Legal · Trust & Transparency
Your Privacy,
Our Promise.
At MOEFAL — Moments of Eternal Faith and Love — we treat your personal information with the same care we put into every bouquet we craft. This policy explains exactly what we collect, why we collect it, and the rights you have over your information.
Last Updated
May 20, 2026
Version 1.0 · Effective immediately
SECTION 01
About this Privacy Policy
This Privacy Policy describes how Hong Kong Raylking Trading Co., Limited (“MOEFAL”, “we”, “us”, or “our”), a company registered in Hong Kong SAR, collects, uses, shares, and protects your personal information when you visit www.moefal.com (the “Site”), purchase our products, or interact with us through email, social media, or customer service.
By using our Site or services, you acknowledge that you have read and understood this policy. If you do not agree with any part of it, please do not use our Site.
In plain English
We collect the minimum information needed to fulfill your order, improve your shopping experience, and keep our business running. We never sell your data. You have full control over your information at any time.
SECTION 02
Information we collect
2.1 Information you provide directly
When you create an account, place an order, subscribe to our newsletter, or contact our support team, we collect:
2.2 Information collected automatically
When you browse our Site, our servers and analytics tools record:
2.3 Information from third parties
We may receive limited information about you from:
SECTION 03
How we use your information
We use the information described above for the following purposes:
| PURPOSE | WHAT WE DO | LEGAL BASIS |
|---|---|---|
| Order fulfillment | Process payments, prepare and ship orders, handle returns, send order confirmations and tracking updates. | Contract performance |
| Customer support | Answer your inquiries, resolve issues, process refunds and exchanges. | Contract / Legitimate interest |
| Marketing communications | Send promotional emails about new collections, sales, and wedding tips — only with your opt-in consent. | Consent |
| Site improvement | Analyze how visitors use our Site to improve navigation, content, and product offerings. | Legitimate interest |
| Fraud prevention | Detect and prevent fraudulent transactions, unauthorized access, and abuse of our services. | Legitimate interest / Legal obligation |
| Legal compliance | Maintain tax records, respond to lawful requests, enforce our Terms of Service. | Legal obligation |
SECTION 04
Legal basis & your consent
When you place an order or provide your information to complete a transaction, we treat this as your implied consent to collect and use that information for the specific purpose stated.
For any secondary use — such as marketing emails or analytics — we either ask for your explicit opt-in consent or provide a clear option to opt out.
Withdrawing your consent
You can withdraw your consent at any time:
Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.
SECTION 05
Sharing & disclosure
We do not sell your personal information to anyone. We only share data with the categories of recipients listed below, and only to the extent necessary:
No data brokers, no advertising sales
MOEFAL does not sell, rent, or trade your personal information to data brokers, marketing list providers, or any third party for their independent marketing purposes.
SECTION 06
Third-party services we use
MOEFAL is built and operated using the following independent service providers. Each has their own privacy policy governing how they handle your data — we encourage you to review theirs as well.
| Service | Purpose | Data shared |
|---|---|---|
| Cloudflare | DNS management, CDN, security & DDoS protection | IP, request headers, page paths |
| Hetzner Hosting | Web server hosting for our WordPress site | Server logs, IP, browser info |
| Stripe (via FunnelKit Stripe Gateway) | Processes credit/debit cards, Apple Pay & Google Pay wallets | Tokenized card data, billing address, transaction ID |
| Klarna / Afterpay | Buy Now Pay Later — split-payment options offered at checkout (US/CA only) | Name, email, order amount, basic risk-check data (handled by Klarna / Afterpay directly) |
| PayPal | Alternative payment processing & PayPal wallet checkout | PayPal account identifier, billing address, transaction ID |
| Amazon MCF | Order fulfillment & shipping (United States) | Shipping address, products, name |
| Meta (Facebook & Instagram) | Pixel for ad measurement & remarketing | Pseudonymized event data (only with consent) |
| Pinterest Tag for campaign measurement | Pseudonymized event data (only with consent) | |
| Purelymail (via WP Mail SMTP) | Transactional & marketing email delivery | Email address, name, order history |
SECTION 07
Cookies & tracking technologies
Cookies are small text files stored on your device that help our Site remember your preferences and behavior. We categorize the cookies we use as follows:
Strictly Necessary
Always on
Required for the Site to function. Includes login state, shopping cart contents, security tokens, and your cookie banner preference.
wordpress_logged_in_* woocommerce_cart_hash woocommerce_items_in_cart wp_woocommerce_session_* cookie_consent_status cf_clearanceFunctional
Opt-in
Remember your choices like language, currency, recently viewed products, and Buy-Now-Pay-Later sessions during checkout.
wp-settings-* moefal_currency recently_viewed klarna_sessionAnalytics
Opt-in
Help us understand how visitors interact with our Site so we can improve content and navigation.
