Privacy Notice

Last Updated: October 12, 2026

At Vellucentria, a home and lifestyle retail brand operated by hongkong surfari co., Limited, we recognize the importance of protecting the personal information entrusted to us by our customers and website visitors.

This Privacy Notice explains how we obtain, use, maintain, and safeguard personal information when you browse our online store, explore our natural wood-inspired home collections, or purchase products that reflect artisanal craftsmanship and modern living.

We are committed to handling customer information responsibly and maintaining transparency about our privacy and data management practices.

1. Personal Information We Collect

To facilitate convenient online shopping and provide relevant customer services, we may collect certain categories of personal and technical information during your interactions with our website.

• Customer-Provided Information: When you register an account, submit an inquiry, or place an order, we may request information needed to identify and assist you. This may include your full name, shipping address, email address, telephone number, and other details relevant to fulfilling your purchase.

• Payment Information: Transactions are processed through authorized third-party payment service providers. Vellucentria does not directly retain or process complete payment card numbers or card verification values (CVV) on its own servers. Payment-related information is handled through the security systems maintained by the applicable payment processors.

• Website Usage Information: While you interact with our online store, standard tracking tools may collect technical information, including IP addresses, browser characteristics, website navigation activity, and interactions with our pages. This information helps us understand website performance and improve the shopping experience.

2. How We Use Collected Information

Information obtained through our website is used to support essential commercial activities, maintain our online services, and provide effective customer assistance.

The primary purposes include:

• Order Processing and Delivery: We use necessary customer information to confirm purchases, coordinate secure payment processing, arrange shipping, and communicate updates regarding the status of orders.

• Website Improvement: Browsing patterns and general visitor activity may be evaluated to enhance website navigation, improve product presentation, and refine the functionality of our online shopping platform.

• Customer Communications: We may send transactional messages, including purchase confirmations, payment notifications, delivery information, and other service-related correspondence. Promotional emails or product announcements are sent when you have provided the required consent or otherwise permitted by applicable law.

• Fraud Prevention and Platform Security: Relevant information may be used to identify suspicious transactions, reduce unauthorized activities, and help protect the integrity and reliability of our website.

3. Information Security and Protection Measures

Vellucentria recognizes the importance of maintaining appropriate safeguards for the personal data entrusted to our business.

We seek to protect customer information through technical, administrative, and organizational security practices.

• Encrypted Data Transmission: Sensitive information transmitted through our website is protected using Secure Sockets Layer (SSL) or comparable encrypted communication technologies designed to reduce unauthorized interception during transmission.

• Authorized Information Access: Access to customer records is limited to personnel and service providers who require the information for legitimate operational purposes and are subject to appropriate confidentiality obligations.

• Secure Payment Processing: Payment transactions are handled through external payment providers that maintain applicable Payment Card Industry Data Security Standard (PCI DSS) safeguards. We rely on these processors to manage sensitive payment credentials within their authorized payment environments.

Although we take reasonable steps to safeguard information, no internet-based system or electronic transmission method can guarantee absolute security.

4. External Service Providers and Advertising Activities

Vellucentria does not exchange customers' personal information for direct monetary payment.

To operate our online business and support related services, certain information may be disclosed to authorized third-party providers involved in payment processing, logistics, website functionality, analytics, and advertising.

Some of these activities may involve data sharing that is regulated separately under applicable privacy laws.

Advertising and Website Analytics

We may work with established advertising and analytics services to evaluate website activity, understand customer engagement, and deliver more relevant promotional content.

Depending on the technologies enabled on our website, these services may include:

• AppLovin: May be used to support personalized digital advertising, marketing attribution, and conversion measurement. Privacy information: https://legal.applovin.com/privacy

• Meta Platforms: May support social media advertising integrations, audience insights, and measurement of promotional performance. Privacy information: https://www.facebook.com/privacy/policy/

• Google Services: May be used for website traffic analysis, digital advertising performance, and search-related optimization. Privacy information: https://policies.google.com/privacy

These providers maintain their own privacy policies explaining how information may be collected and processed through their respective services.

We encourage customers to review the applicable third-party privacy notices when seeking additional information about external data practices.

5. Cookies and Similar Technologies

Our website may use both first-party and third-party cookies to support essential store functions, understand visitor behavior, and improve the relevance of our online services.

Cookies are small data files placed on a user's device when visiting certain websites.

They may be used for the following purposes:

• Shopping Cart Functionality: Helping preserve the items selected in your cart as you continue browsing our home and lifestyle collections.

• Website Analytics: Gathering general information about visitor activity, traffic patterns, and website performance to support future improvements.

• Advertising Relevance: Assisting advertising partners, including services such as AppLovin where enabled, in displaying promotional content that may be relevant to visitors.

