隱私政策
Privacy Policy
Last updated: 31 July 2026
1. Who We Are
This Privacy Policy explains how Parsea Atelier, trading under the brand Parséa Atelier (“Parsea,” “we,” “us,” or “our”), collects, holds, processes, uses and discloses personal data in connection with our website, online store, customer accounts, appointments, enquiries, orders, bespoke services, marketing and related activities.
For the purposes of the Hong Kong Personal Data (Privacy) Ordinance (Cap. 486) (“PDPO”), Parsea Atelier is the data user responsible for the personal data described in this Policy.
Our public business location is 20 Queen’s Road Central, Central, Hong Kong. Privacy questions and requests may be sent to parsea.atelier@gmail.com.
2. Scope
This Policy applies when you visit or interact with our website, create or use a customer account, book an appointment, submit an enquiry, place an order, request bespoke or after-sales services, subscribe to marketing, communicate with us, or otherwise provide personal data to us.
It does not govern an independent third party’s website, service or privacy practice, even where our website links to that third party. A service provider acting only on our instructions may process personal data on our behalf under appropriate arrangements.
3. Meaning of Personal Data
In this Policy, “personal data” means information relating directly or indirectly to a living individual from which the identity of that individual can practicably be ascertained and which is in a form capable of practical access or processing. It may include information you provide directly and information generated through your transactions or use of our services.
4. Personal Data We May Collect
The data collected depends on how you interact with us and may include the following categories.
|
Category
|
Examples
|
|
Identity and contact data
|
Name, email address, phone number, billing address, delivery address, country or region, preferred contact method and account identifier
|
|
Order and transaction data
|
Products, selected options, order value, currency, payment status, refunds, delivery status, invoices, order communications and transaction identifiers
|
|
Payment-related data
|
Payment method, billing details and limited payment metadata received from a payment provider; we do not ordinarily receive or store complete payment-card numbers
|
|
Jewellery and bespoke-service data
|
Ring or bracelet measurements, sizing information, metal and stone preferences, engraving text, dates, design requests, approved drawings, reference images, appointment notes and alteration or repair history
|
|
Account and preference data
|
Login-related identifiers, saved addresses, wish-list or cart activity where available, language, region, communication preferences and marketing consent status
|
|
Communications and support data
|
Emails, messages, enquiry forms, appointment requests, complaint details, photographs provided to support a product concern, and records of our response
|
|
Technical and usage data
|
Internet Protocol address, browser and device type, operating system, time zone, pages and products viewed, referring page, search and navigation activity, cookie identifiers and security logs
|
|
Fraud and compliance data
|
Order-risk indicators, verification results, payment or account anomalies, sanctions or legal-compliance checks where appropriate, and records needed to prevent misuse or defend legal claims
|
|
Public or social-interaction data
|
Information you make public when interacting with our social-media account or content that you ask or authorise us to use
|
Please do not send unnecessary identity documents, financial records or other sensitive information through ordinary email. If additional verification is genuinely required, we will explain why and provide an appropriate method.
5. How We Collect Personal Data
We may collect personal data:
1.directly from you when you submit a form, order, account registration, appointment request, measurement, design instruction, complaint, review or message;
2.automatically from your browser or device through cookies, logs and similar technologies;
3.from Shopify and service providers supporting checkout, payment, fraud prevention, delivery, communications, hosting, security or analytics;
4.from a person acting for you, such as a gift purchaser, authorised representative or recipient, where they confirm that they are entitled to provide the information; and
5.from public sources or social platforms where you interact publicly with us or ask us to use the information.
If you provide another person’s personal data, you should tell them about this Policy and have authority or another lawful basis to provide it.
6. Whether Providing Data Is Required
Unless a field is marked optional or the context makes it optional, identity, contact, delivery and transaction information requested during checkout is required to process and fulfil an order. Information requested for a bespoke piece may be required to prepare an accurate quotation, design or product.
Providing marketing consent is always optional. Refusing optional marketing consent will not prevent you from purchasing or receiving requested services.
If required information is not provided, we may be unable to create an account, process payment, accept or fulfil an order, arrange delivery, provide a bespoke service, investigate a concern or comply with a legal obligation.
