^{Privacy Policy}

^{VECOM, trading as Iris Creator Lab ("Iris Creator Lab," "we," "us," or "our"), respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit https://www.iriscreatorlab.com, create an account, purchase or access our courses or digital products, communicate with us, interact with our Instagram or ManyChat automations, or otherwise use our services (collectively, the "Services").}

^{VECOM is based in Hong Kong and offers the Services to customers worldwide.}

^{By using the Services, you acknowledge the practices described in this Privacy Policy. Where applicable law requires consent, we will request it separately.}

^{1. Information We Collect}

^{The information we collect depends on how you use the Services.}

^{Information you provide directly}

^{We may collect:}

• ^{your name and email address;}

• ^{billing address and other order details;}

• ^{account and course-enrolment information;}

• ^{purchase, payment-status, product-access, and course-progress records;}

• ^{information you submit through forms, surveys, comments, email, or customer-support requests;}

• ^{messages and interactions sent through Instagram or ManyChat; and}

• ^{any other information you choose to provide.}

^{You are responsible for ensuring that the information you provide is accurate and that you have the right to provide it.}

^{Payment information}

^{Payments are processed by third-party payment providers, including Stripe and PayPal. We do not receive or store your complete payment-card number, card security code, or PayPal login credentials. We may receive limited transaction information, such as your name, billing details, transaction identifier, payment status, amount paid, and the product purchased.}

^{Information collected automatically}

^{When you use the Services, we and our service providers may automatically collect information such as:}

• ^{IP address;}

• ^{browser and device type;}

• ^{operating system;}

• ^{referring and exit pages;}

• ^{pages viewed, links clicked, and time spent on the Services;}

• ^{approximate location derived from your IP address;}

• ^{cookie identifiers, advertising identifiers, and similar technologies; and}

• ^{information about interactions with our emails, advertisements, and website.}

^{2. How We Use Personal Information}

^{We may use personal information to:}

• ^{operate, maintain, and improve the Services;}

• ^{create and manage your Kajabi account;}

• ^{process purchases and provide access to courses and digital products;}

• ^{authenticate users and protect accounts;}

• ^{provide customer support and respond to enquiries;}

• ^{send transactional messages, including purchase confirmations, access information, and important service notices;}

• ^{send marketing emails where permitted by law;}

• ^{measure website, course, email, and advertising performance;}

• ^{personalise content and advertising;}

• ^{conduct Meta remarketing and measure advertising conversions;}

• ^{administer and track affiliate referrals and commissions;}

• ^{prevent fraud, misuse, security incidents, and unlawful activity;}

• ^{enforce our terms and protect our legal rights; and}

• ^{comply with legal, tax, accounting, and regulatory obligations.}

^{Where required, we rely on one or more lawful bases, including performance of a contract, your consent, compliance with legal obligations, and our legitimate interests in operating, securing, and improving our business and communicating with customers.}

^{3. Email Marketing}

^{If you subscribe to our emails, download a free resource, purchase a product, or otherwise request information from us, we may send you educational, promotional, and product-related emails where permitted by law.}

^{You may unsubscribe at any time by using the unsubscribe link included in a marketing email. Unsubscribing from marketing messages will not prevent us from sending necessary transactional or service-related communications.}

^{4. Cookies and Similar Technologies}

^{We and our service providers use cookies, pixels, tags, local storage, and similar technologies to operate the website, remember preferences, understand usage, measure performance, prevent fraud, and deliver or measure advertising.}

^{These technologies may include:}

• ^{essential cookies needed for login, checkout, security, and website functionality;}

• ^{analytics cookies, including Google Analytics 4, used to understand how visitors use the Services;}

• ^{advertising technologies, including the Meta Pixel, used to measure campaigns, create audiences, and show more relevant advertising; and}

• ^{affiliate-tracking technologies used to identify eligible referrals and attribute commissions.}

^{Where required by applicable law, non-essential cookies will be used only after you provide consent. You may manage cookies through any cookie controls made available on the website and through your browser settings. Blocking certain cookies may affect website functionality.}

^{You can find additional information about advertising preferences through Meta's and Google's privacy and advertising settings.}

^{5. Meta Remarketing and Audience Tools}

^{We may use Meta advertising tools to measure conversions, retarget people who have interacted with our Services, and create Custom Audiences or similar audiences. Depending on your location, this activity may be considered targeted advertising, cross-context behavioural advertising, or a "sharing" of personal information under applicable privacy law.}

^{We do not sell personal information for money. You may request to opt out of the use or disclosure of your personal information for targeted advertising where applicable by contacting us at [email protected]. You may also adjust your advertising preferences through your Meta account and browser or device settings.}

^{6. Instagram and ManyChat Interactions}

^{If you comment on our Instagram content, send us a direct message, or interact with an automated ManyChat flow, we may receive your public profile information, username, message content, responses, tags, and interaction history. We use this information to respond to requests, deliver resources you ask for, provide customer support, and, where permitted, communicate about our products and services.}

^{Instagram and ManyChat process information under their own privacy policies. Please review their policies to understand their independent practices.}

^{7. Affiliate Programme and Referral Tracking}

^{We may operate an affiliate programme. When you visit the Services through an affiliate link, we may use cookies or similar identifiers to record the referral, attribute a purchase, prevent abuse, and calculate commissions. Affiliates may receive information confirming that an eligible referral or commission occurred, but we do not provide them with your complete payment-card details.}

