Privacy policy

This Privacy Policy describes how Le Plus Plus (Hong Kong) Limited (“we”, “us”) collects, uses, and discloses your personal data (also called personal information) when you visit or make a purchase from https://store.mosaico.ai/ (the “Website”). 

 

I. Personal Information We Collect

When we use the term “personal information”, we are referring to information that identifies or can reasonably be linked to you or another person. Personal information does not include information that is collected anonymously or that has been de-identified, so that it cannot identify or be reasonably linked to you. We may collect or process the following categories of personal information, including inferences drawn from this personal information, depending on how you interact with the Website, where you live, and as permitted or required by applicable law:

• Contact and identification details including your name, billing address, shipping address, phone number, email address, country or region, and other contact details.

• Account information including your email address, account identifier, login credentials (where applicable), profile information, saved addresses.

• Shopping and transaction information including the products you view, search for, add to your cart, and the products you purchase, return, exchange or cancel, as well as order details, transaction dates, transaction amounts, currency, order status and related transaction information.

• Business and tax information where you purchase our products as a business customer, including your company name, business contact information, VAT or tax identification number, and other business or tax information.

• Communications and support information including information you provide when you contact us, such as your inquiries, feedback, requests, attachments and other information contained in your communications with us.

• Device and technical information including your IP address, browser type and settings, operating system, device type, network information, device or browser identifiers, and other technical information relating to the device or network you use to access our Website.

• Online activity and cookie information including information about your interactions with and use of our Website, such as pages and products viewed, clicks, browsing and navigation activity, access times, and information collected through cookies, pixels and similar technologies, including online identifiers and cookie preferences.

• Marketing and preference information including your marketing and communication preferences, newsletter subscription status, consent records, and preferences regarding cookies or similar technologies.

• Approximate location information including your country, region or city, where this information can be determined from your IP address or other technical information.

• Information about other individuals including the name, address, phone number or email address of another person when you provide their information to us, for example, as a recipient of an order.

• Product reviews and user-generated content including your ratings, reviews, comments, photos, videos and other content you choose to submit, as well as information associated with your reviews, such as the product reviewed, your display name and the date of submission.

 

II. Sources of Personal Information

We may collect personal information from the following sources:

• Directly from you when you provide information to us, including when you place an order, create or manage an account, subscribe to our marketing communications, contact us, request customer support, submit a product review or other user-generated content, or otherwise communicate or interact with us.

• Automatically when you use our Website. We may automatically collect certain information about your device, browser, network connection and interactions with our Website, including through cookies and similar technologies.

• From Shopify and other service providers or business partners that support our Website, transactions and services, where applicable. These parties may provide us with information necessary to process and fulfill your orders, provide customer support, manage communications, process reviews, prevent fraud, maintain Website security and perform other services on our behalf. For example, we may receive payment status or transaction-related information from payment service providers, but we do not directly collect or store your full payment card information.

• From other individuals or entities when they provide your personal information to us, such as when another person places an order for you or provides your information as an order recipient or contact person.

• From publicly available or other lawful sources, where permitted by applicable law, for purposes such as verifying information, protecting our rights, preventing fraud or complying with legal obligations.

 

III. How We Use Your Personal Information

We use your personal information for the purposes described below. Where the General Data Protection Regulation (“GDPR”) applies to our processing, we rely on the legal bases described below. The legal basis applicable to a particular processing activity may vary depending on the circumstances and applicable law.

