Privacy policy

This Privacy Policy describes how CHEERSAIL TECHNOLOGY SHARES CO. LIMITED. ("RISION", "we", "us" or "our") collect, use, and disclose your personal data when you visit our website, use our services, make a purchase from https://rision.com (the "Site"), or otherwise communicate with us (collectively, the "Services"). Our Site is powered by Shopify, which provides ecommerce platform and other store operation services to support our online store. For the purposes of this Privacy Policy, "you" and "your" refer to you as the user of the Services, whether you are a customer, website visitor, or another individual whose data we collect in accordance with this Privacy Policy.

If you are located in the European Economic Area, the United Kingdom or the United States, the applicable provisions set out in Supplemental Terms: Jurisdiction-Specific Addenda will also apply to you.

Please read this Privacy Policy carefully. This Privacy Policy is provided for transparency. It does not replace any separate consent that may be required under applicable law.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. This Privacy Policy was last updated on 6 July 2026.

Personal Data We Collect

The types of personal data we obtain about you depend on how you interact with our Site and use our Services. When we use the term "personal data," we mean data that identifies you, relates to you, describes you, or can reasonably be linked to you. The following sections describe the specific categories and types of personal data we collect.

1. Personal Data You Provide to Us

The data you directly provide to us through our Services may include:

• Basic contact information, including your name, address, phone number, and email address.
• Order information, including your name, billing address, shipping address, payment confirmation, email address, and phone number.
• Account information, including your username, password, and security questions.
• Shopping information, including items you have viewed, added to your cart, or added to your Wishlist.
• Customer support information, including the information you choose to provide when communicating with us, for example when sending us a message through the Services.

Certain features of the Services may require you to provide us with certain personal data directly. You may choose not to provide this information, but doing so may prevent you from using or accessing those features.

2. Personal Data Collected Automatically

We also automatically collect certain data about your interaction with the Services ("Usage Data"). To do this, we may use cookies, pixels, and similar technologies ("Cookies"). Usage Data may include information about how you access and use our Site and your account, including device information, browser information, internet connection information, IP address, and other information regarding your interaction with the Services. For more information, please see the "Cookies and Similar Technologies" section below.

3. Personal Data Received from Third Parties

We may also receive data about you from third parties, including vendors and service providers who may collect data on our behalf, such as:

• Shopify and Shopify-related services, which support our online store, checkout, order management, customer accounts, analytics, fraud prevention, and related ecommerce functions.
• Payment service providers, who collect payment information, such as bank details, credit or debit card information, and billing address, to process your payment, fulfill your orders, and provide the products or services you request in order to perform our contract with you. We generally do not directly store full credit card numbers unless otherwise stated.
• Shipping and logistics providers, which provide shipping, delivery, tracking, returns, and customs-related services.
• Marketing and advertising partners, which may provide information about campaign performance, ad interactions, customer segments, or online identifiers, where permitted by law.
• Customer support, review, loyalty, and communication tools, which help us manage support requests, product reviews, newsletters, live chat messages, or promotional campaigns.
• Social media platforms or third-party login providers, if you interact with us through social media features, widgets, or integrations.

All data we obtain from third parties will be handled in accordance with this Privacy Policy.

Shopify and Ecommerce Platform Services

Our online store is powered by Shopify. Shopify provides ecommerce platform services that help us operate the Site, host our online store, manage checkout, process orders, support payments, prevent fraud, provide analytics, and support related store functions.

In general, we determine how we use Shopify for our online store and how we process customer personal data in connection with our store. Shopify processes customer personal data to provide its services to us, subject to its applicable terms and data processing arrangements. In some cases where we enable Shopify features such as Shop Pay, Shop, Shopify Network Intelligence, Shopify Audiences, or other enhanced Shopify services, Shopify may use certain customer data to provide, personalize, improve, protect, or measure those services, subject to applicable privacy choices and Shopify's own privacy terms.

We encourage you to review Shopify's privacy notices for more information about how Shopify processes personal data in connection with its services: https://www.shopify.com/legal/privacy/consumers

How We Use Your Personal Data

We use personal data for the purposes described below. Some of these activities may involve the use of cookies and similar technologies or the disclosure of personal data to service providers and business partners, as further described in the "Cookies and Similar Technologies" and "How We Disclose Personal Data" sections below. If GDPR or UK GDPR applies, the related legal bases are described in the "EEA/UK Users" section below.

