Privacy Policy

Effective date: 18 September 2026
Last updated: 18 September 2026

ShopKineto is operated by HongKong AdTiger Media Co., Limited, a company incorporated in the Hong Kong Special Administrative Region of the People’s Republic of China, with its registered office at Room 703, 7/F Kowloon Building, 555 Nathan Road, Kowloon City, Kowloon, Hong Kong (“ShopKineto”, “we”, “us”, “our”). Our contact person for the matters covered by this document is Sufang Chang, reachable at info@shopkineto.com or +1 251 800 9280.

We are committed to processing personal data in accordance with the EU General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”), the ePrivacy rules of the EU Member States, and, for our own compliance as a Hong Kong company, the Personal Data (Privacy) Ordinance, Cap. 486 (“PDPO”).

This document is organised in two parts. Part 1 sets out the terms that apply to our cash-on-delivery (COD) and other sales to customers located in the European Union / European Economic Area (“EU/EEA”), which is our primary market. Part 2 sets out how we, as a company established in Hong Kong, comply with Hong Kong law, and the terms that apply to customers located outside the EU/EEA. Where both parts could apply to you, the more specific and more protective provisions of Part 1 prevail for EU/EEA consumers; nothing in Part 2 reduces the rights granted to you in Part 1.

Part 1 — European Union / EEA Customers (GDPR)

1.1 Who We Are (Data Controller)

The data controller responsible for your personal data when you are located in the EU/EEA is HongKong AdTiger Media Co., Limited, registered address Room 703, 7/F Kowloon Building, 555 Nathan Road, Kowloon City, Kowloon, Hong Kong.

Email: info@shopkineto.com
Phone: +1 251 800 9280

EU/EEA Representative (Article 27 GDPR)

Because we offer goods to individuals located in the European Union / European Economic Area from outside the EU/EEA, we are required to designate a representative in the Union.

Our appointed EU representative is:

Luca Polidori snc
Via Roma, 1
00100 Roma, Italy
Phone: +39 348 520 1563

EU/EEA data subjects may contact our representative on all matters related to the processing of their personal data, in addition to contacting us directly.

1.2 Scope of This Part

This Part applies to personal data we process about customers, prospective customers, and visitors of our website who are located in the EU/EEA, whether you buy from us or simply browse. It does not apply to third-party websites we may link to, which have their own privacy policies.

1.3 The Personal Data We Collect

• Identity and contact data — first and last name, delivery and billing address, email address, telephone number.
• Order and transaction data — products ordered, order value, payment method (including cash-on-delivery selection), delivery details, order history, and communications with our customer service.
• Payment data — where you pay online, payment is processed by our payment providers; we do not store full card numbers. For cash-on-delivery orders we process only the information needed to fulfil and collect the order.
• Technical and usage data — IP address, device and browser type, operating system, referring pages, pages viewed, and interactions on our site, collected through cookies and similar technologies (see our Cookie Policy).
• Marketing and communications data — your preferences in receiving marketing from us and your communication preferences.

We do not intentionally collect special categories of data (such as health or biometric data), and we ask that you do not provide such data to us.

1.4 How We Collect Your Data

• Directly from you — when you place an order, fill in a form or landing page, subscribe to our newsletter, or contact us.
• Automatically — through cookies, pixels and similar technologies when you use our website (see our Cookie Policy).
• From third parties — such as advertising and analytics platforms (e.g. Google, Meta), payment providers, and delivery/logistics partners who help us fulfil and confirm your orders.

1.5 Why We Use Your Data and Our Legal Bases

We only process your personal data where we have a lawful basis to do so under Article 6 GDPR. The table below summarises our main processing activities:

Where we rely on legitimate interests, we have balanced those interests against your rights and freedoms. You may object to such processing at any time (see Section 1.12).

1.6 Marketing Communications

We may send you information about similar products and offers by email or other channels where permitted by law. You can withdraw your consent or opt out at any time by using the unsubscribe link in any marketing message, or by contacting us at info@shopkineto.com. Opting out of marketing does not affect service messages relating to your orders.

1.7 Cookies, Advertising and Similar Technologies

We use cookies, pixels and similar technologies to operate our site, remember your preferences, analyse traffic and deliver relevant advertising. We use, among others, Google Ads, Google Analytics and the Meta Pixel.

