| 27. |
Privacy Policy |
| |
| 27.1 |
We are committed to safeguarding the privacy of each individual in accordance with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong and our privacy policy, and we ensure that our employees handle personal data in accordance with the strictest standard of security and confidentiality. |
| 27.2 |
This section describes the type of information that we collect from you through the use of our Services or the use of our MUJI Hong Kong Official Online Shop, how that information may be used or disclosed by us and the safeguards we use to protect it. |
| 27.3 |
Please read this section carefully to ensure you understand our policies regarding your information and how we will treat it. By using or accessing our MUJI Hong Kong Official Online Shop or the Services, you agree to the collection, use and disclosure of information in accordance with this Privacy Policy. This Privacy Policy may be changed from time to time and your continued use of the MUJI Hong Kong Official Online Shop or the Services is deemed to be acceptance of such changes. Please check MUJI Hong Kong Official Online Shop regularly for any updates on this Privacy Policy. |
| 27.4 |
If you do not accept and do not agree with this Privacy Policy, you must stop using our MUJI Hong Kong Official Online Shop or the Services immediately. |
|
| 28. |
Information to be Collected |
| |
| 28.1 |
We may collect, use, store and/or transfer different kinds of data about you which may include but is not limited to the following: |
| |
| (a) |
personal data that identifies you as an individual, including but not limited to your first name, last name, demographics (e.g. age), email address, credit card information, and phone number; |
| (b) |
technical data, which may include internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this MUJI Hong Kong Official Online Shop; |
| (c) |
profile data, which may include your username and password, orders made by you, your interests, preferences, feedback, and survey responses; |
| (d) |
usage data and analytics to evaluate your use of the MUJI Hong Kong Official Online Shop; |
| (e) |
direct marketing and communications data, which may include but is not limited to your preferences in receiving marketing from us and our third parties and your communication preferences (see ‘Direct Marketing’ in paragraph 30 below); |
| (f) |
interaction data, which may include any information that you might provide to us or to the public via MUJI Hong Kong Official Online Shop; |
| (g) |
cookies data; and |
| (h) |
third party’s information which we receive about you from other sources. |
|
| 28.2 |
We may collect, use, and share aggregated data such as statistical or demographic data for any other purpose. However, if we combine or connect aggregated data with your personal data such that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this Privacy Policy. |
|
| 29. |
Purpose of Collection |
| |
| 29.1 |
We may use the information in the following manner: |
| |
| (a) |
to ensure that content from our MUJI Hong Kong Official Online Shop is presented effectively to you; |
| (b) |
to carry out services relating to MUJI Hong Kong Official Online Shop; |
| (c) |
to personalise your website experience and to allow us to deliver the type of content and product offerings in which you are most interested; |
| (d) |
to formulate our marketing and promotional strategies and plans; |
| (e) |
to market our Services and products or services offered by MUJI business partners or advertising partners; |
| (f) |
to administer a contest, promotion, survey or other such activities. Some of these activities have additional terms and conditions, which could contain additional information about how we use and disclose your personal data; |
| (g) |
to provide information, and services that you request, or (with your consent) which we think may interest you; |
| (h) |
to conduct data analysis to develop or improve our services; |
| (i) |
to prevent or detect any suspicious Prohibited Acts, misuse or fraud; |
| (j) |
to respond to your requests and communicate with you in the course of providing our services; |
| (k) |
to fulfil legal and administrative purposes; |
| (l) |
If you have opted-in to receive our marketing information (e.g. e-newsletters), we may contact you for marketing, advertising, and customer research purposes. |
|
| 29.2 |
In any event, we respect your personal data and will only process your personal data if at least one of the following principles applies: |
| |
| (a) |
you have given consent to the processing of your personal data for one or more specific purposes; |
| (b) |
processing is necessary for the performance of a contract to which you are a party or in order to take steps at the request of you prior to entering into a contract; |
| (c) |
processing is necessary for compliance with a contractual or legal obligation; |
| (d) |
processing is necessary to protect the vital interests of you or others for the public interest; and/or |
| (e) |
processing is necessary for the purposes of the legitimate interests pursued by us or by a third party such as our partnering courier services providers. |
|
| 29.3 |
If we receive personal data in the course of providing our Services to you from another data subject (for example, you have appointed another person to receive the products you ordered from us), we expect you to have complete responsibility for ensuring that the contents of this Privacy Policy are brought to their attention and you have obtained their consent in the process. |
|
| 30. |
Direct Marketing |
| |
| 30.1 |
From time to time, we may (or our marketing partners may) use your personal data to send you news, offers, promotions and joint marketing offer and we require your consent (or your indication of no objection) for these purposes. Only with your consent (or your indication of no objection), we may contact you by your preferred way of communications for direct marketing purposes. |
