隱私權政策
Privacy Policy
| 適用範圍 / Applies to | 本網站 / This website |
| 生效日期 / Effective date | 2026 年 7 月 25 日 / 25 July 2026 |
| 最後更新 / Last updated | 2026 年 7 月 25 日 / 25 July 2026 |
本政策適用於一般服飾電商網站，說明本網站營運者如何處理個人資料。若本政策與適用法律的強制規定不一致，以適用法律為準。
This policy applies to a general apparel e-commerce website and explains how the website operator handles personal data. Mandatory applicable law prevails over any inconsistent wording.
繁體中文版本
1. 總覽及資料控制者
本政策說明本網站營運者（「我們」）如何在您瀏覽本網站、開設帳戶、購物、聯絡客服、訂閱推廣、參與活動或與我們的社交媒體及門市互動時，蒐集、使用、披露、保存及保護個人資料。資料控制者／負責單位為本網站法律聲明所識別的營運者，聯絡地址載於網站聯絡頁面或法律聲明。
2. 我們蒐集的資料
我們可能蒐集：身份及聯絡資料；帳戶及登入資料；訂單、退換貨、願望清單及客戶服務記錄；付款交易資料（完整卡號通常由付款服務商處理）；尺寸、穿搭偏好及問卷回覆；裝置、IP 位址、瀏覽器、Cookie、像素、廣告識別碼及網站使用資料；大概位置；您提供的照片、評論、社交媒體帳號或公開互動；門市閉路電視影像；以及為防詐、法律合規或身份核實所需資料。
3. 資料來源
資料可由您直接提供，於您使用服務時自動產生，或由付款、物流、防詐、分析、廣告、社交媒體、聯盟夥伴及依法可用的公開來源取得。若您提供他人資料（例如收件人），您應確保有權提供並已向其交代本政策。
4. 使用目的及法律依據
我們使用資料以建立及管理帳戶、接受和履行訂單、付款及退款、配送、退換貨、提供客服、發送必要服務通知、維護安全、防止欺詐、遵守法律、處理爭議、改善網站與商品、分析表現、個人化內容，以及在獲同意或法律允許時進行市場推廣及廣告。適用時，法律依據包括履行合約、法定義務、我們或第三方的合法利益、您的同意，以及建立、行使或抗辯法律申索。
5. Cookie、分析及個人化廣告
我們及合作夥伴可使用必要、偏好、分析及廣告 Cookie／像素。必要技術維持購物車、登入及付款安全；其他技術協助統計、個人化和衡量廣告。您可透過網站的 Cookie 設定工具（如有）管理非必要選項，也可調整瀏覽器設定；停用某些技術可能影響功能。請另提供《Cookie 政策》列出實際供應商、用途及保存期。
6. 行銷訊息
在獲同意或法律允許時，我們可透過電郵、短訊、電話、即時通訊、推播或平台廣告發送新品、優惠及活動資訊。您可使用訊息內取消訂閱連結、帳戶設定或聯絡我們退出。退出推廣不會停止訂單、安全或政策更新等必要服務通知。
7. 資料分享
我們不會為對方獨立使用而出售您的個人資料。為營運服務，我們可向集團公司、雲端及主機商、付款服務商、銀行、物流及倉儲、客服、IT、安全及防詐、分析、廣告及行銷、專業顧問、保險公司、監管及執法機關，以及企業交易中的潛在買方或承繼者披露必要資料。服務供應商須受合約及安全義務約束。
8. 跨境傳輸
部分接收者或系統可能位於您所在司法管轄區以外，當地保障水平可能不同。我們會按適用法律採用認可機制，例如充分性決定、標準合約條款、資料傳輸協議、風險評估或取得同意，並可按要求提供相關保障資料。
9. 資料保存
我們只在達成目的所需或法律要求的期間保存資料，考慮帳戶狀態、交易及保養期、退換貨和爭議時限、稅務及會計規定、防詐及安全需要。期滿後會安全刪除、匿名化或隔離保存。具體保存表及期間：依適用法律及實際需要釐定。
10. 資料安全
我們採取合理的技術及組織措施，例如存取控制、傳輸加密、供應商審查、備份、監測及員工培訓。但任何系統均不能保證絕對安全。您應使用獨特密碼、保護登入資料並及時通知可疑活動。若發生須通報的事故，我們會按法律通知相關人士及機關。
11. 您的權利
視所在地法律，您可能有權知悉、查閱、更正、刪除、限制或反對處理、撤回同意、取得可攜格式、選擇退出特定廣告／分享／銷售、避免僅由自動化決策造成重大影響，以及向監管機關投訴。請聯絡網站聯絡表單並說明要求；我們可核實身份，並可在法律允許時拒絕或收取合理費用。撤回同意不影響此前處理的合法性。
12. 未成年人
本服務不以未滿18歲人士為對象，我們不會明知而蒐集未成年人的個人資料。若您認為未成年人未經適當授權向我們提供資料，請聯絡我們以便調查及刪除。適用地區如容許家長同意，請按實際流程修改本段。
13. 第三方連結及平台
網站可能連結第三方網站、付款頁面、社交媒體或應用程式。該等第三方自行負責其私隱做法，本政策不適用；請閱讀其政策。
14. 自動化決策
我們可能使用自動化工具進行防詐、風險評分、推薦或廣告受眾建立。若某項純自動化決定對您產生法律或類似重大影響，我們會按適用法律提供資訊及人工覆核、表達意見或提出質疑的渠道。
15. 政策更新
我們可因法律、技術或業務變化修訂本政策，並在頁首更新日期。重大變更會透過網站、帳戶或其他適當方式通知；如法律要求，我們會再次取得同意。
16. 語言
如本政策的中文與英文版本不一致，中文版本優先，但適用法律另有規定者除外。
17. 聯絡及投訴
私隱問題或權利要求請聯絡：資料保護主任／私隱團隊私隱團隊；電郵網站聯絡表單；地址網站聯絡表單；電話網站聯絡表單。您亦可向所在地的資料保護或私隱監管機關投訴。
18. 參考資料
起草時參考之公開頁面：CHARLES & KEITH 香港《隱私權政策》，https://www.charleskeith.com/hk/privacy-policy/privacy-policy.html（查閱日期：2026 年 7 月 25 日）。本範本已為通用服裝電商情境重新組織及改寫。
English Version
1. Overview and Controller
This policy explains how the operator of this website (“we”) collects, uses, discloses, retains and protects personal data when you visit this website, open an account, shop, contact support, subscribe to marketing, join an activity, or interact with our social channels or stores. The controller/responsible entity is the operator identified in the website legal notice, at the address stated on the contact page or in that notice.
