Privacy Policy

Last Updated and Effective Date: 2026-04-27

HONG KONG FUTURE INTELLIGENT TECHNOLOGY CO., LIMITED (trading as "viaim", and also referred to as "we", "us", or "our") understands that your privacy is important to you. This Privacy Policy describes how we collect, use, disclose, and protect your personal information in connection with store.viaim.ai (the "Store" or "Services"), our North America e-commerce store where we sell viaim AI products.

Our Privacy Policy does not apply to how third parties define personal data or how they use it (e.g., third-party websites or platforms accessible via links within our Services). We encourage you to read their privacy policies and know your privacy rights before interacting with them.

1. Information About Us

Under applicable data protection laws, the Data Controller of your personal information is:

· Data Controller: HONG KONG FUTURE INTELLIGENT TECHNOLOGY CO., LIMITED

· Trading As: viaim

· Registered Address: 8 Hysan Avenue, ROOM 1450 14/F, Causeway Bay, Hong Kong Island, Hong Kong SAR

· Website: https://store.viaim.ai/

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at service@viaim.ai.

2. What Information Do We Collect?

The personal information we collect depends on the context of your interactions with us and the features you use on our Store.

2.1 Information You Provide Directly

We collect personal information that you voluntarily provide when you create an account, place an order, submit a review, contact us, or subscribe to our newsletter.

Data Category	Specific Information Included
Identity Data	First name, last name, display name (for reviews).
Contact Data	Email address, phone number.
Credentials	Password (stored in hashed form) used for account authentication.
Address Data	Shipping and billing address, including street address, apartment/suite, city, state/province, ZIP/postal code, and country.
Order Notes	Free-text notes you optionally add to your cart or order at checkout.
Review Content	Review title, review text, star rating, and optionally photos or videos you upload. Display name (public) and email (private) submitted via our review platform.
Contact Form Data	Name, email address, phone number, product category, product name, and message submitted via our "Contact Us" form.
Marketing Preferences	Your email address and consent when subscribing to our newsletter or opting in to receive news and offers at checkout.

2.2 Information Automatically Collected

When you browse or interact with our Store, we and our service providers automatically collect certain technical and usage data.

Data Category	Specific Information Included
Technical Data	IP address, browser type and version, operating system, device type and model, screen resolution, language preferences, and referring URL.
Usage Data	Pages viewed, product pages visited, search queries, links clicked, time spent on pages, shopping cart contents and activity, checkout events, and discount codes applied.
Transaction Data	Order history, products purchased, quantities, prices, and payment method type (e.g., credit card, PayPal).
Session & Behavior Data	Mouse movements, scroll depth, click patterns, and session recordings collected by analytics tools to help us understand how users interact with our Store.
Cookie & Tracking Data	Identifiers and preferences stored on your device via cookies, pixels, and similar tracking technologies. Please refer to our Cookie Policy for full details.
Loyalty Program Data	Points balance, referral codes, tier status, and optionally your birthday month and day if you participate in our loyalty and rewards program.

2.3 Information Received from Other Sources 

We may also receive limited information about you from the following sources:

· Shop Pay / Login with Shop: If you use Shop Pay or "Login with Shop" for express checkout or sign-in, Shopify may share your saved account information (name, email, saved addresses) to facilitate the transaction.

· IP-Based Location Inference: We may infer your approximate country or region from your IP address to pre-fill address fields or display region-appropriate content.

3. How Do We Use Your Information?

We process your personal information only when we have a valid legal basis to do so. The table below describes our processing purposes and the corresponding legal justifications.

