may be subject to human review where appropriate.

Third-party payment or fraud providers may operate their own automated systems under their own privacy policies.

When you interact with Imagelet through a social-media platform, the platform may collect information about your interaction.

We may receive:

• Your public profile information
• Your username
• Your message
• Comments, mentions, or reactions
• Information you choose to share
• Advertising or campaign information

Social-media platforms process personal data under their own privacy policies.

Content posted publicly on social media may remain publicly available even after it is deleted from our account or page.

Our website may link to:

• Artists
• Creators
• Publishers
• Payment services
• Shipping carriers
• Social-media platforms
• Other websites and services

We do not control the privacy practices of third parties.

You should review the privacy policy of any third-party service before providing personal data.

We may update this Privacy Policy from time to time to reflect:

• Changes to our services
• Changes to our service providers
• New technology
• New products
• Changes to legal requirements
• Changes to our data practices

When we update the Policy, we will publish the revised version on this page and update the “Last updated” date.

Where changes are material, we may provide additional notice through:

• The website
• Email
• Your account
• Checkout
• Another appropriate method

Changes apply from the effective date stated in the updated Policy.

Questions, requests, or complaints about this Privacy Policy or our handling of personal data may be sent to:

Privacy Contact

Vista Innovations Limited

Trading as Imagelet

Flat A, 12/F, ZJ 300

300 Lockhart Road

Wan Chai, Hong Kong

Business Registration Number: 75910565

Email: info@imagelet.com

Please include enough information for us to understand and respond to your request.

If you are contacting us about an order, include your order number and the email address used at checkout.

When you provide personal data through Imagelet, the following collection notice applies.

Purpose of Collection

We collect personal data for purposes including:

• Creating and administering accounts
• Processing orders and payments
• Producing personalized products
• Printing uploaded content
• Delivering orders
• Providing customer support
• Processing returns, replacements, and refunds
• Preventing fraud and misuse
• Maintaining business and legal records
• Sending marketing where permitted
• Improving our website, products, and services
• Complying with legal obligations

Mandatory and Optional Information

Information marked as required is necessary for the relevant service.

If you do not provide required information, we may be unable to create an account, accept payment, manufacture a product, deliver an order, or respond to a request.

Other information is provided voluntarily.

Classes of Recipients

Personal data may be disclosed to:

• Website and hosting providers
• Payment processors
• Printing and manufacturing providers
• Shipping and logistics providers
• Email and customer-support providers
• Security and fraud-prevention providers
• Professional advisers
• Regulators, courts, and authorities
• Other recipients described in this Privacy Policy

Direct Marketing

Where permitted by law, we may use your name, email address, purchase relationship, and product interests to market Imagelet products, art collections, promotions, and related services.

Where required, we will obtain your consent before doing so.

You may opt out at any time by using an unsubscribe link or contacting info@imagelet.com.

Access and Correction

You may request access to and correction of personal data in accordance with applicable law.

Requests should be sent to:

Privacy Contact

Vista Innovations Limited

Flat A, 12/F, ZJ 300

300 Lockhart Road

Wan Chai, Hong Kong

Email: info@imagelet.com