Privacy Policy

Last Updated: July 26, 2026

At Elmiur ("we," "our," or "us"), operated by Bozzk Enterprises LLC, we are committed to protecting your privacy and ensuring transparency about how your personal information is collected, used, stored, and shared. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, purchase our products, or otherwise interact with our services. This Policy is compliant with the General Data Protection Regulation (GDPR) for individuals in the European Economic Area (EEA) and the California Consumer Privacy Act (CCPA/CPRA) for California residents. By using our Services, you acknowledge that you have read, understood, and agreed to the practices described here in.

By using our website, you agree to the practices described in this Privacy Policy.

1. Company Information

Business Name: Elmiur

Legal Entity: Bozzk Enterprises LLC, Wyoming, United States

Business Model: International eCommerce .Elmiur is an online retailer. Products sold through our website are manufactured and fulfilled by our trusted manufacturing partner:Shenzhen Huaruibo Electric Appliances Co., Ltd., 3rd Floor, Building A, Chajiaokan Industrial Zone,Sanhe Village, Huarong Community,Dalang Street, Longhua District,Shenzhen City, Guangdong Province,China.Our supplier manufactures, packages, and ships products directly to customers on our behalf after orders are placed through our website.

2. Information We Collect

We collect Personal Information in two primary ways: information you provide voluntarily and information we collect automatically. We adhere to the principle of data minimisation—collecting only what is necessary to fulfil the stated purposes.

2.1 Information You Provide

When you interact with our Services, you may choose to provide:

Account & Identity Data: Name, email address, phone number, shipping/billing address, and account credentials.

Transaction Data: Order details, purchase history, and payment method details (note: we do not store full credit card numbers; this data is processed by our third-party payment processors).

Product Usage & Support Data: Information you provide to our support team (e.g., skin type, hair type, device model) to troubleshoot IPL hair removal devices, hair dryers, or facial beauty devices, or to receive usage guidance.

Marketing Consent Data: Your opt-in or opt-out preferences for receiving promotional emails, newsletters, or SMS updates.

2.2 Information Collected Automatically

When you use our Website, we automatically collect certain technical and usage data through cookies and similar technologies:

Device & Log Data: IP address, browser type, operating system, device model, unique device identifiers, and referring/exit pages.

Usage Data: Pages viewed, time spent on the Website, product searches, click-through rates, and navigation paths.

Location Data: Approximate geolocation derived from your IP address (used only to determine regional shipping options and comply with local laws).

3. How We Use Your Information

We use your PI for the following legitimate business purposes, which are consistent with GDPR and CCPA requirements:

Purpose	Legal Basis (GDPR)	Applicable Products/Services
Fulfil Orders & Provide Services	Performance of a contract	Processing payments, shipping IPL devices , providing order confirmations.
Customer Support & Troubleshooting	Legitimate interest / Consent	Assisting with device setup, resolving technical issues, and providing post-purchase support.
Improve Products & Website	Legitimate interest	Analysing usage data to enhance Website usability and refine product features for our beauty devices.
Send Marketing Communications	Explicit Consent (Opt-in)	Sending personalized offers, new product announcements, and skincare tips (you may opt out at any time).
Fraud Prevention & Security	Legitimate interest / Legal obligation	Detecting and preventing fraudulent transactions, securing user accounts, and complying with anti-fraud laws.
Comply with Legal Obligations	Legal obligation	Fulfilling tax, accounting, and reporting requirements.

4. Order Fulfillment and Supplier Disclosure

Because Elmiur operates under a Ecommerce business model, certain customer information necessary for fulfilling your order is shared with our manufacturing and fulfillment partner located in China.

We do not sell your Personal Information to third parties for monetary consideration, as defined by the CCPA. We may disclose your PI to the following categories of third parties only as necessary:

Service Providers:

Logistics & Fulfillment: To ship products (e.g., DHL, FedEx, Amazon FBA).

Payment Processors: To securely process payments (e.g. Stripe).

Customer Service & Analytics: To provide support and analyse Website traffic (e.g., Zendesk, Google Analytics).

These providers are contractually obligated to protect your PI and may only use it to perform services on our behalf.

Legal & Compliance: If required by law, regulation, or legal process (e.g., a subpoena), or to protect our rights, property, or safety.

