Privacy policy

TERMS OF SERVICE

Pick & Co – Hong Kong

Pick & Co operates and is committed to protecting your privacy in accordance with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong (the “PDPO”) and its Data Protection Principles.

This Privacy Policy explains how we collect, use, disclose, store, and protect your personal data when you visit our website, register an account, place orders, contact us, or use our services.

1. What Personal Information Do We Collect?

“Personal information” (or “personal data”) means any data relating directly or indirectly to a living individual from which their identity can be ascertained.

We may collect the following types of personal data:

• Name and email address

• Home address and billing/shipping address

• Phone number

• Date of birth (if provided, e.g., for age-restricted offers or account verification)

• Domain name, IP address, browser type, device information, access timestamps, and other technical data

• Order history, payment details (we do not store full credit/debit card numbers—processed securely by third-party gateways)

• Any other information you voluntarily provide (e.g., in messages, reviews, waitlist entries, or customer service interactions)

We only collect personal data that is necessary, adequate, and not excessive for the purposes described below.

2. How We Collect Personal Information

We collect personal data when you:

• Register or create an account

• Place orders, make payments, or complete checkout

• Request returns, repairs, exchanges, or refunds

• Join waitlists, pre-orders, or subscribe to updates

• Contact customer service (via email, chat, phone, or forms)

• Interact with our website (e.g., browsing, adding to cart)

We may also use cookies and similar technologies to enhance site functionality, analyze usage, remember preferences, and improve your experience. For details, see our Cookie Notice (or manage preferences via your browser). Cookies may collect non-identifying data automatically.

3. Purposes for Using Your Personal Information

We use your personal data solely for business operations and to deliver our services, including:

• Processing and fulfilling orders, payments, shipping, and delivery

• Managing accounts, providing customer support, handling returns/repairs/exchanges

• Communicating order updates, shipping notifications, and essential transactional messages

• Improving our website, products, and services (e.g., via anonymized analytics)

• Preventing fraud, enforcing our policies, and complying with legal obligations

With your explicit consent (e.g., opt-in at signup or checkout), we may use your data for marketing communications (e.g., newsletters, promotions). You can opt out anytime via the unsubscribe link in emails or by contacting us—no charge applies.

We do not use your data for unrelated new purposes without your express consent (as required under PDPO DPP3).

4. Sharing Information with Third Parties

We may disclose your personal data to trusted third parties only as necessary to fulfill the purposes above, including:

• Payment processors and gateways (PCI-compliant; we do not store card details)

• Logistics and shipping partners (e.g., couriers for delivery)

• Technology vendors (e.g., hosting, email service providers, analytics tools)

Some providers may be located outside Hong Kong. We take reasonable steps (e.g., contracts) to ensure they provide an adequate level of protection consistent with PDPO standards.

We do not sell your personal data. Disclosure occurs only:

• With your consent, or

• Where required by law, court order, or to protect our rights/safety

5. Security of Your Information

We take reasonable and practicable steps to protect your personal data from unauthorized access, loss, misuse, alteration, or disclosure (PDPO DPP4). This includes:

• SSL/TLS encryption for data in transit

• Secure, PCI-compliant payment processing

• Access controls and secure servers

No transmission over the internet is 100% secure, but we implement appropriate safeguards.

6. Data Retention

We retain personal data only as long as necessary to fulfill the purposes collected (or for legal/tax requirements, e.g., up to 7 years for transaction records). After that, we securely delete or anonymize it.

7. Your Rights Under the PDPO

You have rights including:

• Access your personal data we hold (data access request)

• Request correction of inaccurate or incomplete data

• Withdraw consent for direct marketing (opt-out at any time)

• Lodge a complaint with the Office of the Privacy Commissioner for Personal Data (PCPD) if needed

To exercise these rights, email us at . We may verify your identity and respond within statutory timeframes (e.g., 40 days for access requests). A reasonable fee may apply for access requests if permitted.

8. Children’s Privacy

Our services are not intended for children under 16. We do not knowingly collect personal data from children without appropriate parental/guardian consent.

9. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in practices or law. The latest version is always available on our website. Continued use after changes means you accept the updated policy.

10. Contact Us

For questions, access/correction requests, or complaints:

Email: pickandco.hk@gmail.com

By using our website or providing personal data, you consent to the practices described in this Privacy Policy.