Skip to main content

Privacy policy and personal information collection statement

[company / business name to be confirmed], trading as klothing ("we", "us"), respects your privacy. This policy explains how we collect, use, keep and protect your personal data on www.klothinghk.com, WhatsApp and Instagram. It is also our Personal Information Collection Statement under the Personal Data (Privacy) Ordinance (Cap. 486).

1. What we collect

When you place an order

  • Required: your name or preferred name, Hong Kong mobile number, delivery method, and an SF service-point code or delivery address (district, street/building, block, floor and flat).
  • Optional: your Instagram handle and any remarks.
  • Order details: items, colours, sizes, quantities, amounts and the time of the order.

Confirming your order and after-sales

  • Your WhatsApp or Instagram conversations with us.
  • Payment screenshots and records (which may show the payer's name or part of an account number).
  • SF tracking numbers and delivery status, and any photos you send for an exchange.

Restock alerts, launch alerts and subscriptions

  • The WhatsApp number or email address you choose to give us, and the items, colours and sizes you want to hear about.

Order lookup

  • Your order number and mobile number, used only to verify the order and not stored separately.

When you browse

  • Pages viewed, taps and actions such as adding to bag; device and browser type, referring site or campaign parameters, and an approximate location derived from your IP address.
  • If you set up "My fit", our analytics record only a height band (for example 155–159cm) and the closest AI model, never your exact figures.
  • To prevent abuse (such as floods of fake orders), we briefly keep a hashed version of your IP address.

Data kept only on your device

Your bag, saved items, recently viewed items, "My fit" profile (height, weight, measurements, usual size and body shape), and contact details if you tick "remember my details" are stored only in your browser (localStorage) and are not uploaded to us. When we calculate prices and stock, your bag contents are sent to our server for processing but are not linked to your identity or kept. You can clear this data on the site or through your browser settings at any time.

2. Why we use it

  1. To process your order request: holding stock, confirming the order, arranging payment, delivery, exchanges and after-sales service.
  2. To contact you about your order by WhatsApp, Instagram or email.
  3. To verify your order when you look it up.
  4. To send restock alerts you asked for.
  5. With your consent, for direct marketing (see section 4).
  6. To prevent fraud and abuse and keep the site secure.
  7. To understand how the site is used, in aggregate, and improve our products, size advice and website.
  8. To meet legal requirements and handle disputes.

3. What you must provide

The details marked as required at checkout (name, mobile number and delivery details) are needed to process your order. Without them we can't process it. Fields marked optional can be left blank without affecting your order.

4. Direct marketing

We only use your name, WhatsApp number and/or email address for direct marketing with your express consent (for example, ticking a consent box or asking to join our WhatsApp alert list). We will send you messages about: new arrivals, restocks, sales and offers, and other clothing and accessory news. We never provide your personal data to third parties for their direct marketing. You can opt out at any time, free of charge, by replying "STOP" or contacting us.

5. Who we share it with

We do not sell your personal data. To serve the purposes above, we may share the data needed with:

  • SF Express and its pickup partners: your name, mobile number and service-point code or address, for delivery.
  • Meta (WhatsApp and Instagram): when you choose to contact us on these platforms, the conversation is handled under their privacy policies.
  • Website and database providers: our site is hosted on Vercel and order data is stored in a Supabase database. They act as our data processors and may only handle data on our instructions.
  • Email providers: to send the owner new-order alerts and to send you emails you've asked for.
  • Analytics and anti-abuse services, such as Google Analytics (aggregate browsing data) and Cloudflare Turnstile (automated-abuse checks).
  • Where required by law: law-enforcement agencies, courts or other bodies legally entitled to request it.

6. Storage outside Hong Kong

These providers' servers may be located outside Hong Kong (for example in Singapore or the United States). We choose providers with reasonable security measures and require them, through their service terms or contracts, to protect your data.

7. How long we keep it

  • Personal data in orders (name, phone and address) is kept only as long as needed for the purposes above, generally 3 years after your last transaction, then deleted or anonymised. Transaction records without personal identifiers are kept as the law requires (for example, for tax).
  • Payment screenshots are kept only as long as needed to reconcile payments and handle any disputes.
  • Restock alert details stop being used once the alert is sent or you cancel, and are deleted periodically.
  • Direct-marketing lists: until you unsubscribe.
  • Analytics data is kept in aggregate or under a random ID for up to 14 months.

8. Security

The whole site uses encrypted connections (HTTPS). Order data can only be accessed by the owner and authorised people. Order links use random codes, and looking up an order requires both the order number and the full mobile number. No internet transmission is completely secure, so please never send card details or passwords in a message. We will never ask for them.

9. Cookies and similar technologies

We use browser storage (localStorage) for features such as your bag, and analytics cookies or random IDs to understand how the site is used overall. We don't currently use advertising or tracking cookies; if we add any, we'll update this policy first. You can block or delete cookies in your browser settings, though some features (such as your bag) may then stop working properly.

10. Access and correction

Under the Personal Data (Privacy) Ordinance you have the right to request access to, and correction of, the personal data we hold about you. Email hello@klothing.hk or WhatsApp (contact details coming soon), marked "data access request" or "data correction request". We will respond within 40 days of receiving your request. We may charge a fee that is not excessive for a data access request and will tell you beforehand. You can also ask us to stop using your data for direct marketing at any time.

11. Under 18s

If you're under 18, please get a parent's or guardian's consent before giving us personal data or placing an order.

12. Changes to this policy

We may update this policy from time to time and will show the date of the latest update on this page. Significant changes will be announced prominently on the site.

13. Contact us

For questions about this policy or your personal data, contact [company / business name to be confirmed] (klothing) by email at hello@klothing.hk or on WhatsApp at (contact details coming soon).

If there is any inconsistency between the Chinese and English versions of this policy, the Chinese version prevails.