This Privacy Policy explains how Cognirium Limited, the operator of Shadow Patterns at shadowpatterns.com, handles personal information in connection with our website, customer accounts, educational products and support enquiries.
1. Who is responsible for your information?
Cognirium Limited is responsible for the personal information described in this policy. In Hong Kong privacy law, this role is referred to as the “data user”.
Cognirium Limited
Registration number: 78558578
Email: support@shadowpatterns.com
UNIT 85, UB FLOOR, ETON TOWER, 8 HYSAN AVENUE, CAUSEWAY BAY, HONG KONG
2. Information we collect
- Account information: your email address, account identifier, securely hashed password, email-verification status and information needed to manage account access.
- Purchase information: the name and billing details you provide, products ordered, order value, transaction references, payment status and refund correspondence.
- Service information: your purchased access rights and, where a learning or membership feature records it, participation or progress information.
- Communications: information you choose to include in support requests, feedback or other correspondence.
- Technical information: IP address, browser and device information, request timestamps and relevant activity or error records generated when you use the website.
- Preferences: choices you make about communications and any optional website features.
Required fields are identified in the relevant form. Without a valid email address and the necessary account or order details, we may be unable to create your account, verify your email, complete your purchase or provide access. Optional information is not a condition of purchase unless clearly stated.
3. How we use information
We use information to create and protect accounts, verify email addresses, fulfil orders, provide purchased content, administer access, send essential service messages, answer enquiries, resolve payment issues, prevent abuse and meet applicable record-keeping obligations. Information used for these purposes may be obtained directly from you, generated through your use of the service, or received from providers handling the relevant transaction.
Verification and password-reset messages are service communications. Creating an account does not by itself subscribe you to marketing. If we offer promotional communications, the collection notice will explain the proposed use and any required consent; you can withdraw your marketing choice using the instructions in the message or by contacting us.
4. Payments and service providers
Payment information is handled by the payment provider identified at checkout. We receive transaction information needed to reconcile your order and handle support; do not send full card numbers or card security codes to us in a support message. The payment provider’s own privacy notice explains its separate processing.
Relevant information may be shared with providers supporting website hosting, email delivery, payments, account administration and technical maintenance, to the extent needed for their role. It may also be disclosed to professional advisers or authorities when necessary for legal obligations, disputes or the protection of rights. If a business transfer affects your information, its handling remains subject to applicable law and appropriate notification.
5. Cookies and external services
Account and shopping features use cookies or similar storage to maintain sessions, remember cart contents and support security. Blocking these technologies in your browser can prevent sign-in or checkout from working correctly.
If you follow an external link or choose to load content supplied by another provider, that provider may receive technical information and apply its own storage technologies. Review its privacy notice before using the service. Any optional analytics, advertising or referral tracking must be explained in the notice presented with that feature and, where required, remain disabled until you consent. This policy does not itself give consent to tracking.
6. Retention and protection
We retain information for the purposes for which it was collected, including providing account access, resolving disputes and meeting applicable accounting or legal requirements. The appropriate period depends on the type of record, the duration of the customer relationship and any outstanding obligation. Information no longer needed should be deleted or anonymised, with residual backups removed through their normal replacement cycle.
We use appropriate access restrictions and security measures to protect personal information. No online system can guarantee absolute security. Keep your password private and notify us if you believe someone has accessed your account without permission.
7. International handling
Cognirium Limited is based in Hong Kong. Depending on the providers involved in delivering the service, your information may also be handled outside your country of residence. Where additional legal safeguards are required for a transfer, they must be applied; use of this website is not a blanket waiver of your privacy rights.
8. Your choices and requests
You may request access to, or correction of, your personal information. You may also ask about account closure, deletion or the use of your information for marketing. Some records may need to be retained even after account closure. Depending on the law applicable to your circumstances, additional rights may include objection, restriction or portability.
Email support@shadowpatterns.com with the subject “Privacy Request”, or write to Cognirium Limited at the address above. Include a reply address and enough information to identify the relevant account. We may need proportionate verification before disclosing information or changing an account. Do not include your password. Requests will be handled within the timescales required by applicable law.
You may raise a privacy complaint with Hong Kong’s Privacy Commissioner for Personal Data at pcpd.org.hk, or another competent authority where applicable.
9. Children and changes to this policy
Our account and paid educational services are intended for adults aged 18 or over. If you believe a child has supplied personal information, contact us so that we can investigate.
We may update this policy when our services or practices change. Material changes affecting existing users will be communicated as required. New uses requiring consent will not be authorised simply by changing this page.