Privacy policy

Effective Date: 20 August 2026
Version: 1.0

1. Data Controller

The data controller determining the purposes and means of processing the personal data of users of the Site is:

iqLaw Limited

Registration number: 79279185

Address: Suite C, Level 7, World Trust Tower, 50 Stanley Street, Central, Hong Kong

Email for enquiries regarding personal data processing: support@morgenshtern.show

This Privacy Policy explains what data we collect, the legal grounds on which we process it, who we share it with, how long we retain it, how we use cookies and similar technologies, and what rights users have in relation to their personal data.

2. Personal Data We Collect

2.1. Information provided by the user when placing an order

email address;
recipient’s first and last name;
country;
city;
delivery address;
postal code;
telephone number.

2.2. Order information

order contents, selected items and quantities;
payment amount, currency and payment status;
date and time the order was placed and the order number;
shipment status and tracking number.

2.3. Payment information

Payments are processed by third-party payment service providers, including Tribute.

We do not receive or store the full payment card number, card expiry date or security code.

We only receive information relating to the outcome of the payment, including its status, amount, currency, payment method and, in certain cases, the last digits of the card number and the country in which the card was issued.

2.4. Data relating to voluntary payments made in support of the project

email address;
payment amount;
currency;
payment status.

2.5. Technical data

IP address;
browser type and version;
operating system;
device type;
pages of the Site visited and the time of such visits;
source from which the user accessed the Site;
cookie identifiers and similar technologies.

2.6. Enquiry and correspondence data

The contents of correspondence sent to support@morgenshtern.show, including any attached materials.

We do not collect special categories of personal data.

3. Purposes and Legal Bases for Processing

Purpose	Data	Legal Basis
Entering into and performing a contract: processing, payment, fulfilment and shipment of an order	Sections 2.1, 2.2 and 2.3	Performance of a contract
Providing information about order status, changes to shipment dates and delivery-related matters	Email address, order information	Performance of a contract
Receiving and handling claims and enquiries	Sections 2.1, 2.2 and 2.6	Performance of a contract; legitimate interests
Receiving and administering voluntary payments in support of the project	Section 2.4	Legitimate interests; performance of agreed arrangements
Screening against applicable sanctions and other control lists and preventing fraud	Sections 2.1, 2.2 and 2.5	Compliance with legal obligations; legitimate interests
Ensuring the operation and security of the Site	Section 2.5	Legitimate interests
Website traffic analytics	Section 2.5	Consent
Retaining accounting and tax records	Order and payment information	Compliance with legal obligations
Protecting our rights in the event of a dispute	All applicable data	Legitimate interests

We do not send advertising or marketing communications.

We do not make decisions concerning users that are based solely on automated processing and that produce legal effects, except for automated payment security checks carried out by payment service providers.

4. Who We Share Personal Data With

Personal data is not sold or disclosed to third parties for use for their own purposes.

Data may be disclosed to the following categories of recipients to the extent necessary to achieve the purposes described above:

the e-commerce platform on which the Site operates and its infrastructure providers, including hosting and data storage providers;
payment service providers and acquiring providers, including Tribute, for payment processing, refunds and fraud prevention; such providers may process payer information as independent data controllers in accordance with their own policies;
manufacturing and fulfilment contractors, for order preparation and fulfilment;
carriers and postal operators, for delivery;
web analytics providers, where the user has consented to the relevant cookies;
professional advisers, including legal, accounting and audit advisers, where necessary;
competent authorities, where disclosure is required by law.

5. International Transfers of Personal Data

iqLaw Limited is incorporated in Hong Kong.

Our contractors may be located in other jurisdictions, including Member States of the European Union, the United Kingdom, the United States and countries in the Asia-Pacific region.

Personal data may be transferred outside the user’s jurisdiction to the extent necessary to perform the contract, including for the delivery of goods to the address provided by the user.

Where personal data is subject to European Union or United Kingdom data protection law, we use the transfer mechanisms required by the applicable legislation, including standard contractual clauses.

6. Data Retention Periods

Category	Retention Period
Order information and recipient information	3 years from the date the order has been fully performed
Payment information and accounting records	3 years from the date the order has been fully performed, or for a longer period where required by applicable law
Data relating to voluntary payments in support of the project	3 years from the date of payment
Correspondence relating to enquiries and claims	3 years from the date the relevant matter has been resolved
Technical and analytics data	In accordance with the retention periods specified in Section 11 of this Privacy Policy

Goods ordered on a pre-order basis are scheduled to be shipped in 2027. Accordingly, data relating to such orders will be retained until shipment, and the three-year retention period specified above will begin after shipment.

Upon expiry of the applicable retention period, the data will be deleted or anonymised.

7. User Rights

To the extent provided by the laws applicable to the user, the user has the right to:

obtain confirmation as to whether their personal data is being processed and obtain access to such data;
request correction of inaccurate or incomplete personal data;
request deletion of personal data;
request restriction of processing;
object to processing based on legitimate interests;
receive personal data in a structured, machine-readable format and transmit it to another controller;
withdraw consent in relation to processing based on consent, without affecting the lawfulness of processing carried out before consent was withdrawn;
lodge a complaint with the competent supervisory authority in the user’s place of residence or with the Hong Kong Office of the Privacy Commissioner for Personal Data (PCPD).

The exercise of certain rights may be restricted where processing is necessary for the performance of a contract or compliance with legal obligations.

In particular, deletion of order information before the order has been fulfilled would make fulfilment of the order impossible.

