PRIVACY POLICY

Last updated: November 11, 2026

1. INTRODUCTION

This Privacy Policy explains how MLAYOFFICIAL ("MLAY", "we", "us", or "our") collects, uses, stores, shares, and protects your personal information when you visit or make a purchase from https://mlayofficial.com (the "Website"), contact our customer service team, or otherwise interact with us.

The Website is operated by:

Legal Business Name: Mlay International Limited
Chinese Registered Name: 香港美莱雅国际
Brand Name: MLAYOFFICIAL
Jurisdiction: Hong Kong Special Administrative Region
Contact Email: info@mlays.com

Our online store is hosted by Shopify, which provides the e-commerce platform that allows us to offer and sell our products.

By using our Website, you acknowledge that you have read this Privacy Policy. Where applicable law requires consent for certain data processing activities, we will request that consent separately.

2. PERSONAL INFORMATION WE COLLECT

The types of personal information we collect depend on how you interact with our Website and services.

A. Information You Provide Directly

When you place an order, create an account, contact us, subscribe to marketing communications, or otherwise interact with us, we may collect:

• Name

• Billing and shipping addresses

• Email address

• Telephone number

• Order details and purchase history

• Customer service communications and information you choose to provide

• Marketing preferences and subscription status

If you make a purchase, payment information is processed by the relevant payment provider. We generally receive payment confirmations and transaction-related information rather than storing your complete payment card number or security code ourselves.

B. Information Collected Automatically

When you visit our Website, certain information may be collected automatically, including:

• IP address and approximate location

• Browser type and device information

• Operating system and language settings

• Pages viewed, products viewed, and links clicked

• Referring websites and browsing activity

• Time spent on pages and interactions with our Website

• Cookie identifiers and similar online identifiers

We use cookies, pixels, analytics technologies, and similar tools to operate our Website, understand visitor activity, measure advertising performance, and improve our services.

C. Information from Third Parties

We may receive information about you from third parties, including:

• Shopify and other e-commerce service providers

• Payment processors

• Shipping and logistics providers

• Google Analytics and advertising measurement services

• Meta advertising services

• Email marketing service providers

• Advertising and marketing partners

Information received from these sources may be combined with information we collect directly, where permitted by applicable law.

3. HOW WE USE YOUR PERSONAL INFORMATION

We may use your personal information for the following purposes:

A. Order Processing and Fulfillment

• Process and confirm your orders

• Arrange payments, shipping, and delivery

• Provide order updates and tracking information

• Handle returns, refunds, exchanges, and warranty requests

• Maintain transaction and accounting records

B. Customer Service

• Respond to questions and requests

• Provide technical assistance and product support

• Resolve complaints and disputes

• Communicate important information about your orders or purchases

C. Website Operation and Improvement

• Operate and maintain our Website

• Understand how visitors use our Website

• Improve website functionality and shopping experiences

• Analyze product interest, website performance, and customer interactions

• Detect technical issues and prevent fraudulent or unauthorized activity

D. Analytics and Advertising

We use analytics and advertising technologies, including Google Analytics and Meta Pixel, to help us:

• Understand Website traffic and visitor behavior

• Measure advertising effectiveness and conversions

• Evaluate interactions with our products and advertisements

• Build or support advertising audiences and remarketing campaigns

• Deliver more relevant advertisements, where permitted by applicable law and subject to your privacy choices

These technologies may collect information such as device identifiers, browser information, IP address, pages visited, and interactions with advertisements.

E. Email Marketing

Where permitted by applicable law, and where required with your consent, we may use your email address to send:

• Product announcements

• Promotional offers and discounts

• News about MLAY

• Marketing campaigns and newsletters

You can unsubscribe from promotional emails at any time by using the unsubscribe link included in the email. Even if you unsubscribe from marketing communications, we may still send essential transactional or service-related messages, such as order confirmations and shipping notifications.

F. Legal and Security Purposes

We may use personal information to:

• Comply with applicable laws and regulations

• Respond to lawful requests from authorities

• Protect our rights, customers, and business

• Detect, investigate, and prevent fraud or security incidents

• Enforce our policies and agreements

4. COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar technologies to support the operation of our Website and improve your browsing experience.

Cookies may be used for the following purposes:

• Essential cookies: Required for core Website functions, such as shopping cart operation, checkout, security, and account functionality.

• Analytics cookies: Help us understand how visitors use our Website, including through Google Analytics.

• Advertising cookies and pixels: Help measure advertising performance, support remarketing, and deliver relevant advertisements, including through Meta Pixel.

• Preference cookies: Help remember certain settings and preferences.

We use Shopify's customer privacy and cookie banner features to present cookie choices to visitors in applicable regions.

Depending on your location and applicable law, you may be able to accept or reject non-essential cookies and change your preferences later through the available privacy settings on our Website.

Where consent is required, non-essential cookies and tracking technologies should only be used in accordance with your consent choices.