7. Purposes for Which We Use Personal Data
We may use personal data to:
•operate, maintain, secure and improve the website and online store;
•create and administer customer accounts;
•respond to enquiries and arrange appointments;
•prepare quotations, designs, measurements, custom specifications and production instructions;
•assess, accept, produce, fulfil, deliver, collect, repair, alter, cancel or refund orders;
•process payments and reconcile transactions through authorised payment providers;
•communicate order, production, delivery, account, security and policy information;
•provide customer support and investigate complaints, product concerns or disputes;
•prevent, detect and investigate fraud, unauthorised transactions, security incidents and misuse;
•understand store performance, customer journeys and product interest through proportionate analytics;
•maintain records, accounts and evidence of transactions;
•establish, exercise or defend legal rights and comply with law, court orders and lawful requests;
•protect customers, staff, service providers, our business and the public; and
•send optional marketing communications in accordance with your choices and applicable law.
We will not use personal data for a new purpose unrelated to the original collection purpose without obtaining express and voluntary consent where the PDPO requires it.
8. Direct Marketing
If you opt in, we may use your name, email address, phone number, purchase history, jewellery preferences, appointment interests and marketing preference to send information about Parsea Atelier jewellery, new collections, appointments, events, editorial content, services and offers.
We will not use your personal data for direct marketing unless we have provided the information required by applicable law and obtained your consent or indication of no objection. Silence is not treated as consent.
You may withdraw marketing consent at any time, free of charge, by using the unsubscribe method in the message or emailing parsea.atelier@gmail.com. Withdrawal does not affect transactional or service messages that are necessary for an order, appointment, account, security matter or legal notice.
We do not provide personal data to another person for that person’s own direct marketing in return for money or another benefit unless we first make the disclosures and obtain the consent required by law.
9. Cookies and Similar Technologies
Cookies and similar technologies help the store function, remember selections, secure accounts and checkout, understand performance and, if enabled, measure marketing.
|
Type
|
Purpose
|
|
Strictly necessary
|
Shopping cart, checkout, authentication, security, fraud prevention, network management, country or currency selection and privacy preferences
|
|
Functional
|
Remembering choices and improving customer experience
|
|
Analytics
|
Understanding aggregated store usage, page performance, navigation and product interest
|
|
Advertising
|
Measuring or personalising advertising where a separately identified advertising tool is enabled and appropriate consent or choice is provided
|
At the Last Updated date, we rely on Shopify’s platform technologies, necessary storefront and checkout cookies, and Shopify-associated store analytics. We have not identified a separately installed Google Analytics, Meta/Facebook Pixel, TikTok Pixel, Klaviyo, Hotjar, Pinterest or Snapchat tracker in the active storefront theme. If we enable additional analytics or advertising tools, we will update this Policy and applicable privacy choices before relying on those tools.
Browser settings may allow you to block or delete cookies. Blocking necessary cookies can prevent cart, login, checkout or other store functions from working correctly. Where Shopify’s customer-privacy tools display a cookie banner or preference centre, you can use it to manage non-essential categories available in your region.
10. Shopify and Service Providers
Our store is hosted by Shopify. Shopify processes personal data to provide storefront, account, checkout, payment, security, fraud-prevention, analytics and related platform services. More information is available in Shopify’s privacy materials at https://www.shopify.com/legal/privacy.
We may disclose relevant personal data to the following classes of recipients where necessary for the purposes described in this Policy:
•Shopify and platform infrastructure providers;
•payment processors, digital-wallet providers, banks and fraud-prevention providers made available at checkout;
•couriers, logistics providers, collection points, customs brokers and public authorities involved in delivery;
•carefully selected production, jewellery, stone-sourcing, engraving, repair or quality-control providers where needed for an order;
•email, messaging, appointment, customer-support and cloud-storage providers;
•security, technical-support and analytics providers;
•professional advisers, auditors, insurers and dispute-resolution providers;
•regulators, courts, law-enforcement agencies or other persons where disclosure is required or authorised by law; and
•a genuine purchaser, investor or successor in connection with a proposed or completed business reorganisation, provided appropriate confidentiality and data-protection measures apply.