^{8. How We Disclose Personal Information}

^{We may disclose personal information to:}

• ^{Kajabi, which hosts our website, course platform, accounts, email communications, and digital products;}

• ^{Stripe and PayPal, which process payments and help prevent payment fraud;}

• ^{Google, including Google Analytics 4 and Google Workspace, for analytics, communications, and business operations;}

• ^{Meta, including Meta Pixel and Instagram, for advertising, analytics, audience creation, and social-media interactions;}

• ^{ManyChat, for Instagram messaging and automation;}

• ^{affiliate and referral technology providers, where needed to track referrals and commissions;}

• ^{professional advisers, such as accountants, lawyers, insurers, or auditors;}

• ^{authorities or other parties where disclosure is required by law or reasonably necessary to protect rights, safety, and security; and}

• ^{a buyer, successor, or relevant adviser in connection with a merger, acquisition, financing, restructuring, or sale of all or part of our business.}

^{These providers may process information in accordance with their own terms and privacy policies. We do not authorise service providers to use personal information for unrelated purposes where they act solely on our behalf.}

^{9. International Data Transfers}

^{We are based in Hong Kong, offer services globally, and use service providers that operate in multiple countries. As a result, personal information may be transferred to, stored in, or processed in countries outside your place of residence, including countries whose privacy laws may differ from those in your jurisdiction.}

^{Where required by applicable law, we use appropriate safeguards for international transfers, which may include contractual protections or reliance on legally recognised transfer mechanisms.}

^{10. Data Retention}

^{We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Services, maintain account access, resolve disputes, prevent fraud, and comply with legal, tax, accounting, and reporting obligations.}

^{In general:}

• ^{marketing information is retained until you unsubscribe, withdraw consent, object, or request deletion, subject to a limited suppression record used to honour your choice;}

• ^{customer-support communications are generally retained for up to two years after the matter is closed, unless a longer period is reasonably necessary;}

• ^{account, course-access, and purchase records may be retained while your account or product access remains active; and}

• ^{transaction, tax, and accounting records are retained for the period required by applicable law.}

^{Retention periods may vary depending on the nature of the information, the reason it was collected, legal requirements, and the need to establish, exercise, or defend legal claims.}

^{11. Data Security}

^{We use reasonable administrative, technical, and organisational measures designed to protect personal information. However, no website, transmission, or storage system can be guaranteed to be completely secure. You use the Services and transmit information at your own risk.}

^{You are responsible for keeping your account password confidential and for notifying us if you suspect unauthorised access to your account.}

^{12. Your Privacy Rights}

^{Depending on where you live, you may have the right to:}

• ^{request access to personal information we hold about you;}

• ^{request correction of inaccurate or incomplete information;}

• ^{request deletion of personal information;}

• ^{restrict or object to certain processing;}

• ^{withdraw consent where processing is based on consent;}

• ^{request a portable copy of certain information;}

• ^{opt out of marketing communications;}

• ^{opt out of targeted advertising or certain disclosures of personal information; and}

• ^{lodge a complaint with the relevant privacy or data-protection authority.}

^{These rights are not absolute and may be subject to legal exceptions. To exercise a right, contact us at [email protected]. We may need to verify your identity before completing a request. You will not be discriminated against for exercising an applicable privacy right.}

^{If you are acting through an authorised agent, we may ask for evidence of the agent's authority and may verify your identity directly.}

^{13. California Privacy Notice}

^{If you are a California resident and applicable law covers our processing, you may have rights to know, correct, or delete personal information and to opt out of its sale or sharing. We do not sell personal information for money. Our use of advertising technologies may, in some circumstances, be treated as "sharing" for cross-context behavioural advertising.}

^{You may submit an applicable request, including an opt-out request, by emailing [email protected]. We will process verified requests in accordance with applicable law.}

^{14. European Economic Area, United Kingdom, and Switzerland}

^{If you are located in the European Economic Area, United Kingdom, or Switzerland, you may have rights under applicable data-protection law, including the rights described in Section 12. You may also complain to your local supervisory authority.}

^{VECOM is the controller of personal information described in this Privacy Policy unless another party is identified as the controller at the point of collection.}

^{15. Children's Privacy}

^{The Services are intended for people aged 18 or older. We do not knowingly collect personal information from anyone under 18. If you believe that a person under 18 has provided personal information to us, contact us at [email protected] so that we can review and, where appropriate, delete it.}

^{16. Third-Party Links and Services}

^{The Services may contain links to third-party websites, platforms, tools, or offers. We do not control and are not responsible for their privacy or security practices. This Privacy Policy applies only to personal information processed by us. You should review a third party's privacy policy before providing information to it.}

^{17. Changes to This Privacy Policy}

^{We may update this Privacy Policy from time to time. The revised version will be posted on this page with an updated "Last updated" date. If required by law, we will provide additional notice or request consent before a material change takes effect.}

^{18. Contact Us}

^{For privacy questions or requests, contact:}

^{VECOM, trading as Iris Creator Lab
Hong Kong
Email: [email protected]
Website: https://www.iriscreatorlab.com} 

^{Last updated: September 20, 2026}

^{This Privacy Policy is a general business template and does not constitute legal advice. Privacy obligations vary by jurisdiction. Consider having the policy reviewed by a qualified professional familiar with your business and target markets.}