Privacy Policy

This privacy policy (“Privacy Policy”) sets out how we collect, use, manage and protect the Personal Data (as defined below) at . By using our website (https://iconicr.com/hk) or by engaging our services, you agree to be bound by this Privacy Policy. 

When we refer to "GDPR" in this Privacy Policy we mean the European Union General Data Protection Regulation. "EEA" means the European Economic Area.

1.       Collection and Sources of Personal Data

1.1 “Personal Data” refers to any data or information about you from which you can be identified either (a) from that data or information alone; or (b) from that data or information combined with other data or information.

1.2 We may collect the following Personal Data from you:

• identifiers such as your name, ID or passport number, address, phone numbers, company name, IP address, or other information which is not an identifier but can be associated with or relate to you;
• personal information, such as a credit card number;
• commercial information, such as purchase activity;
• internet or other electronic network activity information, including content interaction information; and
• inference data, such as information about your order preferences.

1.3 We collect your Personal Data when you:

• create an account with us;
• sign up to receive out newsletter and/or periodic e-mail notifications;
• engage us for our services; or
• otherwise submit Personal Data to us along with any related content of the communication.

2.       Purposes of Collection and Processing of Personal Data

2.1 We will, subject to applicable laws and regulations, collect and process your Personal Data for the following purposes:

• processing your order and managing your account;
• communicating with you and responding to your queries, requests and complaints;
• handling disputes and conducting and facilitating investigations and proceedings;
• conducting research and/or analysis to improve and optimize our services; 
• protecting and enforcing our contractual and legal rights and obligations;
• managing our infrastructure and business operations and complying with internal policies and procedures; and
• complying with any applicable rules, laws and regulations, codes of practice or guidelines or assisting in law enforcement and investigations by relevant authorities.

2.2 If you provide Personal Data of a third party (e.g. information of your employee, dependent, spouse and/or parents) to us, you represent and warrant that you have obtained the consent from such third party, such that the collection, use and disclosure of that Personal Data to us, as well as the further processing of that Personal Data by us for the purposes set out in this Privacy Policy, is lawful.

2.3 We will not knowingly collect or maintain Personal Data from persons who are under 18 years of age without prior consent from a parent or guardian. 

3.       Disclosure of Personal Data

3.1 We may, to facilitate the purposes mentioned in clause 2.1, to the extent permitted under applicable laws and regulations, disclose your Personal Data to the following party:

• any agent, contractor, sub-contractor or third party service provider who provides administrative or other services to us or you in connection with the operation of our business and website;
• any other person under a duty of confidentiality to us who has undertaken to keep such information confidential;
• any government and regulatory authorities and other organizations as required or authorized by law;
• our professional advisors, including our accountants, auditors, lawyers and insurers; and/or
• any other parties whom you have expressly or impliedly authorized us to make such disclosures as may be reasonably necessary or expedient to procure or fulfill your request(s).

4.       Storage and Retention of Personal Data

4.1 We securely store your Personal Data and have implemented appropriate security and technical measures to protect your Personal Data. 

4.2 We do not keep the Personal Data in an identifiable form for longer than is necessary for the purposes for which the Personal Data was collected and/or processed. 

5.       Marketing

5.1  We would like to send you information about our products and services that we think you might like.

5.2  If you have agreed to receive marketing, you may always opt out at a later date.

5.3  You have the right at any time to stop us from contacting you for marketing purposes or giving your data to our affiliates.

6.       Your Personal Data Protection Rights 

6.1 We would like to make sure you are fully aware of your Personal Data protection rights. You have the following rights in accordance with the Personal Data (Privacy) Oridnance (Cap. 486): 

•  right to access your information;
•  right to request for correction of any information you believe is inaccurate;
•  right to request for completion of the information you believe is incomplete; and
•  right to request us not to process your personal data at any time for direct marketing purposes: We will usually inform you before collecting your data if We intend to use your data for such purposes or if We intend to disclose your information   to any third party for such purposes.