• Cookie Preferences and Controls: Most internet browsers provide settings that allow users to restrict, manage, or delete cookies. You may adjust these preferences through your browser or available website privacy controls. However, disabling certain cookies may affect shopping cart functions, site navigation, or other features that rely on these technologies.

6. Children's Privacy and COPPA

Vellucentria offers home and lifestyle products intended for adult consumers. Our online store is not designed to target children under the age of 13.

We do not knowingly request, collect, or solicit personal information from individuals within this age group.

If we become aware that information belonging to a child under 13 has been collected without the necessary authorization, we will take prompt action to remove the information from our records, subject to any applicable legal requirements.

Parents or legal guardians who believe that a child has submitted personal information through our website may contact us at support@calinovestara.com to request an appropriate review and deletion.

7. California Online Privacy Protection Act (CalOPPA)

We recognize the importance of providing clear and accessible information about our website's privacy practices in accordance with applicable California online privacy requirements.

Our privacy-related practices include the following:

• Browsing Without Account Registration: Visitors may explore our website and review available products without creating a customer account or completing a purchase. Certain technical information may still be collected during browsing.

• Privacy Notice Accessibility: A link to this Privacy Notice is provided through our website's footer so customers can review our information-handling practices when needed.

• Do Not Track Preferences: We recognize the importance of browser-based privacy preferences, including "Do Not Track" signals. The handling of such signals may depend on the technical capabilities of our website and integrated services, as well as applicable legal requirements.

We aim to provide customers with meaningful information about the collection and use of personal data during their interactions with our online store.

8. Privacy Rights for European Customers (GDPR)

Where the European Union General Data Protection Regulation (GDPR) or related European privacy legislation applies, eligible individuals may exercise rights concerning their personal information.

Depending on the circumstances and applicable legal requirements, these rights may include:

• Right of Access: Requesting confirmation of whether we process your personal data and obtaining access to relevant information.

• Right to Rectification: Requesting corrections when personal information held by our business is incomplete, outdated, or inaccurate.

• Right to Erasure: Asking for the deletion of personal data when the relevant legal conditions are satisfied, subject to applicable retention obligations.

To submit a privacy-related request, please contact our customer support team at support@calinovestara.com.

We will review the request and respond in accordance with the requirements and timeframes established by applicable data protection laws.

9. California Consumer Privacy Act (CCPA/CPRA)

California residents may have specific rights regarding personal information under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, where these laws apply to our business.

These rights may include the following:

• Right to Know: Eligible consumers may request information about the categories of personal data collected, the purposes for which it is used, and relevant disclosures to third parties.

• Right to Opt Out: Although Vellucentria does not receive direct monetary compensation for selling customer information, certain disclosures involving digital advertising partners may constitute a "sale" or "sharing" of personal information under California privacy law. Where applicable, eligible consumers may request that such activities be discontinued.

Customers seeking to exercise applicable privacy rights may contact support@calinovestara.com.

We will evaluate requests and take the appropriate steps in accordance with relevant legal obligations.

10. Data Breach Response Procedures

Vellucentria takes the protection of customer information seriously and recognizes the importance of an organized response if a data security incident occurs.

In the event of a confirmed security breach affecting personal information, our response procedures are intended to support timely investigation, risk assessment, and appropriate customer communication.

• Customer Notifications: We aim to notify affected customers by email within seven business days after confirming a reportable breach, providing available information regarding the nature and potential scope of the incident, subject to applicable legal notification requirements.

• Website Announcements: Where a public notification is appropriate or legally required, relevant information may also be communicated through a visible notice on our website.

We will take reasonable steps to investigate the incident, address identified vulnerabilities, and implement appropriate corrective measures.

11. Email Communications and CAN-SPAM Compliance

We respect our customers' communication preferences and seek to follow responsible commercial email practices consistent with applicable CAN-SPAM requirements.

Our marketing communication practices include:

• Accurate Email Identification: Commercial emails are prepared with clear sender information and subject lines that appropriately reflect the content of the message.

• Accessible Unsubscribe Options: Promotional email communications include an identifiable unsubscribe mechanism through which recipients may withdraw from future marketing messages.

• Processing Unsubscribe Requests: We seek to process unsubscribe requests promptly and remove recipients from applicable promotional mailing lists in accordance with legal requirements.

Customers may also contact support@calinovestara.com if they require assistance managing their marketing communication preferences.

12. Corporate Contact Information

If you have questions about this Privacy Notice, wish to exercise applicable data protection rights, or require clarification regarding how your personal information is managed, please contact us through the official details below.

• Brand Name: Vellucentria

• Corporate Entity: hongkong surfari co., Limited

• Registered Business Address: Unit 1406B, 14/F, The Belgian Bank Building, Nos. 721–725 Nathan Road, Kowloon, Hong Kong

• Official Customer Support Email: support@calinovestara.com

• Customer Service Telephone: +1 (443) 658-3823