Please note that disabling certain cookies may affect some Website features or functionality.

For more information about Shopify's privacy practices, please review the Shopify Consumer Privacy Policy.

5. GOOGLE ANALYTICS AND META PIXEL

We use third-party analytics and advertising services, including Google Analytics and Meta Pixel.

These services may use cookies, pixels, device identifiers, and similar technologies to collect information about your interactions with our Website.

This information may be used to:

• Analyze Website traffic and visitor behavior

• Measure advertising reach and effectiveness

• Understand product and content engagement

• Support advertising optimization and remarketing

• Create or improve advertising audiences, where permitted

These third-party providers process information in accordance with their own privacy policies and applicable settings.

You can learn more about their privacy practices here:

• Google Privacy Policy

• Google Analytics information

• Meta Privacy Policy

Your cookie and tracking preferences may affect the information these services can collect.

6. SHOPIFY AUDIENCES AND SHOPIFY NETWORK INTELLIGENCE

Our store uses Shopify Audiences and has enabled Shopify Network Intelligence.

Shopify Network Intelligence allows Shopify to securely use certain customer information from our store together with information from other Shopify merchants and Shopify services to support enhanced services, which may include:

• Improving products and personalization

• Understanding customer interactions with online stores

• Improving advertising relevance and targeting

• Supporting advertising and marketing performance

Shopify Audiences uses algorithms to identify potential customers who may be interested in products like ours. Audience information is processed using measures such as hashing and may be exported directly to supported advertising platforms for advertising purposes.

We do not have access to the underlying personal customer information contained in Shopify Audiences in a form that identifies individual audience members.

Shopify processes certain personal information in connection with these services under its own privacy terms and applicable data protection obligations.

You can learn more about how Shopify processes personal information in its Consumer Privacy Policy.

You may also exercise applicable rights or object to certain Shopify data processing activities through the Shopify Privacy Portal.

Where applicable, you may withdraw consent, object to processing, or opt out of the sale or sharing of personal information for targeted advertising through the privacy controls available on our Website.

7. HOW WE SHARE PERSONAL INFORMATION

We do not sell personal information in exchange for money.

However, we may disclose or make personal information available to third parties for legitimate business purposes, including certain advertising and analytics activities. Depending on the applicable privacy laws, some of these activities may be considered "sharing," "targeted advertising," or similar regulated processing.

We may share personal information with the following categories of recipients:

A. Shopify

Our Website is hosted on Shopify. Shopify processes personal information to provide e-commerce, hosting, checkout, security, analytics, and other services.

B. Payment Providers

Payment service providers process payment information to complete transactions, prevent fraud, and provide payment-related services.

C. Shipping and Logistics Providers

We share relevant information, such as your name, shipping address, and contact details, with delivery and logistics partners to fulfill your orders.

D. Analytics and Advertising Partners

We use services such as Google Analytics, Meta Pixel, Shopify Audiences, and related advertising services to measure Website activity, analyze performance, and support advertising campaigns.

E. Email Marketing and Customer Service Providers

We may share relevant contact information with service providers that help us manage customer communications, email campaigns, newsletters, and customer support.

F. Legal and Business Purposes

We may disclose personal information where necessary to comply with applicable laws, respond to lawful requests, protect our rights, prevent fraud, or support a business transfer, merger, or restructuring.

We require service providers to handle personal information in accordance with applicable contractual and legal obligations.

8. INTERNATIONAL DATA TRANSFERS

Because we serve customers internationally and use service providers that may operate in different countries, your personal information may be transferred to, stored, or processed outside the country where you reside.

These countries may include Hong Kong, the United States, and other jurisdictions where Shopify and our service providers operate.

Where required by applicable law, we take appropriate measures to protect personal information transferred internationally, such as contractual safeguards and other recognized transfer mechanisms.

9. DATA RETENTION AND SECURITY

We retain personal information only for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, including:

• Processing and fulfilling orders

• Providing customer support and warranty services

• Maintaining business and accounting records

• Complying with legal obligations

• Resolving disputes

• Preventing fraud and protecting our business

Retention periods may vary depending on the type of information and applicable legal requirements.

We use reasonable technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

However, no method of electronic storage or transmission over the internet can be guaranteed to be completely secure.

10. YOUR PRIVACY RIGHTS AND CHOICES

Depending on your location and applicable law, you may have the right to:

• Request access to personal information we hold about you

• Request correction of inaccurate or incomplete information

• Request deletion of personal information

• Request information about how your personal information is collected, used, and shared

• Withdraw consent where processing is based on consent

• Object to certain processing activities

• Request restrictions on certain processing

• Request a copy of certain personal information in a portable format

• Opt out of certain targeted advertising or data-sharing activities

• Withdraw from marketing communications

To exercise your rights, contact us at info@mlays.com.

We may need to verify your identity before processing certain requests. We will respond within the timeframe required by applicable law.

