Privacy Policy

Privacy Policy

Last updated: May 2026

Amber Active is operated by RAFALE FLOW LIMITED ("we", "us", "our"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use and safeguard information when you visit getamberactive.com (the "Site") and place an order.

1. Data Controller

The data controller responsible for the processing of your personal data is:

RAFALE FLOW LIMITED
11/F China United Plaza, 1008 Tai Nan West St, Lai Chi Kok, Hong Kong
Email: support@getamberactive.com

2. What We Collect

We collect the following categories of personal data:

  • Identity & contact data: name, email address, postal address, phone number (if provided).
  • Order data: products purchased, order value, delivery preferences.
  • Payment data: payment is processed by our payment providers (e.g. Shopify Payments, Airwallex). We do not store full card numbers on our servers.
  • Technical data: IP address, browser type, device type, pages visited, referrer, cookies and similar identifiers.
  • Marketing preferences: consent status for newsletters and promotional communications.

3. How We Use Your Data & Legal Basis (GDPR)

Purpose Legal basis (GDPR Art. 6)
Process and fulfil your order Contract performance (Art. 6(1)(b))
Send order, shipping and customer-service emails Contract performance (Art. 6(1)(b))
Comply with legal and tax obligations Legal obligation (Art. 6(1)(c))
Send marketing emails / newsletters Consent (Art. 6(1)(a)) — you can withdraw at any time
Analyse and improve the Site Legitimate interest (Art. 6(1)(f))
Detect and prevent fraud Legitimate interest (Art. 6(1)(f))

4. How Long We Keep Your Data

  • Order records: 10 years (commercial / tax obligations).
  • Customer-account data: as long as your account is active, plus 3 years of inactivity.
  • Marketing data: until you withdraw your consent, plus a 3-year inactivity buffer.
  • Cookies: 13 months maximum from collection.

5. Who We Share Your Data With (Sub-processors)

We share your data only with the following service providers, who act on our behalf:

  • Shopify Inc. — e-commerce platform and order management.
  • Shopify Payments / Airwallex — payment processing.
  • Klaviyo — email marketing and transactional emails.
  • Judge.me — product reviews.
  • Parcel Panel — order tracking.
  • hCaptcha — spam and abuse prevention on forms.
  • Meta Platforms (Facebook / Instagram) — advertising and remarketing pixel.
  • Google (Analytics & Ads) — analytics and advertising, where consent is given.
  • Shipping carriers — for delivery of your orders.

We do not sell your personal data to third parties.

6. International Transfers

Some of our sub-processors are based outside the European Economic Area (e.g. United States, Canada). When we transfer personal data outside the EEA, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses, to ensure your data is protected.

7. Your Rights

Under the GDPR (and equivalent laws in the UK, California and other jurisdictions), you have the right to:

  • Access the personal data we hold about you;
  • Request correction of inaccurate data;
  • Request deletion of your data ("right to be forgotten");
  • Object to or restrict certain processing;
  • Request data portability;
  • Withdraw consent at any time (without affecting the lawfulness of past processing);
  • Lodge a complaint with your local data-protection authority — in France, the CNIL (www.cnil.fr); in the UK, the ICO (ico.org.uk).

To exercise any of these rights, email us at support@getamberactive.com. We will respond within 30 days.

8. Cookies

The Site uses cookies for essential functions (cart, login, security), analytics, and advertising. On your first visit you can accept, reject or customise non-essential cookies via our cookie banner. You can change your preferences at any time by clearing the banner.

9. Children

The Site is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with data, please contact us and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent changes. Material changes will be notified via the Site or email.

11. Contact

For any privacy question or to exercise your rights:
RAFALE FLOW LIMITED
11/F China United Plaza, 1008 Tai Nan West St, Lai Chi Kok, Hong Kong
Email: support@getamberactive.com