Privacy Policy

Last Updated: January 4, 2026
Vombae (hereinafter referred to as "Vombae," "we," or "the company") highly values ​​the privacy and data security of users when accessing Vombae.com or other websites operated by us. This Privacy Policy (hereinafter referred to as "this Policy") constitutes a legally binding agreement between you (hereinafter referred to as "you") and this website (hereinafter referred to as "the website").

This Policy aims to explain the following to you: the effective date of this Policy, the types of personal information we collect, how we use this information, your rights to access and update your personal information, how we modify this Policy, and the security measures we take to protect your personal information.

This Policy applies to information we collect through various channels, including but not limited to:

• Communications between you and this website via email or other electronic means;
• Non-browser interactions with the website through mobile or desktop applications downloaded from this website;
• Your interaction with our advertisements or applications on third-party platforms (provided that these applications or advertisements include a link to this Policy);
• Information you voluntarily provide or that we obtain through offline means.

Please note that this Policy does not apply to information collected by any third party (including our affiliates or subsidiaries) through applications, content, or advertisements linked from this website.

All your activities on this website are voluntary. You are not required to provide us with any personal information unless you choose to access this website and/or use features on this website that require you to provide personal information. If you do not agree to this Policy or other terms of use on this website, you should immediately exit this website and cease using it. If you do not agree to the privacy policy and/or terms of use published by us, please do not provide us with any personal information and leave this website. The terms of use of this website are expressly incorporated into this Policy by reference and form a part thereof. By using this website, you agree to this Privacy Policy and our Terms of Use.

This Privacy Policy is effective from January 4, 2026, and will remain in effect unless its terms are changed in the future. If changes occur, the revised terms will be effective from the date they are posted on the website or from the date we otherwise notify you. We reserve the right to change this Privacy Policy at any time. Changes, modifications, additions, or deletions will be effective immediately upon posting to this website. We will provide you with notice of material changes as required by law. However, you should review this policy regularly, as its terms may change from time to time. Your continued use of this website after we post any such modifications constitutes your acknowledgment and agreement to be bound by the modified policy. We will also update the "Last Updated" date at the beginning of this Privacy Policy when we post changes.

a. Types of Information Collected
In the course of using this website, we may ask you to provide certain data that is considered "personal information," that is, information that can directly identify or can reasonably be used to identify you. Such personal information may include, but is not limited to:

• Contact information: name, billing address, shipping address, telephone number (including mobile number), email address, etc.;
• Basic personal information: age or date of birth, gender, marital status, family status, etc.;
• Account credentials: username and password;
• Social media information: social media accounts, posted content, follower and following information;
• Financial and transaction information: credit/debit card information, purchase history, order details, return and refund records, etc.;
• Online usage information: browsing behavior, shopping cart contents, etc.;
• Communication and marketing preferences;
• Communication records: including correspondence and communications with us regarding complaints, disputes, claims, etc.;
• Interests, preferences, and feedback: including responses to competitions and surveys;
• Other information you provide on this website by filling out forms or submitting search queries;
• Information obtained through automated data collection tools.

Certain website features may require you to provide specific personal information to access or use them. If you refuse to provide the relevant information, you may not be able to use the corresponding features or services.
In addition, we may also collect non-personal information that cannot be used to identify you personally, for the purpose of analyzing and improving the website experience.

b. Personal Information from Third Parties
In addition to the information you provide directly, we may obtain personal information about you from third-party partners (such as digital advertising service providers, data providers, etc.). We may also integrate, associate, or enhance this information with information collected directly from you to improve service quality and marketing accuracy.

c. Information You Publicly Submit
You may also choose to post information in public areas of the website or send it to other users or third parties of the website (collectively, "User Contributions"). Posting or sharing User Contributions is at your own risk.

Although we take relevant security and access control measures, please understand that:

• No security system can guarantee absolute security;
• We cannot control how other users or third parties use User Contributions;
• Therefore, we cannot promise that your User Contributions will not be viewed, copied, or disseminated by unauthorized persons.

