Privacy Policy

Last updated: August 25, 2026

1. Introduction

This Privacy Policy explains how HONG KONG ZHUOBIAO XINGYUE TRADING LIMITED ("we", "us", "our"), operating the website Elyvora Fashion, a business registered in Hong Kong with its office at UNIT 05, 12/F THE CLOUD NO.111 TUNG CHAU STREET TAI KOK TSUI HK, collects, uses, stores, and protects your personal information when you visit our website or purchase our products (clothing and bags).

We respect your privacy and are committed to protecting your personal data. This policy applies to customers worldwide and complies with applicable data protection laws, including the EU General Data Protection Regulation (GDPR) and, where applicable, the California Consumer Privacy Act (CCPA/CPRA).

By using our website and services, you agree to the practices described in this Privacy Policy.

2. Information We Collect

2.1 Information You Provide to Us

Contact details: name, email address, phone number, and shipping/billing address.
Order information: products purchased, order history, order number, and communication preferences.
Payment information: we do not store full card numbers. Payment details are processed directly by our secure payment service providers (e.g., PayPal, Stripe, or other gateways).
Communications: any messages, reviews, or inquiries you send to us.

2.2 Information Collected Automatically

Device and usage data: IP address, browser type, operating system, pages visited, referring URLs, and timestamps.
Cookies and similar technologies (see Section 5).
Approximate location derived from your IP address.

3. How We Use Your Information

We use your personal information for the following purposes:

To process and fulfil your orders, including payment processing, packaging, and delivery.
To communicate with you about your orders, returns, refunds, and customer service requests.
To provide and improve our website, products, and customer experience.
To send you marketing communications, only if you have consented to receive them. You may opt out at any time.
To detect, prevent, and address fraud, security issues, and illegal activity.
To comply with legal obligations, such as tax and accounting requirements.

4. Legal Bases for Processing (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data on the following legal bases:

Performance of a contract: processing necessary to fulfil your order and deliver our services.
Legitimate interests: improving our services, preventing fraud, and securing our website, provided our interests do not override your rights.
Consent: where you have given explicit consent, for example for marketing emails or cookies that require consent.
Legal obligation: where we must process data to comply with applicable law.

5. Cookies and Similar Technologies

We use cookies and similar technologies to improve your browsing experience, remember your preferences, analyse traffic, and support our marketing efforts. Cookies we use include:

Essential cookies: required for the website to function, such as shopping cart and account login.
Analytics cookies: help us understand how visitors use our website (e.g., Google Analytics).
Preference cookies: remember your choices, such as language or currency.

You can control or delete cookies through your browser settings. Blocking essential cookies may prevent parts of the website from working correctly.

6. Sharing of Your Information

We do not sell, rent, or trade your personal information to third parties. We only share data with trusted service providers who help us operate our business:

Payment processors (e.g., PayPal, Stripe) to complete transactions securely.
Shipping and logistics carriers (e.g., postal services, express couriers) to deliver your orders.
IT and analytics providers (e.g., hosting, email, and analytics services) to operate our website and communications.
Legal authorities when required by law or to protect our legal rights.
Business transfers: in the event of a merger, sale, or acquisition, your data may be transferred to the new entity.

All service providers are required to protect your data and may only process it for the purposes we specify.

7. International Data Transfers

As our business is based in Hong Kong and we serve customers worldwide, your personal information may be transferred to, and processed in, countries outside your country of residence (including Hong Kong). Where such transfers involve the EEA or the UK, we take appropriate safeguards to ensure your data is protected to a standard consistent with applicable law (for example, standard contractual clauses approved by the European Commission).

8. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes described in this policy, including legal, accounting, and tax obligations (typically up to 5–10 years for financial records where required by law), or until you request deletion where applicable.

9. Security of Your Information

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction, including SSL/TLS encryption on our website and restricted access to personal data. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

10. Your Privacy Rights

Depending on your location, you may have the following rights:

Right of access: request a copy of the personal data we hold about you.
Right to rectification: correct inaccurate or incomplete data.
Right to erasure ("right to be forgotten"): request deletion of your data, subject to legal obligations.
Right to restriction of processing: limit how we use your data in certain circumstances.
Right to data portability: receive your data in a structured, machine-readable format.
Right to object: object to processing based on legitimate interests or for direct marketing.
Right to withdraw consent: withdraw any consent you have given at any time, without affecting the lawfulness of prior processing.
Right to lodge a complaint: with your local data protection authority (e.g., in the EEA or UK).

California Residents (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect, the right to request deletion, the right to correct inaccurate information, and the right to opt out of the "sale" or "sharing" of personal information. We do not sell your personal information. California residents also have the right to non-discrimination for exercising their privacy rights.

To exercise any of these rights, please contact us at the details below. We will respond within the timeframe required by applicable law (typically 30 days, or 45 days for California residents). We may need to verify your identity before processing your request.

11. Children's Privacy

Our website and services are not directed to children under the age of 16 (or 13 in certain jurisdictions), and we do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

12. Third-Party Links

Our website may contain links to external websites (e.g., payment providers, social media). We are not responsible for the privacy practices or content of those websites. We encourage you to review the privacy policies of any third-party site you visit.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised "Last updated" date. If we make material changes, we will notify you by email or a prominent notice on our website before the changes take effect.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

Email: [email protected]
Registered Business Name: HONG KONG ZHUOBIAO XINGYUE TRADING LIMITED
Office Address: UNIT 05, 12/F THE CLOUD NO.111 TUNG CHAU STREET TAI KOK TSUI HK