Privacy Policy - EyeFly3D

EyeFly3D is a consumer brand of Nanoveu Pte Ltd, part of the Nanoveu group (ASX: NVU). This Privacy Policy applies to our website and products. The EyeFly3D mobile app is covered by a separate privacy policy, available within the app, which explains how the app handles your personal data. Any permissions required to access your device or data will be requested directly within the app. By using our website or buying our products, you agree to the practices described below.

1. Who we are

The data controller for personal information collected through this website is Nanoveu Pte Ltd, a Singapore company and part of the Nanoveu group (ASX: NVU). Nanoveu Pte Ltd is also the seller of record for orders placed here. You can reach our privacy team at info@eyefly3d.com.

2. Data we collect

We collect the following categories of personal data:

Account & contact details: name, email address, shipping address, billing address, phone number.
Order data: products purchased, iPhone model selections, order value, transaction date, payment method (we do not store card numbers — see Section 5).
Communications: emails you send us, support tickets, product reviews.
Technical & usage data: IP address, browser type, device type, pages viewed, referring URL, time on site. Collected automatically through cookies and analytics tools.
App data: not covered by this policy. The EyeFly3D mobile app has its own privacy policy, available within the app.

We do not knowingly collect special category data (race, religion, health, biometric data) and do not collect data from children under 16.

3. How we use your data

We process personal data for the following purposes:

To fulfil orders (ship products, process payments, send order confirmations and tracking).
To honour our 1-year limited warranty and provide customer support.
To improve our website, products, and customer experience.
To send transactional emails (order updates, shipping notifications).
To send marketing communications, but only if you have explicitly opted in. You can unsubscribe at any time using the link in any marketing email.
To detect and prevent fraud, abuse, and security incidents.
To comply with legal obligations (tax, accounting, consumer protection).

4. Legal basis for processing (EU/UK customers)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, our legal bases for processing your personal data are:

Performance of a contract — to deliver the product you purchased.
Legitimate interest — to operate our website, prevent fraud, and improve our service.
Consent — for marketing emails and non-essential cookies. You can withdraw consent at any time.
Legal obligation — to retain transaction records for tax and accounting compliance.

5. Third-party services we share data with

We use trusted third-party service providers to operate our business. Each is contractually obligated to protect your data:

Payment processors (Stripe / WooPayments, PayPal, Apple Pay, Google Pay): receive your billing details and card information to complete transactions. We do not store full card numbers on our servers.
Shipping & fulfilment (our shipping and fulfilment partners, and the carriers they book on our behalf): receive your name, delivery address, email address and phone number so your order can be shipped and tracked. We select carriers on a per-shipment basis and our partners may change from time to time.
Web hosting & infrastructure (Hostinger): hosts our website and database.
Email service providers (for transactional emails and, if opted in, marketing): used to send order confirmations and newsletters.
Analytics (Google Analytics or similar): collects anonymised aggregate usage statistics. IP addresses are anonymised where supported.
App platforms (Apple App Store): distributes the EyeFly3D mobile app. The app has its own privacy policy, available within the app, and Apple’s own privacy terms also apply.

We do not sell your personal data to third parties under any circumstances.

6. How long we keep your data

We keep your personal data for as long as necessary to provide the service and meet legal obligations:

Order and transaction records: 7 years (for tax and accounting compliance).
Customer account details: until you request deletion, or 3 years of inactivity.
Marketing subscribers: until you unsubscribe.
Support correspondence: 2 years from last contact.
Website analytics: anonymised after 26 months.

7. Your rights

Depending on your location, you may have the following rights under applicable data protection law (GDPR, UK GDPR, California Consumer Privacy Act, Singapore Personal Data Protection Act, Australian Privacy Act):

Access — request a copy of the personal data we hold about you.
Rectification — ask us to correct inaccurate or incomplete data.
Erasure ("right to be forgotten") — ask us to delete your data, subject to legal retention obligations.
Restriction — ask us to limit how we use your data.
Portability — receive your data in a portable format.
Object — object to processing based on legitimate interest or for direct marketing.
Withdraw consent — for any processing based on consent.
Lodge a complaint — with your local data protection authority.

To exercise any of these rights, email us at info@eyefly3d.com. We will respond within 30 days. Verification of your identity may be required.

8. Security

We take security seriously. Our website uses TLS (HTTPS) for all data in transit. Customer passwords are hashed. Payment data is handled by PCI-DSS-compliant payment processors and never stored on our servers. Despite these measures, no method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

9. Cookies

We use cookies for functionality (cart, login session), analytics (anonymised usage), and — with your consent — marketing. Full details in our Cookie Policy.

10. International data transfers

EyeFly3D operates from Singapore. If you are in the EU/UK, your data may be transferred outside the European Economic Area. We rely on Standard Contractual Clauses or equivalent safeguards approved by the European Commission for such transfers.

11. Children's privacy

Our services are not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe we have inadvertently collected such data, contact us and we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top and, for material changes, notify you by email if you have an account or active order. The current version is always available at eyefly3d.com/privacy-policy.

13. Contact us

For any privacy-related question, request, or complaint:

Email: info@eyefly3d.com

Privacy Policy.