Effective date: 14 October 2026

Last updated: 14 October 2026

This Privacy Policy explains how REATE TECHNOLOGY COMPANY LIMITED, operating under the Reate Knives brand ("Reate", "we", "us" or "our"), handles personal information connected with www.reateknives.com, customer accounts, direct purchases and customer support. It explains our purposes, the recipients of information and the choices available to you.

1 Who is responsible for your information

The controller for the processing described here is REATE TECHNOLOGY COMPANY LIMITED. Our business registration address is Flat/Rm 2212, 22/F, CC Wu Building, 302-308 Hennessy Road, Wanchai, Hong Kong. Hong Kong Business Registration Certificate No.: 70746383-000-05-26-8.

For privacy questions or requests, email operation@reateknives.com with the subject "Privacy Request", or write to our Hong Kong address. Warranty enquiries may be sent to Warranty@reateknives.com.

Our US dispatch and returns warehouse is: Attn: Lance Chrisler, 6060 Dawson Blvd., Suite D, Norcross, GA 30093, United States. This is a fulfilment location, not a separate seller. Authorised personnel handling orders act on the company's instructions.

2 Information we process and its sources

Account information includes your name, email address, account credentials and verification records. We receive this information when you register or manage an account.

Order and delivery information includes the products ordered, contact information, billing and delivery addresses, order history, payment references and delivery instructions. We obtain it from you and, as relevant, from PayPal and the carrier handling your shipment.

Support information includes correspondence, purchase records and any images or other material you provide for returns, repairs, complaints or warranty requests. Reviews you choose to submit may include your display name, review text and images and may be made public on the website.

Technical information includes IP addresses, device and browser information, access times, requested pages and security or error logs. Website cookies contain browsing, language and login identifiers as described in section 5. An identifier may be personal information where it identifies or can be linked to an individual, even when it does not contain a name.

Where age or eligibility checks are required, the information needed depends on the check used. We will explain the information requested, the provider and any relevant retention arrangements before collecting additional verification data. Do not email identity documents, passwords or full card details to ordinary customer support.

3 Purposes and legal bases

Where EEA or UK data protection law applies, we rely on the following bases for the processing concerned:

· Account administration, taking steps you request before purchase, and processing orders, payment, delivery, returns and related support: performance of our agreement with you or steps requested before entering it.

· Tax, accounting, legally required product-safety records and other applicable compliance requirements: compliance with the relevant legal obligation. Where a foreign-law requirement is not a legal obligation recognised by the applicable data protection law, we assess another appropriate basis, such as legitimate interests.

· Protecting accounts, preventing fraud, maintaining reliable services and managing legal claims: legitimate interests in securing our business and customers and establishing or defending rights, balanced against your rights and interests.

· Responding to general enquiries: pre-contractual steps where relevant, or our legitimate interests in answering requests and managing customer relationships.

· Optional promotional communications and optional tracking: consent where required. Any different permitted basis will be explained for the relevant activity.

Required information is identified when requested. Without information necessary for an account or order, we may be unable to provide that service. Optional marketing consent is not a condition of purchase. You may object to processing based on legitimate interests and may withdraw consent as explained below.

4 PayPal and fulfilment

Payments are handled through the company's PayPal Business account. We receive transaction information needed to confirm payment, fulfil orders, handle refunds and maintain records, such as payer details, transaction references, amounts and payment status. PayPal processes information for its own payment, security and regulatory purposes under the privacy statement applicable to its service. You can access that statement through PayPal's Legal section at www.paypal.com.

Our authorised team prepares and packs orders at our US warehouse. We disclose necessary contact, address and shipment details to carriers and, where used, shipping agents for delivery and customs clearance. Sharing information for delivery does not permit those recipients to use it for unrelated marketing on our behalf.

5 Cookies and similar technologies

Cookies are small records stored by your browser. Our website uses browsing identifiers, a language preference and login identifiers. The following describes the website's configured retention rules; your browser may delete or limit storage sooner. "No automatic expiry" means we do not set a scheduled deletion under the stated configuration, not that information can never be removed.

HI_BUGU_Token

Purpose: identifies a browser for browsing-related website functions.

Stored content: a browsing identifier.

Retention: no scheduled automatic deletion by the website. Signing out does not automatically delete this identifier. You can remove it by clearing the website's cookies or site data in your browser; a new identifier may be created on a later visit.

HI_BUGU_Lang

Purpose: remembers the language you select and applies that preference on a later visit.

Stored content: a language ID.

Retention: no scheduled automatic deletion by the website. You can remove it through browser cookie or site-data controls; changing the selected language updates the preference.

HI_BUGU_user

Purpose: identifies the user associated with a login.

Stored content: a user ID.

Retention: under the default login setting, deleted and invalidated when you sign out. If you select "Remember me" at login, the expiry is reset to 30 days from each visit. It expires after 30 days without another visit. Explicitly signing out does not immediately invalidate the retained Remember Me identifiers under the current configuration.

HI_BUGU_login

Purpose: identifies the particular login.

Stored content: a login ID.

HI_BUGU_identity

Purpose: identifies the user's login identity.

Stored content: a login identity identifier.

Login choices and browser controls

"Remember me" retains login identifiers on a rolling basis. Regular visits can extend retention beyond 30 days in total. Signing out does not immediately revoke those retained identifiers. Do not rely on signing out alone to revoke remembered access; use this option only on a private device and clear site data when you no longer want identifiers stored locally. If you need server-side access revoked or suspect unauthorised access, contact operation@reateknives.com. Clearing browser data removes the local copy but does not itself establish that server-side credentials have been revoked. Closing a browser window is not necessarily the same as signing out: browser session restoration and storage settings can affect persistence. You may clear this website's cookies and site data using your browser settings. This may sign you out, reset the selected language or affect other functions.

