隱私政策
D'zage Designs is a clothing and accessories brand operated by KNT LIMITED ("D'zage", "we", "us" or "our"). KNT LIMITED is responsible for the personal data described in this Privacy Policy and is the data user for the purposes of Hong Kong’s Personal Data (Privacy) Ordinance and the controller where other applicable data-protection laws use that term.
This Privacy Policy explains how we collect, use, disclose, retain and protect personal data when you visit or use our website, create an account, make a purchase, join our loyalty programme, submit a review, participate in a referral programme, contact us, or otherwise interact with D'zage (collectively, the "Services").
Please read this policy carefully. By using the Services, you acknowledge the practices described below. This policy does not apply to the independent privacy practices of third parties, including social-media platforms, payment providers or other websites that you access through links from our Services.
1. Personal Data We Collect
The personal data that we collect depends on how you interact with the Services. It may include:
|
Category
|
Examples
|
|
Identity and contact data
|
Name, email address, telephone number, billing address and delivery address.
|
|
Account, profile and loyalty data
|
Account log-in credentials, account preferences, date of birth, gender, clothing-size preferences, loyalty points, store-credit balance and related account activity.
|
|
Order and transaction data
|
Products viewed, added to a cart, wishlisted, purchased, returned, exchanged or cancelled; order history; delivery details; payment status; and transaction records.
|
|
Payment data
|
Payment information required to process your order. Payments are processed through Shopify and/or our payment-service providers; we may receive transaction confirmations and related payment-status information.
|
|
Referral and review data
|
Referral code, referral activity, review ratings, review text, photographs or other material you choose to submit with a review. Reviews that we publish may be visible to the public.
|
|
Communications and marketing-preference data
|
Your communications with us, customer-service queries, records of marketing permissions and opt-outs, and your interactions with our email or WhatsApp communications.
|
|
Device, usage and online-activity data
|
IP address, browser type, device identifiers, operating system, approximate location inferred from IP address, pages viewed, interactions with the website, referring pages and cookie/pixel data.
|
We collect personal data directly from you; automatically when you browse or use the Services; from service providers that support the Services; and, where you choose to interact with us through them, from social-media, referral or other partners.
Except where we tell you that a field is optional, providing the personal data requested at checkout or for an account is necessary for us to process an order, deliver goods, provide the relevant service or respond to your request. If you do not provide it, we may be unable to provide that service.
2. How We Use Personal Data
We use personal data for the following purposes:
|
Purpose
|
Examples
|
|
Provide and administer the Services
|
To create and maintain accounts; process orders and payments; fulfil and deliver purchases; administer returns, exchanges, warranties, loyalty points, store credits and referrals; and publish or manage reviews.
|
|
Customer service and communications
|
To respond to questions, provide order and account updates, and send other non-promotional communications needed to provide the Services.
|
|
Personalisation and improvement
|
To remember your preferences, suggest relevant products, understand how the Services are used, troubleshoot issues and improve our products, website and customer experience.
|
|
Security, fraud prevention and legal compliance
|
To protect customers, payments, systems and business operations; prevent, detect and investigate fraud or misuse; enforce our terms; and comply with legal obligations or valid requests from authorities.
|
|
Marketing and advertising
|
Subject to the requirements described in section 5, to send marketing by email and WhatsApp; measure and improve our advertising; and deliver or measure advertising on Meta platforms.
|
|
Corporate transactions
|
To evaluate, implement or administer a merger, acquisition, sale of assets, financing, restructuring, insolvency or similar corporate transaction, subject to applicable law.
|
Where the UK GDPR applies, our legal grounds are, as applicable: performance of a contract with you; our legitimate interests in operating, securing, improving and promoting our business, provided your interests and rights do not override those interests; compliance with legal obligations; and your consent. We rely on consent for activities where applicable law requires it, including electronic marketing and non-essential cookies or pixels where required.
3. How We Share Personal Data
We do not sell personal data. We may disclose personal data to the following classes of recipients, only to the extent reasonably necessary for the purposes described in this policy:
|
Recipient
|
Why we share data
|
|
Shopify
|
To host and operate our online store, checkout and related e-commerce functionality.
|
|
Omnisend
|
To manage and send email communications and marketing, and measure engagement.
|
|
SleekFlow
|
To manage customer communications and WhatsApp messaging.
|
|
Loox Reviews
|
To collect, manage and display product reviews.
|
|
Smile.io
|
To operate our loyalty-points, referral and store-credit features.
|
|
Meta
|
To measure advertising, create and manage advertising audiences, and display D'zage advertising on Meta platforms. This may involve sharing online identifiers, website-event data and, where used for custom audiences, contact data in hashed form.
|
|
Payment, fulfilment and delivery providers
|
To process payments, fulfil orders, arrange delivery, process returns and provide customer support.
|
|
Professional advisers, insurers, regulators and authorities
|
Where reasonably necessary for legal, accounting, audit, insurance, dispute-resolution, fraud-prevention, regulatory or law-enforcement purposes.
|
|
Affiliates and corporate-transaction counterparties
|
Within our corporate group or in connection with a business transfer, subject to appropriate safeguards and applicable law.
|
Our service providers are authorised to process personal data only on our instructions and for the relevant service, except where they act independently under their own privacy notices. We require service providers, where appropriate, to protect personal data and keep it secure.