1. Product Fulfillment and Service Delivery

We use your personal data to operate the Site, process and fulfill orders, process payments, arrange shipping, provide order confirmations, manage customer accounts, facilitate returns and exchanges, provide warranty or after-sales support, and respond to customer service requests.

2. Account Management

If account registration is available, we use personal data to create and manage your account, authenticate your login, maintain account security, remember your preferences, and provide account-related functions.

3. Security and Fraud Prevention

We use your personal data to detect, investigate, or take action regarding fraudulent, illegal, or malicious activities. If you choose to use the Services and create an account, you are responsible for keeping your account credentials confidential. We strongly recommend that you do not share your username, password, or other access details with others. If you believe your account has been compromised, please contact us immediately.

4. Customer Support and Communications

We use personal data to respond to your inquiries, provide customer support, handle complaints, process returns or warranty claims, communicate about your orders, and maintain our relationship with you.

5. Marketing Communications

Where permitted by applicable law, we may use your contact information and marketing preferences to send you newsletters, promotional offers, product updates, event information, or other marketing communications.

You may opt out of marketing emails at any time by using the unsubscribe link in the relevant email or by contacting us at support@rision.com. If we send SMS marketing, we will provide instructions to opt out, such as replying "STOP," where applicable.

6. Advertising, Analytics and Personalization

We may use personal data and online identifiers to understand how users interact with the Site, measure campaign performance, personalize content, recommend products, and, where permitted by law and subject to your choices, deliver or measure advertising on our Site and on third-party websites or platforms.

In particular, we may use third-party cookies, pixels, tags, and similar technologies, such as Meta Pixel, Google advertising tags, or other advertising technologies, to help us measure advertising performance, understand how users interact with our Site, deliver more relevant advertisements, conduct retargeting, and improve our marketing activities. These technologies may allow us and our advertising or analytics partners to collect or receive certain information about your device and your interactions with the Site, such as device and browser information, IP address, cookie identifiers, page views, referral information, shopping interactions, and conversion events such as product views, add-to-cart, checkout, or purchase events, where enabled. This may allow advertising partners to recognize your browser or device across different websites or services and to help us show or measure ads that may be more relevant to you.

For users in jurisdictions where consent is required for non-essential cookies or similar technologies, we will use such technologies only in accordance with your cookie choices.

For users in jurisdictions that provide opt-out rights for sale, sharing, targeted advertising, or cross-context behavioral advertising, we will provide applicable opt-out mechanisms where required.

7. Business Operations and Improvement

We may use personal data to maintain, improve, and optimize our Site, products, services, customer experience, internal reporting, business analytics, inventory planning, and operational processes.

Cookies and Similar Technologies

We use cookies and similar technologies on the Site. Cookies are small text files placed on your device. Similar technologies may include pixels, tags, web beacons, local storage, scripts, and other tracking technologies.

Our Services use the following cookies:

• Strictly necessary cookies, which are required for the operation of the Services. Without them, for example, you would not be able to use your Account. These cookies cannot be turned off.
• Analytical/performance cookies, which allow RISION to recognize and count the number of visitors, learn how visitors navigate the Services, and improve the Services.
• Functionality cookies, which RISION uses to recognize you when you return to the Services.

Additionally, our website also works with third-party products or services ("Service Providers") to offer and present our Services to you. These Service Providers may include Google, Facebook, etc. and other Service Providers who help us track and analyze our website user activity, measure the effectiveness of our advertising and fundraising efforts, and support the optimization of our digital campaigns.

Our Service Providers may get more information about your activity on our website, including pages you visit, access times, visit duration, how you arrived at our websites and your IP address. An IP address is a number that identifies a device connected to the internet. For most devices, the IP address changes on at least a weekly basis. Our Service Providers may also get device identifiers and specific information about the browser you use. In some cases, this information may be unique to you.

Additionally, our website uses pixels which are HTML code snippets that are loaded when a user visits a website or opens an email. It is useful for tracking user behavior and activity. With a tracking pixel, advertisers can get data for online marketing, web analysis or email marketing. If such data is analyzed in a particular way, the data collected through these pixels can be used for other purposes as well, for example retargeting/behavioral advertising.