6.2 If you are based in the EEA, in certain circumstances, you have the following rights under GDPR in addition to the rights specified in clause 6.1 above:

• The right to erasure – You have the right to request for erasure of your Personal Data.
• The right to restrict processing – You have the right to request for restriction of the processing of your Personal Data.
• The right to object to processing – You have the right to object to the processing of your Personal Data.
• The right to data portability – Where technically feasible, you have the right to request for the transfer of the Personal Data that we have collected to another organization, or directly to you.
• The right to lodge a complaint with supervisory authority – You have the right to lodge a complaint with a data protection supervisory authority located in the European Union. Further information about how to contact your local data protection authority is available at http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm.
• If you make a request, we will respond to you within 30 days.

6.3 Since we rely on your consent to collect, use, process, transfer and disclose your Personal Data, you have the right to withdraw that consent at any time. This withdrawal will however not affect the lawfulness of processing based on your consent before your withdrawal. If you would like to exercise any of these rights, please contact us at the contact details provided in the contact section (clause 12) below.

6.4 In accordance with applicable laws and regulations, we may have the right to charge a reasonable fee for the processing of any Personal Data access or correction request and you will be advised in advance of the applicable fees, if any.

7.      Protection of Personal Data 

We develop, implement and maintain appropriate technical and organizational measures against unauthorized or unlawful processing, and against accidental loss, destruction or damage (including use of encryption and pseudonymization where applicable). We regularly evaluate and test the effectiveness of those safeguards to ensure security of our processing of Personal Data. 

 8.       Cookies[RR1] 

8.1 Cookies are text files placed on your computer to collect standard Internet log information and visitor behavior information. When you visit our websites, we may collect information from you automatically through cookies or similar technology. For further information, visit allaboutcookies.org.

8.2 We use cookies in a range of ways to improve your experience on our website, including:

•  Keeping you signed in
•  Understanding how you use our website

8.3 There are a number of different types of cookies, however, our website uses:

• Functionality – We use these cookies so that we recognize you on our website and remember your previously selected preferences. These could include what language you prefer and location you are in. A mix of first-party and third-party cookies are used.

• Advertising – We use these cookies to collect information about your visit to our website, the content you viewed, the links you followed and information about your browser, device, and your IP address. We sometimes share some limited aspects of this data with third parties for advertising purposes. We may also share online data collected through cookies with our advertising partners. This means that when you visit another website, you may be shown advertising based on your browsing patterns on our website.

8.4 You can set your browser not to accept cookies, and the above website tells you how to remove cookies from your browser. However, in a few cases, some of our website features may not function as a result.

 9.       California Privacy Rights
If you are a resident of California, USA and have an "established business relationship" with us (within the meaning of California law), you are entitled to request certain information regarding our disclosure of specified "personal information" (as defined in California Civil Code Section 1798.83) to third parties for their direct marketing purposes.

To request a copy of the information disclosure provided by us pursuant to Section 1798.83 of the California Civil Code, please contact us at the contact details provided in the contact section (section 12) below and enter the following in the subject line of the e-mail: "California Privacy Rights." Please allow 30 days for a response.
 

10.   Privacy policies of other websites
Our website contains links to other websites. This Privacy Policy applies only to our website, so if you click on a link to another website, you should read their privacy policy.
 

11.   Changes to our Privacy Policy
11.1  We keep this Privacy Policy under regular review and place any updates on this webpage. This Privacy Policy was last updated on 1 May 2022.
11.2  This Privacy Policy does not override any applicable laws and regulations.
 

12.   Contact
If you have any questions about this Privacy Policy or any queries relating to your Personal Data, or you would like to obtain access and/or make corrections to your Personal Data records or exercise any other rights you have under applicable law; please contact us via email at: 

info.hk@iconicr.com 
 
Should you wish to report a complaint or if you feel that we have not addressed your concern in a satisfactory manner, you may contact the applicable commissioner or supervisory authority.