Privacy Policy

Privacy Policy

Last Updated: September 28, 2026

Thangka Treasure (“Thangka Treasure,” “we,” “us,” or “our”) respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, disclose, store, and protect personal information when you visit or use https://www.thangkatreasure.com/ (the “Website”), purchase our products, contact us, subscribe to our communications, or otherwise interact with us.

Our products include traditional Thangka artwork, Buddhist jewelry, bracelets, necklaces, and related cultural and handmade products.

By using our Website, you acknowledge that you have read and understood this Privacy Policy. Where applicable, we will obtain your consent before processing personal information when consent is required by applicable law.

1. Information We Collect

We may collect different categories of information depending on how you interact with our Website.

1.1 Information You Provide Directly

When you create an account, place an order, contact us, subscribe to marketing communications, or submit information through our Website, we may collect:

  • Full name

  • Billing address

  • Shipping address

  • Email address

  • Telephone number

  • Account username and password

  • Order information

  • Products purchased or considered

  • Customer service communications

  • Reviews, comments, photographs, or other content you voluntarily submit

  • Information you provide when contacting us

  • Marketing preferences

  • Other information you voluntarily provide

Please do not provide sensitive personal information unless it is necessary for the specific service you are requesting.

1.2 Payment Information

When you make a purchase, payment information may be collected and processed by our payment service providers.

Depending on the payment method available at checkout, this may include:

  • Payment card information

  • Payment account information

  • Billing information

  • Transaction details

  • Payment authorization information

  • Fraud-prevention information

We generally do not need to store your complete payment card number or security code on our own servers. Payment information may instead be processed directly by the applicable payment processor.

Payment providers process payment information according to their own privacy policies and terms.

2. Information Collected Automatically

When you access our Website, certain technical information may be automatically collected.

This may include:

  • IP address

  • Browser type

  • Device type

  • Operating system

  • Language preference

  • General geographic information

  • Referring website

  • Pages visited

  • Products viewed

  • Search queries

  • Date and time of access

  • Website interaction information

  • Device identifiers

  • Cookies and similar technologies

  • Information about how you navigate and use the Website

This information may be used for security, analytics, website functionality, performance improvement, fraud prevention, and marketing purposes where permitted by applicable law.

3. Cookies and Similar Technologies

We may use cookies, pixels, tags, local storage, and similar technologies to operate and improve our Website.

Cookies may help us:

  • Keep items in your shopping cart

  • Remember your preferences

  • Maintain login sessions

  • Process orders

  • Improve website performance

  • Understand how visitors use our Website

  • Measure advertising performance

  • Detect fraud and security threats

  • Provide relevant marketing where permitted

  • Improve our products and services

Some cookies are necessary for the operation of the Website, while others may be optional.

Where required by applicable law, we will request your consent before placing non-essential cookies or similar technologies on your device.

You may be able to control cookies through your browser settings or available cookie-management tools. Disabling certain cookies may affect the functionality of the Website.

4. How We Use Personal Information

We may use personal information for the following purposes:

4.1 Processing Orders

We use your information to:

  • Process and fulfill purchases

  • Confirm orders

  • Process payments

  • Arrange shipping

  • Provide tracking information

  • Communicate about your order

  • Handle returns, refunds, and exchanges

  • Provide customer support

4.2 Operating Our Website

We may use information to:

  • Operate the Website

  • Maintain customer accounts

  • Remember preferences

  • Improve website functionality

  • Troubleshoot technical problems

  • Maintain website security

  • Prevent fraudulent or unauthorized activity

4.3 Customer Service

We may use your information to respond to:

  • Questions

  • Product inquiries

  • Shipping requests

  • Refund requests

  • Return requests

  • Complaints

  • Other customer service communications

4.4 Marketing

Where permitted by applicable law, we may use your email address or other contact information to send:

  • Product updates

  • New collection announcements

  • Special offers

  • Promotions

  • Newsletters

  • Brand updates

You may unsubscribe from promotional emails at any time by using the unsubscribe link included in the communication or by contacting us.

5. Legal Bases for Processing Personal Information

If you are located in the European Economic Area, United Kingdom, or another jurisdiction that requires a lawful basis for processing personal data, we may rely on one or more of the following legal bases:

Contractual Necessity

We may process information when it is necessary to fulfill a contract with you, such as processing and delivering your order.

Legal Obligations

We may process information when necessary to comply with applicable legal, tax, accounting, regulatory, or law-enforcement obligations.

Legitimate Interests

We may process information when reasonably necessary for legitimate business interests, such as:

  • Website security

  • Fraud prevention

  • Customer service

  • Business administration

  • Improving our Website

  • Protecting our legal rights

Where we rely on legitimate interests, we consider and balance those interests against your rights and freedoms.

Consent

We may process personal information based on your consent, such as where consent is required for certain marketing communications or non-essential cookies.

You may withdraw consent at any time where processing is based on consent.

6. How We Share Personal Information

We do not sell your personal information in the traditional sense of selling customer lists for money.

However, we may disclose or make personal information available to certain third parties when reasonably necessary to operate our business.