If you would like to disable these tracking pixels, there are a number of ways in which you can prevent your data from being collected by tracking pixels:

• Set browser and email settings to be as restrictive as possible such that external graphics are only supported after permission, and HTML emails are not supported. Appropriate firewall settings can also do this.
• Some browser extensions can be used to make tracking pixels visible, such as PixelBlock, uBlock Origin, HTTPS Everywhere, etc.
• For more information about how targeted advertising works, you can visit the Network Advertising Initiative's ("NAI") educational webpage here: https://thenai.org/about-online-advertising/how-does-it-work/

Please note that third parties, including, for example, advertising networks and providers of external services like web traffic analysis services, may also use cookies, over which we have no control. These cookies are likely to be analytical/performance cookies or targeting cookies.

Most internet browsers accept cookies by default, but you can change your browser preferences to block or restrict cookies if you do not want your web browsing activity tracked. Please note that some cookies are necessary for our website to run and, as such, cannot be declined. However, such cookies do not collect any personal information. If you choose, you may use the Digital Advertising Alliance (DAA) WebChoices Tool to globally opt out of third-party tracking via website cookies.

We are not responsible for the effectiveness or compliance of third-party opt-out mechanisms or programs. Please note that if you remove your cookies or upgrade your browser after having opted out, you will need to opt out again. Your opt out is specific to the browser you are using and the device you use to access the website. Therefore, if you use multiple browsers or devices you will need to opt out on each browser or device. You can access the information on our website without enabling cookies in your browser, but disabling cookies may result in a diminished ability to take advantage of the services and related informational content on our website.

How We Disclose Personal Data

In certain circumstances, we may disclose your personal data to third parties for legitimate purposes, including:

• Ecommerce platform and website service providers, including Shopify, to host and operate the online store, checkout, customer accounts, order management, analytics, and related ecommerce functions.
• Payment service providers, to process payments, refunds, fraud checks, and payment confirmations.
• Shipping, logistics, warehouse, and fulfillment providers, to ship products, provide tracking, handle returns, and complete delivery.
• IT, cloud, security, and business operations providers, to operate, secure, maintain, and improve the Site and Services.
• Customer support providers, to manage customer inquiries, support tickets, warranty claims, complaints, and after-sales services.
• Marketing, analytics, and advertising partners, to send communications, analyze performance, personalize services, and deliver or measure advertising, subject to applicable consent and opt-out requirements.
• Professional advisers, such as lawyers, auditors, accountants, insurers, and consultants, where necessary for business, compliance, dispute resolution, or risk management purposes.
• Affiliates and group companies, where necessary for internal administration, customer support, order fulfillment, business operations, compliance, or other purposes described in this Privacy Policy.
• Authorities, courts, regulators, and other parties, where required by law or where necessary to protect our rights, users, security, property, or legal interests.
• Transaction parties, in connection with mergers, acquisitions, reorganizations, financing, sale of assets, bankruptcy, or similar corporate transactions.

We do not use or disclose sensitive personal data for the purpose of inferring characteristics about you, unless otherwise disclosed and permitted by applicable law. In particular, when sensitive information is processed by a third party such as a payment service provider or Shopify, we do not directly access or store such information.

User-Generated Content

The Services may allow you to post product reviews and other user-generated content. If you choose to submit user-generated content to a public area of the Services, that content will be public and accessible by anyone.

We cannot control who will have access to the information you choose to make available to others, and we cannot ensure that parties who have access to such information will respect your privacy or keep it secure. We are not responsible for the privacy or security of any information you make publicly available, or for the accuracy, use, or misuse of any information disclosed or received from third parties.

Third-Party Websites and Links

Our Site may provide links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated with or controlled by us, you should review their privacy and security policies and other terms and conditions.

We do not guarantee and are not responsible for the privacy, security, accuracy, completeness, or reliability of third-party websites. Information you provide on public or semi-public platforms, including information shared on third-party social media platforms, may also be viewed by other users and/or users of those platforms without limitation.

This section applies to third-party websites or services that are not controlled by us. It does not limit our obligations with respect to service providers that process personal data on our behalf.

International Transfers

We operate our business globally and may transfer, store, and process your personal data outside of your country, state, or region of residence. As a result, your personal data may be subject to the laws of those jurisdictions where we, our affiliates, or our service providers operate.

