GDPR

GDPR Compliance & Data Subject Rights – RugRoyal

Under the EU General Data Protection Regulation (GDPR), customers and visitors of RugRoyal have the right to access, rectify, delete, or control how their personal data is processed.
This page explains how you can exercise these rights.

 

1. Data Subject Access Requests (DSAR)

When you submit a DSAR through our Compliance Page, our GDPR provider Consentmo processes your IP address and email address solely to validate and process your request.

For more information, please refer to Consentmo’s Data Processing Policy.

 

2. Rectification of Personal Data

If your personal information (name, address, phone, email) is inaccurate or incomplete, you may correct it at any time through your RugRoyal account.

➡️ Edit your account information

If you need assistance, contact us at:  gdpr@rugroyal.com


3. Data Portability

You may download the personal data we store about you, including:

  • account details

  • order history

  • contact information

➡️ GDPR Data Requests (Consentmo link)
➡️ Download Personal Information
➡️ Download Orders Data

These exports are provided in machine-readable format as required by Article 20 GDPR.

 

4. Access to Personal Data (Right of Access – Art. 15 GDPR)

You may request a full report containing all personal information we hold about you.

➡️ Request a Report (Consentmo link)

We will respond within 30 days, in accordance with GDPR regulations.

 

5. Right to Erasure (“Right to Be Forgotten”) – Art. 17 GDPR

You may request the deletion of your personal data and your account.

➡️ Request Personal Data Deletion (Consentmo link)

Important:
• Deleting your data will permanently remove your account.
• Order records may be retained where required by law (e.g., tax obligations).

 

6. Right to Restrict Processing – Art. 18 GDPR

You may request that we limit or temporarily restrict the processing of your personal data under specific conditions (e.g., data accuracy disputes or legal claims).

To request restriction of processing, contact:
📧 gdpr@rugroyal.com


7. Right to Object – Art. 21 GDPR

You may object to:

  • direct marketing

  • processing based on legitimate interests

  • profiling associated with these purposes

To submit an objection, contact:
📧 gdpr@rugroyal.com

We will review your request and respond in accordance with GDPR obligations.

 

8. Contact Information (Official DPO / Data Protection Contact)

For any question regarding your personal data or privacy rights:

Data Protection Officer (DPO)
📧 gdpr@rugroyal.com
📍 Jasper Group Corporation Limited
14 Science Museum Road, 917A Block A, 9/F
New Mandarin Plaza, Tsim Sha Tsui, Hong Kong

(Note: This replaces the personal Gmail address, which must NOT be used.)

 

9. Right to Lodge a Complaint – Art. 77 GDPR

If you believe your rights have not been respected, you may lodge a complaint with your national Data Protection Authority (DPA).
A list of EU DPAs is available on the official European Commission website.