Privacy policy

Personal information means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymised data).

The personal information we may collect and store about you includes, but is not limited to:

• Name and surname
• Email address
• Contact phone number(s)
• Billing and delivery address
• Payment card details (processed securely by our payment providers — we do not store full card numbers)
• Transaction data including purchase information and payment confirmation
• Account information including your username, password and security information
• Technical data including IP address, browser type, time zone setting, device information and operating system
• Website usage data including pages viewed, products browsed, referring websites and search terms
• Information about how you interact with our emails and advertisements
• Customer support communications and any information you choose to include when contacting us
• Information from cookies and similar technologies — please see Section 6 (Cookies) below

We may also use and share aggregated data, which may be derived from your personal information but is anonymised so that it cannot identify you. This is not treated as personal information under applicable law.

We do not collect any special categories of personal data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, health data, or genetic and biometric data). Nor do we collect any information about criminal convictions and offences.

We collect information using the following methods:

Direct interactions. You may give us your personal information by filling in forms on the Site or by corresponding with us by email or otherwise. This includes information you provide when you:

• Create an account on our Site
• Place an order or make a purchase
• Subscribe to our marketing communications
• Contact our customer support team
• Enter a competition, promotion or survey

Automated technologies and interactions. As you interact with our Site, we automatically collect technical information about your equipment, browsing actions and patterns. We collect this using cookies, server logs, pixels, web beacons and similar technologies. For more details, see Section 6 (Cookies) below.

Third parties and publicly available sources. We may receive information about you from:

• Analytics providers (such as Google Analytics, based outside the UK and Hong Kong)
• Advertising networks (such as Meta, based outside the UK and Hong Kong)
• Payment and delivery service providers (such as PayPal and Shopify Payments)
• Our e-commerce platform provider, Shopify Inc.

Under UK and European data protection law, we must have a lawful basis for processing your personal information. We rely on the following legal bases:

1. Contractual obligations. We need to process your personal information to fulfil an order when you purchase our products, to deliver those products and to handle payments, returns and exchanges.
2. Legitimate interest. We may use your information to help us run and improve our business — for example, to personalise the services we provide, to understand how customers use our Site, to keep our Site secure and to protect against fraud. We will only use your information in these instances where doing so does not materially impact your rights, freedom or interests.
3. Consent. Where you have given us clear consent to process your personal information for a specific purpose — for example, when you subscribe to our marketing emails. You may withdraw your consent at any time by clicking the "Unsubscribe" link in our emails or by contacting us.
4. Legal compliance. In some circumstances, we may be legally required to collect and process your information — for example, to retain transaction records for tax purposes or to respond to a lawful request from authorities.

We use your personal information for the following purposes:

• Providing products and services. Processing your payments, fulfilling your orders, arranging shipping, managing returns and exchanges, creating and maintaining your account, and sending order-related notifications.
• Marketing and advertising. Sending you information about our products, promotions and offers by email (with your consent where required). Showing you relevant advertisements for our products on other websites and platforms.
• Security and fraud prevention. Detecting, investigating and taking action regarding possible fraudulent, illegal or malicious activity. Screening orders for potential risk.
• Customer support and service improvement. Responding to your enquiries and improving our Site and services based on how customers use them.

We share your personal information with the following categories of third parties:

• Service providers. Companies who provide IT, payment processing, logistics, shipping, data analytics, customer support and cloud storage services on our behalf — including Shopify Inc., which powers our online store.
• Professional advisers. Including lawyers, accountants, auditors and insurers where necessary.
• Regulators and authorities. HM Revenue & Customs, law enforcement bodies, regulators and other authorities where required by law.
• Marketing agencies. Advertising networks and marketing service providers who help us deliver relevant advertisements.

We require all third parties to respect the security of your personal information and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal information for their own purposes and only permit them to process it for specified purposes in accordance with our instructions.

We do not sell your personal information as that term is commonly understood. However, as described above, we do share certain information with advertising partners for targeted advertising purposes, which may be considered "sharing" or "selling" under certain US state privacy laws. The categories of information shared for these purposes include: identifiers (such as name and email address), commercial information (such as purchase records), and internet or network activity (such as browsing behaviour).

Like most websites, we use cookies and similar technologies (pixels, web beacons, tags). Cookies are small data files placed on your device or computer that often include an anonymous unique identifier. For more information about cookies, visit www.allaboutcookies.org.