These may include:

Payment Providers

Payment service providers may process payment and transaction information to authorize and complete purchases.

Shipping and Logistics Providers

We may provide your name, shipping address, telephone number, email address, order information, and other necessary information to shipping companies, carriers, customs agents, and logistics providers.

Website and Hosting Providers

Service providers may process technical information in order to host, maintain, secure, and operate our Website.

Analytics Providers

We may use analytics services to understand website traffic, customer behavior, and website performance.

Marketing Providers

Where permitted by law, we may use email marketing, advertising, or marketing technology providers to communicate with customers and measure marketing activities.

Customer Service Providers

We may use third-party tools to manage customer inquiries, communications, and support.

Fraud Prevention and Security Providers

Certain information may be processed by third parties to detect fraudulent transactions, abuse, security threats, or unauthorized activity.

Legal and Government Authorities

We may disclose information when required by law or when reasonably necessary to:

  • Comply with legal obligations

  • Respond to lawful requests

  • Protect our rights

  • Protect customers or other individuals

  • Investigate fraud

  • Prevent illegal activity

  • Enforce our terms and policies

7. International Data Transfers

Thangka Treasure may operate internationally and may use service providers located in countries other than your country of residence.

As a result, your personal information may be transferred to, stored in, or processed in countries that may have different data-protection laws from your own.

For individuals located in the European Economic Area or United Kingdom, where applicable, we will use appropriate legal safeguards for international data transfers, such as an adequacy decision or appropriate contractual safeguards, as required by applicable law.

8. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

The length of time we retain information depends on factors including:

  • The nature of the information

  • The purpose for which it was collected

  • Whether we need the information to provide services

  • Legal and accounting requirements

  • Tax obligations

  • Fraud prevention

  • Dispute resolution

  • Enforcement of agreements

  • Our legitimate business needs

When personal information is no longer reasonably required, we may delete, anonymize, or securely dispose of it, subject to applicable legal requirements.

9. Data Security

We take reasonable administrative, technical, and organizational measures designed to protect personal information from:

  • Unauthorized access

  • Unauthorized disclosure

  • Loss

  • Misuse

  • Alteration

  • Destruction

Security measures may include access controls, secure website technologies, authentication controls, encryption where appropriate, monitoring, and other safeguards.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

Therefore, while we take reasonable measures to protect your information, we cannot guarantee absolute security.

10. Your GDPR Rights

If the General Data Protection Regulation (“GDPR”) applies to you, you may have the following rights, subject to applicable exceptions:

Right to Access

You may request access to personal information we hold about you.

Right to Rectification

You may request correction of inaccurate or incomplete personal information.

Right to Erasure

You may request deletion of your personal information in certain circumstances.

Right to Restriction

You may request that we restrict processing of your personal information in certain circumstances.

Right to Data Portability

You may request certain personal information in a structured, commonly used, and machine-readable format.

Right to Object

You may object to certain processing activities, including certain processing based on legitimate interests and direct marketing.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw your consent at any time.

Withdrawal of consent does not affect the lawfulness of processing that occurred before withdrawal.

Right to Lodge a Complaint

You may have the right to lodge a complaint with the data protection authority in your country or region.

These rights are subject to applicable legal limitations and exceptions.

11. California Privacy Rights

If you are a California resident and the California Consumer Privacy Act (“CCPA”), as amended by the California Privacy Rights Act (“CPRA”), applies to our processing of your information, you may have certain rights regarding your personal information.

These may include:

  • Right to know

  • Right to access

  • Right to correct

  • Right to delete

  • Right to opt out of the sale or sharing of personal information

  • Right to limit certain uses or disclosures of sensitive personal information where applicable

  • Right to non-discrimination for exercising privacy rights

California law also provides specific requirements regarding notices, consumer requests, and certain disclosures.

We do not intend to discriminate against you because you exercise a privacy right provided by applicable law.

12. California Right to Know

California residents may request information about:

  • Categories of personal information collected

  • Categories of sources from which information is collected

  • Business or commercial purposes for collecting or using information

  • Categories of third parties with whom information is shared

  • Specific pieces of personal information collected about them, subject to applicable law

We will process verified requests in accordance with applicable California law.

13. California Right to Delete

California residents may request deletion of personal information we have collected about them.

Certain information may be retained where permitted or required by law, including information necessary to:

  • Complete a transaction

  • Detect security incidents

  • Protect against fraud

  • Exercise legal rights

  • Comply with legal obligations

  • Complete other activities permitted under applicable law

14. California Right to Opt Out of Sale or Sharing

We do not sell personal information as a conventional data-broker business.

However, certain advertising or analytics technologies may constitute “sharing” under California privacy law depending on how they are configured and used.

Where applicable, California residents may have the right to opt out of the sale or sharing of their personal information for purposes such as cross-context behavioral advertising.

Where legally required, we will provide appropriate mechanisms for exercising these rights, including recognition of applicable opt-out preference signals such as the Global Privacy Control (“GPC”).

