Privacy Policy

1) Information on the collection of personal data and contact details of the data controller

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about how we handle your personal data when you use our website. Personal data means any information relating to an identified or identifiable natural person.

1.2 The controller responsible for the processing of data on this website for the purposes of the General Data Protection Regulation (GDPR) is:
Ecom Marketing Limited ,
RM.517 New City Center 2,
Lei Yue Mun Road,
Kwun Tong, Kowloon,
Hong Kong.

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string "https://" and the lock icon in the browser bar.

2) Data collection when visiting our website

When you use our website for informational purposes only, i.e. when you do not register or otherwise provide us with information, we only collect the data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data that is technically necessary to display the website to you:

  • Website visited

  • Date and time of access

  • Amount of data sent in bytes

  • Source/referral source from which you came to the website

  • Use browser

  • Operating system used

  • Use IP address (in anonymized form, if applicable)

The processing is carried out in accordance with Article 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be forwarded or used in any other way. However, we reserve the right to check the server log files afterwards if there are concrete indications of illegal use.

3) Web hosting

Web hosting via Shopify We use Shopify International Limited's
e-commerce platformto host and display our online store based on processing on our behalf. All data collected on our website is processed on Shopify's servers.

As part of the services provided by Shopify, data may also be transferred for further processing to:
Shopify Inc. , 150 Elgin St, Ottawa, ON K2P 1L4, Canada,
Shopify Data Processing (USA) Inc. ,
Shopify Payments (USA) Inc. or
Shopify (USA) Inc.

For data transfers to Shopify Inc. in Canada ensures an adequate level of data protection with an adequacy decision from the European Commission.
Shopify entities based in the United States are certified under the EU-US Privacy Shield , ensuring compliance with EU data protection standards.

For further information on Shopify’s data protection, please visit:
https://www.shopify.com/legal/privacy

5) Contact

When you contact us (e.g., via contact form or email), personal data is collected. The specific data collected is shown in each contact form. These data are used exclusively for the purpose of responding to your inquiry or for contacting you and the associated technical administration.

 

6) Data Processing for Customer Account Creation and Contract Fulfillment

In accordance with Art. 6(1)(b) GDPR, personal data will be collected and processed if you provide it to us for the purpose of fulfilling a contract or opening a customer account. The data collected can be seen from the respective input forms.

You may delete your customer account at any time by sending a message to the contact details of the controller listed above.

We store and use the data you provide to fulfill the contract. After the contract has been completely fulfilled or your customer account deleted, your data will be restricted from further use and deleted after the applicable tax and commercial retention periods, unless you have expressly consented to further use of your data or we are legally permitted to continue using it.

7) Data Processing for Order Handling

To process your order, we work together with selected service providers who assist us, in whole or in part, in the execution of concluded contracts. Certain personal data will be transmitted to these service providers in accordance with the following explanations.

Personal data collected by us will be passed on to the transport company commissioned with the delivery, insofar as this is necessary for the delivery of the goods. Your payment data will be passed on to the financial institution commissioned with processing the payment, as far as this is necessary for payment processing.

If we use payment service providers, you will be informed explicitly below. The legal basis for the data transfer is Art. 6(1)(b) GDPR.

To fulfill our contractual obligations to customers, we also work with external shipping partners. Your name, delivery address, and, if necessary for delivery, your phone number will be disclosed to the shipping partner solely for the purpose of delivering the goods in accordance with Art. 6(1)(b) GDPR.

Use of Specialized Service Providers for Order Processing

 

8) Data subject's rights

According to applicable data protection law, you have the following rights regarding the processing of your personal data:

  • Right of access pursuant to Article 15 of the GDPR

  • Right to rectification according to Article 16 GDPR

  • Right to erasure ("right to to be forgotten) pursuant to Article 17 of the GDPR

  • Right to restriction of processing pursuant to Article 18 of the GDPR

  • Right to data portability according to Article 20 of the GDPR

  • Right to withdraw consent pursuant to Article 7(3) of the GDPR

  • Right to lodge a complaint pursuant to Article 77 of the GDPR to a supervisory authority

9) Retention period for personal data

The length of time personal data is stored depends on the applicable legal basis, the purpose of the processing and – where applicable – statutory retention periods.

When the storage purpose ceases to apply or a statutory storage period expires, personal data will be routinely deleted, unless they are still needed to fulfill or enter into contracts.

The legal basis for processingThe processing of this data is our legitimate interest in responding to your request in accordance with Article 6(1)(f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis is Article 6(1)(b) GDPR.

Your data will be deleted once your request has been fully processed, provided that there are no legal retention obligations.