When you visit and use this website, we may automatically obtain information about you through various data collection tools, including but not limited to cookies and similar technologies. This information may include your Internet Protocol (IP) address, which is used to identify your computer or device on a TCP/IP network (including the World Wide Web). We may automatically collect this data whenever you visit this website, regardless of whether you actively provide us with personal information.

a. Cookies
Cookies are small data files stored on your device when you visit a website, used to identify your browser or device. Cookies can be used to record your activity on the website, helping us understand your preferences and provide you with a better website experience. We may use cookies for the following purposes:

• Remembering your login information (such as enabling the "Remember me" function);
• Recording browsing behavior, shopping preferences, and shopping cart contents;
• Analyzing website traffic, user paths, and website performance;
• Providing more relevant marketing and advertising content;
• Optimizing loading speed and user experience.

We also use analytics and digital advertising services provided by third parties, and these service providers may place cookies when you visit our website, register, log in, or open emails we send. These service providers may link your activity with other information they already hold (including your email address) and use it to send marketing content or analyze marketing effectiveness.
In addition, we may use cookies to track shopping cart activity, such as items you added but did not check out, to determine whether to send you email shopping cart reminders.

Cookie Management and Choices
You can manage or reject cookies through your browser settings (such as Chrome), and some software tools can also help manage cookies. Please note that disabling cookies may affect website functionality and may prevent some services from working properly.

Third-Party Cookies (e.g., Google Analytics)
We may use third-party cookies, such as Google Analytics, to anonymously collect internet log and user behavior data to evaluate how visitors use the website and generate website operation analysis reports.
If you wish to opt out of Google Analytics data collection, you can use the browser opt-out add-on provided by Google.

b. Clear GIFs / Web Beacons / Pixel Tags
We may use clear GIFs (also known as "web beacons" or "pixel tags") or similar technologies on website pages or in email communications to:

• Detect whether a webpage has been visited;
• Detect whether an email has been opened;
• Analyze content reach and delivery effectiveness.

These technologies typically consist of single-pixel transparent images loaded from a remote server, thereby verifying whether the relevant action has occurred. Clear GIFs may also allow us to associate webpage or email interaction behavior with your other information (including personal information) to optimize content and services.

c. Response to "Do Not Track" Signals
Although some browsers offer a "Do Not Track" (DNT) signal mechanism, there is currently no unified industry standard on how to interpret or implement this signal. Therefore, we will not change our data collection or processing methods based on receiving a DNT signal.
We will only share your personal information in the circumstances explicitly listed in this Privacy Policy and will not disclose your non-public information to third parties unless it falls under the exceptions listed in the policy.

We use the personal information we collect to provide you with our products and services and for the following purposes:

• Providing and maintaining website services: To ensure you can access and use our website features and services.
• Processing orders and payments: To process your orders, payments, returns, and customer support requests, including order confirmation, shipping notifications, and after-sales assistance.
• Event and content management: To manage promotional activities, surveys, contests, or marketing content and provide you with related services (e.g., sending contest prizes).
• Marketing and personalized recommendations: If you have consented to receive marketing communications, we may send you product updates, offers, and news that we believe may be of value to you via email. This information may relate to goods or events from ourselves, authorized partners, or specific business partners. You can unsubscribe from marketing emails or update your communication preferences at any time.
• User Experience Optimization and Product Improvement: We analyze website traffic data and user behavior to better understand user interests and preferences, thereby continuously optimizing website performance, improving product quality, and providing you with more relevant content, features, and offers.

We may share the personal information we collect with third parties in the following circumstances:
a. Sharing Information with Companies that Assist in Operating this Website
This website and the data it collects are managed and controlled by us. If you are located in another country or region, submitting personal information means you acknowledge and agree to the transfer of information to Hong Kong and the applicable legal environment in that region.
To protect your data, we have entered into contracts with service providers and relevant technology vendors to ensure that data is processed and protected in accordance with this Privacy Policy and applicable regulations.

b. Disclosure of Information to Third Parties
We may disclose your information to third parties in the following circumstances:
Affiliates and Subsidiaries: We may share your personal information with companies belonging to the same group as us or with which we have an affiliation, for the business purposes mentioned in this Privacy Policy.
Service Providers: We engage trusted third-party service providers to assist in performing certain operational functions (collectively, "Service Partners"), such as:

• Website and server management;
• Payment and checkout processing;
• Customer support and online chat tools;
• Marketing and promotional activities execution;
• Data analysis and website optimization;
• Prize distribution or survey activity processing.

In this process, we may disclose necessary personal information to service providers, solely for the services we have commissioned them to perform.
Our service providers are not permitted to use this information for commercial marketing purposes unless required by law or authorized by you.