_ga _ga_* _gidMarketing
Opt-in
Used by Meta Pixel and Pinterest Tag to measure ad effectiveness and show relevant content on other platforms.
_fbp _fbc _pinterest_ct_ua _pin_unauthOn your first visit, our cookie banner allows you to Accept All or Decline Non-Essential cookies. Your choice is remembered for six months via the
cookie_consent_status cookie. To change your decision later, clear that cookie in your browser and the banner will reappear. You can also block or delete any cookies through your browser settings at any time — note that disabling strictly necessary cookies may break shopping cart, login, and checkout functionality.SECTION 08
International data transfers
MOEFAL is operated by a Hong Kong–based company serving customers primarily in the United States. By using our Site, you understand that your information may be processed in jurisdictions outside your own, including:
For each transfer, we ensure appropriate safeguards are in place, including Standard Contractual Clauses with our processors and selecting providers that comply with recognized privacy frameworks (such as the EU-U.S. Data Privacy Framework where applicable).
SECTION 09
Data security
We take reasonable technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:
While we follow industry best practices, no method of transmission or storage is 100% secure. We will notify affected users and relevant authorities promptly in the event of a personal data breach as required by applicable law.
SECTION 10
Your privacy rights
Depending on where you live, you have the following rights regarding your personal information:
01
Right to access
Request a copy of the personal data we hold about you.
02
Right to correct
Update or correct inaccurate personal data.
03
Right to delete
Request deletion of your account and personal data.
04
Right to portability
Receive your data in a machine-readable format.
05
Right to opt out
Stop marketing communications or sale of personal data at any time.
06
Right to object
Object to certain types of processing based on legitimate interests.
CALIFORNIA RESIDENTS (CCPA / CPRA)
If you are a California resident, you have specific rights including the right to know what personal information we collect, the right to delete, the right to correct, and the right to opt out of the sale or sharing of personal information. MOEFAL does not sell personal information. To exercise your rights, email [email protected] with “California Rights Request” in the subject line.
EU / UK RESIDENTS (GDPR)
If you are in the EU, UK, or Switzerland, you have the rights listed above under the GDPR / UK GDPR. You also have the right to lodge a complaint with your local data protection authority if you believe we have not addressed your concerns.
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days (or 45 days for complex requests, with notification of the extension).
SECTION 11
Children’s privacy
Our Site is not directed to children under 16 years of age, and we do not knowingly collect personal information from children. If you are under 16, please do not provide any personal information on our Site without the involvement of a parent or guardian.
If we learn that we have collected personal information from a child under 16 without verified parental consent, we will delete that information promptly. If you believe a child has provided us with personal information, please contact us at [email protected].
SECTION 12
Data retention
We keep your personal information only for as long as needed for the purposes described in this policy, or as required by law:
| DATA TYPE | Data shared |
|---|---|
| Order & transaction records | 7 years (required for tax and accounting purposes in most North American jurisdictions) |
| Account information | Until you delete your account, plus 30 days for backup purges |
| Marketing subscriber list | Until you unsubscribe, plus suppression list (email only) to honor your opt-out |
| Customer support tickets | 3 years from the last interaction |
| Cookies & tracking data | Varies by cookie — see Section 7. Most marketing cookies expire within 13 months. |
| Server access logs | 90 days for security & debugging |
SECTION 13
Updates to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. When we make material changes, we will:
We encourage you to review this policy periodically. Your continued use of our Site after changes become effective constitutes your acceptance of the revised policy.
SECTION 14
Contact us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal information, we’re here to help.
Get in touch
We aim to respond to all customer service and privacy-related inquiries within 5 business days. For formal data subject requests (access, deletion, portability), we will respond within the statutory timeframe (typically 30 days).
Customer Service & Privacy
Response Window
Within 5 business days · Mon – Fri
Mailing address
Written correspondence regarding privacy matters can be sent to our Hong Kong registered office.
Data Controller
Hong Kong Raylking Trading Co., Limited
Attn: Privacy Compliance Officer
Unit A17, 29/F., Legend Tower,
No.7 Shing Yip Street,
Kwun Tong, Kowloon,
Hong Kong SAR
Attn: Privacy Compliance Officer
Unit A17, 29/F., Legend Tower,
No.7 Shing Yip Street,
Kwun Tong, Kowloon,
Hong Kong SAR
Free U.S. Shipping
On every order over $59. No promo code, no minimum quantity — it applies at checkout automatically.
Secure Checkout
Visa, Mastercard, Amex, PayPal, Apple Pay, Google Pay and Klarna. Card details never touch our servers.
Real People, One Day
Email [email protected] and a human replies within one business day, Monday through Friday.
30-Day Returns
Not right for your day? Return eligible items within 30 days of delivery for a refund or exchange.