Privacy Policy

Effective Date: October 12, 2026
Last Updated: October 2026
Website: bshoplike.com

[BRAND NAME] is committed to protecting your privacy in accordance with the Personal Data (Privacy) Ordinance (Cap. 486) of the Hong Kong Special Administrative Region of the People’s Republic of China (“Hong Kong”) and the six Data Protection Principles (“DPPs”) issued by the Office of the Privacy Commissioner for Personal Data (PCPD). This Privacy Policy explains how we collect, use, disclose, store and protect your personal data when you visit [WEBSITE URL] or interact with our services.

1. Age Restriction

[WEBSITE URL] is intended for adults aged 18 years or older. By accessing this website, you confirm that you are at least 18 years of age.

We do not knowingly collect personal data from anyone under 18. If we learn that data has been collected from a minor, it will be erased promptly. Parents or guardians who believe a minor has provided us with information should contact us at [CONTACT EMAIL].

2. Information We Collect

We collect the following categories of personal data, depending on how you interact with our website:

  • Identity Data: name, age verification status, date of birth (where required for age verification).
  • Contact Data: email address, billing/shipping address, phone number.
  • Transaction Data: order details, products purchased, payment method token (processed by third-party payment processors — we do not store full credit card numbers).
  • Technical Data: IP address, browser type, device identifiers, operating system, referring URLs.
  • Usage Data: pages visited, time on page, clicks, referral source, approximate location (city level) derived from IP.
  • Marketing & Communications Data: subscription preferences, review content, product ratings, support enquiries.

3. How We Collect Your Information

  1. Direct interactions: when you place an order, subscribe to a newsletter, leave a product review, or contact our support team.
  2. Automated technologies: cookies, web beacons and analytics tools (Google Analytics 4, Meta Pixel if applicable) that collect Technical and Usage Data as you browse.
  3. Third parties: payment processors (Stripe, PayPal, PayMe, AlipayHK), courier services, identity verification providers and advertising partners.

4. Why We Collect, Hold and Disclose Your Information

We will only use your personal data for the purpose for which it was collected (DPP1 — Collection Purpose), unless the new purpose is directly related and you would reasonably expect it, or we are required or authorised by Hong Kong law (DPP3 — Use Limitation). Primary purposes include:

  • Processing and delivering your orders.
  • Verifying that you are 18+ (where applicable).
  • Preventing fraud and chargebacks.
  • Providing customer support and handling returns/refunds.
  • Sending you order updates, transactional emails and (with consent) marketing communications.
  • Improving website performance, product range and user experience.
  • Complying with our obligations under the Personal Data (Privacy) Ordinance (Cap. 486) and other applicable Hong Kong laws.

5. Cookies and Tracking

We use cookies and similar technologies to make the site work, measure performance and (if you consent) personalise marketing. Categories:

  • Strictly necessary cookies: cart, checkout, login session — cannot be disabled.
  • Analytics cookies: Google Analytics 4 (anonymised IP, no PII shared with Google).
  • Marketing cookies: Meta Pixel, Google Ads, TikTok Pixel — only loaded after you accept the cookie banner.

You can manage cookie preferences at [WEBSITE URL]/cookie-preferences or through your browser settings. Disabling certain cookies may affect site functionality.

6. Disclosure of Your Information

We do not sell your personal information. We may disclose it to:

  • Payment processors (Stripe, PayPal, PayMe, AlipayHK, Apple Pay, Google Pay) to complete transactions.
  • Couriers and last-mile delivery service providers (Hongkong Post, SF Express, Kerry Logistics, Lalamove, Jumppoint) for dispatch, delivery and any age-verification on arrival where required.
  • IT service providers (hosting, CDN, email marketing, customer-support and analytics platforms) under written contracts that require compliance with the Hong Kong Personal Data (Privacy) Ordinance (Cap. 486).
  • Regulators, law enforcement or courts where disclosure is required or authorised by Hong Kong law or by the laws of any other jurisdiction in which we operate.
  • Professional advisers (accountants, lawyers) and insurers.
  • A buyer, in the unlikely event of a business sale, restructure, merger or acquisition.

