BATCH 01
Who holds your data
The data user is PENGSHI TRADE LIMITED, registered at ROOM 2M11, 10/F, WAH WAN INDUSTRIAL BUILDING, TUEN MUN, HONG KONG. Data-protection questions, access requests and deletion requests go to PENGSHI1939@outlook.com with “Privacy” in the subject line. We answer within 40 days, as the PDPO allows, and usually far sooner. There is no separate data-protection officer; the director who signs your invoice owns the answer.
BATCH 02
What we collect
When you send an enquiry we collect what you type: name, email address, an optional phone or WhatsApp number, the pieces and quantities you ask about, the destination country, and the content of your message. When an order is confirmed we also hold the delivery address, the invoice and the payment reference. Our server records the usual technical log: IP address, browser user agent, requested URL and timestamp. We do not collect card numbers, because we never take a card on this site.
BATCH 03
Cookies and cart state
This is a display site with a shortlist, not a shop. A single functional session cookie keeps your shortlist of pieces intact between pages; it carries no advertising identifier and expires when you close the session or after a short period. We run no remarketing pixels, no third-party analytics, no social plug-ins and no embedded fonts or images from outside domains. If you block all cookies in your browser, the pages still render and you can still email us; only the shortlist is lost.
BATCH 04
Why we use it
We use your data to answer your enquiry, confirm a batch, quote freight, issue an invoice, arrange delivery, handle a breakage or return, and keep the accounting records Hong Kong law requires. The basis is the performance of the sale or the steps leading to it, our legitimate interest in running the business and defending claims, your consent where you have given it, and our legal obligations on tax and company records. We do not profile you, we do not score you, and we do not sell or rent personal data to anyone.
BATCH 05
Breakage reports and photographs
If a parcel arrives damaged, we ask you to photograph the carton before unpacking it fully and to keep the packaging. Those photographs, your written report and the courier's damage note are retained with the order record, because a freight claim needs the evidence that was gathered at the moment of delivery. We keep them only for that claim and for our accounting trail, not for marketing. If you would rather not send a photograph, tell us and we will work from a written description, though a claim may then be harder to prove to the carrier.
BATCH 06
Who else sees it
A small number of processors see data because they must: our mailbox provider, the courier or freight forwarder carrying your parcel, the bank that receives payment, and our accountant. Each is given only the fields it needs — the courier gets a name, address and phone, not your enquiry history. Where we use a service provider we require confidentiality and use only for our instructions. We do not pass lists to marketers, brokers or data resellers, and we do not disclose data to anyone else unless a court order or a legal duty compels it.
BATCH 07
Where your data goes
Our records are held in Hong Kong and on servers operated by our mailbox and hosting providers, which may store data outside Hong Kong. When personal data leaves Hong Kong we transfer it only to parties under a contract that requires a comparable standard of protection, and we keep the transfer to the fields needed for the task. A courier abroad receives your delivery details because a parcel cannot cross a border without them. By sending us an enquiry you understand that this transfer is necessary to answer you.
BATCH 08
How long we keep it
Enquiry records that never became an order are kept for up to 24 months, then deleted. Order records, invoices, payment references, courier documents and breakage reports are kept for 7 years, which is the period we must be able to show for Hong Kong accounting and tax purposes. Server logs are kept for up to 90 days for security and troubleshooting. Shortlist cookies disappear with the session. When a retention period ends, we delete or anonymise the data rather than keep a dormant copy.
BATCH 09
Your rights
Under the PDPO you may ask for a copy of the personal data we hold about you, ask us to correct anything wrong, and ask us to delete data we no longer have a lawful reason to keep. Write to PENGSHI1939@outlook.com from the address you used with us, or tell us enough to identify the record. We may ask for proof of identity before releasing data, and we may charge a reasonable fee for a data-access request. We will tell you plainly if we cannot do what you ask, and why.
BATCH 10
How we keep it safe
Access to the order and enquiry records is limited to the people who need it. Mailboxes are protected by long passwords and two-factor authentication, devices are encrypted, and paper invoice copies are stored in a locked cabinet at our registered office. We keep software patched and we do not store payment card data at all, which removes the most attractive target. If a breach were to occur that is likely to cause harm, we would notify affected people and the Privacy Commissioner for Personal Data as the PDPO requires.
BATCH 11
Children, and complaints
This site sells tableware to adults and is not directed at children. We do not knowingly collect data from anyone under 18; if you believe a child has sent us personal data, write to us and we will delete it. If you are unhappy with how we have handled your data, tell us first — we will try to fix it. You may also complain to the Privacy Commissioner for Personal Data (PCPD) in Hong Kong. We will not treat a complaint as a reason to close your account or refuse an order.
BATCH 12
Changes to this notice
We revise this notice when our practice or the law changes. The date at the foot of the page is the date of the version in force. A material change — a new category of data, a new processor, a longer retention period — is announced at the top of this page for at least 30 days before it takes effect. A previous version is available on request. Continuing to use the site or to correspond with us after a change means you accept the revised notice. Questions go to PENGSHI1939@outlook.com.