2. Data We Collect
We may collect identity and contact details; account and login data; orders, returns, wish lists and support records; payment transaction data (full card details are normally handled by payment providers); sizing, style preferences and survey responses; device, IP address, browser, cookie, pixel, advertising ID and usage data; approximate location; photographs, reviews, social handles or public interactions you provide; in-store CCTV; and information needed for fraud prevention, legal compliance or identity verification.
3. Sources
Data may come directly from you, arise automatically when you use our services, or come from payment, logistics, fraud-prevention, analytics, advertising, social-media and affiliate partners, and lawful public sources. If you provide another person’s data, such as a recipient, ensure you are authorised and have explained this policy to them.
4. Purposes and Legal Bases
We use data to create and manage accounts; accept and fulfil orders; process payments and refunds; deliver goods; handle returns and exchanges; provide support and essential service messages; maintain security; prevent fraud; comply with law; resolve disputes; improve our site and products; analyse performance; personalise content; and conduct marketing and advertising with consent or where law permits. Where applicable, legal bases include contract, legal obligation, legitimate interests, consent, and establishing, exercising or defending legal claims.
5. Cookies, Analytics and Personalised Advertising
We and partners may use essential, preference, analytics and advertising cookies/pixels. Essential technologies maintain the cart, login and payment security; others support statistics, personalisation and advertising measurement. Manage non-essential choices at the website cookie settings tool, where available or through browser settings; disabling technologies may affect functionality. Publish a separate Cookie Policy listing actual providers, purposes and retention periods.
6. Marketing
With consent or where law permits, we may send product, offer and event information by email, SMS, phone, messaging app, push notification or platform advertising. Unsubscribe through the message, account settings or by contacting us. Opting out of promotions does not stop essential order, security or policy messages.
7. Sharing
We do not sell personal data for another party’s independent use . To operate services, we may disclose necessary data to group companies; cloud and hosting providers; payment providers and banks; logistics and warehouses; customer service; IT, security and fraud-prevention vendors; analytics, advertising and marketing partners; professional advisers; insurers; regulators and law enforcement; and a prospective buyer or successor in a corporate transaction. Service providers must be subject to contractual and security duties.
8. International Transfers
Recipients or systems may be outside your jurisdiction and may offer different protection. We use legally recognised measures such as adequacy decisions, standard contractual clauses, data-transfer agreements, risk assessments or consent, and can provide information about safeguards where required.
9. Retention
We retain data only as long as needed for its purpose or required by law, considering account status, transactions and warranty periods, return and dispute limits, tax and accounting duties, fraud prevention and security. We then securely delete, anonymise or isolate it. Detailed retention schedule: determined by applicable law and operational need.
10. Security
We use reasonable technical and organisational measures, including access controls, encryption in transit, vendor review, backups, monitoring and staff training. No system is absolutely secure. Use a unique password, protect login details and report suspicious activity promptly. If an incident requires notification, we will notify affected people and authorities as required by law.
11. Your Rights
Depending on location, you may have rights to information, access, correction, deletion, restriction, objection, withdrawal of consent, portability, opting out of certain advertising/sharing/sale, protection from significant solely automated decisions, and complaint to a regulator. Contact the website contact form and describe the request. We may verify identity and may refuse or charge a reasonable fee where legally permitted. Withdrawal does not affect earlier lawful processing.
12. Children
Our service is not directed to people under 18 and we do not knowingly collect their personal data. If you believe a minor provided data without proper authority, contact us so we can investigate and delete it. If parental consent is permitted in a market, revise this section to match the actual process.
13. Third-party Links and Platforms
Our site may link to third-party websites, payment pages, social networks or apps. Those parties control their own privacy practices and this policy does not apply; review their notices.
14. Automated Decisions
We may use automated tools for fraud prevention, risk scoring, recommendations or advertising audiences. If a solely automated decision produces legal or similarly significant effects, we will provide information and a route to human review, comment or challenge as required by law.
15. Updates
We may revise this policy for legal, technical or business changes and will update the date above. Material changes will be notified through the site, account or another suitable channel, and renewed consent will be obtained where required.
16. Language
If the Chinese and English versions conflict, the Chinese version prevails, except where applicable law requires otherwise.
17. Contact and Complaints
For privacy questions or rights requests contact: DPO/privacy team Privacy Team; email the website contact form; address the website contact form; telephone the website contact form. You may also complain to the data-protection or privacy regulator where you live.
18. Drafting Reference
Public page consulted during drafting: CHARLES & KEITH Hong Kong Privacy Policy, https://www.charleskeith.com/hk/privacy-policy/privacy-policy.html (accessed 25 July 2026). This template has been reorganised and rewritten for a general fashion retailer.