We have implemented strict safety and confidentiality protocols to protect your data. Your privacy is our top priority, and we collect personal data only with your explicit consent. This Privacy Policy explains how and why we process your personal data on our Website and outlines your rights as a data subject.
We are committed to processing your personal data lawfully, fairly, and for legitimate purposes. We prioritize your privacy and implement technical and organizational measures to ensure the security of your data. Our practices are designed to comply with global data protection standards, including the General Data Protection Regulation (GDPR) in the EU, the California Consumer Privacy Act (CCPA) in the United States, and other applicable regional privacy laws. For more information on the GDPR framework, you can view the full text here.
The data controller of your personal data is Erysta Limited, a company incorporated in Hong Kong under the number 76111914, and having its registered office at Unit 2A, 17/F, Glenealy Tower, Central, Hong Kong SAR.
If you wish to exercise your rights (such as the right to access, rectify, or delete your personal information), you may contact us through the following channels:
This privacy notice applies to individuals who access, browse, and use our Website. Its aim is to inform you how we collect and process your personal data through your use of the Website.
We receive and store any information you enter on our Website or provide to us in other ways, such as browsing our Website, registering an account, purchasing products, contacting us, or posting material. By doing so, you consent to our collection and use of this information for the specified purpose.
If we ask for your personal information for a secondary purpose, such as marketing, we will either ask you directly for your explicit consent or provide you with an opt-out option.
Your personal information will not be shared with third parties without your consent and only within the limits permitted by law.
You can always choose not to provide certain information, even though it might be necessary to make a purchase or use all Erysta services.
The information we gather helps us personalize and continually improve your shopping experience. Here are the types of information we collect when you visit our Website:
The table below outlines our purposes for processing data, the legal basis under the GDPR/CCPA, and how long we retain your information.
| Purpose | Legal Basis (GDPR) | Retention Period |
|---|---|---|
| Managing your account | Contract (Art. 6(1)(b)) | Until account deletion |
| Guest cart saving | Legitimate interest (Art. 6(1)(f)) | 5 days |
| Orders & Tax Compliance | Legal obligation (Art. 6(1)(c)) | 10 years or as required by law |
| Customer Support | Legitimate interest (Art. 6(1)(f)) | Until requested deletion |
| Newsletter and marketing | Consent (Art. 6(1)(a)) | Until you unsubscribe |
| Security & Fraud Prevention | Legitimate interest (Art. 6(1)(f)) | Up to 10 years |
| Legal Claims & Dispute Resolution | Legal obligation (Art. 6(1)(c)) | Duration of the legal claim |
For any questions regarding your data or to request deletion, you can contact us at [email protected] or manage your privacy settings directly in your user account dashboard.
Under data protection laws (including GDPR and CCPA), you have several important rights regarding your personal data:
To exercise any of these rights, please contact us at [email protected] or via our support page. We will respond as promptly as possible, in accordance with applicable laws.
We may use data obtained from external sources, including social media platforms, to provide personalized content and services. This data is only processed with your explicit consent (for example, when you choose to use an external login method).
This information helps us enable or enhance features such as:
If you use an SSO option from services such as Google, Discord, or Steam, the following data may be collected and stored in our system:
Please note that we do not receive your external account password. Your data remains subject to the privacy settings and policies of the respective third-party provider.
We may engage third-party providers—including payment gateways, communication platforms, and technical service providers—to perform functions on our behalf. These partners collect and process your personal data strictly as necessary to deliver their specific services.
We encourage you to review the privacy policies of any third-party providers you interact with, as their handling of your data will be subject to their own privacy practices once you are redirected or their services are engaged.
We may share your personal data with the following categories of recipients:
International Transfers:Please note that some of these third-party providers may be located in jurisdictions outside of your country or the European Union. In such cases, we ensure that appropriate safeguards are in place to protect your data according to applicable privacy laws.
Cookies are small text files stored on your device when you visit a website. They contain information about your preferences, settings, and interactions with the site, helping enhance and personalize your browsing experience. Our Website uses two main types of cookies:
You can manage or disable cookies through your browser settings at any time. However, please note that disabling certain cookies may limit the functionality and performance of our Website and may prevent you from accessing certain features.
Cookies play an essential role in ensuring the proper functioning and enhanced usability of our Website. We use the following categories:
By continuing to use our Website, you acknowledge the use of these cookies. You can find instructions on how to manage or delete cookies in your browser's "Help" or "Settings" menu.
Erysta is headquartered in Hong Kong. However, to ensure the highest level of privacy and performance, the majority of our infrastructure, systems, and databases are hosted within the European Union (EU).
In certain cases, your personal data may be transferred to and processed in countries outside of the European Economic Area (EEA). This occurs primarily when using third-party providers for authentication, payments, or cloud services.
When you use "Single Sign-On" (Google, Discord, Steam) or global payment methods (Apple Pay, Cryptomus), your data is handled by these providers in their respective jurisdictions. The main providers we use include:
The main third-party services we use and their registered addresses include:
All such transfers are conducted using adequate safeguards, such as Standard Contractual Clauses (SCCs)approved by the European Commission, to ensure your data receives a level of protection equivalent to that within the EU.
Our Platform and services are intended exclusively for individuals aged 18 or older, or those who meet the minimum legal age required in their country to enter into binding contracts and assume full legal responsibility.
We do not knowingly collect or process personal data from individuals under the age of 18. If we become aware that we have unintentionally collected such data without verifiable parental or guardian consent, we will promptly delete it from our systems.
If you believe that a minor has provided us with personal data, please contact us at [email protected]. We will investigate and take appropriate action without delay.
Our Website may include links to third-party websites, plug-ins, or applications. Clicking those links or enabling those features may allow third parties to collect or share data about you.
Erysta does not control these third-party platforms and is not responsible for their privacy practices, terms, or content. We strongly encourage you to review the Privacy Policy and Terms & Conditions of every website you visit after leaving our platform.
This Privacy Policy was last updated on March 1, 2026, and is effective as of that date.
We may modify this Privacy Policy periodically to reflect changes in our practices, legal requirements, or for operational reasons. Any updates will be posted on this page, and we recommend reviewing it regularly to stay informed about how we protect your data.
Your continued use of our Website after any modifications are posted will constitute your acknowledgment and acceptance of the revised Privacy Policy.