Privacy Policy

OPALA, based in Thailand, is responsible for the personal information described in this policy. Contact us at [SUPPORT OR PRIVACY EMAIL TO BE ADDED] or [BUSINESS ADDRESS TO BE ADDED].

Where appointment is legally required, our EEA representative is [EU REPRESENTATIVE DETAILS IF REQUIRED] and our UK representative is [UK REPRESENTATIVE DETAILS IF REQUIRED]. These details must be completed before applicable sales begin.

Depending on how you interact with OPALA, we may collect:

• identity and contact details, such as name, email, phone number, billing, delivery and return addresses;
• order details, product choices, sizing, personalization instructions, communications and return history;
• payment status and limited transaction details from payment providers (OPALA does not need to store full card numbers);
• device, browser, IP address, approximate location, cookie identifiers and activity on our website;
• marketing preferences, survey responses, reviews and customer-support correspondence;
• fraud-prevention, customs and legal-compliance information.

Please do not include sensitive information in personalization text, reviews or support messages unless it is necessary.

We use personal information to provide the website; process payments and orders; personalize, manufacture, fulfil and deliver products; manage returns and support; prevent fraud; secure and improve our services; measure performance; communicate service messages; and comply with tax, customs, accounting and legal duties.

Where GDPR or UK GDPR applies, our legal bases may include performing a contract, taking requested pre-contract steps, complying with law, our legitimate interests in operating and protecting OPALA, and consent where required (including certain marketing or cookies). You may withdraw consent at any time without affecting earlier lawful processing.

We share only what is reasonably needed with service providers such as website hosting, payment, analytics, communications, customer support, fraud prevention, professional advisers, and logistics providers. Order and delivery details may be shared with OPALA fulfilment partners in China and carriers or customs authorities in transit and destination countries.

We may disclose information where required by law, to protect rights and safety, or as part of a business reorganisation. We do not sell personal information for money. If a future advertising practice is treated as “sale,” “sharing,” or targeted advertising under an applicable law, we will provide the required notice and choice before using it.

OPALA operates from Thailand, fulfils orders through partners in China, and may use providers in other countries. Your information may therefore be processed outside your country of residence, where privacy laws may differ.

Where required, OPALA will use an approved transfer mechanism and supplementary safeguards, such as adequacy decisions, standard contractual clauses or the UK International Data Transfer Addendum, and take reasonable steps appropriate to the destination and service. Contact us for information about safeguards relevant to your data.

We keep personal information only for as long as reasonably necessary for the purposes described, including completing orders, maintaining records, resolving disputes, enforcing agreements and meeting tax, accounting, customs or other legal obligations. Retention periods vary by record and jurisdiction.

We use reasonable organisational and technical safeguards. No online system is completely secure, so please use unique credentials and notify us if you suspect unauthorized activity.

Depending on your location, you may have rights to access, correct, delete, restrict or object to processing; receive a portable copy; withdraw consent; opt out of marketing; or appeal a decision. EEA and UK residents may complain to their local data-protection authority. Residents of Australia or New Zealand may also raise concerns with their national privacy regulator where applicable.

To make a request, email [SUPPORT OR PRIVACY EMAIL TO BE ADDED]. We may verify your identity and may retain information where law allows or requires. Authorized agents may act where local law permits and adequate authority is provided. We will not discriminate against you for exercising a privacy right.

We may use necessary cookies to operate the site and, subject to applicable consent rules, optional analytics or marketing technologies. Where required, a cookie control will explain categories and allow you to accept or reject non-essential technologies.

You can unsubscribe from marketing emails through the message link or by contacting us. Service communications about an order or policy change are not marketing and may continue where necessary.

OPALA is not directed to children and does not knowingly collect personal information from children below the minimum age required to consent to online data processing in their jurisdiction. If you believe a child has provided information improperly, contact us so we can investigate and delete it where appropriate.

Send privacy questions or complaints to [SUPPORT OR PRIVACY EMAIL TO BE ADDED]. Please describe the issue and include enough information for us to investigate. We will acknowledge and respond within the period required by applicable law.

We may update this policy as our services or legal obligations change. Material changes will be highlighted where appropriate, and the date at the top will be revised.