In line with Google’s EU User Consent Policy, non-essential cookies (including analytics and advertising cookies) are only set after you give specific, informed, freely given consent through our consent-management (cookie banner) tool; you can withdraw that consent at any time.

Where Google or another third party collects data as a result of your use of our site, that party acts as an independent controller of the data it collects; you can learn more about how Google uses this data at Google’s Privacy & Terms.

Full details, including the categories and providers involved, are set out in our separate Cookie Policy.

1.8 Who We Share Your Data With

We do not sell your personal data. We share it only with the following categories of recipients, and only to the extent necessary:

• Logistics and delivery partners — couriers and fulfilment providers who deliver your order and, for cash-on-delivery, collect payment.
• Payment service providers — to process online payments securely.
• Technology and hosting providers — website hosting, IT, customer-service and communication tools, some of which may be located in Hong Kong or elsewhere in Asia.
• Advertising and analytics providers — such as Google and Meta, to measure and improve our campaigns (subject to your cookie consent).
• Professional advisers and authorities — accountants, auditors, lawyers, and public authorities where required by law.

All processors act on our documented instructions under a written data-processing agreement that requires them to keep your data secure and to process it only for the agreed purposes.

1.9 International Data Transfers

We are established in Hong Kong, and our own processing of your data, as well as processing by some of our service providers, takes place outside the EU/EEA — including in Hong Kong, which has not been recognised by the European Commission as providing an adequate level of data protection.

This means your personal data may be transferred to, and processed in, countries that do not provide the same level of data protection as your home country.

Where we transfer personal data out of the EU/EEA, we rely on appropriate safeguards, in particular the Standard Contractual Clauses (SCCs) approved by the European Commission, supplemented by additional technical and organisational measures where necessary.

Where a recipient (for example, a major advertising or analytics provider such as Google) is certified under the EU-US Data Privacy Framework for its own processing, transfers to that recipient for that processing may instead rely on that framework’s adequacy decision.

You may request a copy of the relevant safeguards by contacting us at info@shopkineto.com.

1.10 How Long We Keep Your Data

• Order and transaction data — retained for the duration of our relationship and afterwards for the periods required by tax, accounting and consumer-protection law.
• Customer-service records — retained for as long as needed to handle your request and any related claim.
• Marketing data — retained until you withdraw consent or object, after which we suppress your details to honour your choice.
• Technical/cookie data — retained for the periods set out in our Cookie Policy.

When your data is no longer needed, we securely delete or anonymise it.

1.11 How We Protect Your Data

We implement appropriate technical and organisational measures — including encryption in transit, access controls, and restricted staff access — designed to protect your personal data against unauthorised access, loss, misuse or alteration.

While no method of transmission over the internet is completely secure, we work to protect your data and to notify you and the competent authority of any personal-data breach where required by law.

1.12 Your Rights Under the GDPR

If you are located in the EU/EEA, you have the right to:

• access the personal data we hold about you and obtain a copy;
• rectify inaccurate or incomplete data;
• erase your data (“right to be forgotten”) in certain circumstances;
• restrict or object to our processing, including objecting to direct marketing at any time;
• data portability — receive your data in a structured, commonly used, machine-readable format;
• withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, contact us at info@shopkineto.com. We will respond within one month, as required by the GDPR.

You also have the right to lodge a complaint with your local data protection authority (a list of EU/EEA authorities is available on the European Data Protection Board website, edpb.europa.eu). We would, however, appreciate the chance to address your concerns before you approach the authority.

1.13 Children’s Privacy

Our website and products are not directed at children, and we do not knowingly collect personal data from children under the age of 16 (or the applicable minimum age in your country).

If you believe a child has provided us with personal data, please contact us and we will delete it.

1.14 Third-Party Links

Our website may contain links to third-party sites, plugins and applications. Clicking on those links may allow third parties to collect or share data about you.

We do not control these third-party websites and are not responsible for their privacy statements. We encourage you to read the privacy policy of every site you visit.

1.15 Automated Decision-Making

We do not make decisions producing legal or similarly significant effects about you based solely on automated processing. Where we use automated tools to detect fraud or non-genuine orders, meaningful human review is available on request.

