私隱政策

PRIVACY POLICY

(Personal Information Collection Statement & Data Protection Notice)

 

夢季 YUME.MONSOON （「本店」、「我們」；商業登記號碼：41329114-000-03-26-6），註冊地址為香港新界葵涌葵昌路18–24號美順工業大廈A座1樓6室。本店網站為 yumemonsoon.com（「本網站」）。

夢季 YUME.MONSOON (“we”, “us”, “our”, or the “Store”; Business Registration No. 41329114-000-03-26-6), whose registered address is Flat/Room 6, 1/F, Block A, Mai Shun Industrial Building, No. 18–24 Kwai Cheong Road, Kwai Chung, N.T., Hong Kong. The Store's website is yumemonsoon.com (the “Website”).

我們重視顧客的個人資料私隱，並致力遵守香港《個人資料（私隱）條例》（第486章）（「PDPO」）之規定。本私隱政策連同本網站頁尾所示之個人資料收集聲明（PICS），說明我們如何收集、使用、儲存及保障閣下之個人資料，以及閣下就其個人資料所享有之權利。

We are committed to protecting the privacy of our customers' personal data in accordance with the Personal Data (Privacy) Ordinance (Cap. 486) of the Laws of Hong Kong (the “PDPO”). This Privacy Policy, together with the Personal Information Collection Statement (“PICS”) referenced in the footer of the Website, explains how we collect, use, store and safeguard your personal data, and the rights you have in respect of it.

視乎閣下與本店之互動情況（包括瀏覽本網站、訂閱電子報、落單購物或聯絡客戶服務），我們可能收集以下類別之個人資料：

Depending on how you interact with the Store (including browsing the Website, subscribing to our newsletter, placing an order, or contacting customer service), we may collect the following categories of personal data:

•     身份及聯絡資料：姓名、電郵地址、電話號碼、送貨及帳單地址；

•     Identity and contact data: name, email address, phone number, delivery and billing address;

•     交易資料：訂單內容、購買紀錄、付款方式（信用卡末四位數字及付款狀態，惟完整卡號由第三方付款服務商處理，本店不會直接收集或儲存）；

•     Transaction data: order details, purchase history, payment method (last four digits of the card and payment status only — full card numbers are processed by our third-party payment provider and are not collected or stored by us directly);

•     帳戶資料：如閣下建立本店帳戶，包括登入資料及密碼（以加密方式儲存）；

•     Account data: if you create an account with the Store, including login credentials and password (stored in encrypted form);

•     市場推廣偏好：閣下訂閱電郵推廣（例如「獲取額外七折優惠碼」）時所提供之電郵地址及選擇；

•     Marketing preferences: the email address and preferences you provide when subscribing to promotional emails (e.g. the “extra 30% off code” subscription);

•     技術及使用資料：IP位址、瀏覽器類型、裝置資料、瀏覽紀錄及Cookie資料（詳見我們的Cookie政策）；

•     Technical and usage data: IP address, browser type, device information, browsing activity, and cookie data (see our Cookie Policy for details);

•     通訊紀錄：閣下透過電郵、社交媒體或客戶服務渠道與我們之通訊內容。

•     Communications: correspondence you have with us via email, social media, or customer service channels.

根據PDPO第1保障資料原則，我們僅為與本店業務直接有關之下列目的收集及使用閣下之個人資料：

In accordance with Data Protection Principle 1 under the PDPO, we collect and use your personal data only for the following purposes directly related to our business:

1.      處理及履行閣下之訂單，包括付款處理、出貨、送貨及售後服務（例如退換貨）；

2.      Processing and fulfilling your orders, including payment processing, order preparation, delivery, and after-sales service (e.g. returns and exchanges);