To exercise any of these rights, please contact us at support@morgenshtern.show, specifying the relevant order number or the email address used to place the order.

We may request additional information in order to verify the identity of the person making the request.

The response period for requests is 7 (seven) calendar days.

8. Accuracy and Updating of Personal Data

Users must provide accurate information and notify us promptly of any changes.

As pre-orders may remain outstanding for an extended period of time, any changes to the delivery address or contact details must be communicated to support@morgenshtern.show before shipment.

9. Security

We implement organisational and technical measures designed to protect personal data, including:

TLS encryption;
access to personal data on a need-to-know basis;
selection of contractors with regard to their security requirements.

However, no method of transmitting or storing data can provide absolute security.

10. Minors

The Site is not intended for persons under the age of 16, and we do not knowingly collect personal data from persons under the age of 16.

If we become aware that personal data has been provided by a person under the age of 16, such data will be deleted.

11. Cookies and Similar Technologies

11.1. General Information

This Section describes the use of cookies and similar technologies on https://morgenshtern.show.

Cookies are used to ensure the proper functioning of the Site, retain user preferences, process orders, maintain security and, where the appropriate consent has been obtained, for analytics and marketing purposes.

11.2. What Cookies Are

Cookies are small text files placed on a user’s device when they visit a website.

They allow a website to store information about a user’s actions and preferences during a session or between visits.

Similar technologies include:

pixels;
web beacons;
browser local storage;
software development kits (SDKs).

Based on their source, cookies may be:

first-party cookies – placed by the Site’s domain;
third-party cookies – placed by domains operated by service providers.

Based on their duration, cookies may be:

session cookies – deleted when the browser is closed;
persistent cookies – stored on the device for a specified period.

11.3. Strictly Necessary Cookies

Strictly necessary cookies provide the basic functionality of the Site.

Without them, the Site cannot function properly.

They may be used for:

retaining the contents of the shopping cart and order settings;
enabling the checkout and payment process;
load balancing and request routing;
protection against fraudulent and automated activity;
retaining language and currency selections;
retaining the user’s cookie preferences;
ensuring the security and stable operation of the Site.

Source: the e-commerce platform on which the Site operates, its infrastructure providers and payment service providers.

Legal basis: legitimate interests and technical necessity.

Where permitted by applicable law, user consent is not required for the use of strictly necessary cookies.

It may not be possible to disable such cookies through the cookie consent banner.

Retention period: from the duration of the session up to 12 months, depending on the purpose of the specific cookie.

11.4. Analytics Cookies

Analytics cookies allow us to assess Site traffic and how users interact with the Site, including in aggregated form.

They may be used for:

counting visits;
identifying referral sources;
analysing pages viewed;
analysing navigation through the Site;
identifying technical errors;
identifying problems during checkout;
assessing the effectiveness and usability of the Site.

Legal basis: user consent.

Where consent is required by applicable law, analytics cookies are placed only after such consent has been obtained.

Retention period: up to 24 months.

11.5. Advertising and Marketing Cookies

Advertising and marketing cookies may be used by advertising, analytics and social media platforms for:

evaluating the effectiveness of advertising placements;
measuring advertising campaign performance;
determining how users interact with advertisements;
creating interest profiles;
providing more relevant advertising.

Legal basis: user consent.

If such cookies are not used on the Site, the relevant category may not be displayed in the consent settings.

Retention period: up to 13 months.

11.6. Third-Party Cookies and Technologies

Certain cookies and similar technologies may be placed by third-party service providers used in connection with the operation of the Site.

Such providers may include:

the e-commerce platform;
payment service providers;
analytics providers;
advertising and social media platforms, where connected to the Site.

Data collected through third-party cookies may be processed by the relevant service providers, including outside the user’s jurisdiction.

The categories of recipients and conditions governing international transfers of personal data are described in Sections 4 and 5 of this Privacy Policy.

11.7. Cookie Consent

When visiting the Site for the first time, the user may be shown a cookie consent banner allowing them to:

accept all categories of cookies;
reject non-essential cookies;
access detailed cookie preference settings.

Analytics, advertising and marketing cookies for which consent is required under applicable law are placed only after such consent has been obtained.

Strictly necessary cookies may be placed regardless of the user’s choice because they are required for the operation of the Site and the provision of services requested by the user.

11.8. Managing Preferences and Withdrawing Consent

The user may change or withdraw their consent at any time through the cookie preference management function available on the Site.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

Users may also manage cookies through their browser settings, including:

deleting cookies that have already been stored;
blocking new cookies;
restricting the use of third-party cookies.

Disabling strictly necessary cookies through browser settings may prevent certain functions of the Site from operating correctly, including the ability to place an order.

Instructions for managing cookies are available in the help section of the relevant browser.

11.9. Cookie Retention Periods

The retention period depends on the category, purpose and settings of the relevant cookie.

Session cookies are deleted when the browser is closed.

Persistent cookies may remain on the user’s device for a specified period.

Indicative maximum retention periods are:

strictly necessary cookies – up to 12 months;
analytics cookies – up to 24 months;
advertising and marketing cookies – up to 13 months.

The actual retention period of individual cookies may be shorter.

12. Changes to this Privacy Policy

We may amend this Privacy Policy from time to time.

The current version will be published on https://morgenshtern.show together with its effective date.

If material changes are made, we will notify users who have placed an order by email.

Changes to the categories of cookies used may also be reflected in the consent settings available on the Site.

13. Contact Details