We disclose only the information reasonably required for the relevant service or lawful purpose. Service providers are not authorised by us to use personal data for unrelated purposes.
11. International Processing and Transfers
Shopify and other service providers may store or process personal data outside Hong Kong, including in jurisdictions with different data-protection laws. International orders also require information to be transferred to delivery and customs participants in the destination or transit country.
Where we arrange an international transfer or use an overseas processor, we take reasonably practicable steps appropriate to the circumstances, such as using reputable providers, contractual protections, access controls and purpose limitations. Overseas authorities may have lawful access to data under their local laws.
12. Data Retention
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected and for legitimate legal, accounting, tax, fraud-prevention, warranty, dispute, security and contract-administration needs.
Retention periods vary by record type. Order, payment, production, approval and delivery records may be retained for the period needed to fulfil the order and address legal or accounting requirements. Marketing records are retained until consent is withdrawn or the information is no longer needed, subject to keeping a minimal suppression record so that an opt-out is respected.
When personal data is no longer required, we take reasonably practicable steps to delete, anonymise or securely dispose of it, unless retention is required or permitted by law or reasonably necessary to establish, exercise or defend legal rights.
13. Data Accuracy
Please provide accurate information and notify us when contact, delivery, measurement or account information changes. You can update certain account information directly where the feature is available or contact us for assistance.
We take reasonably practicable steps to ensure personal data used for a decision or service is accurate, having regard to the purpose and potential consequences of inaccuracy.
14. Data Security
We use reasonably practicable administrative, technical and organisational safeguards appropriate to the nature of the data and foreseeable harm. Measures may include access restrictions, authentication, secure platform services, encryption in transit where supported, confidentiality duties, software maintenance, fraud controls, service-provider assessment and incident response.
No Internet transmission or storage system is completely secure. You should use a unique password, protect your account and devices, and contact us promptly if you suspect unauthorised access.
If a personal-data incident occurs, we will investigate and take proportionate containment, remediation, notification and prevention steps having regard to the circumstances and applicable law.
15. Access and Correction Rights
Subject to the PDPO and applicable exceptions, you may request confirmation of whether we hold your personal data, access to a copy of that data, and correction of inaccurate data.
Send a request to parsea.atelier@gmail.com with the subject “Personal Data Request.” Please describe the data and request clearly. We may take reasonable steps to verify identity and authority before responding. Where permitted, a reasonable fee may apply to a data-access request; we will explain any fee in advance.
We will respond within the timeframe required by applicable law. If a request is refused or limited, we will provide the reason where required and maintain any record required by law.
You may also request deletion or restriction. We will assess such requests under applicable law and may retain information required for transactions, accounting, fraud prevention, disputes, security or legal obligations.
16. Overseas Privacy Rights
Customers in some jurisdictions may have additional mandatory rights, such as rights to receive information, object to certain processing, withdraw consent, request deletion or portability, or complain to a local authority. Where those laws apply to us, we will honour the applicable rights and will not contract out of them through this Policy.
Because overseas privacy obligations depend on where and how a business targets or serves customers, this Policy does not represent that every overseas privacy regime applies to every interaction.
17. Children
Our products and services are not directed to children. A person who does not have legal capacity to enter into a purchase should use the store only with the involvement and authorisation of a parent or legal guardian.
We do not knowingly seek to collect personal data from children for marketing. If you believe a child provided personal data without appropriate involvement, contact us so that we can assess and address the matter.
18. Third-Party Links and Social Platforms
Our website may link to social networks, payment providers, maps or other independent services. Their collection and use of personal data are governed by their own privacy notices. Interacting with our social-media account may also provide information to the platform under its terms.
19. Changes to This Policy
We may update this Policy to reflect changes in law, technology, service providers or business practices. The revised version will be posted with an updated date. Where appropriate, we will provide additional notice of a material change and obtain consent if required for a new use.
20. Questions and Complaints
Please contact us first so that we can investigate and respond:
If you believe your personal data has been handled in breach of the PDPO and are not satisfied with our response, you may contact the Office of the Privacy Commissioner for Personal Data, Hong Kong. Information about complaints is available at https://www.pcpd.org.hk/.