Advertising and Marketing Partners: We may share personal information with business partners who assist us in providing advertising and optimizing marketing campaigns. These partners may use their own technology, data, and platform capabilities to help us deliver advertisements or measure advertising effectiveness.
These partners may use the information received for their own business purposes, including digital advertising services.
However, this does not include information and consent provided by customers who opt-in to marketing; this data will not be shared with third parties.

c. Legal Compliance and Security Disclosures
We may disclose personal information without your consent in the following circumstances:

• To comply with laws, regulations, court orders, or regulatory requirements;
• To cooperate with legal proceedings, law enforcement agencies, or regulatory authorities;
• To protect our rights, property, and website security;
• To prevent fraud, security threats, illegal activities, or potential harm;
• To support audits, compliance, or corporate governance;
• To seek legal remedies or mitigate potential loss risks.

Disclosures may involve legal proceedings or government requests in jurisdictions outside of Hong Kong.
We may, at our sole discretion, report any activity that we believe is related to illegal conduct.

d. Corporate Transactions
We may transfer the information we collect (including personal information) in the event of the following corporate transactions:
Merger, acquisition, or sale of assets;
Corporate restructuring or divestiture;
Corporate reorganization or liquidation;
Bankruptcy proceedings.

Any successor entity will continue to be bound by this Privacy Policy or a new privacy policy that meets similar protection standards.

We employ reasonable and appropriate technical, administrative, and physical measures to protect the personal information we collect from unauthorized access, disclosure, modification, or destruction.
While we have implemented strict security measures, please note that there is always a risk that third parties may intercept or misuse information when transmitting or storing information over the internet. By using this website, you understand and agree that we cannot guarantee the absolute security of any information or data you provide through the website, and you assume all risks associated with providing personal information or other data on the website.
We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws and regulations. Once the retention purpose is fulfilled, your personal information will be securely deleted, anonymized, or otherwise processed in a secure manner to prevent unauthorized use or disclosure.

We may collect information about your online activities on our website to provide you with advertisements for products and services that match your personal interests. We may also obtain information from third-party websites that display our advertisements for this purpose.
You may see certain advertisements on other websites because we work with advertising partners (including advertising networks) to conduct remarketing and retargeting campaigns. Our advertising partners allow us to precisely target users with information through demographics, interests, and contextual analysis. These partners collect information through automated means (including the use of third-party cookies, web server logs, and web beacons) to track your online activities across different websites (including our website). They use this information to show you advertisements that may be of interest to you. The information our advertising partners may collect includes data about your visits to websites participating in the relevant advertising network, such as the pages or advertisements you view and your actions on those websites. Data collection occurs both on our website and on third-party websites participating in the advertising network. This process also helps us track the effectiveness of our marketing campaigns. For example, we use certain advertising partners' targeted advertising services to show you our advertisements on other websites based on your previous visits to our website and other online activities.
Please note that opting out does not mean you will stop receiving our advertisements. It only means that you will stop receiving targeted advertisements based on your past website visits and browsing activity.

a. Registration Restrictions
This website is only open to users who are 18 years of age or older. If we discover that an individual under the age of 18 is attempting to register an account, their registration information will not be accepted. We respect children's privacy and will not knowingly collect personal information from children under the age of 18.
We recommend that parents or guardians monitor and supervise their minor children's email and online activities to ensure their safe use of the internet.

b. Information for Children
This website's content is intended for a general audience and does not specifically target or provide services or content to children under the age of 16. If we are notified or have reasonable grounds to suspect that a user is under the age of 16, we will immediately delete all personal information from that user's account to protect children's privacy and safety.

c. Links to Third-Party Websites and Services
To enhance user experience, this website may contain links to third-party websites, social media platforms (such as Facebook), or partner websites. Using these links may allow us to access information you provide through these third-party services.

Please note:
This privacy policy does not apply to these third-party websites or services.
Third-party websites have their own independent privacy policies and may collect data, use cookies, or request personal information.
We have no control over the content and actions of these third-party websites, and you access and use them at your own risk.

By clearly stating these usage limitations and risks, we hope to ensure that parents and users are fully informed about children's online privacy and data security and can take appropriate protective measures.

If you have an account with us, you can cancel your account or any related registration information at any time. To do so, please visit your account page. We recommend that you update your personal information promptly when it changes.

If you have any questions or comments about our website or privacy policy, please send an email to cutinova@vombae.com.