Privacy Policy

Last updated: July 13, 2026

This Privacy Policy describes how Colored Contacts (“we”, “us”, or “our”) collects, uses, and discloses your personal information when you visit or make a purchase from colored-contacts.us (the “Site”).

Colored Contacts is owned and operated by ALWAYHEALTH TECHNOLOGY LIMITED, a company registered in Hong Kong. By using the Site, you agree to the practices described in this policy.

1. Information We Collect

We collect information directly from you, automatically through your use of the Site, and from third-party service providers as described below.

1.1 Information You Provide to Us

  • Account Information: When you create an account, we collect your name, email address, and password.
  • Order Information: When you place an order, we collect your name, billing address, shipping address, payment information (processed securely through our payment gateway), email address, and phone number.
  • Customer Support: When you contact us, we collect your name, email address, and the contents of your communication.
  • Product Reviews & Submissions: When you submit a review, rating, or other content, we collect the information you provide.

1.2 Information Collected Automatically

When you visit the Site, we automatically collect certain information about your device and browsing activity, including:

  • IP address, browser type and version, operating system
  • Pages viewed, time spent on pages, clickstream data
  • Referring URL, exit pages
  • Device type and identifiers

We collect this information using cookies, log files, web beacons, and similar technologies. For more detail, see Section 6 (Cookies) below.

2. How We Use Your Information

We use the information we collect for the following purposes:

  • To Process Orders: To fulfill orders, process payments, arrange shipping, and send order confirmations and invoices.
  • To Communicate with You: To respond to your inquiries, provide customer support, send order updates, and, with your consent, marketing communications about our products and promotions.
  • To Improve Our Site: To analyze usage patterns, diagnose technical issues, and enhance the user experience.
  • To Prevent Fraud: To screen orders for potential fraud or risk, and to maintain the security of our Site.
  • To Comply with Legal Obligations: To comply with applicable laws, regulations, and legal processes.

3. How We Share Your Information

We share your personal information with third-party service providers who help us operate our business, including:

  • Payment Processors: We use Stripe, PayPal, and other payment gateways to process payments. We do not store full credit card numbers on our servers.
  • Shipping Carriers: We share your name, address, and order details with shipping carriers to deliver your orders.
  • Email & Communication Services: We use third-party email services to send transactional emails and, with your consent, marketing communications.
  • Website Analytics: We use analytics tools such as Google Analytics to understand how visitors interact with our Site.
  • Advertising Partners: We may share pseudonymized information with advertising platforms (such as Facebook, Google, Pinterest) to serve relevant ads. You can opt out of personalized advertising through your settings on those platforms.

We may also disclose your information if required to do so by law or in response to a valid legal request.

4. Legal Basis for Processing (EEA Visitors)

If you are a resident of the European Economic Area (EEA), we process your personal information under the following legal bases:

  • Consent: Where you have given consent (e.g., for marketing cookies).
  • Contract Performance: Where processing is necessary to fulfill our contract with you (e.g., processing your order).
  • Legitimate Interests: Where processing is necessary for our legitimate interests (e.g., fraud prevention, site analytics), provided these do not override your rights.
  • Legal Compliance: Where processing is required to comply with legal obligations.

5. Your Rights

5.1 EEA Residents (GDPR)

If you are a resident of the EEA, you have the right to:

  • Access: Request a copy of the personal information we hold about you.
  • Rectification: Request correction of inaccurate or incomplete data.
  • Erasure: Request deletion of your personal information, subject to certain exceptions.
  • Restriction: Request restriction of processing in certain circumstances.
  • Data Portability: Request a copy of your data in a structured, machine-readable format.
  • Object: Object to processing based on legitimate interests or for direct marketing purposes.

5.2 California Residents (CCPA/CPRA)

If you are a resident of California, you have the right to:

  • Know: Request disclosure of the categories and specific pieces of personal information we have collected about you.
  • Delete: Request deletion of personal information we have collected, subject to certain exceptions.
  • Opt Out: Opt out of the sale or sharing of your personal information for cross-context behavioral advertising. We do not sell personal information in the traditional sense, but we may share pseudonymized data with advertising partners. You can exercise your opt-out right by contacting us.
  • Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.

To exercise any of these rights, please contact us at [email protected].

6. Cookies

Our Site uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and serve personalized content and advertisements.

What Are Cookies? Cookies are small text files stored on your device by your web browser. They allow the Site to remember your preferences and recognize your device on return visits.

Types of Cookies We Use:

  • Essential Cookies: Required for the Site to function properly, including shopping cart functionality, session management, and security. These cannot be disabled.
  • Functional Cookies: Remember your preferences and settings to improve your experience.
  • Analytics Cookies: Help us understand how visitors interact with our Site (e.g., Google Analytics).
  • Advertising Cookies: Used to deliver relevant ads and measure the effectiveness of advertising campaigns.

Cookie Duration: Session cookies expire when you close your browser. Persistent cookies remain on your device for a set period (ranging from 30 minutes to 2 years).

Managing Cookies: You can control cookies through your browser settings. Most browsers allow you to block or delete cookies. Please note that disabling certain cookies may affect the functionality of our Site. For more information, visit www.allaboutcookies.org.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required by law. Specifically:

  • Order information: Retained for the duration of our warranty period and as required for tax and accounting purposes (typically 5-7 years).
  • Account information: Retained until you request deletion or your account becomes inactive.
  • Marketing communications: Retained until you opt out or unsubscribe.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These include:

  • SSL/TLS encryption for data transmitted between your browser and our servers
  • Secure, tokenized payment processing through PCI-compliant payment gateways
  • Access controls and firewalls protecting our systems

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

9. International Data Transfers

Your personal information may be transferred to and processed in countries other than your own, including Hong Kong (where our company is registered) and the United States (where our hosting and service providers are located). We ensure appropriate safeguards are in place for such transfers, including Standard Contractual Clauses where required by applicable law.

10. Children’s Privacy

Our Site is not intended for individuals under the age of 13. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at [email protected], and we will take steps to delete the information promptly.

11. Third-Party Links

Our Site may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites. We encourage you to review the privacy policies of any third-party sites you visit.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date. If we make material changes, we will notify you by email or through a notice on our Site.

13. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

Corporate Entity:

ALWAYHEALTH TECHNOLOGY LIMITED
RM D07, 8/F, Kai Tak Fty Building, No. 99 King Fuk Street,
Sanpokong, Kowloon, Hong Kong