| 30.2 |
If you prefer not to receive any direct marketing communications, you can opt out at any time by updating your preferences through your MUJI Hong Kong Official Online Shop Account. |
| 30.3 |
If you have not opted-in to receive direct marketing information, you will not receive them. |
|
| 31. |
Use of Cookies and Similar Tracking Technologies |
| |
| 31.1 |
We use cookies and similar tracking technologies on MUJI Hong Kong Official Online Shop. Some of them are placed by us and some of them are third-party cookies set by other companies. In particular, MUJI Hong Kong Official Online Shop uses the following types of cookies and tracking technologies: |
| |
| • |
Strictly necessary cookies: These cookies are essential for us to provide services and features of our MUJI Hong Kong Official Online Shop. Such cookies and technologies are necessary for system administration and to ensure the functionality of the shopping cart; |
| • |
Functional and preference cookies: These cookies would inform us of information surrounding your access to the MUJI Hong Kong Official Online Shop. For example, these cookies help us to identify your preferred features and interests so that we improve your browsing experience or otherwise make it more convenient for you to visit MUJI Hong Kong Official Online Shop. For example, to pre-fill forms for you based on your previous inputs or store your language preference; |
| • |
Session cookies: These cookies contain information that is stored in a temporary memory which will be deleted each time you leave MUJI Hong Kong Official Online Shop. For example, a unique ID will be generated by MUJI Hong Kong Official Online Shop each time you visit MUJI Hong Kong Official Online Shop; |
| • |
Analytic cookies: These cookies enable us to estimate our audience size and usage patterns (including traffic, average time on site, geographic location of visitors and other useful metrics). in this respect, we use Google Analytics Cookies. Google provides ways to manage or opt out of certain of its advertising and analytics cookies (https://tools.google.com/dlpage/gaoptout). You may read Google’s Privacy Policy at https://policies.google.com/privacy ; and |
| • |
Targeting cookies: These cookies help us to measure, optimize and gather audiences for advertising campaigns. This is to ensure our advertisements can be seen by interested parties. Such cookies also allow us to provide you with offers that are targeted to your interests. In this respect, we use Facebook Pixel and doubleclick.net cookies. You may opt out by visiting https://www.facebook.com/ads/preferences. |
|
| 31.2 |
Overall, we use cookies and similar tracking technologies to: |
| |
| (a) |
distinguish you from other users; |
| (b) |
obtain information about your preferences, viewing and browsing behaviour, online movements and use of the Internet; |
| (c) |
keep track of the products stored in your shopping cart; |
| (d) |
carry out research and statistical analysis to help improve our Services and to help us better understand our customer requirements and interests; |
| (e) |
target our marketing and advertising campaigns and those of our business partners and advertisers more effectively by providing interest-based advertisements that are personalised to your interests; |
| (f) |
enable tighter security; and |
| (g) |
improve our MUJI Hong Kong Official Online Shop and your experience on our MUJI Hong Kong Official Online Shop. |
|
| 31.3 |
By accessing MUJI Hong Kong Official Online Shop and using our Services, you are consenting to our use of cookies and tracking technologies described in this Privacy Policy. The information we obtain from our use of cookies may or may not contain your personal data. To the extent that the data we collect by cookies is combined with personal data or such data can be used to identify an individual, we shall treat the combined data and such data as personal data for the purposes of this Privacy Policy. |
| 31.4 |
If you want to disable the use of all cookies, you can do so on your own web browser. If you disable cookies, you acknowledge that you may not be able to access and/or use some of the functionality of our website. |
|
| 32. |
Third-party Links |
| |
| 32.1 |
Our MUJI Hong Kong Official Online Shop and Services may contain links to third-party websites that are not covered by this Privacy Policy. We, therefore, ask you to review the privacy statements of other websites and applications to understand their information practices. |
| 32.2 |
We are not responsible for the use of your personal data by such a third party and we cannot guarantee that they have the same level of data protection policy as us. |
|
| 33. |
Data Storage and Security |
| |
| 33.1 |
To fulfil your order and to provide services to you, we may transfer your collected data to storage outside of Hong Kong. We are currently storing all collected data at our service provider’s servers located in Singapore. If we do store or transfer data outside of Hong Kong or the region where you live, we will take all reasonable steps to ensure that your data is treated safely and securely in compliance with applicable data privacy laws. Your acceptance of this Privacy Policy shall be your consent permitting us to store or transfer data to and from outside of Hong Kong or the region where you live if it is for our legitimate business purposes. |
| 33.2 |
Data security is of great importance to us. To protect your data, we have put in place suitable physical, electronic, and managerial measures to prevent unlawful or accidental destruction, accidental loss, unauthorized disclosure or access or other unlawful forms of processing. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality. |
| 33.3 |
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so. |
