PRIVACY POLICY

1. Introduction & Overview

EASY MARKET ("we", "us", "our") is committed to protecting the privacy and personal data of individuals visiting our website (easymarket.com.hk) and purchasing products globally. This Privacy Policy outlines how we collect, process, store, and protect personal data under the Hong Kong Personal Data (Privacy) Ordinance (Cap. 486) and the European Union General Data Protection Regulation (EU GDPR / UK GDPR).


2. Personal Data We Collect

We process personal data necessary for commercial operations and customer support, including:

  • Contact & Account Data: Full name, delivery address, billing address, email address, telephone number, and account login verification records;
  • Transactional & Financial Data: Order history, items purchased, invoice totals, and payment confirmation tokens (processed securely via encrypted gateways; we do not store full credit card numbers);
  • Technical & Device Logs: IP address, browser type, operating system, device identifiers, time zone settings, referral URLs, and page interaction logs;
  • Marketing & Preferences: Newsletter subscriptions, direct marketing consents, and communication preferences.


3. Lawful Bases for Processing (GDPR Compliance)

Processing Purpose

Data Category

Lawful Basis under GDPR

Order fulfillment, billing, shipping, and customer service


Contact, Account, Transactional Data

Contractual Necessity: Essential to fulfill purchase contracts.

Platform maintenance, fraud

prevention, and system security


Technical, Device Logs

Legitimate Interests: Securing platform and preventing commercial fraud.

Tax compliance, accounting, and regulatory reporting


Transactional Data

Legal Obligation: Compliance with statutory financial duties.

Direct promotional emails,

newsletters, and non-essential cookies


Marketing Preferences, Contact Data


Explicit Consent: Affirmative opt-in consent (revocable anytime).


 

4. Direct Marketing & Communication Controls

We send direct marketing materials (e.g., promotional newsletters, discount announcements) strictly to users who have provided explicit prior consent. Every marketing email contains a clear "Unsubscribe" link allowing immediate, free-of-charge opt-out. Users may also request direct marketing removal by emailing cs@easy-market.shop.

 

5. Data Disclosure & Third-Party Processors

We do not sell personal data. Data is shared confidentially with trusted third-party service providers solely for operational necessity:

  • Logistics Partners: International carriers (DHL, FedEx, UPS, EMS) for parcel shipping;
  • Payment Gateways: Certified PCI-DSS compliant gateways (Shopify Payments, Stripe, PayPal) for transaction processing;
  • IT & Cloud Providers: Secure cloud hosting, platform maintenance, and data infrastructure services;
  • Legal & Regulatory Authorities: Where mandatory under applicable law or court order.


6. International Data Transfers (EU / UK Safeguards)

Because EASY MARKET is headquartered in Hong Kong, personal data collected from global users (including EU and UK residents) is transferred to and processed in Hong Kong and global cloud nodes. To ensure data protection standard equivalency, cross-border transfers from the EU/UK are executed under European Commission Standard Contractual Clauses (SCCs) or recognized adequacy frameworks.


7. Data Retention & Security Measures

7.1 Security Protocols: We employ administrative, organizational, and technical safeguards (including SSL encryption, access restrictions, and firewalls) to protect personal data from unauthorized access, loss, or alteration.

7.2 Retention Schedule: Personal data is retained only as long as required to fulfill order processing, legal warranty obligations, tax accounting requirements (typically 7 years for financial records), or until consent is withdrawn.


8. Your Data Subject Rights (GDPR & HK PDPO)

Comprehensive Rights for Global Users (incl. EU & UK Data Subjects):

Under applicable privacy laws (GDPR & HK PDPO), you possess the following actionable rights regarding your personal data:

1. Right of Access: Request copies of personal data held by EASY MARKET.

2. Right to Rectification: Request correction of inaccurate or incomplete data.

3. Right to Erasure ("Right to be Forgotten"): Request permanent deletion of your personal data where lawful grounds exist.

4. Right to Restrict Processing: Request suspension of processing under specific circumstances.

5. Right to Data Portability: Request structured, machine-readable export of your personal data.

6. Right to Object: Object to data processing based on legitimate interests or direct marketing.

7. Right to Withdraw Consent: Withdraw opt-in marketing consent at any time without affecting prior lawful processing.

To exercise any of these rights, contact our Data Protection Coordinator at cs@easy-market.shop. Requests are fulfilled free of charge within 30 calendar days.


9. Right to Lodge a Complaint with a Supervisory Authority

If you reside in the European Union or United Kingdom and believe our processing of your personal data infringes applicable data protection law, you have the statutory right to lodge a formal complaint with your local Data Protection Authority (DPA) or the UK Information Commissioner's Office (ICO).