Privacy Policy

This Privacy Policy applies to all personal data collected, held, processed and used via the website mizalonal.com. This policy is formulated in full compliance with the Personal Data (Privacy) Ordinance (Cap. 486) of the Laws of Hong Kong Special Administrative Region (“PDPO”). It sets out the manner and purposes of our personal data collection, usage, retention, disclosure and protection, as well as the statutory data subject rights granted to users under Hong Kong privacy law. All data processing activities are subject to the exclusive jurisdiction of Hong Kong courts.

1. DATA CONTROLLER & CONTACT

Data Controller: JARRETT TRADING CO., LIMITED

We are the sole data controller responsible for determining the purposes and means of processing your personal data collected through this website.

Privacy Enquiry Contact: support@mizalonal.com

2. PERSONAL DATA WE COLLECT

We only collect personal data that is lawful, necessary and relevant for our business operations and service provision, in compliance with PDPO data protection principles. Personal data collected falls into two categories:

Data You Voluntarily Provide

We collect information you actively submit when registering an account, placing an order, or contacting customer service, including but not limited to:

Full name
Email address
Shipping and residential address
Billing information
Payment details (all payment processing is securely handled by authorised third-party payment service providers; we do not store full credit card or sensitive payment credentials)
Other personal information included in your customer enquiries, feedback or service applications

Automatically Collected Technical Data

When you access and browse our website, we automatically collect non-identifiable and technical data for system security and user experience optimisation:

IP address
Device model, operating system and browser type & version
Website browsing records including viewed pages, dwell time, navigation paths, referral and exit sources

Cookies & Tracking Technologies

We use cookies and similar tracking technologies to retain your browsing preferences, stabilise website operation and analyse traffic trends. Such technologies will not collect or process your identifiable personal data unless you explicitly provide consent. You may manage cookie settings via your browser at any time.

3. LAWFUL PURPOSES OF DATA PROCESSING

We shall only process your personal data for legitimate purposes consistent with the original collection intent, in compliance with PDPO requirements. All processing activities are based on contractual necessity, legitimate business interests, your consent or statutory legal obligations:

To execute, process and complete your purchase orders, including payment verification, product delivery, order tracking and after-sales arrangement
To respond to your customer enquiries, complaints, service requests and provide ongoing customer support
To optimise website functions, product quality and service experience through anonymous user behaviour analytics
To send promotional and marketing communications regarding our products and services, only with your explicit voluntary consent. You may withdraw your consent and opt out of marketing messages at any time with immediate future effect
To comply with statutory obligations under Hong Kong laws, including tax declaration, accounting records retention and commercial regulatory requirements
To safeguard our legitimate business interests, including fraud prevention, website security maintenance, risk control and enforcement of our terms of service

4. PERSONAL DATA DISCLOSURE & SHARING

We will not sell, rent or trade your personal data for commercial marketing purposes without your explicit written consent. We may only disclose or share your personal data in the following limited and lawful scenarios:

Authorised Third-Party Service Providers

We may share necessary personal data with trusted third-party service providers who perform business functions on our behalf, including payment processors, logistics carriers, IT technical service providers and system maintenance vendors. All third-party providers are bound by strict contractual data confidentiality and security obligations under Hong Kong law, and are prohibited from processing your data for any unauthorised purposes.

Statutory Legal Disclosure

We may disclose your personal data if such disclosure is required or permitted by the laws of Hong Kong, or if we bona fide believe disclosure is necessary to comply with legal proceedings, statutory requirements, or to protect the legitimate rights, property and safety of our company, customers and the public.

5. DATA SECURITY PROTECTION

In accordance with PDPO security protection principles, we have implemented comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, misuse, loss or destruction. Protective measures include data encryption for sensitive information, secure server infrastructure, regular security audit and system maintenance, staff confidentiality training and graded system access control mechanisms.

6. DATA RETENTION POLICY

We retain your personal data only for the period necessary to fulfil the original collection purposes or to comply with Hong Kong statutory retention requirements. Data will be securely erased or anonymised once no longer required:

Order, transaction and financial data will be retained in accordance with Hong Kong tax and commercial law retention requirements
Marketing preference data will be retained until you opt out or withdraw your marketing consent
Website usage analytics data will be automatically anonymised or deleted after a fixed retention period

7. YOUR STATUTORY RIGHTS UNDER PDPO (CAP. 486)

As a data subject under Hong Kong law, you enjoy the following statutory rights in respect of your personal data:

Right of Access: To request access to and obtain a copy of the personal data we hold about you
Right of Correction: To request correction of any inaccurate, incomplete or outdated personal data
Right of Erasure: To request deletion of your personal data where no lawful basis exists for continued processing
Right of Restriction: To request restriction of data processing under specific statutory circumstances
Right to Object: To object to data processing based on legitimate business interests or for direct marketing purposes
Right of Consent Withdrawal: To withdraw any previously given consent at any time, without affecting the lawfulness of processing conducted prior to withdrawal

To exercise any of the above rights, please submit your request via our official email: support@mizalonal.com. We will respond to all valid statutory requests within a reasonable period as required by PDPO.

You also have the right to lodge a complaint with the Office of the Privacy Commissioner for Personal Data (PCPD), the statutory supervisory authority for Hong Kong data protection laws, if you consider our data processing practices violate PDPO provisions.

8. COOKIE MANAGEMENT

You may manage, disable or delete cookies through your individual browser settings. Disabling certain cookies may affect partial functions of our website, including preference storage and order service functions. We will not collect personal identifiable information via cookies without your consent.

9. POLICY UPDATES & AMENDMENTS

We may update this Privacy Policy from time to time to adapt to business adjustments or amendments to Hong Kong laws. The latest version will be published on this webpage with a clear effective date. Your continued use of our website and services after the policy update constitutes your acceptance of the revised terms.