Purpose	Personal Information Used	Legal Basis, Where Applicable
To process and fulfill your orders and transactions, including processing purchases, arranging payment, shipping and delivery, and handling returns, exchanges and refunds.	Contact and identification details; shopping and transaction information; payment information; business and tax information, where applicable; information about other individuals, where applicable.	Performance of a contract with you, or taking steps at your request before entering into a contract.
To manage your account, including creating, maintaining and administering your account and associated settings and saved information.	Contact and identification details; account information; shopping and transaction information.	Performance of a contract with you or taking steps at your request before entering into a contract.
To send service and transaction-related communications, including order confirmations, payment or order status updates, shipping and delivery notifications, return or refund updates and other communications relating to your purchases or account.	Contact and identification details; account information; shopping and transaction information.	Performance of a contract with you, or our legitimate interests in providing and managing our services, where applicable.
To provide customer support and respond to your inquiries, requests and feedback.	Contact and identification details; account information; communications and support information; shopping and transaction information.	Performance of a contract with you, where applicable, or our legitimate interests in responding to your requests and providing customer support.
To send cart-recovery communications, including reminders regarding items you have added to your cart or checkout but have not purchased.	Contact and identification details; shopping and transaction information; account information, where applicable.	Our legitimate interests in reminding you about an incomplete purchase, where permitted by applicable law.
To send marketing communications, including newsletters, product updates, promotional offers and other marketing communications.	Contact and identification details; marketing and preference information; account information, where applicable; information about your interactions with our marketing communications.	Your consent, where consent is required by applicable law, or another lawful basis permitted by applicable law.
To operate and manage product reviews and other user-generated content, including receiving, displaying, moderating and managing ratings, reviews, comments, photos, videos and other content you choose to submit.	Product reviews and user-generated content; account information; contact and identification details; shopping and transaction information, where applicable.	Your consent, where required by applicable law, or our legitimate interests in providing and maintaining product review functionality, as applicable.
To operate, maintain and improve our Website and services, including monitoring Website performance, troubleshooting, developing features and improving the user experience.	Device and technical information; online activity and cookie information; shopping and transaction information; account information, where applicable.	Our legitimate interests in operating, maintaining and improving our Website and services, or your consent, where required by applicable law.
To use cookies and similar technologies for necessary Website functionality, preferences, and analytics.	Device and technical information; online activity and cookie information; marketing and preference information.	For strictly necessary technologies, our legitimate interests or another lawful basis permitted by applicable law; for other cookies and similar technologies, your consent, where required by applicable law.
To protect the security and integrity of our Website, services and transactions, including detecting, preventing and investigating fraud, abuse, unauthorized access and other security incidents.	Device and technical information; online activity and cookie information; contact and identification details; shopping and transaction information; account information.	Our legitimate interests in protecting our Website, services and users and preventing fraud and other unlawful activity.
To comply with applicable laws and legal obligations, including tax, accounting, consumer protection, product safety, regulatory and record-keeping requirements.	Relevant categories of personal information depending on the applicable legal or regulatory requirement.	Compliance with our legal obligations.
To establish, exercise or defend legal claims and protect our legal rights and interests.	Relevant categories of personal information depending on the circumstances.	Our legitimate interests in establishing, exercising or defending our legal rights and claims, or compliance with our legal obligations, where applicable.
To administer and manage our business, including accounting, auditing, internal administration, compliance and business continuity.	Contact and identification details; business and tax information; shopping and transaction information; communications and support information; other relevant information.	Our legitimate interests in managing and administering our business, or compliance with our legal obligations, where applicable.
To support corporate transactions or changes to our business, such as a merger, acquisition, financing, reorganization or sale of assets, where applicable.	Relevant categories of personal information depending on the circumstances.	Our legitimate interests in evaluating and carrying out such transactions, or another lawful basis permitted by applicable law.

 

IV.  How We Disclose Your Personal Information

We may disclose your personal information to third parties where reasonably necessary to provide our products and services, process and fulfill your orders, operate and secure our Website, communicate with you, or for other purposes described in this Privacy Policy or otherwise permitted by applicable law.

We disclose personal information only to the extent reasonably necessary for the relevant purpose. Where a third party processes personal information on our behalf, we require that party to process the information only as permitted by applicable law and, where required, under an appropriate data processing agreement and subject to appropriate confidentiality and security obligations.

