Privacy policy

1. Introduction
MERCHANT WAVE LIMITED (“we,” “our,” or “us”) is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our global e-commerce platform specializing in women’s denim skirts and dresses. By accessing our website and using our services, you consent to the data practices described in this policy. We process all personal data in compliance with the Hong Kong Personal Data (Privacy) Ordinance and other applicable international data protection laws.

2. Information We Collect
We collect various types of information to provide and improve our services:

  • Personal Identifiers: Full name, email address, telephone number, and contact details
  • Shipping Information: Delivery addresses, billing addresses, and recipient details
  • Financial Data: Payment card information, PayPal account details, and transaction history through secure payment gateways
  • Purchase History: Records of purchased denim skirts and dresses, sizes, colors, and style preferences
  • Technical Information: IP address, browser type, device information, operating system, and usage data
  • Communication Records: Correspondence with our customer service team, product reviews, and survey responses
  • Marketing Preferences: Your choices regarding promotional communications and newsletters

3. Legal Basis for Processing
We process your personal data based on the following legal grounds:

  • Contractual Necessity: To process your orders, deliver products, and provide customer support
  • Legal Compliance: To meet our legal obligations, including tax calculations and fraud prevention
  • Legitimate Interests: For business operations, website improvement, and marketing analytics
  • Explicit Consent: For sending promotional materials, personalized recommendations, and certain cookies

4. How We Use Your Information
We use the collected information for these specific purposes:

  • Order processing, fulfillment, and delivery of denim skirts and dresses
  • Customer account management and personalized shopping experiences
  • Payment processing and transaction verification
  • Customer service support and query resolution
  • Marketing communications about new collections and promotions (with consent)
  • Website optimization and user experience enhancement
  • Security monitoring and fraud prevention
  • Legal compliance and dispute resolution

5. Data Sharing and Disclosure
We may share your information with trusted third parties under strict confidentiality agreements:

  • Logistics Partners: Shipping carriers including DHL, FedEx, and local postal services for order delivery
  • Payment Processors: Secure payment service providers compliant with PCI DSS standards
  • IT Service Providers: Website hosting, maintenance, and analytics partners
  • Marketing Platforms: Email marketing services and social media advertising partners
  • Legal Authorities: When required by law, court order, or to protect our legal rights

6. International Data Transfers
As a global e-commerce company headquartered in Hong Kong, your data may be transferred to and processed in countries outside your residence. We ensure all international data transfers are protected by appropriate safeguards, including:

  • Standard contractual clauses approved by relevant authorities
  • Data processing agreements with international partners
  • Security measures that meet or exceed legal requirements

7. Data Security Measures
We implement comprehensive technical and organizational security measures:

  • SSL encryption for all data transmissions
  • Secure payment gateways with tokenization
  • Regular security assessments and penetration testing
  • Access controls and authentication protocols
  • Data minimization and pseudonymization practices
  • Employee training on data protection protocols

8. Data Retention Periods
We retain personal data only as long as necessary for legitimate business purposes:

  • Order information: 7 years for tax and accounting purposes
  • Customer accounts: Until account deletion request
  • Marketing data: Until consent withdrawal
  • Customer service records: 3 years for quality assurance
  • Technical data: 2 years for analytics and security

9. Your Data Protection Rights
You have the following rights regarding your personal data:

  • Access Right: Obtain confirmation and copy of your personal data
  • Rectification Right: Correct inaccurate or incomplete information
  • Erasure Right: Request deletion of your personal data
  • Restriction Right: Limit processing of your data under certain conditions
  • Portability Right: Receive your data in a structured, machine-readable format
  • Objection Right: Object to processing based on legitimate interests
  • Withdrawal Right: Withdraw consent for marketing communications at any time

10. Contact Information
For any privacy-related questions, concerns, or to exercise your data protection rights, please contact our Data Protection Officer:
Email: [email protected]
Response Time: Within 48 business hours
Mailing Address: UNIT 89, 3/F, YAU LEE CENTRE, NO.45 HOI YUEN ROAD, KWUN TONG, KL, HONG KONG

We are committed to resolving any privacy concerns promptly and transparently. If unsatisfied with our response, you have the right to lodge a complaint with the Hong Kong Privacy Commissioner for Personal Data.