Deleting a browser cookie or reaching its expiry does not delete your account, erase order or accounting records, or necessarily remove related records held on our servers. Section 8 explains the separate retention of personal information, and section 9 explains how to request deletion.

Consent and third party content

Whether a technology requires consent depends on its actual purpose and applicable law. Authentication and a user-requested language preference may qualify for a strictly necessary exemption when used only to provide the requested function. A persistent browsing identifier is not automatically exempt merely because the website sets it. Selecting "Remember me" is not consent to advertising or unrelated tracking.

Some pages embed YouTube video content. Loading a player may disclose technical information to YouTube and may involve its own storage technologies, in addition to the five website identifiers above. PayPal may also use technologies within its payment service. Those providers explain their practices in their own privacy notices.

Where prior consent is required, the relevant technology must not be activated before that consent. Refusal and withdrawal must be accessible. Browser controls alone do not replace a consent mechanism where one is legally required.

6 Other recipients

We use Alibaba Cloud to host the website. We disclose relevant information to Alibaba Cloud and other providers supporting security, email and customer support, and to professional advisers where needed. Access is limited to the purposes for which the information is provided, subject to applicable contracts and law.

We may disclose information to authorities where legally required, or where necessary and lawful to investigate fraud, protect rights or pursue legal claims. A proposed merger or transfer of the business may involve limited disclosure subject to appropriate confidentiality and legal safeguards.

7 International processing

Our company is based in Hong Kong and our dispatch and returns operations are in the United States. Relevant order and support information may therefore be accessed or processed in these locations. Alibaba Cloud hosting and other providers may involve additional processing locations depending on the selected deployment region and service arrangements. Hosting with Alibaba Cloud does not itself identify a server country. Contact operation@reateknives.com for details of the relevant hosting region and provider processing locations.

Where EEA or UK transfer restrictions apply, the relevant transfer must have a lawful mechanism and any required supplementary safeguards. You may contact us for information about applicable safeguards and copies where available, with necessary redactions.

8 Retention

We apply the following retention schedule, subject to the limited exceptions below. Cookie validity and server-side record retention are separate.

· Orders, payment references, invoices, refunds and necessary accounting records: 7 years after the relevant transaction, or longer where applicable tax or accounting law requires. Only the personal information needed to document the transaction is retained for this purpose.

· General customer service emails: 2 years after the enquiry or support matter is closed. Messages forming part of accounting evidence follow the transaction retention period. Records needed for an ongoing warranty claim, complaint or legal dispute are retained until that matter and the applicable legal retention or claims period have ended.

· Routine website access and server logs: 90 days from creation. Logs relating to a specific fraud or security incident may be isolated and retained for the period necessary to investigate, resolve the incident and address associated claims or legal obligations. Mandatory security-log requirements override the 90-day routine schedule where applicable.

· Account profile information: while the account is active. Following a verified closure request, unnecessary profile information is removed or anonymised within 30 days, subject to outstanding orders, required records and any lawful extension notified to you.

· Marketing records, if used: until consent is withdrawn or the applicable lawful basis ends. A minimal suppression record may remain for as long as needed to respect an opt-out.

· Browser identifiers: the periods in section 5 apply. HI_BUGU_Token and HI_BUGU_Lang have no scheduled automatic deletion. Remember Me login identifiers use a rolling 30-day expiry, renewed on each visit; signing out does not immediately invalidate them. These rules do not authorise indefinite retention of unrelated server logs or order data.

We restrict records retained solely for compliance, claims or incident handling to those purposes. When the applicable period ends and there is no continuing lawful need, we delete or anonymise the information. Backup copies are isolated from ordinary use and removed through the backup lifecycle; if restored, applicable deletion instructions must be reapplied. Contact us for information about the retention criteria affecting a particular record.

9 Your rights and requests

Depending on applicable law, you may request access to and a copy of your information, correction, deletion, restriction of processing or portability. You may object to processing based on legitimate interests, including on grounds relating to your situation. You may object to direct marketing at any time.

Where processing relies on consent, you may withdraw it without affecting the lawfulness of earlier processing. Use the unsubscribe option in promotional emails or contact operation@reateknives.com. Necessary order, security and product-safety messages may still be sent.

We may need proportionate information to verify a requester's identity or authority. We respond within the period required by applicable law; under the GDPR or UK GDPR, this is normally one month. If a permitted extension or refusal applies, we will explain it and available complaint options.

You may complain to a competent supervisory authority, including the Hong Kong Privacy Commissioner for Personal Data and, where applicable, the authority in your EEA place of residence or the UK Information Commissioner. You do not have to contact us first where the law allows a direct complaint.

US state laws may provide additional rights, including applicable opt-out, authorised-agent and appeal rights. We will not unlawfully discriminate against you for exercising a privacy right.

10 Security and automated decisions

We maintain safeguards appropriate to the nature and risks of processing and review access to customer information. No online service can guarantee absolute security. Please notify us promptly if you suspect unauthorised account access. We handle security incidents and make notifications as required by law.

11 Children and changes

Our account and purchasing services are intended for adults aged 18 or over, or a higher age where applicable. If you believe a child has supplied information through these services, contact us so we can review and take appropriate action.

We may update this policy as our services or legal requirements change. The published version will show its effective date. We will provide additional notice or obtain new consent where required. Contact operation@reateknives.com for questions or a copy of the policy relevant to your transaction.