4. International Transfers
We and our service providers may process or store personal data in Hong Kong and in other countries or regions where we, Shopify or the providers listed above operate. Those locations may have data-protection laws that differ from those in your place of residence.
When applicable law requires a transfer safeguard, we will use an appropriate mechanism, such as an adequacy decision, contractual safeguards, the UK International Data Transfer Agreement or UK Addendum, or another lawful transfer mechanism. Please contact us using the details in section 10 if you want further information about the safeguards relevant to a particular transfer.
5. Direct Marketing and Advertising Choices
We may use your name, contact details, profile data, order history, marketing preferences and online-activity data to market D'zage clothing, accessories, promotions and related customer offers through email and WhatsApp. We may also use or provide relevant identifiers and online-event data to Meta for D'zage advertising, including personalised advertising and advertising measurement.
Where Hong Kong law requires consent or an indication of no objection before direct marketing, we will obtain it before using or providing your personal data for that purpose. We do not provide your personal data to independent third parties for their own direct-marketing purposes or for gain without the consent required by law.
You may opt out of D'zage marketing email by using the unsubscribe link in the message. You may opt out of WhatsApp marketing by using the opt-out instructions in the relevant message or by contacting us. We will continue to send non-promotional communications that are necessary for orders, your account, a transaction or customer service.
For UK residents, electronic marketing is sent only with consent or where otherwise permitted by applicable law. You may object to direct marketing at any time.
6. Cookies and Similar Technologies
We use cookies, pixels and similar technologies to operate the website, remember your shopping basket and preferences, understand website use, measure advertising and, where permitted, deliver more relevant advertising. These technologies may be set by us or by Shopify and other providers, including Meta.
Strictly necessary technologies are needed for core functions such as security, checkout and the shopping basket. Other technologies, including advertising and analytics technologies, may be optional. Where law requires consent before we place or read non-essential cookies, pixels or similar technologies on your device, we will request that consent and give you a way to withdraw it through our cookie-preference tool.
You can also control many cookies through your browser settings. Blocking some cookies may affect the availability or functionality of parts of the Services. For more information about Meta’s advertising controls, see Meta’s advertising-preferences information.
7. Retention and Security
We retain personal data only for as long as necessary for the purposes described in this policy, including to provide the Services, comply with legal, tax, accounting and record-keeping obligations, resolve disputes, enforce our agreements, and protect our legal rights. The appropriate retention period depends on the nature of the data, the purpose of processing and applicable legal requirements.
We use reasonable organisational, technical and administrative measures designed to protect personal data against unauthorised or accidental access, processing, loss, disclosure, alteration or destruction. However, no system or transmission method is completely secure. Please protect your account credentials and do not send sensitive payment information to us through unsecured channels.
8. Your Privacy Rights
Subject to applicable law and verification of your identity, you may have the right to request access to and correction of personal data that we hold about you. You may also have rights to withdraw consent, object to or restrict certain processing, ask us to delete personal data, request a portable copy of data, or complain to a data-protection authority.
For Hong Kong residents, you may request access to or correction of your personal data under the Personal Data (Privacy) Ordinance. For UK residents, the additional rights available under the UK GDPR may include access, rectification, erasure, restriction, objection, portability and withdrawal of consent. Withdrawal of consent does not affect processing carried out before its withdrawal.
To exercise a right, contact us using the details in section 10. We may ask for information needed to verify your identity and may decline or limit a request where applicable law permits. We will not discriminate against you for exercising a privacy right.
If you are dissatisfied with how we handle your personal data, please contact us first so we can attempt to resolve the issue. You may also complain to the Office of the Privacy Commissioner for Personal Data in Hong Kong, or, where applicable, the UK Information Commissioner’s Office or another competent authority.
9. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our practices, services, technology, legal obligations or other operational reasons. We will post the revised policy on this website, update its effective date and provide any additional notice required by applicable law.
10. Contact Us
For privacy questions, requests or complaints, please contact:
KNT LIMITED
30/F EW International Tower
30/F EW International Tower
120 Texaco Road
Tsuen Wan, New Territories
Hong Kong SAR