Service Providers and Other Recipients

Depending on the services they provide, the following categories of recipients may receive your personal information:

Category of Recipient	Examples of Services	Categories of Personal Information That May Be Disclosed
Shopify and e-commerce platform providers	Operating and hosting our online store, managing customer accounts, orders, checkout and related e-commerce functions	Contact and identification details; account information; shopping and transaction information; payment information; device and technical information; online activity and cookie information, where applicable
Shipping, delivery and fulfillment providers	Fulfilling orders, arranging shipment and delivery, processing returns and exchanges, and related logistics services	Contact and identification details; shopping and transaction information; information about other individuals, where applicable
Email and communications service providers	Sending transactional, cart-recovery, marketing and product-availability communications and managing communication preferences	Contact and identification details; account information, where applicable; shopping and transaction information; marketing and preference information
Product availability notification provider (including STOQ)	Managing requests to be notified when an out-of-stock product becomes available and sending related email or SMS notifications	Name, email address and/or phone number; marketing consent status; GDPR confirmation status; subscription status; signup date; product and variant information; notification preference; and other information associated with the notification request
Marketing email service providers (including Shopify Messaging and Klaviyo: Email Marketing & SMS)	Sending newsletters, product updates and promotional offers; managing email subscriptions, marketing preferences and unsubscribe requests; and managing related email communications	Contact and identification details; email delivery and engagement information, where applicable
Product review providers (including Klaviyo Reviews)	Collecting, displaying, moderating and managing product ratings, reviews, comments, photos, videos and other user-generated content	Contact and identification details, including name and email address where collected; product reviews and user-generated content; shopping and transaction information, where applicable; device and technical information, where applicable
IT, hosting, cloud storage and security providers	Hosting, maintaining and securing our Website and systems, protecting against fraud and security incidents, and providing technical services	Device and technical information; online activity and cookie information; account information; contact, transaction and other information reasonably necessary for the relevant service
Professional advisers	Providing legal, accounting, auditing, insurance and other professional advice and services	Information reasonably necessary for the relevant service
Our parent company (Espressif systems (shanghai) co., ltd.)	Corporate governance, internal administration, compliance, legal support, information security and other internal functions necessary to support our business and services	Relevant categories of personal information reasonably necessary for these purposes

For more information about our principal service providers and, where applicable, their role in processing personal information, please contact us using the information provided in the “Contact Us” section.

Other Disclosures

We may also disclose your personal information in the following circumstances:

At your direction or with your consent. We may disclose your personal information when you direct or authorize us to do so, or where disclosure is otherwise permitted or required by applicable law. For example, if you provide information about another person as the recipient of an order, we may disclose that information to the service providers necessary to fulfill and deliver the order.

Product reviews and publicly displayed content. If you submit a product review, rating or other content that is intended to be publicly displayed, the content you submit and associated information, such as your display name, may be visible to other users or visitors to our Website. Please do not include personal information that you do not wish to make publicly available.

Legal and regulatory requirements. We may disclose your personal information where reasonably necessary to comply with applicable laws, regulations, legal processes or lawful requests from government authorities or courts.

Protection of rights, property and security. We may disclose your personal information where reasonably necessary to detect, prevent or investigate fraud, security incidents, unlawful activity or violations of our terms, or to protect the rights, property, safety or security of our company, our users or others.

Business transactions. We may disclose your personal information in connection with an actual or contemplated merger, acquisition, financing, reorganization, bankruptcy, sale of assets or other similar corporate transaction, subject to applicable legal requirements.

Aggregated or De-identified Information

Where permitted by applicable law, we may use or disclose information that has been aggregated, anonymized or otherwise de-identified so that it cannot reasonably be used to identify you. We will not attempt to re-identify such information except as permitted or required by applicable law.

Relationship with Shopify

The Website services are hosted by Shopify, which collects and processes personal information about your access to and use of the services in order to provide and improve the services for you. Information you submit to the Website will be transmitted to and shared with Shopify as well as third parties that may be located in countries other than where you reside, in order to provide and improve the services for you. In addition, to help protect, grow, and improve our business, we use certain Shopify enhanced features that incorporate data and information obtained from your interactions with our store, along with other merchants and with Shopify. To provide these enhanced features, Shopify may make use of personal information collected about your interactions with our store, along with other merchants, and with Shopify. In these circumstances, Shopify is responsible for the processing of your personal information, including for responding to your requests to exercise your rights over use of your personal information for these purposes. To learn more about how Shopify uses your personal information and any rights you may have, you can visit the Shopify Consumer Privacy Policy.

