Privacy Policy

1. Who we are

Jacky Wong, a private atelier based in Hong Kong, is the data controller responsible for the personal information described in this policy.

2. Information we collect

Account information: when you create a member account, we collect your name and email address. Your password is stored in hashed form and is never visible to us.

Inquiries and messages: the content of the messages you send through the on-site chat, including any pieces you ask about.

Preferences: the language setting you choose, and whether you opt in to receive private preview emails.

Technical information: standard server-log data such as your device type, browser, IP address, and the pages you visit.

3. How we use your information

To operate and secure the member area and respond to your inquiries.

To send you private preview emails only when you have explicitly opted in.

To protect the Site against misuse and to meet our legal obligations.

4. Legal bases

Where the EU or UK GDPR applies, we process personal information on the following legal bases: your consent (for example, preview emails), the performance of our service to you (your account and inquiries), and our legitimate interests in securing the Site and preventing abuse — except where those interests are overridden by your rights and freedoms.

5. Cookies

We use only strictly necessary cookies to keep you signed in and to remember your language preference. We do not use advertising or third-party tracking cookies. See our Cookie Policy for details.

6. Sharing and disclosure

We do not sell, rent, or share your personal information for advertising.

We may share information with service providers (such as hosting and email providers) who process it on our instructions.

We may disclose information when required by law or to protect our rights and the safety of others.

We do not share your information with third parties for their own marketing purposes.

7. International transfers

Our service providers may process information outside your home country. Where personal information is transferred across borders, we rely on appropriate safeguards as required by applicable law.

8. Retention

We keep personal information only as long as necessary for the purposes described above, or as required by law. If you delete your account, we remove or anonymize your information unless we are required to retain it.

9. Your rights

Depending on your jurisdiction, you may have the right to access, correct, delete, restrict, or object to the processing of your personal information, to data portability, and to withdraw consent at any time.

California residents may have additional rights under the CCPA/CPRA, including the right to know what personal information we collect and to request its deletion. We do not "sell" or "share" personal information as those terms are defined under California law.

10. Security

We apply reasonable technical and organizational measures to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Children

The Site is not directed to individuals under 16, and we do not knowingly collect personal information from children.

12. Changes to this policy

We may update this policy from time to time. The "last updated" date above will reflect any changes.

13. Contact

To exercise your rights or ask questions about this policy, contact Jacky via the on-site inquiry.