Welcome to GemstoneSafe. We are committed to protecting your personal data and privacy. This Privacy Policy explains how we collect, use, and manage your information in compliance with Hong Kong's Personal Data (Privacy) Ordinance (PDPO) and, where applicable, international data protection laws. By using our website and services, you agree to the collection and use of your personal data as described in this policy.
1. Introduction
This policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by GemstoneSafe.
2. Our Data Protection Principles
As a "data user" under the PDPO, we are required to comply with six Data Protection Principles (DPPs). This policy outlines how we adhere to each principle:
- Principle 1 (Collection): We collect your personal data lawfully and fairly for purposes directly related to our business functions.
- Principle 2 (Accuracy & Retention): We take all practicable steps to ensure your data is accurate and not kept longer than necessary.
- Principle 3 (Use): We use your data only for the purposes for which it was collected or for a directly related purpose, unless we obtain your explicit consent for a new use.
- Principle 4 (Security): We take all practicable steps to protect your data from unauthorized access, processing, or loss.
- Principle 5 (Openness): We are transparent about our privacy practices and the types of data we hold.
- Principle 6 (Access & Correction): We provide you with the right to access and correct your personal data.
3. Data We Collect and Why
We collect personal data to operate our business and provide you with our services. The types of data we collect and our purposes are:
-
Personal Information: This includes your name, address, email address, and payment information. We collect this to:
- Process Orders: To fulfill our contract with you, including processing your payment and shipping your order.
- Customer Communication: To respond to your inquiries, provide customer support, and send you important updates about your orders.
-
Browsing and Technical Data: This includes your IP address, browser type, pages visited, and other browsing information. We collect this to:
- Improve Our Service: To analyze website traffic and understand how our services are used, which helps us enhance the user experience.
- Ensure Security: To protect our website and prevent fraudulent activities.
4. Use of Data for Direct Marketing
We may use your personal information (such as your name and contact details) for direct marketing purposes, including sending you promotions and updates about our products. We will only do this with your explicit, opt-in consent.
You have the right to opt out of receiving direct marketing at any time. If you no longer wish to receive these communications, you can unsubscribe by following the instructions in our emails or by contacting us directly.
6. Data Security and Retention
- Security Measures: We implement industry-standard technical and organizational measures to protect your personal data from unauthorized or accidental access, processing, erasure, or loss.
- Data Retention: We will not retain your personal data for a period longer than is necessary to fulfill the purposes for which it was collected. We take all practicable steps to erase or anonymize data once it is no longer required.
7. Your Rights
Under the PDPO, you have the right to:
- Request Access: You can request a copy of the personal data we hold about you. We will provide this information within 40 days of your request.
- Request Correction: You can ask us to correct any inaccurate personal data we hold about you.
To exercise these rights, please contact us using the details below. We may charge a fee to cover the costs of fulfilling your data access request.
Contact Information
If you have any questions or concerns about this Privacy Policy or wish to exercise your rights, please contact our Data Protection Officer at:
9. Updates to this Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.