 

V. Information Security and Retention

Information Security

We implement reasonable technical, administrative and organizational measures, taking into account the nature of the personal information and the risks involved, to protect it against unauthorized access, use, disclosure, alteration, loss or destruction. These measures include access controls designed to limit access to personnel and service providers who need the information for their work, appropriate confidentiality obligations, and security technologies and procedures to monitor system and network operations and detect and respond to security events. We may also use encryption and other security technologies where appropriate.

If a personal information security incident occurs, we will take appropriate measures to contain, investigate and remediate the incident. We will notify affected individuals and relevant authorities, and provide information about the incident and recommended protective measures, where required by applicable law. Where individual notification is impracticable, we may use other reasonable and effective means of notification where permitted by law.

However, no method of transmission or storage is completely secure, and we cannot guarantee the absolute security of your personal information. Communications through email, instant messaging and similar channels may not be fully encrypted, and systems or networks outside our control may be subject to security risks. Please take care to protect your personal information and account credentials, and avoid sending sensitive or confidential information through insecure channels.

Retention of Personal Information

We retain your personal information only for as long as reasonably necessary to fulfill the purposes for which it was collected, provide our products and services, comply with applicable legal, accounting and tax requirements, resolve disputes, enforce our agreements, or protect our legal rights and interests.

Retention periods vary depending on the type of information, the purpose for which it is used and applicable legal requirements. In general:

• Order and transaction information is retained for as long as necessary to process your orders and related matters, and for any additional period required or permitted by applicable law.

• Account information is retained for as long as your account remains active, unless a longer retention period is required or permitted by law.

• Customer support and communications information is retained for as long as reasonably necessary to manage your requests, maintain relevant records and address disputes or legal matters.

• Marketing and preference information is retained for as long as necessary to manage your communication preferences and comply with applicable requirements.

• Product reviews and user-generated content may be retained for as long as the content remains published or as otherwise necessary for legitimate business or legal purposes.

• Cookie, device and online activity information is retained in accordance with our Cookie Policy and the retention periods applicable to the relevant technologies.

• Information processed by our service providers is retained in accordance with our agreements with those providers and applicable legal requirements.

When personal information is no longer required, we will delete or anonymize it, unless further retention is required or permitted by applicable law.

 

VI. Children’s Privacy

Our Website is not directed to children, and we do not knowingly collect personal information from children where applicable law requires parental or guardian consent, unless we have obtained such consent or an applicable exception applies.

We ask that children do not provide personal information through our Website without the involvement of a parent or legal guardian. Where required by applicable law, we will take reasonable measures to obtain appropriate parental or guardian consent before collecting, using or disclosing personal information from children.

In the United States, the Children’s Online Privacy Protection Act (“COPPA”) generally applies to children under 13 years of age. We do not knowingly collect personal information from children under 13 in circumstances requiring verifiable parental consent without obtaining such consent.

In the European Economic Area, where consent is relied upon as the legal basis for processing a child’s personal information in connection with information society services offered directly to the child, we will obtain parental or guardian consent where required by applicable law.

In California, we do not sell or share personal information for cross-context behavioral advertising. Where applicable law imposes additional requirements concerning personal information of consumers under 16, we will comply with those requirements.

If you are a parent or legal guardian and believe that a child has provided personal information to us in violation of applicable law, please contact us using the information provided in the “Contact Us” section. We will take appropriate steps to verify the request and, where required by applicable law, delete the relevant personal information or otherwise address the request. Please note that certain information may need to be retained where required or permitted by applicable law, such as for legal, security, accounting or transaction-related purposes.

We may update our practices relating to children’s personal information as required by changes in applicable laws and regulations.

