Privacy Policy – RugRoyal

PRIVACY POLICY

Privacy Policy – RugRoyal: This Privacy Policy explains how RugRoyal (“we”, “us”, “our”) collects, uses, stores, and protects your personal data when you browse or make a purchase on www.rugroyal.com (“the Site”).

 

1. Website Operator & Data Controller

The Site is operated by:

Jasper Group Corporation Limited
14 Science Museum Road, 917A Block A, 9/F
New Mandarin Plaza, Tsim Sha Tsui, Hong Kong

Customer Support: support@rugroyal.com
Data Protection: gdpr@rugroyal.com
Phone: +44 7401 140948

Jasper Group Corporation Limited is the data controller responsible for the processing of your personal data.

 

2. Information We Collect

To process orders and provide our services, we may collect:

  • Full name

  • Email address

  • Billing and shipping address

  • Phone number

  • Payment details (processed securely by third-party providers)

  • Order history and previous interactions

  • IP address, browser type, device information

  • Cookies and similar tracking technologies (see Cookie Policy)

We only collect the data required to provide our services.

 

3. How We Use Your Information

We process your information based on the following legal grounds:

Contractual Necessity: To:

  • process and deliver your order

  • provide customer service

  • send order confirmations and delivery updates

  • manage returns and refunds

Consent: When you:

  • subscribe to newsletters

  • agree to receive marketing communications

You may withdraw consent at any time.

Legal Obligations: To:

  • comply with tax, accounting, and audit requirements

  • respond to lawful requests from authorities

Legitimate Interests: To:

  • prevent fraud and ensure security

  • improve website performance and user experience

  • operate and optimize our business operations

 

4. Sharing Your Information

We only share your information when necessary:

Service Providers: Trusted third parties assist us with:

  • Payment processing

  • Shipping and logistics

  • Website hosting

  • Analytics and security

  • Customer support

They only receive the information needed to perform their services.

Legal Compliance: We may disclose data when required to:

  • comply with laws

  • defend our legal rights

  • protect users and the platform

We do NOT sell your personal information.

 

5. International Data Transfers

Some service providers may process or store data outside the EU, including in:

  • the United States

  • Hong Kong

  • other jurisdictions

To protect your data, RugRoyal implements safeguards such as:

  • Standard Contractual Clauses (SCCs) approved by the European Commission

  • encrypted data transfer mechanisms

  • strict access limitations

These measures ensure that your data remains protected at all times.

 

6. Data Retention

We retain your personal data only for as long as necessary to:

  • fulfil your orders

  • comply with tax and legal obligations

  • resolve disputes

  • enforce our agreements

Order-related data is typically stored for up to 7 years, in line with accounting and legal requirements.

 

7. Your Rights

If you reside in the EU, UK, or other applicable regions, you may exercise the following rights:

  • Right of access (obtain a copy of your data)

  • Right to rectification (correct inaccurate information)

  • Right to deletion (“right to be forgotten”)

  • Right to restrict processing

  • Right to object, including objecting to marketing

  • Right to data portability

  • Right to withdraw consent at any time

  • Right to lodge a complaint with your local data protection authority

To exercise these rights, contact: gdpr@rugroyal.com


8. Cookies

Our website uses cookies for:

  • essential functionality (checkout, cart, login)

  • analytics and site performance

  • user preferences (language, currency)

Non-essential cookies (analytics & marketing) are only activated after user consent through our cookie banner.

For full details, refer to our Cookie Policy.

 

9. Security Measures

We protect your information using:

  • encrypted HTTPS connections

  • secure third-party payment gateways

  • strict internal access controls

  • regular security reviews and monitoring

While we follow industry best practices, no system is entirely risk-free.

 

10. Contact

For any questions about this Privacy Policy or your personal data:

📧 gdpr@rugroyal.com
📞 +44 7401 140948
📍 Jasper Group Corporation Limited, Hong Kong