Business Transfers: In the event of a merger, acquisition, or sale of all or part of our assets, your PI may be transferred as part of the transaction (you will be notified via email and Website notice if this occurs).

5. Payment Processing

Payments are securely processed by Stripe .

Payment information is collected and processed directly by Stripe in accordance with their own Privacy Policy. Elmiur does not store complete payment card details.

6. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to:

Keep you logged in
Remember shopping cart contents
Improve website functionality
Measure website performance
Analyze visitor behavior
Personalize advertisements
Improve customer experience

You may disable cookies through your browser settings, although certain website features may no longer function properly. We have implemented processes to verify your identity before responding to any request to prevent unauthorized access.

6.1 ) Rights of California Residents (CCPA/CPRA)

You have the right to:

Access: Request to know what PI we have collected, used, disclosed, or sold about you in the past 12 months.

Deletion: Request deletion of your PI, subject to certain exceptions (e.g., completing a transaction you requested).

Non-Discrimination: We will not discriminate against you (e.g., by charging higher prices or providing lower quality services) for exercising your CCPA rights.

Opt-Out of Sale/Sharing: Although we do not sell your PI, you may request that we not share your PI with third parties for their own direct marketing purposes.

Do Not Sell or Share My Personal Information: To exercise this right, contact us in our mail

6.2 ) Rights of EEA Residents (GDPR)

You have the right to:

Access: Request a copy of the PI we hold about you.

Rectification: Request correction of inaccurate or incomplete PI.

Erasure (‘Right to be Forgotten’): Request deletion of your PI, subject to certain legal exceptions (e.g., tax records).

Restriction of Processing: Request that we limit the processing of your PI (e.g., while we investigate a complaint).

Data Portability: Request a copy of your PI in a structured, machine-readable format (e.g., CSV) for transfer to another controller.

Withdraw Consent: At any time, withdraw your consent for marketing communications or non-essential data processing (this does not affect the lawfulness of processing based on consent before withdrawal).

Lodge a Complaint: File a complaint with your local data protection authority (DPA) if you believe we have violated the GDPR.

7. Data Protection & Security

We take the security of your Personal Information seriously and implement a combination of technical and organizational measures to protect it against unauthorized access, disclosure, alteration, or destruction:

Encryption: All data transmitted between your browser and our Website is encrypted using SSL/TLS technology.

Access Controls: Restricted access to PI only by authorized employees and contractors who need it to perform their job functions.

Secure Storage: Payment details are not stored on our servers; they are processed by PCI DSS-compliant payment processors.

Regular Audits: We conduct regular security audits and vulnerability assessments of our Website and systems.

Data Breach Notification: In compliance with GDPR, we will notify affected Data Subjects and the relevant DPA without undue delay (within 72 hours) if a personal data breach is likely to result in a high risk to your rights and freedoms.

8. Analytics and Advertising

We may use third-party technologies including:

Google Analytics
Meta Pixel (Facebook & Instagram)
Google Ads
Shopify analytics
Tiktok analytics

These services help us understand website usage, improve marketing campaigns, measure advertising effectiveness, and provide relevant advertisements.

These providers may use cookies and similar technologies according to their own privacy policies.

9. Shopify

Our website is hosted on Shopify.Shopify provides the eCommerce platform that enables us to sell products and process orders. Information submitted through our website may be stored on Shopify's secure servers in accordance with Shopify's Privacy Policy.

10. Marketing Communications

If you subscribe to our mailing list, we may occasionally send promotional emails, product updates, special offers, or newsletters.

You may unsubscribe at any time by clicking the unsubscribe link included in our emails.

11. Children's Privacy

Our website is not intended for people under the age of 18 and we do not knowingly collect personal information from children.

If we become aware that information has been collected from a child without appropriate consent, we will take reasonable steps to delete such information.

12. Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices, content, or policies of those websites.

We encourage users to review the privacy policies of any third-party websites they visit.

13. Changes to Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our business operations, legal requirements, or technology.

The updated version will always display the revised "Last Updated" date at the top of this page. Continued use of our website after changes become effective constitutes acceptance of the revised Privacy Policy.

14. Contact Us

If you have any questions regarding this Privacy Policy or wish to exercise your privacy rights, please contact us in our Email .

We will make reasonable efforts to respond to privacy-related inquiries promptly and in accordance with applicable law.