 

VII. International Data Transfers

As described in section IV (How We Disclose Your Personal Information), we may disclose your personal information to our parent company, Shopify and its relevant entities or subprocessors, payment service providers, shipping and fulfillment providers, and other service providers for the purposes described in that section. Depending on where these recipients and their relevant subprocessors operate or process personal information, your personal information may be transferred to, stored in, or accessed from countries or territories other than the country in which you are located. The relevant locations may vary depending on the services used.

We will conduct international transfers in accordance with applicable data protection laws and use the transfer mechanisms and safeguards required by those laws, where applicable.

Transfers Subject to the GDPR or UK GDPR

Where the GDPR or UK GDPR applies and its international transfer requirements are applicable, we rely on an applicable adequacy decision or regulation, or implement appropriate safeguards, such as the European Commission’s Standard Contractual Clauses (“EU SCCs”). Where required, we will also conduct the relevant transfer assessments and implement supplementary measures.

For transfers of personal information to our parent company in China mainland, we rely on the Standard Contractual Clauses entered with our parent company, together with appropriate technical and organizational measures to protect the personal information transferred.

Where necessary for the performance of a contract with you or to take pre-contractual steps at your request, we may transfer relevant personal information to shipping providers involved in your transaction, for the purposes of arranging the delivery of your order. The categories of personal information disclosed to these providers are described in section IV. Depending on their operations, these providers may process your personal information in countries or territories outside your country of residence.

YOU EXPLICITLY CONSENT TO THE TRANSFER OF YOUR PERSONAL INFORMATION AS DESCRIBED IN SECTION IV AND THIS SECTION, INCLUDING TRANSFERS TO OUR PARENT COMPANY AND RELEVANT THIRD-PARTY SERVICE PROVIDERS LOCATED OUTSIDE YOUR COUNTRY OF RESIDENCE, FOR THE PURPOSES DESCRIBED IN THIS PRIVACY POLICY.

Transfers Subject to Other Data Protection Laws

Where other applicable data protection laws regulate international transfers, we will comply with the relevant requirements and use legally recognized transfer mechanisms or exceptions only where their applicable conditions are met.

 

VIII. Your Rights

Depending on where you live and subject to applicable law and certain exceptions, you may have the following rights regarding your personal information. These rights are not absolute and may apply only in certain circumstances.

• Right to Know and Access. You may have the right to know about the categories of personal information we collect, the purposes for which we use it, the sources from which we collect it, the categories of third parties to whom we disclose it, and to request access to the personal information we hold about you.

• Right to Correct. You may have the right to request correction of inaccurate or incomplete personal information.

• Right to Delete. You may have the right to request deletion of your personal information, subject to applicable exceptions.

• Right to Restrict or Object. In certain circumstances, you may have the right to restrict or object to our processing of your personal information.

• Right to Data Portability. Where applicable, you may have the right to receive certain personal information in a structured, commonly used and machine-readable format and, where required by law, request its transfer to another organization.

• Right to Withdraw Consent. Where we process your personal information based on your consent, you may withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

• Marketing Preferences. You may unsubscribe from marketing communications at any time by using the unsubscribe link in our emails or contacting us. You may still receive non-promotional communications relating to your orders, account or services you have requested.

• Right to Lodge a Complaint. Where applicable, you may have the right to lodge a complaint with a competent data protection authority.

Residents of certain U.S. states may have additional privacy rights under applicable state law, including rights to access, correct, delete and obtain a portable copy of personal information, and to opt out of certain processing where applicable. California residents may have additional rights under the California Consumer Privacy Act, as amended (“CCPA”). We will honor these rights and any applicable opt-out requirements in accordance with applicable law.

To exercise your rights, please contact us using the information provided in the “Contact Us” section. We may need to verify your identity before processing your request. We will respond within the timeframe required by applicable law and may refuse or limit a request where an applicable legal exception applies.

 

IX. Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on this website, update the “Last updated” date and provide notice as required by applicable law.

 

X. Contact Us

Should you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, please email us at mosaico@espressif.com. For the purpose of applicable data protection laws, we are the data controller of your personal information.

 

Last revision October 20, 2026