Privacy Policy

Controller.Steinhoff Group LLC, a Wyoming limited liability company, trading as Radia is the controller of personal data collected through radia.company. References to we, us and our mean that entity.

What this policy covers.This policy covers personal data we process when you visit the Site, create an account, place an Order, contact us, complete a quiz, subscribe to marketing, submit a review, or interact with our advertising. It does not cover third-party sites we link to.

Contact for privacy matters.All privacy enquiries and data rights requests should be sent to privacy@radia.company. Please use this address rather than general support so that requests are logged and handled within the statutory timeframe.

Children.The Site is not directed at children under 16 and we do not knowingly collect their data. If we learn that we hold data of a child under 16 without appropriate consent we will delete it. A parent or guardian may contact privacy@radia.company to request deletion.

Identity and contact data.Name, email address, postal and billing address, telephone number, and any name or message you add for a gift recipient.

Order and transaction data.Items purchased, variants, quantities, prices, discounts and promotion codes used, order reference, currency, tax and shipping amounts, delivery status, returns and claim history, and correspondence relating to an Order.

Payment data.Payment method type, the last four digits and expiry of a card, the authorisation result and a processor token. We do not receive or store full card numbers or security codes — these are captured directly by our payment processor.

Account data.Login credentials in hashed form, saved addresses, order history, preferences, and authentication tokens.

Support and correspondence data.The content of your emails, chat messages, form submissions and claim evidence, including any photographs or video you send us, together with our internal notes on the matter.

Voluntary health information.If you tell us about your skin condition, sensitivity, medication, pregnancy or a medical contraindication — for example in a quiz answer or a support enquiry — we process it only to answer you and to record the safety issue. Please do not send more health information than is necessary.

Marketing preferences.Whether you have subscribed or unsubscribed, the channel you consented to, and the date, source and evidence of consent.

User-generated content.Reviews, ratings, photographs, testimonials and any other material you choose to submit, together with the display name you give.

Device and connection data.IP address, approximate location derived from it, browser type and version, operating system, device type, screen and viewport size, language, time zone and referring URL.

Usage data.Pages and products viewed, time on page, scroll depth, clicks, search terms, filters applied, quiz answers, cart additions and removals, checkout steps started and completed, and session duration. Sessions are tracked with a timeout and periodic heartbeat so that activity can be attributed to a single visit.

Cookies and similar technologies.Cookies, local storage, session storage and pixels. Details, categories and named technologies are in our Cookie Policy. Non-essential technologies are used only where you have given consent through the banner.

Advertising and conversion data.Where you consent, advertising technologies including the Meta pixel and its server-side conversions interface record events such as page view, product view, add to cart, checkout start, payment information added and purchase, together with event value, currency, an event identifier and hashed identifiers used for matching.

Fraud and security data.Logs of authentication attempts, IP and device signals, order-risk indicators and anomalies used to detect fraud and abuse of promotions.

We may receive data from: our payment processor (authorisation results, risk scores, dispute records); carriers (tracking and delivery status, delivery exceptions, signatures or delivery photographs); advertising and analytics platforms (aggregated campaign and audience reporting); social platforms where you interact with our accounts; and fraud-prevention services.

Where a third party gives us your data — for example a gift recipient’s address — the person who provides it is responsible for having a lawful basis to do so, and we process it only to fulfil the Order.

To perform the contract.To take and fulfil Orders, take payment, arrange delivery, manage your account, provide support and administer returns, claims and warranties. Basis: performance of a contract. Without this data we cannot supply the Products.

To comply with law.To keep tax, accounting, consumer-protection, product-safety and sanctions records, to respond to lawful requests, and to record consent. Basis: legal obligation.

For legitimate interests.To prevent fraud and abuse, secure the Site, keep records for the defence of legal claims, understand and improve our products and merchandising, produce aggregate statistics, and send service messages. Basis: legitimate interests, balanced against your rights.

With your consent.For marketing email and SMS, non-essential cookies, advertising and conversion measurement, publishing your review, and processing any health information you volunteer. Basis: consent, which you may withdraw at any time.

To establish or defend claims.To retain evidence of orders, deliveries, policy acceptance, correspondence and claim evidence for use in a dispute, chargeback or proceeding. Basis: legitimate interests and, where relevant, legal obligation.

No automated decisions with legal effect.We use automated risk scoring to flag suspicious orders, but a decision to cancel an Order involves human review. We do not carry out profiling that produces a legal effect on you within the meaning of Article 22 GDPR.

Payment processing.Stripe and, where applicable, wallet providers such as Apple Pay and Google Pay, to authorise and settle payments, handle refunds and manage disputes. They act as independent controllers for their own compliance and fraud purposes.

Fulfilment and delivery.Fulfilment partners, suppliers and carriers, who receive the recipient name, address, contact details and parcel contents description needed to deliver, and customs authorities where an international shipment requires it.

Technology providers.Hosting, content delivery, commerce platform, database, email delivery, error monitoring and customer support providers, acting as processors on our instructions under written terms.

Advertising and analytics.Where you consent, advertising and measurement platforms including Meta. These platforms may act as independent controllers for their own purposes, and their processing is governed by their own privacy terms.

Professional advisers and authorities.Lawyers, accountants, auditors, insurers and debt-recovery agents where necessary, and regulators, courts, law enforcement or tax authorities where we are legally required or permitted to disclose.