3.      建立及管理閣下之本店帳戶；

4.      Creating and managing your Store account;

5.      回應閣下之查詢、投訴及客戶服務要求；

6.      Responding to your enquiries, complaints, and customer service requests;

7.      在閣下已表示不反對的情況下，向閣下發送直接市場推廣訊息（見下文第四部分）；

8.      Sending you direct marketing communications, where you have indicated no objection to this (see Part 4 below);

9.      偵測及防止欺詐、濫用優惠碼或其他違反本店條款及細則之行為；

10.  Detecting and preventing fraud, discount code abuse, or other conduct in breach of our Terms & Conditions;

11.   遵守本店在香港法例下之法定義務（包括稅務及商業登記紀錄保存規定）；及

12.  Complying with our statutory obligations under Hong Kong law (including tax and business registration record-keeping requirements); and

13.  改善本網站之功能及用戶體驗（透過經匯總及/或去識別化之數據分析）。

14.  Improving the functionality and user experience of the Website (through aggregated and/or de-identified data analytics).

提供上述第(一)至(三)項所需之個人資料屬強制性質；如閣下未能提供有關資料，我們可能無法處理閣下之訂單或查詢。提供市場推廣相關資料則純屬自願性質。

The provision of personal data for purposes (1) to (3) above is mandatory; if you do not provide the required data, we may be unable to process your order or enquiry. The provision of data for marketing purposes is entirely voluntary.

根據PDPO第35C條，我們在使用閣下之個人資料（姓名及電郵地址）作直接市場推廣（例如電郵推廣及優惠碼通知）用途前，將先行告知閣下有關意圖，並提供免費之表示不反對渠道（例如訂閱時之剔選方格）。

In accordance with section 35C of the PDPO, before using your personal data (name and email address) for direct marketing purposes (such as promotional emails and discount code notifications), we will inform you of our intention to do so and provide a free-of-charge channel for you to indicate your consent or objection (such as an opt-in checkbox at the point of subscription).

我們不會在未經閣下書面同意下，將閣下之個人資料提供予第三方作其直接市場推廣用途。

We will not provide your personal data to any third party for that third party's own direct marketing purposes without your prior written consent.

 

我們可能因業務營運需要，將閣下之個人資料轉交下列各類人士處理，惟僅限於履行相關服務所必需之範圍：

We may, where necessary for our business operations, transfer your personal data to the following classes of persons, strictly limited to what is necessary to perform the relevant service:

•     付款服務商：Airwallex（及/或本店不時採用之其他持牌付款服務商），以處理閣下之付款交易；

•     Payment service providers: Airwallex (and/or such other licensed payment service providers as we may adopt from time to time), to process your payment transactions;

•     物流及速遞服務商：順豐速遞，以安排貨品送遞；

•     Logistics and courier service providers:  SF Express, to arrange delivery of goods;

•     電子商貿平台服務商：Shopify Inc.（本網站之建站及後台系統供應商），以維持本網站之運作及交易處理功能；

•     E-commerce platform providers: Shopify Inc. (the platform provider hosting the Website and back-office systems), to maintain the operation and transaction-processing functions of the Website;

•     專業顧問：我們之會計師、核數師及執業律師，惟僅限於彼等提供專業服務所需之範圍；及

•     Professional advisers: our accountants, auditors, and solicitors, but only to the extent necessary for them to provide their professional services; and

•     政府部門或執法機關：如法例規定或有關機關依法要求，我們將予以配合。

•     Government departments or law enforcement agencies: where required by law or lawfully requested by such authorities, we will provide cooperation.

上述部分服務商可能位於香港以外地區（例如美國、新加坡等），惟我們將採取合理步驟，確保有關資料轉移符合PDPO之保障水平規定。除上述情況外，我們不會將閣下之個人資料出售予任何第三方。

Some of the above service providers may be located outside Hong Kong (for example, in the United States or Singapore), but we will take reasonable steps to ensure that any such data transfer meets the standard of protection required under the PDPO. Other than as set out above, we will not sell your personal data to any third party.