Part 2 — Hong Kong Compliance (PDPO)

HongKong AdTiger Media Co., Limited is incorporated and headquartered in Hong Kong. This Part explains how we, as a “data user” for the purposes of the Personal Data (Privacy) Ordinance, Cap. 486 (“PDPO”), handle personal data, and sets out the position for customers and website visitors located outside the EU/EEA.

It complements, and does not replace, Part 1 above for EU/EEA data subjects.

2.1 The Six Data Protection Principles

We handle personal data in accordance with the six Data Protection Principles (“DPPs”) set out in Schedule 1 to the PDPO:

• DPP1 (Collection) — we only collect personal data by lawful and fair means, for a purpose directly related to our business, and we do not collect more data than is necessary.
• DPP2 (Accuracy and retention) — we take all practicable steps to keep personal data accurate and to not keep it longer than necessary for the purpose for which it was collected.
• DPP3 (Use) — we do not use personal data for a new purpose without your express and voluntary consent, and we do not use your data for direct marketing without first obtaining your consent.
• DPP4 (Security) — we take all practicable steps to protect personal data against unauthorised or accidental access, processing, erasure, loss or use, including through contractual safeguards with any processor we engage.
• DPP5 (Openness) — we make this Privacy Policy available so that you can readily ascertain our data policies and practices, the kind of data we hold and the main purposes for which it is used.
• DPP6 (Access and correction) — you have the right to ask whether we hold your personal data, to obtain a copy of it, and to request correction of inaccurate data, as explained below.

2.2 What We Tell You When We Collect Your Data (Personal Information Collection Statement)

Where we collect personal data directly from you, we will let you know, or it will be apparent from the context: the purpose for which the data is collected; whether providing the data is obligatory or voluntary and, if obligatory, the consequences of not providing it; the classes of persons to whom the data may be transferred (see Section 1.8 above, which applies equally under this Part); and that you may request access to and correction of your data as described below.

2.3 Direct Marketing (PDPO, Section 35)

If we intend to use your personal data in direct marketing, or to provide your data to another person for use in direct marketing, we will first obtain your explicit consent (which may be indicated by an opt-in response), and we will tell you, free of charge, the kinds of data to be used and the kinds of products or services to be marketed.

You may withdraw your consent at any time, free of charge, using the unsubscribe link in any marketing message or by contacting us at info@shopkineto.com.

2.4 Data Access and Correction Requests

You may request access to, or correction of, the personal data we hold about you by writing to Sufang Chang at info@shopkineto.com or at our registered address in Section 2.7.

We may charge a reasonable fee to cover the direct cost of complying with a data access request, and we will normally respond within 40 days as required by the PDPO. We may need to verify your identity before actioning a request.

2.5 Transfers of Data Outside Hong Kong

Personal data we collect may be transferred to, and processed in, places outside Hong Kong, including the EU/EEA (where our customers are located), and by service providers located in other countries.

We take contractual and technical steps designed to ensure that any such transfer provides a standard of protection for your data that is comparable to the protection under the PDPO.

2.6 Complaints to the Privacy Commissioner

If you believe we have not complied with the PDPO, you may lodge a complaint with the Office of the Privacy Commissioner for Personal Data, Hong Kong (“PCPD”), 12/F, Sunlight Tower, 248 Queen’s Road East, Wanchai, Hong Kong — website: pcpd.org.hk.

We would, however, appreciate the opportunity to address your concerns directly first.

2.7 Data User Identity

The data user responsible for personal data handled under this Part 2 is HongKong AdTiger Media Co., Limited, Room 703, 7/F Kowloon Building, 555 Nathan Road, Kowloon City, Kowloon, Hong Kong, attn. Sufang Chang.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in the law. The “Last updated” date at the top shows when it was last revised. Material changes will be notified through our website or by other appropriate means.

Contact Us

If you have any questions about this document, or wish to exercise any of your rights, please contact us:

ShopKineto (operated by HongKong AdTiger Media Co., Limited)
Attn: Sufang Chang
Registered address: Room 703, 7/F Kowloon Building, 555 Nathan Road, Kowloon City, Kowloon, Hong Kong
Email: info@shopkineto.com
Phone: +1 251 800 9280
Website: shopkineto.com