In particular, we use the services of Shopify to host and support our Site. Shopify is a Canada-based company that processes personal data through its global infrastructure. As part of providing its services, personal data may be transferred to Shopify's affiliates and service providers located in multiple countries. Where you are located in the European Economic Area, the United Kingdom, or Switzerland, your personal data may be transferred to and processed by Shopify entities located in jurisdictions such as Ireland and Canada, and subsequently transferred to other countries, including the United States, where Shopify and its sub-processors operate.

Where GDPR or UK GDPR applies and personal data is transferred outside the EEA or UK to a country that has not been recognized as providing an adequate level of protection, we will use appropriate safeguards where required, such as Standard Contractual Clauses, the UK International Data Transfer Addendum or Agreement, and, where necessary, supplementary measures.

Please note that in certain circumstances, personal data may be disclosed to courts, law enforcement authorities, or regulators in jurisdictions where data is processed, where such disclosure is required by applicable law or legal process.

Children's Personal Data

The Services are not intended for children under the age of 16, and we do not knowingly collect personal data from children. If you are the parent or guardian of a child who has provided us with personal data, you may contact us at support@rision.com to request deletion.

We do not knowingly "sell" or "share" the personal data of individuals under the age of 16 as defined under applicable law.

Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by applicable law. The retention period depends on the type of data, purpose of processing, legal obligations, dispute resolution needs, security requirements, and operational needs.

When personal data is no longer needed, we will delete, anonymize, or otherwise handle it in accordance with applicable law and our internal retention procedures. If immediate deletion is not technically feasible, for example because data is stored in backup archives, we will restrict further active processing until deletion or overwriting becomes possible.

Your Rights and Choices

Depending on where you are located and subject to applicable law, you may have some or all of the rights listed below in relation to your personal information. However, these rights are not absolute, may apply only in certain circumstances and, in certain cases, we may decline your request as permitted by law.

• The right to request access to or a copy of your personal data.
• The right to request correction of inaccurate personal data.
• The right to request deletion of personal data.
• The right to request restriction of processing.
• The right to object to certain processing, including direct marketing.
• The right to withdraw consent where processing is based on consent.
• The right to data portability.
• The right to opt out of certain targeted advertising, sale, sharing, or profiling, where applicable.
• The right to lodge a complaint with a competent data protection authority or regulator.

These rights may be limited or subject to exceptions under applicable law. For example, we may need to retain certain transaction records for tax, accounting, legal compliance, fraud prevention, product safety, warranty, or dispute resolution purposes.

You may exercise your rights by contacting us at support@rision.com.

We may need to verify your identity before responding to your request. The information required for verification will depend on the nature of your request and your relationship with us. We will not require more information than reasonably necessary to verify and process your request.

We may decline or limit a request where permitted by applicable law, including where the request is manifestly unfounded, excessive, legally restricted, conflicts with the rights and freedoms of others, or where we are required or permitted to retain the data.

Complaints

If you have concerns about how we process your personal data, please contact us at support@rision.com first so that we can review and respond to your concern.

If you are located in the EEA or UK and are not satisfied with our response, you may have the right to lodge a complaint with your local data protection supervisory authority.

Supplemental Terms: Jurisdiction-Specific Addenda

EEA/UK Users

If you are located in the European Economic Area or the United Kingdom, the following additional information applies.

Data Controller

The controller of your personal data is:

CHEERSAIL TECHNOLOGY SHARES CO. LIMITED
RM AO8, 2/F, LEE KA INDUSTRIAL BUILDING, 8 NG FONG STREET, SAN PO KONG
support@rision.com

EU Representative

eVatmaster Consulting GmbH
Raiffeisen Street 2B11, 63110 Rodgau, Hessen, Germany
contact@evatmaster.com

UK Representative

GOAL REACH CONSULTING LTD
OFFICE 1029, 3 HARDMAN STREET, 10TH FLOOR, SPINNINGFIELDS, MANCHESTER, UK M3 3HF
goalservice@hotmail.com

Your EEA/UK Rights

Subject to applicable law, you may have the right to:

• Access your personal data.
• Correct inaccurate or incomplete personal data.
• Request deletion of your personal data.
• Request restriction of processing.
• Object to processing based on legitimate interests.
• Object to direct marketing at any time.
• Receive your personal data in a structured, commonly used, machine-readable format, where applicable.
• Withdraw consent at any time where processing is based on consent.
• Not be subject to a decision based solely on automated processing, including profiling, that produces legal or similarly significant effects, where applicable.
• Lodge a complaint with a supervisory authority.

