Política de privacidad

Privacy Policy

Last Updated: April 22, 2026

Handxen ("we," "us," "our") operates this store and website (handxen.com), including all related information, content, features, tools, products, and services, in order to provide you with a curated shopping experience (the "Services"). Our store is powered by Shopify Inc. ("Shopify"), which enables us to provide the Services to you.

This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction through the Services — whether on our website or through an AI channel such as Microsoft Copilot, ChatGPT, Google AI Mode, or Gemini (collectively, "AI channels") — or otherwise communicate with us.

If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described here.

1. Personal Information We Collect or Process

When we use the term "personal information," we mean information that identifies, or can reasonably be linked to, you or another person. Personal information does not include information that is collected anonymously or has been de-identified so that it cannot identify or be reasonably linked to you.

Depending on how you interact with the Services, where you live, and as permitted or required by applicable law, we may collect or process the following categories of personal information — along with inferences drawn from it:

Contact details: your name, billing address, shipping address, phone number, and email address.
Financial information: credit card, debit card, and financial account numbers, payment card information, transaction details, form of payment, and payment confirmations. Full payment card numbers are handled by our PCI-DSS compliant payment processors (Shopify Payments, PayPal, Stripe, or other gateways) and are not stored on our own servers.
Account information: your username, password, security questions, preferences, and settings.
Transaction information: items you view, place in your cart, add to a wishlist, or purchase, return, exchange, or cancel, and your past transactions.
Communications with us: information you include when you send us messages (for example, a customer support inquiry or a product review).
Device information: information about your device, browser, operating system, network connection, IP address, and other unique identifiers.
Usage information: information about your interaction with the Services, including how and when you interact with or navigate them.
AI channel information: when you buy through an AI channel, we receive the transaction details, your name, email, shipping address, and items ordered, so we can fulfill the order and provide customer service.

Personal Information Sources

We may collect personal information from the following sources:

Directly from you — for example, when you create an account, place an order, contact us, or otherwise provide your information.
Automatically through the Services — from your device when you use our Services or visit our website, including through cookies, pixels, SDKs, and similar technologies.
From service providers — including Shopify and payment processors, when they collect or process personal information on our behalf.
From AI channels and partners — such as Microsoft Copilot, ChatGPT, Google AI Mode, and Gemini, when you discover or purchase our products through those channels.
From other third parties — including shipping carriers, fraud prevention services, and advertising partners.

2. How We Use Your Personal Information

Depending on how you interact with us, we may use your personal information for the following purposes:

Provide, tailor, and improve the Services. To perform our contract with you; process your payments; fulfill your orders; remember your preferences; send you notifications about your account and orders; process purchases, returns, exchanges, and other transactions; create and manage your account; arrange for shipping; enable you to post reviews; and create a customized shopping experience (for example, recommending products related to your purchases). This may include using your personal information to better tailor and improve the Services.
Marketing and advertising. To send you promotional communications by email, text message, or postal mail (only where you have opted in where required by law), and to show you online advertisements — including on other websites — based on items you previously viewed, added to your cart, or purchased.
Security and fraud prevention. To authenticate your account, provide a secure payment and shopping experience, detect and prevent fraudulent or malicious activity, protect public safety, and secure our Services.
Communicating with you. To provide customer support, respond to your inquiries, and maintain our business relationship.
Legal reasons. To comply with applicable law, respond to valid legal process (including requests from law enforcement or government agencies), participate in civil discovery or litigation, and enforce or investigate potential violations of our terms or policies.

3. How We Disclose Personal Information

We may disclose your personal information to third parties for legitimate purposes subject to this Privacy Policy. Such disclosures may include:

Shopify, vendors, and other service providers who perform services on our behalf — for example, IT management, payment processing, data analytics, customer support, cloud storage, order fulfillment, and shipping.
Business and marketing partners to provide marketing services and targeted advertising. For example, we use Shopify's advertising infrastructure to support personalized ads with third-party services based on your activity across different merchants and websites. Our partners use your information in accordance with their own privacy notices. Depending on where you live, you may have the right to direct us not to share information for targeted advertising — see Section 7 below.
AI channels (Microsoft Copilot, ChatGPT, Google AI Mode, Gemini, and similar). If you discover or purchase our products through an AI channel powered by Shopify's Agentic Storefronts, Shopify may share with the AI channel: (i) product data (titles, descriptions, images, pricing, availability) so the AI can accurately represent our products; and (ii) for orders placed through an AI channel's built-in checkout, customer and order data necessary to complete the transaction — such as the customer's name, email, phone number, and shipping address. AI channels access your order details and contact information only for transactions originating in that channel. Each AI channel's own privacy policy also applies to your use of that channel.
At your direction or with your consent — for example, when we ship you products through a carrier, or when you use a social media widget or login integration.
Affiliates or entities within our corporate group.
In connection with a business transaction such as a merger, acquisition, or bankruptcy, to comply with legal obligations (including responding to subpoenas, search warrants, and similar requests), to enforce our terms, and to protect or defend the Services and the rights of our users.

We do not sell your personal information for monetary consideration. However, certain disclosures for targeted advertising or data analytics may qualify as a "sale" or "share" under laws such as the California Consumer Privacy Act (CCPA/CPRA). You can opt out of those uses — see Section 7 below.

4. Relationship with Shopify

Our Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve those Services for us and for you. Information you submit to the Services will be transmitted to and shared with Shopify, as well as with third parties that may be located in countries other than the one where you live, in order to provide and improve the Services.

To help protect, grow, and improve our business, we use certain Shopify enhanced features that incorporate data from your interactions with our store, along with other merchants and with Shopify itself. To provide these features, Shopify may make use of personal information collected about your interactions with our store, other merchants, and Shopify. In these circumstances, Shopify is responsible for the processing of your personal information, including for responding to your requests to exercise your rights over that processing.

