1. Types of Personal Data We Collect

We may collect the following types of personal data:

• Contact information (name, email address, phone number, company name)
• Business-related information (job title, company address, business inquiries)
• Communication data (messages, emails, or other correspondence you send us)
• Technical data (IP address, browser type, device information, pages visited — collected automatically via cookies or similar technologies, if applicable)

We do not intentionally collect sensitive personal data (e.g., HKID numbers, financial details beyond what is necessary for transactions, health data) unless strictly required for a specific purpose and with your explicit consent.

2. How We Collect Your Personal Data

We collect personal data directly from you when you:

• Send us an inquiry via email or contact form
• Request product information, samples, or quotations
• Enter into a business relationship or place an order
• Interact with our website (automatically via logs/cookies)

3. Purposes for Which We Use Your Personal Data

We use your personal data only for the following purposes (or purposes directly related to them):

• Responding to your inquiries and providing customer support
• Processing orders, quotations, sourcing requests, and business transactions
• Communicating with you about products, services, updates, or promotions (with your consent where required)
• Improving our website and services
• Complying with legal obligations, preventing fraud, or resolving disputes

We will not use your data for a new purpose without notifying you and obtaining your consent where required under the PDPO.

4. Disclosure of Personal Data

We may disclose your personal data to:

• Our suppliers, manufacturers, logistics partners, or agents necessary to fulfill your orders or inquiries
• Professional advisors (e.g., lawyers, accountants) when required
• Regulatory authorities or law enforcement if legally obligated

We do not sell your personal data to third parties for marketing purposes.

5. Data Security

We take reasonable steps to protect your personal data from unauthorized access, loss, misuse, or alteration, including administrative, technical, and physical safeguards. However, no method of transmission over the internet is 100% secure.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy or to meet legal, accounting, or reporting requirements. After that, we will securely delete or anonymize it.

7. Your Rights Under the PDPO

You have the right to:

• Request access to your personal data we hold
• Request correction of inaccurate or incomplete data
• Request us to cease using your data for direct marketing

To exercise these rights, please contact us using the details below. We may charge a reasonable fee for access requests (if any) and will respond within the time required by law.

8. Cookies and Similar Technologies

Our website may use cookies or similar technologies to improve user experience and analyze traffic. You can manage cookie preferences through your browser settings. For more details, see our [Cookies Policy — link if you create one separately].

9. International Transfers

As we operate internationally, your personal data may be transferred to and processed in countries outside Hong Kong. We ensure appropriate safeguards are in place for such transfers.

10. Changes to This Privacy Policy

We may update this policy from time to time. Changes will be posted on this page with an updated “Last updated” date.