Legal Bases for EEA/UK Users

We rely on the following legal bases for processing your personal data.

Processing Activity	Categories of Personal Data	Purpose	Legal Basis
Order processing and fulfillment	Contact, order, payment confirmation, shipping information	To process and deliver your order	Performance of contract
Account registration and management	Account credentials, contact information, preferences	To create and manage your account	Performance of contract/legitimate interests
Payment processing	Billing information, payment confirmation, fraud-related information	To process payment and prevent payment fraud	Performance of contract; legal obligation; legitimate interests
Customer support	Contact information, order information, support communications	To respond to inquiries and provide support	Performance of contract; legitimate interests
Marketing emails	Contact information, marketing preferences, consent/opt-out records	To send promotional communications	Consent or legitimate interests, depending on applicable law and user relationship
Necessary cookies	Cookie identifiers, device/browser information	To operate the Site, cart, checkout, security, and consent management	Legitimate interests/performance of contract; cookie-law exemption where strictly necessary
Analytics cookies	Device identifiers, browsing behavior, cookie IDs	To measure and improve Site performance	Consent where required
Advertising cookies and pixels	Online identifiers, browsing behavior, ad interactions	To deliver, personalize, or measure advertising	Consent where required; opt-out where applicable
Fraud prevention and security	Account, device, transaction, risk signals	To prevent fraud, abuse, and security incidents	Legitimate interests; legal obligation where applicable
Legal compliance and recordkeeping	Order, transaction, tax, accounting, compliance records	To comply with legal obligations	Legal obligation

Legitimate Interests

Where we rely on legitimate interests, our interests may include operating and improving our Site and business, securing our Services, preventing fraud, responding to customer inquiries, managing customer relationships, and conducting limited business analytics. We will balance our interests against your rights, freedoms, and reasonable expectations.

Consent

Where we rely on consent, such as for certain marketing communications or non-essential cookies and similar technologies, you may withdraw your consent at any time. Withdrawal of consent will not affect the lawfulness of processing based on consent before withdrawal.

California and US State Privacy Notice

If you are a resident of California or another U.S. state with applicable privacy laws, you may have certain rights regarding your personal information, subject to legal limitations. These may include the right to know/access, delete, correct, opt out of sale or sharing, opt out of targeted advertising, limit certain uses of sensitive personal information, and appeal a decision regarding your request, where applicable.

Categories of Personal Information Collected

The sections above describe the categories of personal information we collect, the categories of sources from which we collect personal information, the purposes for which we use personal information, the categories of recipients to whom we disclose personal information, and our general retention criteria. For example, in the preceding 12 months, or since the launch of the Site if shorter, we may have collected the following categories of personal information described in the "Personal Data We Collect" section above. In summary, we may collect personal information directly from you, automatically from your device and browser when you use the Site, from Shopify and other ecommerce service providers, from payment and shipping providers, from customer support, analytics, marketing and advertising service providers, and, where applicable, from our affiliates or business partners.

Sale, Sharing, and Targeted Advertising

We do not sell personal information as defined under applicable U.S. state privacy laws.

However, we may use third-party cookies, pixels, tags, and similar technologies, such as advertising or analytics pixels, to help us measure advertising performance, understand how users interact with our Site, deliver more relevant advertisements, conduct retargeting, and improve our marketing activities. These technologies may disclose certain personal information or online identifiers to advertising and analytics partners, such as device and browser information, IP address, cookie identifiers, pages viewed, referral information, shopping interactions, and purchase or conversion events.

Depending on where you live and how applicable privacy laws define "sale," "sharing," or "targeted advertising," our use of these technologies may be considered a sale or sharing of personal information, or processing for targeted advertising.

Where required by applicable law, we will provide mechanisms for users to opt out of sale, sharing, or targeted advertising. Please see our Cookie Settings or Privacy Preferences for available choices.

We do not knowingly sell or share personal information of individuals under 16 years of age.

Non-Discrimination

We will not discriminate against you for exercising your privacy rights, except as permitted by applicable law.

Shine the Light

If California's Shine the Light law applies, California residents may request information about our disclosure of certain personal information to third parties for their direct marketing purposes by contacting us at support@rision.com.