| 33.4 |
Notwithstanding the security measures that we take, the transmission of data via the Internet may not be completely secure and we advise you to take suitable precautions when transmitting data to us via the Internet. You understand that no data transmission over the Internet can be guaranteed as totally secure. Whilst we strive to protect such information and your personal data, we do not warrant and cannot ensure the security of any information which you transmit to us. Any information which you transmit to us is transmitted at your own risk. We disclaim any liability for any theft, loss of, damage or unauthorized access of any data or communications. By using our MUJI Hong Kong Official Online Shop, you acknowledge that you understand and agree to assume these risks. |
| 33.5 |
We will not keep your personal data longer than necessary. We may however be required to retain personal data for a longer period of time to ensure we comply with legislative and regulatory requirements. We will review our data retention obligations to ensure we are not retaining data for longer than we are legally obliged to. |
|
| 34. |
Information Disclosure |
| |
| 34.1 |
We will keep your personal data confidential; however, you acknowledge and agree that we may provide information on a need-to-know basis to the following parties which may be located outside of Hong Kong or the place of your residence. You hereby consent to us for disclosing and transferring your personal data to the following recipients: |
| |
| (a) |
our holding companies, subsidiaries or affiliated companies in and/or outside of Hong Kong; |
| (b) |
independent contractors and/or other service providers for them to provide their services to us, including: |
| |
| (i) |
payment gateways or other payment processors; |
| (ii) |
courier services providers; |
| (iii) |
cloud services providers which support our database and data management services providers; |
| (iv) |
information technology services providers; |
| (v) |
data storage and management services providers; |
| (vi) |
website developers; |
| (vii) |
market research, web analytics services providers; |
| (viii) |
technical support services providers to support our warranty services; |
|
| (c) |
law enforcement authorities in order for us to comply with laws and/or regulations, or any valid orders of any competent courts; and/or |
| (d) |
assignees or successors of MUJI, if MUJI undergoes restructuring or is sold to another organisation, we may disclose personal data in connection with the sale, assignment, or other transfer of the business to which the data relates. |
|
| 34.2 |
We may disclose your personal data in order to enforce or exercise our rights and obligations under this Privacy Policy or other applicable terms and conditions or contracts made us and to protect the rights, property or safety of our users, MUJI or others. In addition, we may exchange information with other organisations for fraud protection and risk reduction. |
| 34.3 |
We shall take reasonable contractual measures to ensure that these recipients only process your personal data in accordance with this Privacy Policy but for no other purposes and the recipients should adequately protect your personal data from any unauthorised use, access, disclosure deletion or alteration. |
| 34.4 |
You also agree that you will not disclose your personal data on our MUJI Hong Kong Official Online Shop (e.g. comments or review section) where the public can easily access it. If you do disclose your personal data, we will not be held liable for any damages you suffer from such disclosure. |
|
| 35. |
Your Rights |
| |
| 35.1 |
You have the right to do the following: |
| |
| (a) |
request access to, deletion of or correct, your personal data held by us; |
| (b) |
request that your personal data be transferred to another person; |
| (c) |
be informed of what data processing is taking place; |
| (d) |
restrict processing; |
| (e) |
to object to the processing of your personal data; |
| (f) |
complain to a supervisory authority; and |
| (g) |
to enforce any of the foregoing rights or if you have any other questions about our MUJI Hong Kong Official Online Shop or this Privacy Policy, please contact us by email at mujics@muji.com.hk. |
|
| 35.2 |
You shall note that under section 19(1) of the Personal Data (Privacy) Ordinance (Cap. 486), the data access request would be complied with within 40 days after receiving such request. If the request is unable or has valid grounds to refuse to comply, in accordance with section 19(2) or 21(2) of the said Ordinance, we will give you a notification of such matter within the same 40 days period. |
| 35.3 |
MUJI reserves the right to charge you a reasonable fee for complying with a data access request as permitted by the applicable laws. |
|
| 36. |
Automated Decision-Making and Profiling |
| |
| 36.1 |
In the event that we use personal data for the purpose of automated decision-making and those decisions have a legal (or similarly significant) effect on you, you have the right to challenge such decisions under applicable laws, requesting human intervention, expressing your own point of view, and obtaining an explanation of the decision from us. |
| 36.2 |
The right described in this section does not apply in the following circumstances: |
| |
| (a) |
the decision is necessary for the entry into, or performance of, a contract between you and us; |
| (b) |
the decision is authorised by law; or |
| (c) |
you have given your explicit consent. |
|
|
| 37. |
Changes to the Privacy Policy |
| |
We may change our Privacy Policy from time to time. Any changes we may make to our Privacy Policy in the future will be posted on MUJI Hong Kong Official Online Shop and, where appropriate and feasible, may be notified to you by email.
If you have any questions about this Privacy Policy, please email us at mujics@muji.com.hk . |