Privacy policy
Last updated: 24 September 2026
I AM BODHI ("I AM BODHI", "we", "us" or "our") operates this online store and website and provides the related products and services (the "Services").
I AM BODHI is operated as a sole proprietorship in Hong Kong SAR. Our online store is powered by Shopify, which enables us to provide the Services to you.
This Privacy Policy explains how we collect, use, disclose and protect your personal information when you visit our website, make a purchase, communicate with us or otherwise use our Services.
If there is a conflict between our Terms of Service and this Privacy Policy regarding the collection, processing or disclosure of personal information, this Privacy Policy will apply.
Personal Information We Collect
"Personal information" means information that identifies you or can reasonably be linked to you. Depending on how you interact with our Services, we may collect or process:
-
Contact information, such as your name, email address, telephone number, billing address and shipping address.
-
Payment and transaction information, such as payment details, payment confirmation, products purchased, order history, returns and refunds. Payment card information may be processed directly by Shopify and our payment providers.
-
Account information, such as your username, password, preferences and account settings where you create an account.
-
Shopping information, including products you view, add to your cart or purchase.
-
Communications, including information you provide when contacting us about an order, product or customer-service enquiry.
-
Device and technical information, such as your device, browser, IP address and network information.
-
Usage information, including information about how you interact with our website and Services.
How We Collect Personal Information
We may collect personal information:
-
directly from you when you place an order, create an account, subscribe to communications or contact us;
-
automatically when you use our website, including through cookies and similar technologies;
-
from Shopify and service providers that help us operate our business; and
-
from advertising, analytics and other business partners where permitted by applicable law.
How We Use Your Personal Information
We may use personal information to:
Provide our Services
This includes processing payments and orders, arranging delivery, managing customer accounts, processing returns or refunds, providing customer support and otherwise fulfilling our contract with you.
Communicate with You
We may use your information to contact you about your orders, enquiries, account or other matters relating to our Services.
Marketing and Advertising
Where permitted by applicable law, we may use your information to send marketing communications and to measure, personalise and improve advertising.
You can unsubscribe from promotional emails at any time by using the unsubscribe link contained in those emails.
Improve Our Store
We may use information about how customers interact with our website to understand performance, improve our products and Services and provide a better shopping experience.
Security and Fraud Prevention
We may use personal information to authenticate transactions, detect and prevent fraud or other unlawful activity, protect our customers and secure our Services.
Legal and Regulatory Requirements
We may process information where necessary to comply with applicable laws, respond to lawful requests, resolve disputes and establish, exercise or defend legal claims.
Lawful Bases for Processing
Where UK or European data-protection law applies, we process your personal information under one or more lawful bases, depending on the circumstances.
These may include:
-
Contract, where processing is necessary to fulfil an order or provide Services you have requested.
-
Consent, where you have given us permission to process information for a particular purpose.
-
Legitimate interests, where processing is reasonably necessary for our business operations, such as improving our Services, preventing fraud and understanding how our store is used, provided those interests are not overridden by your rights.
-
Legal obligations, where processing is necessary for us to comply with applicable law.
Where we rely on consent, you may withdraw your consent at any time.
How We Disclose Personal Information
We may disclose personal information where reasonably necessary to operate our business, including:
-
to Shopify, which hosts and operates our ecommerce platform;
-
to payment processors and financial-service providers;
-
to delivery, fulfilment and logistics providers so that we can deliver your order;
-
to technology, hosting, analytics and customer-service providers;
-
to advertising and marketing partners, where permitted by applicable law;
-
where you ask us or consent to the disclosure;
-
in connection with a sale, restructuring or transfer of all or part of our business; and
-
where required by law or necessary to protect our legal rights or the rights of others.
We do not disclose personal information to third parties except for legitimate business purposes, with your consent, or where permitted or required by law.
Shopify
Our store is hosted by Shopify.
Shopify collects and processes certain personal information about your access to and use of our store in order to provide and improve its services.
Information submitted through our store may be processed by Shopify and other service providers in countries outside Hong Kong or the country in which you live.
For more information about Shopify's processing of personal information, please see the Shopify Consumer Privacy Policy:
https://www.shopify.com/legal/privacy/app-users
You may also access Shopify's Privacy Portal at:
Cookies and Similar Technologies
We and our service providers may use cookies and similar technologies to operate our website, remember preferences, understand how our Services are used, measure performance and, where permitted, provide advertising.
Where required by applicable law, non-essential cookies will only be used with your consent.
You can manage available cookie choices through the cookie or privacy controls provided on our website and through your browser settings.
Third-Party Websites
Our Services may contain links to websites, social-media platforms or services operated by third parties.
We are not responsible for the privacy, security or content of third-party websites. If you follow a link to another website or service, we recommend reviewing that provider's privacy policy.
Children's Privacy
Our Services are not intended for children, and we do not knowingly collect personal information from children below the applicable age of consent.
If you are a parent or guardian and believe a child has provided personal information to us, please contact us so that we can take appropriate action.
Security
We take reasonable steps to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
However, no method of electronic transmission or storage can be guaranteed to be completely secure.
Data Retention
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including fulfilling orders, maintaining appropriate business and transaction records, resolving disputes and meeting legal, tax and regulatory requirements.
The appropriate retention period depends on the type of information and the reason we hold it.
Your Rights
Depending on where you live and the laws that apply, you may have rights relating to your personal information, including the right to:
-
request access to personal information we hold about you;
-
request correction of inaccurate or incomplete information;
-
request deletion of personal information in certain circumstances;
-
object to or request restriction of certain processing;
-
withdraw consent where processing is based on consent; and
-
request a copy or transfer of certain personal information where applicable.
These rights are not absolute and may be subject to exceptions under applicable law.
To exercise a privacy right, contact us using the details below. We may need to verify your identity before completing your request.
UK and European Customers
If you are located in the United Kingdom or European Economic Area, you may have additional rights under applicable data-protection law, including rights to object to or restrict certain processing and to withdraw consent where consent is the lawful basis for processing.
You may also have the right to make a complaint to the data-protection authority in the country where you live or work.
UK customers can obtain information about their data-protection rights and make a complaint to the UK's Information Commissioner's Office (ICO) at:
Hong Kong Customers
If Hong Kong data-protection law applies to your personal information, your information will be handled in accordance with the Personal Data (Privacy) Ordinance (Cap. 486) and other applicable requirements.
You may contact us to request access to or correction of personal data we hold about you, subject to applicable law.
Information about personal-data privacy in Hong Kong is available from the Office of the Privacy Commissioner for Personal Data.
International Data Transfers
I AM BODHI is operated from Hong Kong, while our customers, Shopify and other service providers may be located in other countries.
As a result, personal information may be transferred to, stored or processed outside the country in which you live.
Where applicable law requires safeguards for international transfers, we and/or our service providers will use appropriate recognised mechanisms or safeguards for those transfers.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our business, Services, legal requirements or privacy practices.
When we make changes, we will publish the revised policy on this website and update the "Last updated" date above.
Contact Us
For questions about this Privacy Policy, our privacy practices or your personal information, please contact:
I AM BODHI
Hong Kong SAR
Email: miles@iambodhi.co.uk
For the purposes of applicable data-protection laws, I AM BODHI is the controller or data user responsible for the personal information described in this Privacy Policy, as applicable.