Paradise
Privacy policy
Last updated: 10 September 2026
Who we are
RESONANCE is a clothing brand based in Bali, Indonesia. This store is operated by PT RESONANCE BRAND INTERNATIONAL, a company registered in Indonesia (NIB 2303230023305, NPWP 40.176.125.9-905.000), with its registered address at Jalan Made Bulet No. 16, Dalung, Kuta Utara, Badung Regency, Bali 80361, Indonesia.
For anything about your personal data, write to resonancewear@gmail.com. We answer in English.
What this policy covers
This policy explains what personal data we collect when you visit this store, place an order, or contact us, why we hold it, who else sees it, and what you can ask us to do with it.
What we collect
When you browse. Pages you view, what you click, the device and browser you use, your approximate location from your IP address, and cookie identifiers. This comes from our analytics and from the platform that runs the store.
When you order. Your name, email address, delivery and billing address, phone number, order contents, and the shipping method you choose.
When you pay. We never see or store your card number. Card details go directly to our payment provider, who processes the payment and tells us only whether it succeeded, along with the last digits and card type.
When you contact us. Whatever you send us by email, WhatsApp or through the contact form, and our replies.
When you subscribe. Your email address and, if you give it, your name.
Why we hold it and on what basis
| What we do | Why | Legal basis (EU/UK visitors) |
|---|---|---|
| Take and fulfil your order | to sell you the item and get it to you | performance of a contract |
| Take payment and prevent fraud | to get paid and to stop misuse of cards | contract, and our legitimate interest in preventing fraud |
| Send order and delivery updates | so you know where your parcel is | performance of a contract |
| Handle returns, exchanges and questions | to answer you and honour your rights | contract, legal obligation |
| Keep accounting and tax records | Indonesian law requires it | legal obligation |
| Send marketing emails | to tell you about new pieces | your consent, which you can withdraw at any time |
| Measure how the store is used | to make it work better | consent for non-essential cookies |
Who else sees your data
We use other companies to run the store. They only get what they need, and only to do their job for us.
- Shopify Inc. (Canada, with servers worldwide) - runs the online store, the checkout and the order records.
- Xendit (Indonesia) - processes card payments.
- DHL Express and other carriers - deliver your parcel and need your name, address and phone number to do it. For international parcels they also pass a customs declaration to the authorities in your country.
- Analytics and marketing tools we have enabled: Google Analytics 4 and the Meta Pixel - only if you accept non-essential cookies.
- Shopify Email - sends transactional and marketing emails.
- Government authorities and our professional advisers, where the law requires it.
We do not sell your personal data, and we do not share it for anyone else's advertising.
Where your data goes
We are in Indonesia. Our providers are in Canada, the United States, the European Union, Singapore and Indonesia, so your data is transferred outside your country. Where the data of visitors from the EEA or the UK is transferred, we rely on the standard contractual clauses our providers have in place.
How long we keep it
- Order and payment records: 10 years, because Indonesian tax and accounting rules require it.
- Customer account and contact history: while your account is active, then 3 years.
- Marketing subscription: until you unsubscribe.
- Analytics data: up to 26 months.
Your rights
Wherever you live, you can ask us to show you what we hold, correct it, delete it, or stop using it for marketing. If you are in the EEA or the UK, you also have the right to receive your data in a portable form, to object to processing based on our legitimate interests, and to complain to your national data protection authority. If you are in Indonesia, you have the rights given by Law No. 27 of 2022 on Personal Data Protection.
Write to resonancewear@gmail.com and we will answer within 30 days. We may ask you to confirm who you are before we act.
Marketing
We only email you marketing if you asked for it. Every email has an unsubscribe link, and unsubscribing takes effect immediately. Order confirmations and delivery updates are not marketing - you get those because you bought something.
Cookies
We use cookies that are necessary for the store to work, and, if you allow them, cookies that measure how the store is used and support advertising. See our Cookie Policy for the detail and for how to change your mind.
Children
This store is not for children. We do not knowingly collect data from anyone under 16. If you believe a child has given us data, write to us and we will delete it.
Security
Payments run over an encrypted connection and card data never touches our systems. Access to order data is limited to the people who need it to fulfil orders. No system is completely secure, so if something goes wrong that puts your data at risk, we will tell you and the relevant authority as the law requires.
Changes
If we change this policy we will update the date at the top. For anything material we will say so on the store.