Privacy Policy

Last updated: October 4, 2026

This Privacy Policy explains how HYABUSA LTD, trading as Fadewell ("Fadewell", "we", "us", "our"), collects, uses, shares and protects your personal information when you visit our website (the "Site"), buy our products, subscribe to our services or contact us.

1. Who We Are

The data controller is HYABUSA LTD, a company registered in England and Wales under company number 16807084, with its registered office at 128 City Road, London, EC1V 2NX, United Kingdom. Contact: mooran@atomicmail.io.

2. Information We Collect

Information you give us: name, email address, phone number, shipping and billing address, order and subscription details, messages you send us, reviews, and any photos or documents you send in support or refund requests.

Payment information: payments are processed by our payment providers (such as Shopify Payments, PayPal or Stripe). We never store full card numbers.

Information collected automatically: IP address, device and browser information, pages viewed, links clicked, referring website and other interaction data, collected through cookies, pixels and similar technologies.

Information from partners: advertising and analytics partners (such as Meta, TikTok and Google) may share information about your interactions with our ads.

3. How We Use Your Information

To process, ship and support your orders and subscriptions, including recurring billing;
To communicate with you about your orders, subscription and requests;
To send marketing emails and text messages, only if you have opted in;
To review refund and guarantee requests;
To operate, personalise and improve the Site and our products;
To measure and improve our advertising;
To detect and prevent fraud and abuse, and to protect our legal rights;
To comply with legal, tax and accounting obligations.

4. Legal Bases (UK GDPR)

As a UK company, we process personal data under the UK General Data Protection Regulation on the following bases: performance of a contract (processing your order or subscription); your consent (marketing messages, non-essential cookies); our legitimate interests (improving our services, preventing fraud, defending legal claims), where these are not overridden by your rights; and compliance with legal obligations.

5. Cookies and Tracking Technologies

We use essential cookies to make the Site work (e.g. your cart and checkout) and analytics and advertising technologies such as the Meta Pixel, TikTok Pixel and Google Analytics. You can control cookies through your browser settings and, where available, our cookie preferences tool. We honour Global Privacy Control (GPC) signals as a request to opt out of the sale or sharing of personal information where required by law.

6. Text Messages (SMS)

If you opt in to receive text messages, we collect your phone number and messaging preferences and use them to send the messages you agreed to receive. We do not share or sell your mobile phone number or SMS consent with third parties or affiliates for their own marketing purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, except service providers that help us deliver messages. You can opt out at any time by replying STOP. See the SMS terms in our Terms of Service.

7. How We Share Your Information

We do not sell your personal information for money. We share it only with:

Service providers that help us run our business: Shopify (e-commerce platform), payment processors, subscription management providers, fulfilment and shipping partners, email and SMS providers, and customer support tools;
Advertising and analytics partners (e.g. Meta, TikTok, Google), to measure and show relevant ads. Under some US state laws this may be considered "sharing" or "selling" for targeted advertising. You can opt out as described below;
Authorities or other parties, when required by law, to respond to legal process, or to protect our rights, including in payment disputes;
A buyer or successor in the event of a merger, acquisition or sale of all or part of our business.

Shopify's privacy policy is available at shopify.com/legal/privacy.

8. International Transfers

We are based in the United Kingdom and our customers and many of our service providers are in the United States. Your information is therefore transferred between the UK and the US. Where required, we rely on appropriate safeguards, such as the UK-US Data Bridge, the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

9. Data Retention

We keep order and transaction records for as long as required by tax and accounting laws (generally six years). We keep marketing data until you unsubscribe or ask us to delete it, and documents sent for refund requests for as long as needed to handle the request and any related dispute. We keep other data only as long as necessary for the purposes described in this policy.

10. Your Privacy Rights

All customers may contact us to access, correct or delete their personal information, or to unsubscribe from marketing at any time.

US state privacy rights: if you live in California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon or another US state with a consumer privacy law, you may have the right to: know what personal information we collect and how we use it; access a copy of it; correct it; delete it; and opt out of the sale or sharing of personal information for targeted advertising. To opt out, email us at mooran@atomicmail.io with the subject "Do Not Sell or Share My Personal Information", or use a GPC-enabled browser. If we deny your request, you may appeal by replying to our decision. We will not discriminate against you for exercising your rights.

UK GDPR rights: you also have the right to restrict or object to processing, to data portability, to withdraw consent at any time, and to complain to the UK Information Commissioner's Office (ico.org.uk).

To exercise any right, email mooran@atomicmail.io. We may need to verify your identity before responding. You may use an authorised agent where permitted by law. We respond within the timeframe required by applicable law.

11. Security

We use reasonable technical and organisational measures to protect your information. However, no online transmission or storage system is completely secure.

12. Children

The Site is not directed to children under 16, and we do not knowingly collect their personal information. If you believe a child has given us personal information, contact us and we will delete it.