Some information may need to be retained where required by law or for legitimate business purposes.

Your Advertising and Data-Sharing Choices

Where applicable, you may use the Your Privacy Choices or data-sharing opt-out controls available on our Website to opt out of certain personal information sharing or targeted advertising activities.

Where supported by applicable law, we also recognize valid Global Privacy Control (GPC) signals for relevant opt-out requests.

You may separately exercise applicable rights relating to Shopify's processing through the Shopify Privacy Portal.

11. ADDITIONAL RIGHTS FOR EEA, UK, AND SWITZERLAND RESIDENTS

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, you may have additional rights under applicable data protection laws, including the GDPR or UK GDPR.

These rights may include:

• Access to your personal information

• Correction or deletion of personal information

• Restriction of processing

• Data portability

• Objection to processing

• Withdrawal of consent

• The right to lodge a complaint with your local data protection authority

Legal Bases for Processing

Where GDPR or similar laws apply, we process personal information on one or more of the following legal bases:

• Contract: To process and fulfill your orders and provide services you request.

• Legal obligation: To comply with applicable legal, tax, accounting, and regulatory requirements.

• Legitimate interests: To operate, secure, improve, and promote our business, provided those interests are not overridden by your rights.

• Consent: Where you have given consent, including for certain cookies, tracking technologies, and marketing communications.

You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

You may also lodge a complaint with the data protection authority in your country or region.

12. ADDITIONAL RIGHTS FOR CALIFORNIA AND OTHER US STATE RESIDENTS

Depending on the state where you reside, you may have additional privacy rights under applicable US state privacy laws.

These may include the right to:

• Know what categories of personal information we collect and process

• Access specific personal information

• Request deletion or correction of personal information

• Obtain information about categories of third parties with whom personal information is shared

• Opt out of certain sales, sharing, or targeted advertising activities

• Appeal certain decisions concerning your privacy requests

• Not be discriminated against for exercising your privacy rights

We do not sell personal information for monetary consideration.

However, certain disclosures of information through advertising, analytics, and audience-related technologies may be considered "sharing" or "targeted advertising" under applicable US state privacy laws.

Where applicable, you can exercise your opt-out rights through the data-sharing opt-out or Your Privacy Choices controls available on our Website.

We also honor applicable Global Privacy Control signals where required by law.

To submit a privacy request, contact info@mlays.com.

13. ADDITIONAL RIGHTS FOR BRAZILIAN RESIDENTS

If you are located in Brazil, you may have rights under the Brazilian General Data Protection Law (Lei Geral de Proteção de Dados Pessoais – LGPD).

Subject to applicable legal conditions, these rights may include:

• Confirmation of whether your personal data is being processed

• Access to your personal data

• Correction of incomplete, inaccurate, or outdated data

• Anonymization, blocking, or deletion of unnecessary or excessive data

• Data portability, where applicable

• Information about public and private entities with which your data is shared

• Information about the possibility of refusing consent and the consequences of refusal

• Withdrawal of consent

• Review of certain decisions made solely through automated processing, where applicable

To exercise your rights under the LGPD, contact us at info@mlays.com.

We will handle your request in accordance with applicable Brazilian law.

14. CHILDREN'S PRIVACY

Our Website is not intended for children, and we do not knowingly collect personal information from children where doing so is prohibited by applicable law.

If you believe that a child has provided us with personal information without appropriate authorization, please contact us at info@mlays.com so that we can review and take appropriate action.

15. THIRD-PARTY WEBSITES AND SERVICES

Our Website may contain links to third-party websites, applications, or services.

We are not responsible for the privacy practices, security, or content of third-party websites or services.

When you leave our Website, we encourage you to review the privacy policies of those third parties before providing personal information.

16. DIRECT MARKETING AND UNSUBSCRIBING

If you receive promotional emails from us, you can unsubscribe at any time by clicking the unsubscribe link included in the email.

You may also contact us at info@mlays.com to update your marketing preferences.

Unsubscribing from promotional communications will not prevent us from sending essential service messages relating to your orders, purchases, warranties, or other necessary transactions.

17. COMPLAINTS

If you have questions or concerns about how we handle your personal information, please contact us first so that we can try to resolve the matter.

You may also have the right to lodge a complaint with the relevant data protection or privacy authority in your jurisdiction.

18. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our business practices, technology, service providers, or applicable legal requirements.

When we make changes, we will update the "Last updated" date at the top of this page.

We encourage you to review this Privacy Policy periodically.

19. CONTACT US

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about how your personal information is handled, please contact us:

Brand: MLAYOFFICIAL
Legal Business Name: Mlay International Limited
Chinese Registered Name: 香港美莱雅国际
Jurisdiction: Hong Kong Special Administrative Region
Email: info@mlays.com
Website: https://mlayofficial.com

For privacy-related requests, please include "Privacy Request" in the subject line of your email.