Corporate transactions.A prospective or actual buyer, investor or successor in connection with a merger, financing, reorganisation, insolvency or sale of assets, subject to confidentiality and to this policy continuing to apply.

No sale of personal data.We do not sell personal data for money. Sharing data with advertising platforms for measurement and audience purposes may constitute a sale or sharing under certain U.S. state laws, and you may opt out as described in Section 11.

We operate from the United States and use providers located in the United States and elsewhere. Your data may therefore be transferred to and processed in countries whose data protection law differs from that of your own country.

Where we transfer data from the European Economic Area, the United Kingdom or Switzerland, we rely on an adequacy decision where one applies, or otherwise on the European Commission Standard Contractual Clauses (with the UK Addendum where relevant), together with supplementary technical and organisational measures.

You may request information about the safeguards applied to a specific transfer by writing to privacy@radia.company.

Order records.Order, payment, tax and delivery records are kept for the period required by tax and accounting law, generally seven years from the end of the relevant financial year.

Account data.Kept while your account is active and for a reasonable period afterwards, then deleted or anonymised, except where retention is required for the purposes above.

Support and claims.Correspondence and claim evidence are kept for the limitation period applicable to a potential claim, and longer where a dispute is live or reasonably anticipated.

Marketing data.Consent and preference records are kept while you remain subscribed and afterwards as evidence of the consent and of your suppression from further messages.

Analytics and advertising data.Event-level data is retained for a limited period and then aggregated. Platform-side retention is governed by the relevant platform.

Security logs.Retained for a short rolling period appropriate to detect and investigate incidents.

We use encryption in transit, access controls and least-privilege administration, hashed credentials, tokenised payments, monitoring and logging, and vendor due diligence appropriate to the risk.

No method of transmission or storage is completely secure. You are responsible for choosing a strong, unique password, keeping it confidential, and securing the email account linked to your Radia account.

Where a personal data breach is likely to result in a risk to your rights, we will notify the competent authority and, where required, you, within the applicable statutory deadline.

The rights you hold.Subject to conditions and exemptions, you may request: access to your data and a copy of it; correction of inaccurate data; erasure; restriction of processing; portability in a machine-readable format; objection to processing based on legitimate interests; and objection to direct marketing at any time.

Withdrawing consent.Where processing is based on consent you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing already carried out.

How to exercise them.Email privacy@radia.company with the request and the email address used on your Order. We may ask for information to verify your identity. We respond within one month, extendable by two further months for complex requests, and will tell you if an extension applies.

Limits.We may decline or partly decline a request where an exemption applies, including where retention is required by law, where the data is needed to establish or defend a legal claim, or where the request is manifestly unfounded or excessive.

Complaints.You may complain to your local supervisory authority — in the UK, the Information Commissioner’s Office. We would appreciate the opportunity to address your concern first.

Rights under the CCPA/CPRA.If you are a California resident you may request: to know the categories and specific pieces of personal information collected, the sources, the purposes, and the categories of third parties to whom it was disclosed; deletion; correction; and to limit use of sensitive personal information. Comparable rights apply under the laws of Colorado, Connecticut, Virginia, Utah, Texas and other states.

Categories collected.In the past 12 months we have collected identifiers, customer records and commercial information, internet and device activity, approximate geolocation, and inferences drawn for merchandising, as described in Sections 2 and 3.

Opt out of sharing for targeted advertising.You may opt out of the use of advertising and measurement technologies by declining non-essential cookies in the consent banner, by using the Manage Cookies control in the footer at any time, or by emailing privacy@radia.company. We honour the Global Privacy Control signal where our systems receive it.

No discrimination.We will not deny you goods, charge a different price, or provide a different level of service because you exercised a privacy right.

Authorised agents.An authorised agent may submit a request with written proof of authority; we may still contact you to verify the request directly.

Timing.We confirm receipt within 10 business days and respond substantively within 45 days, extendable once where permitted.

We send marketing only where you have opted in, or where permitted by law on the basis of an existing customer relationship for similar products with a clear opt-out in every message.

You can unsubscribe using the link in any marketing email, by replying STOP to a marketing SMS, or by emailing privacy@radia.company. We keep a suppression record so that we do not contact you again.

Unsubscribing from marketing does not stop transactional messages about your account, Orders or security, which are necessary to perform the contract.

If you submit a review it may be published with the display name and location you provide. Do not include information you do not wish to be public, and do not include health details.

You may ask us to remove a review you submitted by writing to privacy@radia.company. We may retain an internal record of it for the defence of claims and for advertising-compliance purposes.

Our Site links to and embeds third-party services, and our profiles exist on third-party social platforms. Their processing of your data is governed by their own policies, which we do not control and for which we are not responsible.

Where an advertising platform acts as an independent controller for its own purposes, you should exercise your rights in respect of that processing directly with the platform, using the controls it provides.

There is no common industry standard for Do Not Track, and we do not respond to DNT headers. We do act on consent choices recorded through our banner and on Global Privacy Control signals where received.

We may update this policy. The version number and effective date at the top of this page always reflect the current version, and material changes will be notified by a notice on the Site or by email where required.

Where a change requires consent under applicable law, we will obtain it before applying the change to data already collected.

Privacy and data rights: privacy@radia.company. Legal and formal notices: legal@radia.company. Order and support enquiries: support@radia.company.

To help us respond quickly, state the right you wish to exercise, the email address used on your Order, and any order reference. Please allow one attempt at resolution with us before escalating to a regulator.