To learn more about how Shopify uses your personal information and any rights you may have, visit the Shopify Consumer Privacy Policy. Depending on where you live, you may exercise certain rights with respect to your personal information through the Shopify Privacy Portal.

5. Cookies and Similar Technologies

We and our service providers (including Shopify) use cookies, pixels, SDKs, and similar technologies to:

Keep you logged in and maintain your cart.
Remember your preferences and settings.
Analyze traffic and usage of the Services.
Deliver relevant advertising on our site and on other websites.

You can control cookies through your browser settings. If you disable certain cookies, some features of the Services may not work properly.

Global Privacy Control (GPC). If you visit our website with the GPC opt-out preference signal enabled, and you reside in a jurisdiction where we are required to honor GPC, we will automatically treat this as a request to opt out of "sale" and "sharing" for targeted advertising on the device and browser you use. If we can associate the signal with your Shopify account, we will apply the opt-out to your account as well. Other than GPC, we do not currently recognize "Do Not Track" signals.

To learn more about GPC, visit globalprivacycontrol.org.

6. Third-Party Websites and Links

The Services may provide links to websites or online platforms operated by third parties. If you follow links to sites not affiliated with or controlled by us, you should review their privacy and security policies and other terms. We do not guarantee and are not responsible for the privacy or security of such sites.

Information you share on public or semi-public venues — including third-party social networking platforms — may be viewable by other users without limitation as to its use by us or a third party. Our inclusion of such links does not imply endorsement of the linked platform or its operator unless disclosed on the Services.

7. Your Rights and Choices

Depending on where you live, you may have some or all of the rights below in relation to your personal information. These rights are not absolute, may apply only in certain circumstances, and in some cases we may decline your request as permitted by law.

Right to Access / Know. Request access to personal information we hold about you.
Right to Delete. Request that we delete personal information we maintain about you.
Right to Correct. Request that we correct inaccurate personal information.
Right of Portability. Receive a copy of your personal information, or have it transferred to a third party, in certain circumstances.
Right to Opt Out of Sale, Sharing, or Targeted Advertising. You may have a right to opt out of the "sale" or "sharing" of your personal information, or of processing for "targeted advertising," as defined under applicable privacy laws (such as CCPA/CPRA in California, VCDPA in Virginia, CPA in Colorado, CTDPA in Connecticut, and similar state laws). You can exercise this right through the Shopify Privacy Portal, by enabling Global Privacy Control in your browser, or by contacting us at ben@handxen.com.
Right to Non-Discrimination. We will not discriminate against you for exercising any of these rights.
Managing Communication Preferences. We may send you promotional emails; you can opt out at any time by clicking the unsubscribe link in those emails. If you opt out, we may still send you non-promotional messages about your account or orders.

For UK and EEA Residents

In addition to the rights above, and subject to limitations in local law, you may have the following rights under the UK GDPR or EU GDPR:

Objection to Processing and Restriction of Processing. You may ask us to stop or restrict processing your personal information for certain purposes.
Withdrawal of Consent. Where we rely on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

The legal bases on which we rely to process your personal information include: performance of a contract (to fulfill your orders), our legitimate interests (to run and secure our business), your consent (for marketing and non-essential cookies where required), and compliance with legal obligations.

How to Exercise Your Rights

You may exercise any of these rights by emailing ben@handxen.com or by using the tools provided in the Shopify Privacy Portal. We may need to verify your identity before processing your request, as permitted or required by applicable law.

You may designate an authorized agent to make requests on your behalf. Before accepting such a request, we will require proof that you have authorized the agent and may need to verify your identity directly.

8. Complaints

If you have complaints about how we process your personal information, please contact us using the details in Section 13 below. Depending on where you live, you may have the right to appeal our decision, or to file a complaint with your local data protection authority. For the EEA, a list of supervisory authorities is available on the European Data Protection Board website.

9. International Transfers

We may transfer, store, and process your personal information outside the country where you live, including in Hong Kong, Canada (Shopify's home country), the United States, and other countries where our service providers operate.

If we transfer personal information out of the European Economic Area or the United Kingdom, we rely on recognized transfer mechanisms such as the European Commission's Standard Contractual Clauses (or the UK equivalent), unless the transfer is to a country that has been determined to provide an adequate level of protection.

10. Security and Retention of Your Information

We take reasonable technical and organizational measures to protect your personal information, including encryption in transit for payment data and access controls on our systems. Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee "perfect security." Any information you send to us may not be secure in transit. We recommend that you do not use unsecure channels to communicate sensitive or confidential information.

How long we retain your personal information depends on factors such as whether we need the information to maintain your account, provide the Services, comply with legal obligations (for example, tax and accounting rules typically require transaction records to be kept for several years), resolve disputes, or enforce applicable contracts and policies. When we no longer have a lawful basis to retain your information, we will delete or anonymize it.

11. Children's Data

The Services are not intended for children, and we do not knowingly collect personal information from children under the age of majority in your jurisdiction (generally under 16 in the United States). If you are the parent or guardian of a child who has provided us with personal information, please contact us using the details below to request deletion.

As of the effective date of this Privacy Policy, we do not have actual knowledge that we "share" or "sell" (as defined in applicable law) personal information of individuals under 16 years of age.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for operational, legal, or regulatory reasons. We will post the revised Privacy Policy on this page, update the "Last updated" date, and provide notice as required by applicable law.

13. Contact

Should you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, please contact us at:

Handxen (data controller)

300 Lockhart Road, FLAT/RM A 12F

ZJ300 Wan Chai, Hong Kong

Email: ben@handxen.com

For the purposes of applicable data protection laws, we are the data controller of your personal information.