7. Cross-Border Transfer of Personal Data

Some of our service providers are based outside Hong Kong (e.g., Google, Meta, payment platforms). Where personal data is transferred outside Hong Kong, we comply with the cross-border transfer requirements under Section 33 of the Personal Data (Privacy) Ordinance (Cap. 486) and the guidance issued by the Office of the Privacy Commissioner for Personal Data (PCPD).

We will only transfer your personal data to a place outside Hong Kong where one or more of the following applies:

  • The destination place is covered by a privacy-protection regime that is, on the whole, comparable to the protections under the Personal Data (Privacy) Ordinance (for example, jurisdictions with EU/UK GDPR adequacy recognition, the Mainland China PIPL regime, or other recognised data-protection frameworks).
  • You have given your prescribed written consent to the transfer after being informed of the destination country and the relevant privacy considerations.
  • The transfer is necessary to comply with one of the statutory grounds under Section 33 of the Ordinance — including the performance of a contract with you, the protection of your vital interests, the administration of justice, or the obtaining of legal advice.

Main overseas jurisdictions currently used by our service providers: United States, Singapore, Ireland, the Netherlands (hosting and CDN), the European Economic Area (payment and email infrastructure for some processors), and the country of the payment processor you select at checkout.

8. Data Security and Storage

We take reasonable steps (DPP4 — Security) to protect your information from misuse, loss, unauthorised or accidental access, processing, erasure or other use. Measures include HTTPS/TLS encryption in transit, encryption at rest where supported by our hosting provider, access controls, two-factor authentication for admin accounts, and restricted staff access on a need-to-know basis.

Despite our efforts, no system is completely secure. Hong Kong does not currently operate a mandatory data-breach notification scheme; however, where a data breach is likely to result in significant harm to you, we will notify you as soon as reasonably practicable and take reasonable steps to mitigate the impact.

9. Retention

We keep personal data only for as long as needed for the purposes described above or as required by law (e.g., 7 years for tax and transaction records under the Inland Revenue Ordinance (Cap. 112)). Marketing data is deleted within 12 months of you unsubscribing. Anonymised analytics may be kept longer.

10. Your Rights Under the PDPO

You have the right to:

  • Data Access Request (DAR) — request a copy of the personal data we hold about you (DPP6, Sections 18–28 of the Ordinance).
  • Data Correction Request (DCR) — request correction of inaccurate, incomplete or misleading data (DPP6, Sections 22–26).
  • Opt out of direct marketing — use the “unsubscribe” link in any marketing email or contact us at [CONTACT EMAIL].
  • Request deletion of your data, subject to our legal record-keeping obligations.

To make a request, contact us at [CONTACT EMAIL]. We will respond within 40 days as required by the Ordinance. There is no fee for reasonable requests.

11. Complaints

If you have a concern about how we handle your personal data, please contact us first at [CONTACT EMAIL] so we can resolve it. If you are not satisfied with our response, you can lodge a complaint with the Office of the Privacy Commissioner for Personal Data (PCPD) at: Office of the Privacy Commissioner for Personal Data
Unit 1303, 13/F, Dah Sing Financial Centre
248 Queen’s Road East, Wan Chai, Hong Kong
Phone: (852) 2827 2827
Fax: (852) 2877 7026
Email: enquiry@pcpd.org.hk
Website: www.pcpd.org.hk

12. Third-Party Links

Our website may link to third-party sites (e.g., PCPD, Hong Kong Department of Health, courier tracking). We are not responsible for the privacy practices of those sites. We encourage you to read their privacy policies.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, technology or our operations. The “Last Updated” date at the top will be revised. Material changes will be notified by email (where you have an account) or by a banner on the website.

14. Contact Details

For any privacy questions, requests or complaints, contact us:

Email: info@bshoplike.com
Address: Room A07, 17/F, New Trend Centre, 704 Prince Edward Road East, San Po Kong, Hong Kong