15. How to Submit a Privacy Request

To submit a privacy-related request, please contact us:

Email: connect@thangkatreasure.com

Please include:

  • Your name

  • Email address associated with your account or purchase

  • Description of your request

  • Any additional information reasonably necessary to verify your identity

We may need to verify your identity before fulfilling certain requests in order to protect personal information from unauthorized disclosure.

We will respond to valid requests within the time periods required by applicable law.

For example, California law generally provides a 45-calendar-day response period for certain consumer requests, subject to applicable extension rules.

16. Email Marketing

If you subscribe to our marketing communications, we may send you emails about:

  • New products

  • New Thangka collections

  • Buddhist jewelry

  • Special offers

  • Promotions

  • Cultural and brand updates

You can unsubscribe at any time by clicking the unsubscribe link included in our marketing emails.

Please note that even if you opt out of marketing communications, we may still send transactional or service-related messages, such as:

  • Order confirmations

  • Shipping updates

  • Payment notifications

  • Refund confirmations

  • Account-related communications

  • Important service notices

17. Third-Party Websites and Services

Our Website may contain links to third-party websites, services, social media platforms, payment providers, or other external resources.

We are not responsible for the privacy practices of third-party websites or services.

We encourage you to review the privacy policies of third parties before providing them with personal information.

18. Social Media

Our Website may include links, buttons, widgets, or other features provided by social media platforms.

Depending on how these features are implemented, third parties may collect information about your interaction with them.

Your interactions with social media platforms are governed by the privacy policies of those platforms.

19. Children’s Privacy

Our Website is not directed toward children under the age of 13.

We do not knowingly collect personal information from children under 13.

Where applicable law establishes a higher minimum age for consent to processing personal information, we will comply with the applicable requirement.

If you believe that a child has provided personal information to us without appropriate parental or guardian consent, please contact us at:

connect@thangkatreasure.com

We will take reasonable steps to address the situation as required by applicable law.

20. Sensitive Personal Information

We generally do not seek to collect sensitive personal information through our Website.

Please do not submit sensitive information unless it is specifically requested and necessary for a legitimate purpose.

Where applicable law provides additional protections for sensitive personal information, we will handle such information in accordance with those requirements.

21. Do Not Track

Some web browsers may transmit “Do Not Track” signals.

Because there is currently no universally accepted technical standard for responding to all browser-based Do Not Track signals, our Website may not respond to every such signal.

Where applicable law requires us to recognize legally recognized opt-out preference signals, we will handle those signals as required by applicable law.

22. Automated Decision-Making and Profiling

We may use automated technologies for limited purposes such as:

  • Fraud prevention

  • Website security

  • Analytics

  • Marketing measurement

  • Personalization

We do not intend to make decisions based solely on automated processing that produce legal or similarly significant effects on individuals unless permitted by applicable law and appropriate safeguards are provided.

Where applicable law provides specific rights regarding automated decision-making or profiling, those rights will apply.

23. Data Breach

We maintain reasonable safeguards designed to protect personal information.

If we become aware of a security incident involving personal information, we will investigate the incident and take reasonable steps to mitigate its effects.

Where notification is required by applicable law, we will provide notice to affected individuals, regulators, or other relevant parties within the timeframe and in the manner required by law.

24. Business Transfers

If Thangka Treasure is involved in a merger, acquisition, restructuring, financing, sale of assets, or other business transaction, personal information may be transferred as part of that transaction where legally permitted.

Any such transfer will be handled in accordance with applicable privacy laws.

25. Legal Compliance

We may process and disclose personal information when reasonably necessary to:

  • Comply with applicable laws and regulations

  • Respond to valid legal requests

  • Comply with court orders or governmental requests

  • Protect our legal rights

  • Prevent fraud or abuse

  • Investigate suspected unlawful activity

  • Protect the safety of our customers, employees, or others

  • Enforce our agreements and policies

26. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

  • Changes to our business

  • Changes to our Website

  • Changes to our services

  • Changes to applicable laws

  • Changes to privacy practices

  • Changes to third-party services

When we make changes, we will update the “Last Updated” date at the top of this Privacy Policy.

If changes are material, we may provide additional notice where required by applicable law.

We encourage you to review this Privacy Policy periodically.

27. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us.

Thangka Treasure

Website: https://www.thangkatreasure.com/

Email: connect@thangkatreasure.com

We will make reasonable efforts to respond to privacy inquiries and requests in accordance with applicable law.

28. Additional Notice for European Visitors

If you are located in the European Economic Area, you may contact us regarding your GDPR rights or lodge a complaint with the supervisory authority responsible for data protection in your country.

We encourage you to contact us first so that we can attempt to address your concern directly, although this does not limit your legal right to contact a supervisory authority.

29. Privacy and Respect for Our Customers

At Thangka Treasure, we believe that trust is an important part of sharing traditional art and culture with customers around the world.

We aim to collect only information that is reasonably necessary to operate our Website, fulfill orders, provide customer service, improve our services, and communicate with customers in accordance with applicable law.

We respect your privacy and strive to handle your personal information responsibly, transparently, and securely.