Don't miss our holiday offer - up to 50% OFF!
Privacy Policy
Last updated: 4 November 2026
Hangji Hong International Trading Limited (“we”, “us”, “our”) operates the website hangkeihong.shop (the “Site”). This Privacy Policy explains what personal data we collect when you visit the Site or place an order, why we collect it, how long we keep it, and what rights you have over it.
If you have questions about this policy or want to exercise any of the rights described below, contact us at huangyouwei509@gmail.com.
1. Who we are
The data controller responsible for your personal data is:
Hangji Hong International Trading Limited Registered in Hong Kong SAR
Email: huangyouwei509@gmail.com
Website: https://hangkeihong.shop
We sell handbags and small leather goods directly to consumers through the Site. We do not sell personal data, and we do not operate a customer data business of any kind.
2. What we collect
We collect only what is needed to process an order, deliver it, and support you afterwards.
When you place an order
- Name, email address, phone number
- Billing address and delivery address
- Order contents, order value and payment status
- IP address and browser user agent at the time of checkout
- Any note you add to the order
When you create an account
- Email address and password (stored hashed)
- Order history and saved addresses
When you contact us
- The content of your message and our reply, so we can keep a record of the support we gave you
When you browse
- Pages viewed, referring URL, approximate location derived from IP, device type and browser
- Cookie identifiers described in section 6
What we do not collect or store
- We never see or store your full card number. Payment is handled by a third-party payment processor; we receive only a transaction reference and the outcome (paid, declined, refunded).
- We do not collect government identification numbers, biometric data, or data about your health.
3. Why we use it, and our legal basis
| Purpose | Data used | Legal basis (GDPR) |
|---|---|---|
| Processing and delivering your order | Name, addresses, contact details, order contents | Performance of a contract |
| Taking payment and preventing fraud | Order value, IP address, billing address | Performance of a contract; legitimate interests |
| Customer support and returns | Contact details, order history, message content | Performance of a contract |
| Sending order and delivery notifications | Email address, phone number | Performance of a contract |
| Marketing emails, where you have opted in | Email address, order history | Consent (withdrawable at any time) |
| Site analytics and improvement | Browsing data, cookie identifiers | Consent, or legitimate interests where consent is not required |
| Legal, tax and accounting records | Order and invoice data | Legal obligation |
We do not use your data for automated decision-making that produces legal or similarly significant effects.
4. Who we share it with
We share personal data only with service providers who need it to do a specific job for us, and only to the extent needed:
- Payment processors — to authorise and settle your payment, and to handle refunds and chargebacks.
- Shipping carriers and logistics partners — name, address and phone number, so your parcel can be delivered and tracked.
- Email and hosting providers — to operate the Site and send transactional email.
- Analytics providers — aggregated browsing statistics.
- Professional advisers and authorities — where we are legally required to disclose, or where necessary to establish or defend a legal claim.
Each provider is bound by contract to use the data only for the purpose we engaged them for. We do not sell, rent or trade personal data.
Where data is transferred outside your country (for example, to a hosting or payment provider in another jurisdiction), we rely on appropriate safeguards such as standard contractual clauses.
5. How long we keep it
- Order and transaction records — 7 years, to meet tax and accounting obligations.
- Account data — until you delete your account, then 30 days in backups.
- Support correspondence — 3 years from the last message.
- Marketing consent records — until you unsubscribe, plus 2 years as proof of consent.
- Server and security logs — 90 days.
When a retention period ends, data is deleted or irreversibly anonymised.
6. Cookies
The Site uses cookies and similar technologies. They fall into three groups:
- Strictly necessary — session, cart contents, checkout state, and security tokens. The Site cannot process an order without these. They do not require consent.
- Preference — remembers choices such as currency or dismissed notices.
- Analytics — helps us understand which pages are used and where visitors drop off. Set only where permitted by your consent or by applicable law.
You can block or delete cookies in your browser settings. Blocking strictly necessary cookies will prevent checkout from working. Where required by law, a consent banner lets you accept or refuse non-essential cookies, and you can change that choice at any time.
7. Your rights
Depending on where you live, you may have the right to:
- Access the personal data we hold about you, and receive a copy.
- Correct data that is inaccurate or incomplete.
- Delete your data, where we do not have a legal obligation to keep it.
- Restrict or object to certain processing, including direct marketing.
- Portability — receive your data in a structured, machine-readable format.
- Withdraw consent at any time, without affecting processing already carried out.
- Lodge a complaint with your local data protection authority.
To exercise any of these, email huangyouwei509@gmail.com. We respond within 30 days. We may ask you to verify your identity before acting on a request, and we do not charge for the first request in any 12-month period.
California residents: you have the right to know what categories of personal information we collect and disclose, to request deletion, and to opt out of the sale or sharing of personal information. We do not sell or share personal information as those terms are defined by the CCPA/CPRA. We will not discriminate against you for exercising your rights.
8. Security
We use HTTPS across the Site, hash account passwords, restrict administrative access to authorised staff, and keep plugins and the platform updated. No system is perfectly secure, but we take these measures seriously and review them regularly.
If a breach affects your personal data and poses a risk to your rights, we will notify you and the relevant authority as required by law.
9. Children
The Site is not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us with personal data, contact us and we will delete it.
10. Changes to this policy
We may update this policy to reflect changes in our practices or the law. The “Last updated” date at the top always shows the current version. Material changes will be announced on the Site or by email before they take effect.
11. Contact
Hangji Hong International Trading Limited Email: huangyouwei509@gmail.com
We aim to reply to privacy enquiries within 5 business days.