Privacy Policy - EyeFly3D

EyeFly3D is a consumer brand of Nanoveu Limited (ASX: NVU). This Privacy Policy describes how we collect, use, store, and disclose your personal information when you visit eyefly3d.com, purchase our products, or use the EyeFly3D iOS application. By using our website or buying our products, you agree to the practices described below.

1. Who we are

The data controller for personal information collected through this website is Nanoveu Limited (ABN/ACN as published on the ASX), headquartered in Australia, with operations in Singapore. You can reach our privacy team at privacy@eyefly3d.com.

2. Data we collect

We collect the following categories of personal data:

Account & contact details: name, email address, shipping address, billing address, phone number.
Order data: products purchased, iPhone model selections, order value, transaction date, payment method (we do not store card numbers — see Section 5).
Communications: emails you send us, support tickets, product reviews.
Technical & usage data: IP address, browser type, device type, pages viewed, referring URL, time on site. Collected automatically through cookies and analytics tools.
App data: if you use the EyeFly3D iOS app, anonymous usage statistics and device identifiers as permitted by your iOS privacy settings.

We do not knowingly collect special category data (race, religion, health, biometric data) and do not collect data from children under 16.

3. How we use your data

We process personal data for the following purposes:

To fulfil orders (ship products, process payments, send order confirmations and tracking).
To honour our 1-year limited warranty and provide customer support.
To improve our website, products, and customer experience.
To send transactional emails (order updates, shipping notifications).
To send marketing communications, but only if you have explicitly opted in. You can unsubscribe at any time using the link in any marketing email.
To detect and prevent fraud, abuse, and security incidents.
To comply with legal obligations (tax, accounting, consumer protection).

4. Legal basis for processing (EU/UK customers)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, our legal bases for processing your personal data are:

Performance of a contract — to deliver the product you purchased.
Legitimate interest — to operate our website, prevent fraud, and improve our service.
Consent — for marketing emails and non-essential cookies. You can withdraw consent at any time.
Legal obligation — to retain transaction records for tax and accounting compliance.

5. Third-party services we share data with

We use trusted third-party service providers to operate our business. Each is contractually obligated to protect your data:

Payment processors (Stripe / WooPayments, PayPal, Apple Pay, Google Pay): receive your billing details and card information to complete transactions. We do not store full card numbers on our servers.
Shipping carriers (DHL, FedEx, Singapore Post, and regional couriers): receive your shipping address to deliver your order.
Web hosting & infrastructure (Hostinger): hosts our website and database.
Email service providers (for transactional emails and, if opted in, marketing): used to send order confirmations and newsletters.
Analytics (Google Analytics or similar): collects anonymised aggregate usage statistics. IP addresses are anonymised where supported.
App platforms (Apple App Store): governed by Apple's own privacy policy for iOS app usage.

We do not sell your personal data to third parties under any circumstances.

6. How long we keep your data

We keep your personal data for as long as necessary to provide the service and meet legal obligations:

Order and transaction records: 7 years (for tax and accounting compliance).
Customer account details: until you request deletion, or 3 years of inactivity.
Marketing subscribers: until you unsubscribe.
Support correspondence: 2 years from last contact.
Website analytics: anonymised after 26 months.

7. Your rights

Depending on your location, you may have the following rights under applicable data protection law (GDPR, UK GDPR, California Consumer Privacy Act, Singapore Personal Data Protection Act, Australian Privacy Act):

Access — request a copy of the personal data we hold about you.
Rectification — ask us to correct inaccurate or incomplete data.
Erasure ("right to be forgotten") — ask us to delete your data, subject to legal retention obligations.
Restriction — ask us to limit how we use your data.
Portability — receive your data in a portable format.
Object — object to processing based on legitimate interest or for direct marketing.
Withdraw consent — for any processing based on consent.
Lodge a complaint — with your local data protection authority.

To exercise any of these rights, email us at privacy@eyefly3d.com. We will respond within 30 days. Verification of your identity may be required.

8. Security

We take security seriously. Our website uses TLS (HTTPS) for all data in transit. Customer passwords are hashed. Payment data is handled by PCI-DSS-compliant payment processors and never stored on our servers. Despite these measures, no method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

9. Cookies

We use cookies for functionality (cart, login session), analytics (anonymised usage), and — with your consent — marketing. Full details in our Cookie Policy.

10. International data transfers

EyeFly3D operates from Singapore and Australia. If you are in the EU/UK, your data may be transferred outside the European Economic Area. We rely on Standard Contractual Clauses or equivalent safeguards approved by the European Commission for such transfers.

11. Children's privacy

Our services are not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe we have inadvertently collected such data, contact us and we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top and, for material changes, notify you by email if you have an account or active order. The current version is always available at eyefly3d.com/privacy-policy.

13. Contact us

For any privacy-related question, request, or complaint:

Email: privacy@eyefly3d.com
Postal: Nanoveu Limited, attn. Privacy Officer (address available on request)

Privacy Policy.