Privacy Policy

Overview

BEAUTY BAND FAR EAST LIMITED ("we," "us") is committed to protecting your privacy while managing the BurstMarketing™ ecosystem. This policy explains how we collect and use data at enerband.com.

Data Collection in the Burstbox™ System

To facilitate our unique "Trust-based" marketing, we collect specific data points:

Verification Data: When you participate in the Burstbox, we may require authentication via SMS or WhatsApp. This is used to ensure the integrity of the referral system and prevent bot-driven "price drops."

Referral Mapping: We track the unique link associated with your ID and the IP addresses/headers of "friend clicks" to calculate your earned discount in real-time.

Personal Information: Name, email, and shipping address are collected only at the point of purchase.

Browser Fingerprint: To prevent fraud and self-referral in the Burstbox system, we collect a one-way cryptographic hash (SHA-256) of your browser's technical characteristics: canvas rendering, WebGL capabilities, installed fonts, audio context, GPU model, screen size, and hardware specs. This hash is irreversible and does not identify you personally; it is used only to detect duplicate or fraudulent referrals. We also retain the raw components for debugging purposes for a limited period. Legal basis: GDPR Art. 6(1)(f) - legitimate interest in fraud prevention.

Purpose of Processing

Transactional: To process payments and ship your order.

Marketing Animation: To power the real-time "Price Drop" visual experience on your dashboard.

Communication: If you opt-in, we use your phone number/email to send "Skin Coaching" tips and referral status updates.

Third-Party Data Sharing

We use the Facebook Pixel and other tracking technologies to measure the effectiveness of our campaigns. The Facebook Pixel is activated only with your explicit prior consent via the cookie banner.

We do not sell your personal data to third parties.

Recipients of Personal Data

We share your personal data only with the service providers necessary to operate the Site:

• Payment processors: Stripe, Inc. (USA - adequacy via EU-US Data Privacy Framework) and PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg).
• Shipping carriers: [TBD — DHL / FedEx / etc.].
• Email service: [TBD — ActiveTrail / Mailjet].
• SMS / WhatsApp: [TBD — WhatsApp / SMS provider name].
• Marketing analytics: Meta Platforms Ireland Ltd. (Facebook Pixel - only with your explicit consent via the cookie banner).

We do not sell or rent personal data to any third party.

Cookies and Real-Time Tracking

Strictly Necessary Cookies: Burstbox stage, language preference, session token. No consent required. If you clear these cookies, your Burstbox progress may be lost.

Marketing Cookies: Facebook Pixel, conversion tracking. Used only with your explicit consent via the cookie banner.

User Rights (GDPR / CCPA)

Regardless of your location, we provide the following rights:

Access & Correction: You can request a summary of the data we hold about you.

The Right to be Forgotten: You may request the deletion of your referral history and personal data by emailing contact@enerband.com.

We will respond to your request within 30 days (extendable by 60 days for complex requests under GDPR Art. 12(3)). To verify your identity and prevent fraudulent deletion requests, we may ask you to confirm your email address or order reference. If we cannot verify your identity, we will not be able to action the request. You also have the right to lodge a complaint with your local data protection authority.

Security

The "Trust Engine" is protected by industry-standard encryption. Our referral links are signed with unique hashes to prevent unauthorized price manipulations.

International Data Transfers

BEAUTY BAND FAR EAST LIMITED is established in Hong Kong SAR. The European Commission has not issued an adequacy decision for Hong Kong under GDPR Art. 45. Transfers of personal data from the EU/EEA to Hong Kong are therefore protected by the Standard Contractual Clauses (SCCs) adopted by the European Commission (Decision 2021/914), supplemented by appropriate technical and organisational measures (encryption in transit and at rest, access controls, breach notification commitments). A copy of the SCCs is available on request at contact@enerband.com.

Retention Periods

We retain personal data only as long as necessary for the purposes described above:

• Account and contact data: until account deletion + 30 days.
• Referral history and fingerprint hash: 24 months from last activity, then anonymised.
• Transaction and invoice data: 10 years from invoice date (legal retention requirement under HK and EU tax law).
• Marketing consent and cookie preferences: until withdrawn, plus 12 months of audit trail.
• Customer service correspondence: 24 months from resolution.

EU Representative (GDPR Art. 27)

As BEAUTY BAND FAR EAST LIMITED is established outside the European Union but processes personal data of EU residents, we have appointed [TBD — EU Art. 27 representative firm name], [TBD — EU representative postal address] (contact: [TBD — EU representative contact email]) as our representative in the Union under GDPR Art. 27. EU data subjects may contact our representative directly with privacy-related queries.

Children's Data

The Site is not directed at children under 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us at contact@enerband.com and we will delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email to registered users at least 30 days before they take effect. The "Last Updated" date at the top of this policy reflects the most recent revision.