1. Information we collect
When you enquire, we receive the fields you submit, such as your name, email, phone number, company, country, product interests, quantities, and message. Form submissions also include the source page, selected language, and submission time. Please do not send passwords, full card details, identity documents, or unnecessary sensitive information in a message.
For an order, we receive customer and recipient names, email, mobile number, delivery address, purchased products and variants, quantities, amounts, transaction references, invoice or receipt links, and payment and fulfilment status. Stripe collects your payment details on its hosted checkout. Our website order database does not store full card numbers or card security codes. Hosting and security services may process IP addresses, browser and device information, requested pages, timestamps, and diagnostic or security events.
2. Why we use information
We use information to answer enquiries, prepare quotations, process payments and orders, arrange delivery, provide updates and after-sales support, handle refunds and disputes, prevent fraud, secure the website, and meet accounting or legal obligations. Required fields are identified in the relevant form or checkout; without the information needed for a service, we may be unable to respond, take payment, or deliver your order. Optional details are your choice.
Where a law requires a legal basis, we rely as appropriate on taking steps you request before a contract or performing it, legal obligations, legitimate interests in service support and security balanced against your rights, or consent where required. Submitting an enquiry or ordering does not automatically subscribe you to marketing. We will seek the consent required by applicable law before using your details for direct marketing, and you can ask us to stop at any time.
3. Who we share information with
We share relevant information with payment providers, delivery partners, website and communication service providers, and advisers or authorities where legally required. This helps us process payments, deliver orders, answer enquiries, and protect our services. We do not sell your personal information.
4. International processing
Our service providers and delivery partners operate internationally. Information may be processed outside your country, including in Hong Kong, mainland China, the United States, or other locations used by the relevant provider. Privacy laws may differ between locations. Where applicable law requires safeguards or a specific transfer mechanism, those requirements apply; you may contact us for information about safeguards relevant to your data. Using this website is not blanket consent to transfers that require a separate legal basis.
5. Browser storage and cookies
The site uses browser local storage to remember your cart, enquiry bag, favourites, recently viewed products, and language. These saved preferences can remain until you remove them or clear this site’s data in your browser. Cart and enquiry selections are sent to our services when you validate a cart, start checkout, or submit an enquiry; saving a favourite alone does not create a customer account. Clearing browser storage removes saved choices but does not delete completed orders or messages already sent.
Hosting, security, staff sign-in, and external payment services may use cookies or similar technologies for their functions. Browser settings let you manage cookies and site data, although blocking necessary storage can affect features. If non-essential tracking requiring consent is introduced, we will provide the required information and choices before activating it.
6. Retention and security
Order and transaction records are kept for fulfilment, refunds, accounting, tax requirements, and the resolution of claims. Enquiries and correspondence are kept while needed to handle your request and related follow-up or disputes. The appropriate period depends on the record, applicable legal requirements, and any ongoing claim; information should be deleted or anonymised when no longer needed. We do not promise automatic deletion after a fixed period. Providers may retain separate records for their own legal obligations.
We use HTTPS and restrict access to the private order dashboard to authorised personnel. These measures reduce risk but cannot guarantee absolute security. Please contact us promptly if you suspect misuse of information relating to your order.
7. Your privacy rights
You can contact info@sanniclifestyle.com to request access to or correction of your personal information, or to ask about deletion and retention. Depending on the law applicable to you, you may also have rights to erasure, restriction, objection, portability, or withdrawal of consent. Withdrawal does not affect lawful processing before withdrawal. Some records may need to be retained for legal obligations or claims, so deletion is not always immediate or complete. We will explain any applicable exception.
Please provide enough information to identify the relevant enquiry or order. We may verify your identity proportionately before disclosing or changing records, and will respond within the applicable legal timeframe. You may complain to the Hong Kong Privacy Commissioner for Personal Data or the privacy regulator available to you under local law. Contacting us first does not limit that right.
8. Updates and contact
We may update this policy as our services or legal requirements change. The date above identifies this version. Material changes requiring notice or consent will be handled as required by applicable law. For privacy questions or requests, email info@sanniclifestyle.com with the subject ‘Privacy request’.