Purpose of Processing	Description	Legal Basis
Account Creation & Management	To create and manage your customer account, authenticate your identity, and enable account features such as order history, saved addresses, and loyalty status.	Performance of Contract
Order Processing & Fulfillment	To process your orders, arrange shipping and delivery, send order confirmations and updates, and handle returns or refunds.	Performance of Contract
Payment Processing	To facilitate payment transactions through our payment processors. We do not store full payment card details; payment data is handled by PCI-DSS compliant payment providers.	Performance of Contract
Customer Support	To respond to your inquiries, complaints, and requests submitted via our contact form, email, or live chat.	Performance of Contract / Legitimate Interest
Product Reviews	To publish and manage product reviews you submit, and to share review data with our review platform provider (Judge.me).	Legitimate Interest
Website Analytics & Improvement	To analyze how users interact with our Store, identify usability issues, and improve our products, content, and user experience.	Legitimate Interest
Advertising & Retargeting	To deliver personalized advertisements on third-party platforms (including social media and search engines) and to measure the effectiveness of our marketing campaigns.	Consent (where required by applicable law) / Legitimate Interest
Email Marketing & Newsletters	To send you newsletters, promotional offers, product updates, and exclusive deals about viaim products.	Consent — you may withdraw at any time by clicking "Unsubscribe" in any marketing email or by contacting us.
Fraud Prevention & Security	To detect, investigate, and prevent fraudulent transactions, unauthorized account access, and other harmful activities on our Store.	Legitimate Interest
Legal Compliance	To comply with applicable laws, regulations, and lawful government or regulatory requests, including tax and accounting obligations.	Legal Obligation

4. Automated Decision-Making and Profiling

We do not use your personal information for fully automated decision-making that produces legal effects or similarly significantly affects you without the opportunity for human review.

We do use analytics and behavioral data to present personalized product recommendations and targeted advertisements. These activities do not constitute automated decisions with significant legal or similarly significant consequences on individual users.

5. Who Do We Share Your Information With?

We disclose your personal information only to the extent necessary to operate our Store and deliver our Services. The categories of recipients are set out below.

Recipient Category	Specific Providers & Purpose
E-Commerce Platform	Shopify (Canada / USA): Our Store is hosted on Shopify. Shopify processes data on our behalf for store operations, checkout, fraud detection, and performance monitoring.
Payment Processors	Shopify Payments (Stripe), PayPal, Apple Pay, Google Pay, Shop Pay: Process your payment transactions securely. These providers operate under their own privacy policies and PCI-DSS compliance frameworks.
Email Marketing Service	Omnisend: Used to send transactional and marketing emails and to manage newsletter subscriptions.
Analytics Providers	Google Analytics, Microsoft Clarity, Lucky Orange, PT Engine, Visitors.live: Used to analyze website traffic, user behavior, heatmaps, and session recordings to improve our Store.
Advertising Partners	Google Ads (DoubleClick), Meta / Facebook Pixel, TikTok Pixel, RedRetarget: We share browsing activity and device identifiers with these advertising platforms to serve personalized ads and measure campaign performance.
Customer Support	Chatty: A third-party live chat service used to provide real-time customer support.
Product Review Platform	Judge.me: Reviews you submit on our Store are processed by Judge.me under its own terms, privacy, and content policies.
Bot & Spam Protection	hCaptcha: Used to protect our Store's forms from automated abuse.
Return & Package Protection	Seel: Provides optional return and package protection services at checkout.
Loyalty & Rewards Program	HoneyPop: Manages our loyalty points, referral program, and customer tier features.
Sustainability Partner	One Tree Planted: We may share anonymized or aggregated transaction data in connection with our sustainability commitments.
Shipping & Logistics Carriers	Your name, address, and order details are shared with shipping and logistics providers to fulfill and deliver your order.
Legal & Regulatory Authorities	We may disclose information when required by applicable law, court order, subpoena, or government request, or when necessary to protect the rights, property, or safety of viaim, our users, or others.
Corporate Transferees	In the event of a merger, acquisition, financing, or sale of business assets, your personal information may be transferred to the relevant successor entity, subject to appropriate privacy protections.

6. International Transfers

HONG KONG FUTURE INTELLIGENT TECHNOLOGY CO., LIMITED is headquartered in Hong Kong SAR. When you use our Store, your personal information may be transferred to and processed in countries other than your country of residence.

These countries may have data protection laws that differ from those in your jurisdiction. Where such transfers occur, we take steps to ensure your personal information remains protected, including by entering into data processing agreements with our service providers that incorporate appropriate contractual protections.

7. How Long Do We Keep Your Information?

We will not retain your personal information for longer than is necessary for the purposes for which it was collected. The table below provides our retention guidelines by data type.

