Privacy Policy

Privacy Policy

Last updated: 3 November 2026

This policy explains what personal data we collect when you use jkxjkx.com, why we collect it, and what rights you have. We are the data controller for the information described here.

1. Who we are

[COMPANY LEGAL NAME], a company registered in Hong Kong SAR under company number [COMPANY REGISTRATION NUMBER], registered address [REGISTERED ADDRESS].

For any privacy question or request, contact us at [CONTACT EMAIL].

2. What we collect

Category Examples Source
Order and account data Name, email address, shipping and billing address, phone number, order contents and history Provided by you
Payment data Card brand, last four digits, payment status, billing country. We never receive or store your full card number — payments are processed by our payment provider. Payment provider
Technical data IP address, browser and device type, pages viewed, referring URL, approximate location derived from IP Collected automatically
Marketing data Email address and preferences if you subscribe; discount codes used; attribution parameters in links Provided by you / collected automatically
Communications Emails, messages and support requests you send us Provided by you

We do not collect special category data (such as health data) and we do not knowingly collect data from children under 16.

3. Why we use it, and our lawful basis

  • To process and deliver your order — performance of a contract. This includes taking payment, arranging shipping, handling returns and providing warranty support.
  • To respond to enquiries and provide support — performance of a contract, or our legitimate interests in serving customers.
  • To prevent fraud and secure the Site — our legitimate interests, and compliance with legal obligations.
  • To meet tax, accounting and consumer law obligations — legal obligation.
  • To send marketing emails — your consent, which you can withdraw at any time.
  • To analyse and improve the Site — our legitimate interests, using aggregated or pseudonymised data where possible.

4. Cookies and analytics

We use cookies and similar technologies that are necessary for the Site to work — keeping your cart and session active, remembering your preferences and securing checkout. These cannot be switched off without breaking the store.

We also use analytics and, where you consent, marketing cookies to understand how the Site is used and to measure advertising. You can refuse non-essential cookies through the cookie banner, and block or delete cookies in your browser settings. Blocking essential cookies may prevent checkout from working.

5. Who we share data with

We share personal data only with service providers who need it to perform a service for us, and only for that purpose:

  • Payment providers — to process payments, refunds and fraud checks.
  • Shipping carriers and fulfilment partners — to deliver your order and handle returns.
  • Email and hosting providers — to operate the Site and send transactional email.
  • Analytics and advertising platforms — to measure traffic and campaigns, using pseudonymised data where possible.
  • Professional advisers and authorities — where required by law, or to establish or defend legal claims.

We do not sell your personal data.

6. International transfers

We operate from Hong Kong SAR and use service providers in the United States, the European Union and elsewhere. Where personal data is transferred outside your country, we rely on appropriate safeguards — such as standard contractual clauses approved by the European Commission or the UK Information Commissioner — and on contractual and technical measures to protect the data.

7. How long we keep it

  • Order and transaction records — retained for the period required by tax and accounting law, generally 7 years.
  • Account data — retained while your account is active, then deleted or anonymised on request.
  • Support correspondence — retained for up to 3 years after the matter is closed.
  • Marketing consent records — retained until you unsubscribe, plus a short period to evidence the withdrawal.
  • Analytics data — retained in aggregated or pseudonymised form for up to 26 months.

8. Your rights

Depending on where you live, you may have the right to:

  • access the personal data we hold about you and receive a copy;
  • have inaccurate data corrected;
  • have your data deleted;
  • restrict or object to certain processing;
  • receive your data in a portable format;
  • withdraw consent at any time, where processing is based on consent;
  • lodge a complaint with a supervisory authority.

To exercise any of these rights, email [CONTACT EMAIL]. We will respond within one month and may ask you to verify your identity. Exercising your rights is free.

If you are in the UK, you can complain to the Information Commissioner’s Office (ico.org.uk). If you are in the EU, you can complain to your national data protection authority.

9. Security

We use HTTPS across the Site, restrict access to personal data to those who need it, and rely on payment providers that are PCI-DSS compliant. No system is completely secure, but we take these risks seriously and review our measures regularly.

10. Changes to this policy

We may update this policy to reflect changes in our practices or the law. The version published here is the current one, and the date at the top shows when it last changed.

11. Contact

[COMPANY LEGAL NAME]
[REGISTERED ADDRESS]
Email: [CONTACT EMAIL]