Privacy Policy

Last updated: October 13, 2026

  1. Who we are

Buenora is operated by Winest Enterprise Co., Limited. This policy explains how we handle personal information when you browse our Shopify-powered store, order products, or contact us. We are responsible for the personal information we process for our business purposes. Shopify may have separate responsibilities described below.

  1. Information we collect and its sources

Depending on your interactions and the features you use, we may process:

  • Contact and delivery information, including your name, email, phone number, and billing and shipping addresses.

  • Order and payment information, including purchases, returns, transaction details, payment method, and payment confirmations. Payment providers process the payment credentials supplied at checkout.

  • Account information, preferences, and communications, including customer support messages and information you choose to submit.

  • Device and usage information, including IP address, browser and device identifiers, pages viewed, and shopping activity collected through cookies and similar technologies.

Sources include information you provide directly, your use of the store, Shopify, payment and delivery providers, and other service providers involved in your transaction. Where optional marketing integrations are used, information may also come from those partners, subject to applicable permissions.

  1. Purposes and legal grounds

We use information to process payments, fulfill and deliver orders, manage accounts and returns, provide support, prevent fraud, maintain and improve the store, and meet legal obligations.

Where European or UK data protection law applies, the relevant grounds are performing our contract with you for orders and related services; legal obligations for required records and disclosures; legitimate interests in customer support, security, fraud prevention, and service improvement, where those interests are not overridden by your rights; and consent where required for marketing or optional tracking. Providing information needed for an order is necessary to fulfill it; without it, we may be unable to complete your purchase.

If marketing features are used, information may support promotional messages, measurement, or personalized advertising, subject to applicable consent and opt-out requirements. Browsing the store alone does not constitute consent where consent is required.

  1. Sharing information

We may disclose information to Shopify and providers supporting payments, hosting, customer support, analytics, fulfillment, and delivery, as needed for their services. We may also disclose information when you request it, to comply with valid legal requirements, protect rights and security, or support a business transfer such as a merger or sale, subject to applicable law.

If advertising or marketing integrations are enabled, relevant information may be shared with those partners subject to applicable choices. Some disclosures for personalized advertising may constitute a "sale," "sharing," or "targeted advertising" under local privacy laws.

  1. Shopify and optional enhanced services

Shopify hosts our store and processes information to provide its services. If Shopify Network Intelligence or other enhanced services are enabled for this store, Shopify may combine information about your interactions with this store, other merchants, and Shopify to provide those features, including personalization and advertising.

For processing where Shopify acts as an independent controller or business, Shopify handles the corresponding privacy requests. See Shopify's Consumer Privacy Policy at https://www.shopify.com/legal/privacy/consumers and its Privacy Portal at https://privacy.shopify.com/en for information and available rights, including withdrawing consent or objecting to relevant processing.

  1. Cookies and communications

Cookies and similar technologies may support checkout, security, preferences, analytics, and, where enabled, advertising. Optional technologies are subject to consent where required. Use any privacy controls displayed on the store or contact us about your choices. Browser settings can also limit cookies, although some features may stop working.

You can unsubscribe from promotional emails using the link in those messages. Order, service, and legally required communications may continue.

  1. Retention, security, and international processing

Retention depends on the information's purpose, your account or order history, legal and tax requirements, dispute resolution, and fraud-prevention needs. Information is kept only as long as needed for the relevant purposes and applicable obligations.

No storage or transmission system is completely secure. Please do not email passwords or full payment-card details.

Our business is based in Hong Kong, and Shopify and service providers may process information in other countries. Where EEA or UK transfer restrictions apply, the transfer must have a lawful basis, such as an adequacy decision or appropriate contractual safeguards. Contact us for information about the destinations and safeguards applicable to your information and how to obtain a copy.

  1. Your rights and complaints

Depending on applicable law, you may have rights to access or know about your information; correct it; request deletion or a portable copy; restrict processing; withdraw consent without affecting earlier lawful processing; and exercise applicable protections concerning significant automated decisions. Rights are subject to legal conditions and exceptions.

Right to object: Where applicable, you may object to processing based on legitimate interests and to direct marketing.

You may also have rights to opt out of sale, sharing, or targeted advertising, and to limit certain uses of sensitive information. Recognized browser opt-out signals, including Global Privacy Control, apply where required by law.

Contact us to exercise your rights. Identity verification may be necessary, and authorized agents may need to show permission. Requests are subject to the response deadlines required by applicable law. You are entitled to exercise applicable rights without unlawful discrimination.

You may contact us to challenge a response or make a complaint. Where applicable, you may appeal or complain to your local data protection authority, including the UK Information Commissioner's Office at https://ico.org.uk/make-a-complaint/.

  1. Children and other websites

The store is intended for adults. A parent or guardian concerned that a child supplied personal information can contact us to request review and deletion as appropriate. Third-party websites and services have their own privacy notices; review them before providing information.

  1. Updates and contact

We may revise this policy as practices or legal requirements change, update the date above, and provide any legally required notice.

Winest Enterprise Co., Limited Operating Buenora Email:service@buenora.storeAddress: UNIT 60, 3/F, YAU LEE CENTER, NO.45 HOI YUEN ROAD, KWUN TONG, HONG KONG