Data Category	Retention Period
Account Data (name, email, password hash)	For the duration of your active account, plus up to 30 days following account deletion to allow for reactivation and to ensure complete erasure.
Order & Transaction Records	Up to 7 years from the date of the transaction, as required for tax, accounting, and legal compliance purposes.
Payment Processing Data	Full payment card details are not stored by us; retention is governed by our payment processors. Order-related payment status and receipts are retained as part of order records (up to 7 years).
Shipping Address Data	For the duration of your account; deleted upon account closure.
Analytics & Behavioral Data	Governed by each analytics provider's configuration. Typically up to 26 months for web analytics data; session recordings typically 90–365 days.
Marketing Data (email lists, preferences)	Until you withdraw your consent or unsubscribe, plus a reasonable period to process the opt-out.
Contact Form Submissions	For the period necessary to resolve your inquiry, typically up to 2 years.
Review Content	For as long as your review is published on our Store. Subject also to Judge.me's data retention policies.
Log & Security Data	Typically 90 days to 1 year from the date of collection.

Upon expiry of the applicable retention period, we will securely delete or anonymize your personal information.

8. How Do We Keep Your Information Secure?

We implement appropriate technical and organizational measures to protect your personal information from unauthorized access, disclosure, loss, destruction, or alteration. Our security practices include:

· Encryption in Transit: All communications between your browser and our Store are encrypted using TLS (HTTPS).

· PCI-DSS Compliant Checkout: Sensitive payment data is processed through Shopify's PCI-DSS Level 1 compliant checkout environment, which is certified to the highest standard in the payments industry.

· Access Controls: Access to personal information systems is restricted to personnel and service providers with a legitimate need, based on the principle of least privilege.

· Fraud & Bot Protection: We use Shopify's built-in fraud detection tools and hCaptcha to protect against fraudulent transactions and automated abuse.

· Third-Party Security Standards: We work with service providers that maintain recognized security certifications and undergo regular security assessments.

Please note that no method of Internet transmission or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security. If you suspect a security incident involving your account or personal information, please contact us immediately at service@viaim.ai.

9. Your Rights

Depending on the laws applicable in your jurisdiction, you may have the following rights regarding the personal information we hold about you:

· Right of Access: Request a copy of the personal information we hold about you.

· Right to Rectification: Request that we correct inaccurate or incomplete personal information.

· Right to Erasure: Request that we delete your personal information, subject to certain legal exceptions (e.g., where retention is required by law).

· Right to Restrict Processing: Request that we limit how we process your personal information in certain circumstances.

· Right to Object: Object to processing based on legitimate interests, including direct marketing.

· Right to Data Portability: Request that we provide your personal information in a structured, commonly used, machine-readable format.

· Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing prior to withdrawal.

How to exercise your rights: Contact us at service@viaim.ai. We will verify your identity before processing your request and respond within the timeframe required by applicable law (typically within 30 days). We do not charge a fee for exercising these rights, except where requests are manifestly unfounded or excessive.

Right to Lodge a Complaint: You also have the right to lodge a complaint with the data protection authority competent in your jurisdiction if you believe we have not handled your personal information in accordance with applicable law.

10. Children's Privacy

Our Store is not directed to individuals under the age of 16. We do not knowingly collect personal information from children under the age of 16. If we become aware that we have inadvertently collected personal information from a child under 16 without appropriate consent, we will take immediate steps to delete that information from our records. If you believe we may have collected personal information from a child under 16, please contact us at service@viaim.ai.

11. Changes and Notification

We may update this Privacy Policy from time to time to reflect changes in our business practices, applicable law, or in how we collect and use personal information. The updated version will be published on our Store with a revised "Last Updated" date at the top of this page.

If we make material changes to this Privacy Policy, we will notify you in advance by email (using the address associated with your account) and/or by posting a prominent notice on our Store before the changes take effect.

We encourage you to review this Privacy Policy periodically. Your continued use of our Store after any changes indicates your acknowledgment of the updated policy.

Additional Information for California Residents

This section supplements the Privacy Policy above and applies specifically to residents of the State of California under the California Consumer Privacy Act of 2018 (CCPA), as amended by the California Privacy Rights Act of 2020 (CPRA).

