Privacy Policy

This document serves as the formal Notice of Personal Data Practices for Xavellejade, an entity operating exclusively within the Hong Kong Special Administrative Region. We govern all data handling activities in strict accordance with the Personal Data (Privacy) Ordinance (Cap. 486), hereafter referred to as the PDPO. Our commitment is to maintain a digital environment where your information is handled with logic and statutory integrity.

I. The Origin of Information (DPP1)

In compliance with Data Protection Principle 1, we only collect information that is necessary for our specific business functions. When you interact with our platform, we acquire:

• Voluntary Identifiers: Your name, delivery address, and contact number.
• Digital Markers: Your email address ( [email protected] ) and IP address.
• Transaction Logs: Details required to process payments and verify successful delivery.

We do not engage in excessive collection. Every data point serves a documented functional goal.

II. Functional Pathways (DPP3)

Your data follows a restricted path. We utilize these details to:

• Execute the sale and delivery of goods within Hong Kong.
• Communicate regarding order status or administrative shifts.
• Analyze site traffic to maintain a stable interface.

Under the PDPO, we do not divert your information to secondary purposes without obtaining your express, informed consent. We do not operate internationally; therefore, your data remains within local jurisdictions.

III. The Google Ads Ecosystem

To satisfy Google Ads compliance, we disclose that our site uses tracking technologies to understand user engagement. These tools help us display relevant content to individuals based on their browsing history on our site. You may manage these settings through your browser or via Google’s advertisement settings. We do not merge personally identifiable information with non-personally identifiable information gathered through these advertising features.

IV. Protection and Longevity (DPP2 & DPP4)

Security is not a passive state. We apply rigorous physical and electronic safeguards to prevent unauthorized access or accidental loss. In line with DPP2, we do not hold your information indefinitely. Data is retained only for the duration required to fulfill the transaction or to meet Hong Kong legal record-keeping obligations. Once the objective is reached, we employ permanent erasure protocols.

V. External Collaborations

We do not trade your data. We only grant access to essential service providers, such as local logistics teams and payment gateways, who facilitate our operations. These partners are legally bound to handle your data according to our instructions and the PDPO framework.

VI. Your Statutory Sovereignty (DPP6)

The PDPO grants you specific rights which Xavellejade upholds:

• Access: You may request a copy of the personal data we maintain.
• Correction: You have the right to rectify any inaccurate details.
• Erasure: You may request the removal of your data once the functional necessity has passed.

To exercise these rights, or to lodge a formal inquiry, contact our Data Officer at [email protected]. We respond to all validated requests within the statutory forty-day period.

VII. Future Iterations

This manifesto is subject to change as Hong Kong regulations evolve. We advise regular review of this page. Your continued engagement with our services constitutes an acknowledgement of these terms.