我們僅在達致收集個人資料之目的所需之期間內保留閣下之個人資料，其後將採取合理步驟刪除或使其匿名化，惟因會計、稅務或其他法例所要求之保留期限除外（一般為交易完結後7年，以符合香港稅務條例之紀錄保存規定）。

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, after which we will take reasonable steps to erase or anonymise it, save where a longer retention period is required for accounting, tax, or other legal purposes (generally 7 years following completion of the transaction, to comply with record-keeping requirements under the Inland Revenue Ordinance).

我們已採取合理可行之技術及組織措施（包括加密傳輸、有限度員工存取權限及定期保安檢視），以保障閣下之個人資料免受未經授權之查閱、更改、披露或損毀。惟須注意，並無任何互聯網傳輸方式或電子儲存方法能保證百分百安全。

We have implemented reasonably practicable technical and organisational measures (including encrypted transmission, restricted employee access, and periodic security reviews) to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet or method of electronic storage can be guaranteed to be 100% secure.

如發生可能對閣下構成實質影響之個人資料外洩事件，我們將按PCPD之相關指引評估通報需要，並在合理可行之情況下盡快通知受影響人士及香港個人資料私隱專員公署。

In the event of a personal data breach that is likely to result in material harm to affected individuals, we will assess the need for notification in accordance with the relevant guidance issued by the PCPD, and will, where reasonably practicable, notify affected individuals and the Office of the Privacy Commissioner for Personal Data as soon as possible.

本網站使用Cookie及類似技術以提升瀏覽體驗、記錄購物車內容及分析網站流量。有關詳情，請參閱我們獨立刊載之Cookie政策。

The Website uses cookies and similar technologies to enhance browsing experience, remember shopping cart contents, and analyse website traffic. For details, please refer to our separately published Cookie Policy.

根據PDPO，閣下就其個人資料享有以下權利：

Under the PDPO, you have the following rights in respect of your personal data:

•     查閱權：要求查閱我們就閣下所持有之個人資料，並獲告知該等資料之種類；

•     Right of access: to request access to the personal data we hold about you, and to be informed of the kinds of data held;

•     更正權：要求更正不準確之個人資料；

•     Right of correction: to request correction of any inaccurate personal data;

•     查悉政策及行事方式之權利：要求查悉我們有關個人資料之政策及行事方式，以及我們所持有之個人資料種類；及

•     Right to be informed of policies and practices: to be informed of our policies and practices in relation to personal data, and the kinds of personal data held by us; and

•     撤回同意權：就直接市場推廣或其他以同意為基礎之處理，隨時撤回同意（惟不影響撤回前已進行之處理的合法性）。

•     Right to withdraw consent: to withdraw consent at any time in respect of direct marketing or other consent-based processing (without affecting the lawfulness of processing carried out before such withdrawal).

如欲行使上述權利，請以書面方式聯絡我們之資料保障聯絡人（見下文第十一部分）。我們可能根據PDPO第28條就處理查閱資料要求收取合理費用，並將於收到要求後40天內回覆。

To exercise the above rights, please contact our Data Protection Contact in writing (see Part 11 below). We may charge a reasonable fee for handling a data access request in accordance with section 28 of the PDPO, and will respond within 40 days of receiving the request.

我們可能不時更新本私隱政策，以反映法例、業務營運或技術上之變化。經修訂之政策將於本網站刊登，並註明生效日期。我們建議閣下定期查閱本頁面。

We may update this Privacy Policy from time to time to reflect changes in law, our business operations, or technology. The revised policy will be posted on the Website with an updated effective date. We encourage you to review this page periodically.

如對本私隱政策或閣下之個人資料處理方式有任何疑問、要求或投訴，歡迎聯絡：

If you have any questions, requests, or complaints regarding this Privacy Policy or our handling of your personal data, please contact:

夢季 YUME.MONSOON

地址：香港新界葵涌葵昌路18–24號美順工業大廈A座1樓6室
Flat/Room 6, 1/F, Block A, Mai Shun Industrial Building, No. 18–24 Kwai Cheong Road, Kwai Chung, N.T., Hong Kong
電郵／Email：info@yumemonsoon.com