At Emberhaus, we want you to feel confident about how your personal data is handled. This Privacy Policy explains what we collect, why, how we use and protect it, and the choices you have. We handle personal data in accordance with the Hong Kong Personal Data (Privacy) Ordinance (Cap. 486) and, where they apply to you, other data-protection laws.
1Introduction
This policy applies to personal data we collect through our website, when you place an order, sign up to our newsletter, contact us, or otherwise interact with Emberhaus. Please read it alongside our Terms & Conditions.
2Who is responsible for your data
The data controller is Emberhaus Limited, a company incorporated in the Hong Kong Special Administrative Region. If you have any questions about this policy or how we use your data, contact us at emberhaus@gmail.com.
3Information we collect
Information you give us, such as your name, email address, shipping and billing address, phone number, order details and any messages you send us. Payment-card details are entered directly with our payment processor and are not stored on our servers.
Information we collect automatically, when you visit the Site we may collect your device and browser type, IP address, pages viewed, referring URLs, and similar analytics data through cookies and comparable technologies.
Information from third parties, we may receive limited information from our payment processors (for example, confirmation that a payment succeeded), shipping carriers (delivery status), and analytics or advertising partners.
4How we use your data
- To process and deliver your orders, take payment, and provide order updates and customer support.
- To manage your account and remember the contents of your bag.
- To send you marketing communications where you have opted in, and to let you know about products, offers and news (you can opt out at any time).
- To operate, secure, personalise and improve the Site, and to understand how it is used.
- To detect and prevent fraud, and to comply with our legal and regulatory obligations.
We rely on the appropriate legal bases for these uses, performing our contract with you, your consent (for optional marketing and non-essential cookies), our legitimate business interests, and compliance with the law.
5Cookies & tracking
We use cookies and similar technologies to keep the Site working (for example, to remember your bag), to measure traffic, and, with your consent where required, for marketing. You can manage or disable cookies through your browser settings, though some features may not work properly without them.
6How we share your data
We do not sell your personal data. We share it only with trusted parties who help us run our business, and only as needed, including:
- Payment processors to take and secure payments;
- Shipping and fulfilment partners to pack and deliver your orders;
- Email and marketing tools to send transactional and (where opted in) marketing messages;
- Analytics and hosting providers to operate and improve the Site;
- Professional advisers and authorities where required by law, or to protect our rights, safety and property.
7International transfers
Because we are based in Hong Kong and use service providers in different countries, your personal data may be transferred to and processed outside your country of residence. Where we do this, we take reasonable steps to ensure your data receives an appropriate level of protection.
8How long we keep your data
We keep personal data only for as long as necessary for the purposes described in this policy, for example, to fulfil your order, to meet accounting and tax obligations, and to resolve disputes. When data is no longer needed, we securely delete or anonymise it.
9Security
We use reasonable technical and organisational measures to protect your personal data against loss, misuse and unauthorised access, including encryption of data in transit and access controls. No method of transmission or storage is completely secure, but we work to protect your information and to respond promptly to any incident.
10Your rights
Under the Personal Data (Privacy) Ordinance, and other laws that may apply to you, you have the right to:
- Ask whether we hold personal data about you and request a copy of it;
- Request that we correct data that is inaccurate;
- Withdraw consent to marketing at any time;
- Request that we delete or restrict use of your data, where applicable.
To exercise any of these rights, email emberhaus@gmail.com. We may need to verify your identity before responding, and we will reply within the timeframe required by law.
11Marketing choices
If you have opted in to our newsletter, you can unsubscribe at any time using the link in any marketing email, or by contacting us. Opting out of marketing does not stop essential service messages such as order and shipping confirmations.
12Children’s privacy
The Site is intended for adults. We do not knowingly collect personal data from children under 18. If you believe a child has provided us with personal data, please contact us and we will delete it.
13Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date shows when the current version took effect. Where changes are significant, we will take reasonable steps to notify you.
14Contact us
For any privacy question or request, contact Emberhaus Limited at emberhaus@gmail.com. If you are not satisfied with our response, you may lodge a complaint with the Office of the Privacy Commissioner for Personal Data, Hong Kong.