Privacy Policy

This Privacy Policy describes how NEONWORKS ("we", "us", or "our") collects, uses, and protects personal data when you visit our website (the "Site"), create an account, place an order, or otherwise interact with us.

We take data protection seriously. We collect the minimum data we need to operate the Site, fulfil your orders, comply with the law, and improve our products. We do not sell your personal data to third parties.

By using the Site or purchasing any Product from us, you confirm that you have read and understood this Privacy Policy. If you do not agree with how we handle your data, please discontinue use of the Site.

We collect the following categories of personal data, depending on how you interact with the Site:

• Account data: name, email address, password (stored as a one-way hash, never in plaintext).
• Order data: shipping address, billing address, phone number (optional), order history, and product preferences (e.g. wishlist items).
• Payment data: handled exclusively by our payment processors (Stripe and PayPal). NEONWORKS never sees or stores your full card number, CVV, or card expiry date.
• Communications: messages you send us through the Contact form, email, or other support channels, including any attachments you choose to include.
• Technical data: IP address, browser type and version, device type, operating system, referrer URL, pages visited, and timestamps. We collect this through cookies and server logs (see Section 5).

We process your personal data on the following legal bases and for the following purposes:

• Contract performance: to fulfil and ship your orders, process payments, send order confirmations and shipping updates, and handle returns and warranty claims.
• Account management: to create and maintain your account, remember your preferences, and personalise the shopping experience.
• Customer support: to respond to your enquiries, resolve disputes, and keep records of our correspondence.
• Marketing (with consent): to send you occasional newsletters about new products, restocks, or brand stories. You can unsubscribe at any time via the link in any marketing email.
• Legal compliance: to keep records required by tax, accounting, anti-fraud, and consumer-protection law.
• Site improvement: to analyse aggregate usage patterns, diagnose technical issues, and improve the Site's performance and content.

We never sell your personal data. We only share it with a small set of trusted processors who act on our instructions under written data-processing agreements:

• Payment processors (Stripe, PayPal) -- to authorise and capture payments.
• Shipping carriers (e.g. DHL, FedEx, national postal services, and regional logistics partners) -- to deliver your orders and provide tracking.
• Email service provider (Resend) -- to send transactional emails (order confirmations, shipping updates) and, where you have opted in, marketing emails.
• Cloud hosting and database providers -- to operate the Site and store your data securely.
• Analytics providers -- only with consent and only to understand aggregate usage of the Site.

We may also disclose personal data when required by law, court order, or to protect our legal rights, and in connection with a merger, acquisition, or sale of assets (in which case the recipient will be bound by this Policy).

The Site uses cookies and similar local-storage technologies. For full details on which cookies we set, why we set them, and how to control them, please see our Cookie Policy.

We use three categories of cookies: strictly necessary cookies (required for the Site to function, e.g. keeping you logged in), preference cookies (remembering your language and currency), and analytics cookies (only with your consent, e.g. to measure traffic patterns).

We keep your personal data only for as long as needed for the purposes described above, then delete or anonymise it. Specifically:

• Account data: as long as your account is active. If you delete your account, we delete or anonymise your personal data within 30 days, except where retention is required by law.
• Order data: for at least 7 years after the transaction, as required by tax and accounting regulations.
• Support correspondence: for up to 3 years, to handle follow-up questions and warranty claims.
• Server logs: typically retained for 90 days, then aggregated or deleted.

Depending on where you live, you have some or all of the following rights with respect to your personal data:

• Access: request a copy of the personal data we hold about you.
• Correction: ask us to fix data that is inaccurate or incomplete.
• Deletion: ask us to delete your personal data, subject to legal retention requirements.
• Portability: receive your data in a structured, machine-readable format.
• Objection: object to processing based on legitimate interest, and opt out of marketing communications at any time.
• Restriction: ask us to temporarily suspend processing while we investigate a complaint.
• Withdrawal of consent: where processing is based on consent, you can withdraw it at any time without affecting prior lawful processing.

To exercise any of these rights, please contact us via the form on our Contact page or by email. We respond within 30 days. If you are unhappy with our response, you have the right to lodge a complaint with your local data-protection authority.

We protect your personal data with industry-standard technical and organisational measures: HTTPS/TLS for all traffic, hashed passwords, restricted access to production data on a need-to-know basis, regular backups, and prompt patching of known vulnerabilities.

No system is perfectly secure. If we ever become aware of a personal-data breach affecting your information, we will notify you and the relevant authorities in accordance with applicable law.

We may update this Privacy Policy from time to time to reflect changes in our practices, the law, or our Products. The "Last updated" date at the top of this page reflects when the current version came into effect. Material changes will be announced on the Site and, where appropriate, communicated by email to registered users.

Your continued use of the Site after a change constitutes acceptance of the updated Policy. If you do not agree to a change, please stop using the Site and contact us if you have an open order or account.