Privacy Policy

Last Updated: October 26, 2025

1. Introduction

Welcome to Sinocra (“we,” “our,” or “us”). We are dedicated to showcasing the beauty of traditional and modern Chinese arts and crafts. Protecting your personal data is our priority. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website [insert your website URL here] (the “Site”).

Please read this policy carefully. By accessing or using our Site, you consent to the practices described herein. We adhere to the requirements of the Personal Data (Privacy) Ordinance (Cap. 486) of the Laws of Hong Kong Special Administrative Region Administrative Region.

2. Data Collection Principles

In accordance with the PDPO, we practice data minimization. We only collect personal data that is necessary for a specific, direct purpose.

What Personal Data We Collect

  • Identifiers and Contact Data: When you create an account, make a purchase, or contact us, we may collect your name, shipping/billing address, email address, and phone number.
  • Commercial Information: Records of products you purchase, view, or express interest in.
  • Financial Data: Payment information (e.g., credit/debit card details) is processed directly by our secured third-party payment processors. We do not store full credit card numbers on our servers.
  • Technical Data: Automatically collected information may include your IP address, browser type, operating system, referring URLs, device information, and pages you visited on our Site. This is primarily gathered through Cookies and similar tracking technologies.
  • Correspondence: Any communications we have via email, contact forms, or live chat.

3. Purposes for Collecting and Using Your Data

We use your personal data for the following purposes, which are directly related to our functions and services:

  • To Fulfill Your Orders: To process your payments, arrange shipping, and provide you with invoices and/or order confirmations.
  • To Manage Your Account: To manage your registration as a user a user of the Site.
  • To Communicate With You: To respond to your inquiries, provide customer support, and send you important administrative updates about the Site.
  • For Marketing (with your consent): To send you information about new products, promotional offers, and newsletters, if you if you have explicitly opted-in to receive such communications. You can opt-out at any time.
  • To Improve Our Site: To analyze how users interact with our Site, troubleshoot problems, and enhance the user experience.
  • For Security: To maintain the safety, security, and integrity of our Site, services, and users.

4. Data Retention

We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. Upon the expiry of the retention period, your personal data will be securely destroyed or anonymized.

5. Your Rights under the PDPO

As a data subject under the PDPO, you have the right to:

  • Access: Request access to and a copy of the personal data we hold about you.
  • Correction: Request correction of any inaccurate personal data.
  • Withdraw Consent: Withdraw your consent for marketing communications at any time by using the “unsubscribe” link in our emails or by contacting us directly.
  • Objection: Object to the use of your personal data for direct marketing purposes.

To exercise any of these rights, please contact our Data Protection Officer using the details provided in Section 9.

6. Disclosure and Sharing of Personal Data

We do not sell, trade, or rent your personal data to third parties. We may share your data with trusted third-party service providers under strict confidentiality agreements to help us operate our business and the Site, such as:

  • Payment processors (e.g., Stripe, PayPal).
  • Shipping and logistics companies (e.g., DHL, FedEx).
  • IT and cloud storage service providers.
  • Analytics and marketing platforms.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We will only share data to the extent necessary for them to perform their services.

We may also disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

7. Data Security

We implement appropriate technical and organizational security measures designed to protect your personal data from accidental loss, unauthorized access, disclosure, alteration, and destruction. However, no internet transmission is completely secure, and we cannot guarantee the absolute security of your data transmitted to our Site.

8. Use of Cookies and Tracking Technologies

Our Site uses “Cookies” to enhance your browsing experience. Cookies are small files placed on your device that help us analyze web traffic, remember your preferences, and tailor our services to you.

You can choose to accept or decline Cookies. Most web browsers automatically accept Cookies, but you can usually modify your browser setting to decline them if you prefer. This may prevent you from taking full advantage of the Site.

9. Contact Us & Data Protection Officer

If you have any questions about this Privacy Policy, wish to exercise your rights, or have a complaint regarding our handling of your personal data, please contact our designated Data Protection Officer:

Email: dpo@sinocra.com

Postal Mail: E1 6/F Cheong Sun Tower , No.118 Wing Lok Street , Sheung Wan . Hong Kong

We endeavor to respond to all legitimate requests within 40 days, as stipulated by the PDPO.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or the law. The updated version will be indicated by an updated “Last Updated” date at the top of this page. We encourage you to review this policy periodically to stay informed.

Disclaimer: This privacy policy is a template provided for informational purposes. While it is designed to align with Hong Kong’s PDPO, it is not a substitute for professional legal advice. You should consult with a qualified legal professional to ensure your policy is fully compliant with all applicable laws and specific to your business operations.