We use cookies to:

• Power and operate our Site (essential cookies)
• Remember your actions and preferences (functional cookies)
• Run analytics and understand how visitors interact with our Site (analytics cookies)
• Deliver relevant advertising on our Site and other websites (advertising cookies)

Most browsers automatically accept cookies by default, but you can choose to remove or reject cookies through your browser settings. Please note that disabling cookies may affect the functionality of our Site.

Our Site recognises the Global Privacy Control (GPC) signal, which allows you to opt out of certain uses or disclosures of your information. For more information, visit globalprivacycontrol.org.

As described above, we use your personal information to provide you with targeted advertisements we believe may be of interest to you. For more information about how targeted advertising works, you can visit the Network Advertising Initiative's educational page at networkadvertising.org.

You can opt out of targeted advertising from specific platforms using the links below:

• Facebook: facebook.com/settings/?tab=ads
• Google: google.com/settings/ads/anonymous
• Bing: advertise.bingads.microsoft.com

Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance's opt-out portal at: optout.aboutads.info.

Our Site may contain links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share information about you. We do not control these third-party websites and are not responsible for their privacy statements. We recommend that you read the privacy policy of every website you visit.

Our Site is not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If you are under the age of 16, you must inform a parent or guardian about our Privacy Policy and obtain their agreement before using our Site, including registering an account or placing an order.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us using the details below and we will take steps to delete it.

We are based in Hong Kong and our Site is hosted by Shopify Inc. in Canada and the United States. This means your personal information may be transferred to, stored and processed in countries outside your country of residence, including Hong Kong, Canada, the United States, and other countries where our service providers operate.

Where we transfer personal information outside the UK or European Economic Area, we will ensure it receives a similar degree of protection by relying on recognised transfer mechanisms such as the European Commission's Standard Contractual Clauses, the UK International Data Transfer Agreement, or the equivalent instruments issued by the relevant competent authority, unless the transfer is to a country that has been determined to provide an adequate level of protection.

We will keep your personal information for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting or reporting requirements. When you place an order through the Site, we will maintain your order information for our records unless and until you ask us to delete that information.

To determine the appropriate retention period, we consider the amount, nature and sensitivity of the information, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process it, and whether those purposes can be achieved through other means.

We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal information to those employees, agents, contractors and other third parties who have a business need to know.

We use Secure Socket Layer (SSL) technology to encrypt information during transmission. However, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security of your information.

We have procedures in place to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

Depending on where you live, you may have some or all of the following rights in relation to your personal information:

• Right to access. You may request a copy of the personal information we hold about you, including details of how we use it and who we share it with.
• Right to rectification. You may request that we correct any inaccurate or incomplete personal information we hold about you.
• Right to erasure. You may request that we delete your personal information in certain circumstances — for example, where it is no longer necessary for the purpose for which it was collected, or where you have withdrawn your consent.
• Right to restrict processing. You may ask us to suspend the processing of your personal information in certain circumstances — for example, while we verify its accuracy.
• Right to data portability. You may request a copy of your personal information in a structured, commonly used and machine-readable format, and to have it transferred to another controller.
• Right to object. You may object to processing of your personal information where we are relying on legitimate interest as the lawful basis, or for direct marketing purposes.
• Right to withdraw consent. Where we rely on consent as the legal basis for processing, you may withdraw that consent at any time.

These rights are not absolute and may only apply in certain circumstances. We may need to verify your identity before responding to your request. We will respond to your request as required by applicable law.

To exercise any of these rights, please contact us at goldenmaplewatch@gmail.com.

If you have any complaints about how we process your personal information, please contact us first and we will do our best to resolve your concerns. If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority:

• UK residents: The Information Commissioner's Office (ICO) — ico.org.uk/make-a-complaint
• EU residents: The data protection authority in your country of residence
• Hong Kong residents: The Office of the Privacy Commissioner for Personal Data — pcpd.org.hk

We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal or regulatory reasons. We will post the revised Privacy Policy on this page and update the "Last updated" date at the top. Where changes are material, we will take additional steps to notify you as required by applicable law.

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us:

Email: goldenmaplewatch@gmail.com

We are the data controller responsible for your personal information. We are registered in Hong Kong under Business Registration No. 79755193-000-02-26-3. Our registered office is at:

KAM FORD ECOMMERCE LIMITED
Flat 2206, 22/F., Block 2, Metroplaza
No. 223 Hing Fong Road
Kwai Chung, Hong Kong

Thank you for visiting GOLDEN MAPLE.