Privacy Policy

Welcome to Homfinity ("we," "our," or "us"). We are committed to protecting your privacy and ensuring that your personal data is handled responsibly and in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR).

This Privacy Policy explains how Advan Hong Kong Technology Limited, operating Homfinity, with operations in Hong Kong at RM 1307 13/F, Kenbo Commercial Building, 335-339 Queen's Road West, Hong Kong, collects, uses, stores, and protects your personal information when you visit our website homfinity.shop or make purchases from us.

By using our website or services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use our services.

We collect various types of information to provide and improve our services to you. The information we collect falls into the following categories:

2.1 Information You Provide Directly

• Account Information: Name, email address, password, and phone number when you create an account.
• Order Information: Billing and shipping addresses, payment details, and order history when you make a purchase.
• Communication Data: Information you provide when you contact our customer support, submit reviews, or respond to surveys.
• Preferences: Your marketing preferences and communication settings.

2.2 Information Collected Automatically

• Device Information: IP address, browser type, operating system, device identifiers, and screen resolution.
• Usage Data: Pages visited, time spent on pages, click patterns, and navigation paths.
• Location Data: General geographic location based on IP address.
• Cookie Data: Information collected through cookies and similar tracking technologies (see Section 5).

2.3 Information from Third Parties

• Payment Processors: Transaction confirmation and fraud prevention data from payment providers.
• Shipping Partners: Delivery confirmation and tracking information.
• Analytics Services: Aggregated website usage statistics.

We use your personal information for the following purposes, each based on a specific legal basis under GDPR:

3.1 To Fulfill Our Contract with You

• Processing and delivering your orders
• Managing payments and refunds
• Providing customer support and responding to inquiries
• Sending order confirmations and shipping updates
• Processing returns and exchanges

3.2 Based on Your Consent

• Sending marketing emails and newsletters (you can opt out anytime)
• Displaying personalized advertisements
• Using non-essential cookies for analytics and marketing

3.3 For Our Legitimate Interests

• Improving our website, products, and services
• Conducting business analytics and research
• Preventing fraud and ensuring security
• Personalizing your shopping experience
• Sending service-related communications

3.4 For Legal Compliance

• Complying with tax and accounting obligations
• Responding to legal requests from authorities
• Enforcing our terms and conditions

We may share your personal information with the following categories of recipients, only to the extent necessary for the purposes described in this policy:

4.1 Service Providers

• Payment Processors: To securely process your payments (e.g., Stripe, PayPal)
• Shipping Partners: To deliver your orders (e.g., DHL, UPS, FedEx, local carriers)
• Email Services: To send transactional and marketing emails
• Analytics Providers: To analyze website usage (e.g., Google Analytics)
• Customer Support Tools: To manage customer inquiries

4.2 Legal Requirements

We may disclose your information if required by law, court order, or governmental regulation, or if we believe disclosure is necessary to:

• Comply with legal obligations
• Protect our rights, property, or safety
• Prevent fraud or illegal activities
• Respond to lawful requests from public authorities

4.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of our business, your personal information may be transferred as part of that transaction. We will notify you of any such change and your options regarding your data.

We use cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and personalize content. A cookie is a small text file stored on your device when you visit our website.

5.1 Types of Cookies We Use

5.2 Managing Cookies

You can manage your cookie preferences through:

• Our cookie consent banner when you first visit our website
• Your browser settings (to block or delete cookies)
• Our Cookie Settings page (accessible from the website footer)

Please note that disabling essential cookies may affect website functionality, including your ability to place orders.

For more detailed information, please see our Cookie Policy.

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• SSL Encryption: All data transmitted between your browser and our servers is encrypted using SSL/TLS technology.
• Secure Payment Processing: We use PCI DSS-compliant payment processors. We never store complete credit card details on our servers.
• Access Controls: Only authorized personnel have access to personal data, on a need-to-know basis.
• Regular Security Audits: We conduct regular reviews of our security practices.
• Secure Data Storage: Data is stored on secure servers with appropriate firewalls and protection.
• Employee Training: Our staff receives regular training on data protection and privacy practices.

As a data subject under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:

How to Exercise Your Rights

To exercise any of these rights, please contact us through our contact page with your request. We will respond within 30 days. We may need to verify your identity before processing your request.

If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements.

After the retention period expires, we securely delete or anonymize your data so it can no longer be associated with you.

As we operate internationally with presence in Hong Kong and serve customers in Europe and Asia, your personal data may be transferred to and processed in countries outside your jurisdiction. When we transfer data internationally, we ensure appropriate safeguards are in place:

• Adequacy Decisions: Transfers to countries recognized by relevant authorities as providing adequate data protection.
• Standard Contractual Clauses: We use standard contractual clauses approved by relevant data protection authorities with service providers.
• Binding Corporate Rules: Where applicable, transfers within corporate groups with approved binding corporate rules.
• Encryption & Security: All international data transfers are encrypted and secured.

You can request more information about the safeguards we use for international transfers by contacting us through our contact page.

Our website and services are not intended for children under the age of 16. We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately through our contact page, and we will take steps to delete such information.

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make significant changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you via email (if you have an account) for material changes
• Display a prominent notice on our website

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.