Categories of Personal Information Collected

In the preceding 12 months, we have collected the following categories of personal information, as classified under CCPA:

CCPA Category	Examples of Information Collected
Identifiers	Real name, email address, IP address, account identifier, cookie IDs, device identifiers.
Personal Records (Cal. Civ. Code § 1798.80)	Postal address, telephone number, credit or debit card information (processed by and stored with our payment providers, not retained by us).
Commercial Information	Products purchased or considered, order history, cart contents, discount codes used.
Internet or Other Electronic Network Activity	Browsing history on our Store, page interactions, search queries entered, clickstream data, session recordings, and ad engagement data.
Geolocation Data	Imprecise location inferred from IP address.
Inferences	Profile inferences drawn from usage and browsing data for the purpose of advertising personalization.
Sensitive Personal Information	None. We do not collect or process sensitive personal information as defined under CPRA.

Sources of Personal Information

We collect personal information from the categories of sources described in Section 2 of this Privacy Policy: directly from you, automatically through your interactions with our Store, and from third-party service providers (such as Shopify).

Business and Commercial Purposes

We collect and use personal information for the business and commercial purposes described in Section 3 of this Privacy Policy.

Disclosure, Sale, and Sharing of Personal Information

We do not sell your personal information for monetary or other valuable consideration.

However, we do "share" personal information as that term is defined under CPRA — that is, we disclose personal information to third parties for the purpose of cross-context behavioral advertising. Specifically, we share Internet activity data and device identifiers (such as cookie IDs, pixel data, and IP addresses) with the following advertising partners so that they can display personalized advertisements to you across other websites and platforms: Google Ads, Meta (Facebook), TikTok, and RedRetarget.

In the preceding 12 months, we have disclosed the following categories of personal information to third parties for business purposes:

CCPA Category	Categories of Recipients
Identifiers	Shopify (store operations), analytics providers, advertising partners, email marketing service
Personal Records	Shopify, payment processors, shipping carriers
Commercial Information	Shopify, shipping carriers, payment processors, loyalty program provider
Internet / Network Activity	Analytics providers (Google Analytics, Microsoft Clarity, Lucky Orange, PT Engine, Visitors.live), advertising partners
Geolocation Data	Analytics providers

We do not have actual knowledge of selling or sharing the personal information of consumers under the age of 16.

Your California Privacy Rights

As a California resident, you have the following rights under CCPA/CPRA:

Right to Know: You may request disclosure of (a) the specific pieces of personal information we have collected about you; (b) the categories of personal information collected; (c) the categories of sources from which it was collected; (d) the business or commercial purpose for collection; and (e) the categories of third parties to whom it has been disclosed.

Right to Delete: You may request that we delete personal information we have collected from you, subject to certain exceptions (e.g., information necessary to complete a transaction, detect security incidents, or comply with a legal obligation).

Right to Correct: You may request that we correct inaccurate personal information we maintain about you.

Right to Opt-Out of Sale / Sharing: You have the right to opt out of the sharing of your personal information for cross-context behavioral advertising purposes. To exercise this right, please click the "Do Not Share My Information" link in the footer of our Store, or contact us at service@viaim.ai. 

Right to Limit Use of Sensitive Personal Information: We do not use or disclose sensitive personal information for purposes beyond those permitted under CPRA without your consent, and as noted above, we do not collect sensitive personal information from you.

Right to Non-Discrimination: We will not deny you goods or services, charge you a different price, or provide a different level of quality because you exercised any of the rights described in this section.

Shine the Light (Cal. Civ. Code § 1798.83)

California residents may request, once per calendar year, information about personal information we disclosed to third parties for their own direct marketing purposes during the preceding calendar year, including the categories of personal information and the names and addresses of those third parties. To make such a request, please contact us at service@viaim.ai with the subject line "Shine the Light Request."

Financial Incentives

We do not offer any financial incentive programs (such as loyalty rewards, discount programs, or special pricing) in exchange for the collection, retention, or sale of personal information that would require disclosure under CCPA/CPRA.

Authorized Agents

You may designate an authorized agent to submit a CCPA rights request on your behalf. The authorized agent must provide written permission signed by you. We may also verify your identity directly with you to ensure the security of your information.

How to Submit a Request

To exercise any of the California privacy rights described in this section, please contact us:

· Email: service@viaim.ai

· Subject Line: "California Privacy Rights Request"

We will respond within 45 calendar days. If we require additional time (up to a further 45 days), we will inform you within the initial 45-day period. We will not charge you a fee for a verifiable consumer request unless the request is excessive, repetitive, or manifestly unfounded, in which case we will notify you of the reason and the cost before completing the request.