EEA, UK & Switzerland Privacy Addendum

Last updated: September 21, 2026

This EEA, UK & Switzerland Privacy Addendum supplements the AlohaZ Privacy Policy and applies where the processing of personal information is subject to the European Union General Data Protection Regulation (“EU GDPR”), the United Kingdom General Data Protection Regulation (“UK GDPR”), or applicable Swiss data protection law.

If there is a conflict between this Addendum and our Privacy Policy with respect to processing covered by these laws, this Addendum applies to the extent of that conflict.

Legal Bases for Processing

Depending on how you interact with AlohaZ and the purpose for which we process your personal information, we may rely on one or more of the following legal bases:

Performance of a contract. We process personal information when it is necessary to provide products or services you request or to take steps at your request before entering into a contract with you. This includes processing information to:

  • process and fulfill your orders;
  • process payments and refunds;
  • arrange shipping and delivery;
  • provide order confirmations and transactional communications;
  • manage returns, exchanges, cancellations, and customer accounts; and
  • respond to requests relating to your purchases.

Compliance with legal obligations. We may process personal information where necessary to comply with laws and regulatory requirements that apply to us, including obligations relating to taxation, accounting, recordkeeping, consumer protection, fraud prevention where legally required, and responding to lawful governmental or regulatory requests.

Legitimate interests. Where appropriate, we process personal information when necessary for our legitimate interests or those of a third party, provided those interests are not overridden by your interests, rights, or freedoms. Our legitimate interests may include:

  • operating, maintaining, securing, and improving our website and business;
  • protecting our customers, business, systems, and services against fraud, abuse, security incidents, and other harmful activity;
  • providing and improving customer service;
  • understanding the performance and use of our website and services;
  • improving our products, services, website functionality, and customer experience;
  • maintaining appropriate business and administrative records;
  • establishing, exercising, or defending legal claims; and
  • communicating with customers about our products and services where permitted by applicable law.

When we rely on legitimate interests, we consider whether the processing is necessary for the relevant purpose and whether your rights and interests outweigh our interests.

Consent. We rely on your consent where required by applicable law, including for certain non-essential cookies, analytics technologies, personalized advertising technologies, and electronic marketing activities.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before you withdrew your consent.

You can manage applicable cookie and privacy preferences through the controls available on our website. You may also unsubscribe from promotional emails using the unsubscribe link included in those messages.

How these legal bases apply to our processing purposes.

In general, the legal bases described above apply to the purposes identified in our Privacy Policy as follows:

  • Providing, tailoring, and improving the Services: We rely on performance of a contract where processing is necessary to provide products or services you request. For other activities relating to operating, maintaining, analyzing, and improving our Services, we may rely on our legitimate interests, subject to the balancing described above. We rely on consent where required for non-essential cookies or similar technologies.
  • Marketing and advertising: We rely on consent where required by applicable law, including for certain electronic marketing, personalized advertising, cookies, and similar technologies. Where permitted by applicable law, we may rely on legitimate interests for certain marketing activities that do not require consent.
  • Security and fraud prevention: We generally rely on our legitimate interests in protecting our customers, systems, Services, and business against fraud, misuse, security threats, and other harmful activity, and on compliance with legal obligations where applicable.
  • Communicating with you: We rely on performance of a contract where communications are necessary to provide or support products or services you request. For other customer-service and business communications, we may rely on our legitimate interests where appropriate.
  • Legal reasons: We rely on compliance with legal obligations where processing is required by law and may rely on legitimate interests where necessary to establish, exercise, or defend legal claims.

Shopify and Related Processing

Our store is powered by Shopify. As explained in our Privacy Policy, Shopify processes personal information in connection with providing and improving the services that power our store.

For certain Shopify enhanced services, including personalized advertising features, Shopify may rely on consent where required by applicable law. Shopify may also rely on its own lawful bases for processing for purposes described in Shopify’s privacy documentation.

Please review our main Privacy Policy for additional information about our relationship with Shopify, international transfers, service providers, advertising and marketing partners, and your privacy choices.

Your Rights

Depending on your location and applicable law, you may have rights regarding your personal information, including rights to access, correct, delete, restrict or object to certain processing, receive certain information in portable form, and withdraw consent where processing is based on consent.

In particular, where we process your personal information on the basis of legitimate interests, you may have the right to object to that processing. Where we rely on consent, you may withdraw that consent at any time.

These rights are subject to applicable legal conditions and exceptions.

Requests may be submitted using the contact information below.

Contact

Alohaz LLC
PO BOX 160938
Honolulu, HI 96816
United States

Email: info@alohaz.com
Telephone: +1 346-808-1818

For additional information about how AlohaZ collects, uses, discloses, retains, and protects personal information, international data transfers, privacy rights, and how to submit a complaint, please review our Privacy Policy.