Privacy Policy

Bag Surgeon Limited ("Bag Surgeon", "we", "us", "our") operates a vintage luxury handbag boutique in Causeway Bay, Hong Kong, together with related online services, including customer communications via WhatsApp. This Privacy Policy explains how we collect, use, disclose, and protect your personal data, in accordance with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong ("PDPO").

By providing your personal data to us, or by communicating with us through WhatsApp or other channels, you acknowledge that you have read and understood this Privacy Policy.

1. Information We Collect

We may collect the following categories of personal data:

  • Contact information — your name, phone number, email address, and delivery address, provided when you make a purchase, enquire about a product, or subscribe to updates.
  • Purchase information — details of items you have bought, consigned, or enquired about, order history, and payment records (we do not store full card numbers).
  • Communication records — messages you exchange with us via WhatsApp, phone, email, social media, or in store, including any information you choose to share in those messages.
  • Preference information — your product interests, sizing or style preferences, and marketing communication preferences.

2. How We Use Your Information

We use your personal data for the following purposes:

  • To process and fulfil your orders, consignments, repairs, and related services;
  • To respond to your enquiries and provide customer support;
  • To send you service messages relating to your orders, such as order confirmations, payment reminders, and collection or delivery updates;
  • With your consent, to send you marketing communications about new arrivals, promotions, and events via WhatsApp, email, or other channels you have agreed to;
  • To maintain our internal records, conduct business analysis, and improve our products and services;
  • To comply with applicable legal and regulatory obligations.

3. WhatsApp Communications

We use the WhatsApp Business Platform, provided by Meta Platforms, Inc. and its affiliates ("Meta"), to communicate with customers. When you interact with us on WhatsApp:

  • Your phone number, profile name, and message content are processed through the WhatsApp Business Platform in order to deliver our messages to you and yours to us;
  • Meta acts as a technology provider for these communications and processes data in accordance with its own terms and privacy policies, available at WhatsApp Business Terms and the WhatsApp Privacy Policy;
  • We will only send you marketing or promotional messages on WhatsApp where you have opted in to receive them;
  • You may opt out of marketing messages at any time by replying "STOP" (or "取消訂閱") to any of our WhatsApp messages, or by contacting us using the details below. Opting out of marketing does not affect service messages relating to your existing orders.

4. Disclosure of Your Information

We do not sell your personal data. We may share your personal data only with:

  • Service providers — third parties who help us operate our business, such as Meta (for WhatsApp communications), payment processors, courier and logistics providers, and IT service providers, in each case only to the extent necessary for them to perform their services;
  • Professional advisers — lawyers, accountants, and auditors where reasonably necessary;
  • Legal and regulatory authorities — where disclosure is required by law, court order, or lawful request.

5. Data Retention

We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. Transaction records are retained in accordance with applicable Hong Kong legal and tax requirements. When personal data is no longer needed, we take reasonable steps to delete it or render it anonymous.

6. Data Security

We take reasonable and practicable steps to protect personal data against unauthorised or accidental access, processing, erasure, loss, or use. Access to customer data is limited to staff members who need it to perform their duties. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your Rights

Under the PDPO, you have the right to:

  • Request access to the personal data we hold about you;
  • Request correction of personal data that is inaccurate;
  • Withdraw your consent to the use of your personal data for direct marketing at any time, free of charge.

To exercise any of these rights, please contact us using the details below. We may charge a reasonable fee for processing a data access request as permitted under the PDPO.

8. Third-Party Links and Services

Our communications or website may contain links to third-party websites or services, including those operated by Meta. We are not responsible for the privacy practices of those third parties, and we encourage you to review their privacy policies.

9. Children's Privacy

Our products and services are not directed at persons under the age of 18, and we do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us and we will take steps to delete it.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. Your continued use of our services after changes are posted constitutes your acknowledgement of the revised policy.

11. Contact Us

Bag Surgeon Limited

Causeway Bay, Hong Kong

Email: bagsurgeonltd@gmail.com