隐私政策

Privacy Policy

Last updated: 9 September 2026

DJC Fit is operated by DJC Technology Limited, a 
company incorporated in Hong Kong (Company Registration No. 81170943), with 
its registered office at Room 1508, 15/F, Grand Plaza Office Tower Phase 2, 
625 Nathan Road, Mong Kok, Hong Kong.

This store and website, including all related information, content, features, 
tools, products and services, is provided to you (the "customer") to offer a 
curated shopping experience (the "Services"). Our store is powered by Shopify, 
which enables us to provide the Services to you.

This Privacy Policy explains how we collect, use, disclose and protect your 
personal data when you visit, use, make a purchase or other transaction 
through the Services, or otherwise communicate with us. If there is a conflict 
between our Terms of Service and this Privacy Policy, this Privacy Policy 
governs with respect to the collection, processing and disclosure of your 
personal data.

Please read this Privacy Policy carefully. By using and accessing the 
Services, you acknowledge that you have read this Privacy Policy and 
understand how your personal data is collected, used and disclosed as 
described here.

1. Personal Data We Collect

"Personal data" means information that identifies you or another individual, 
or that can reasonably be linked to you or another individual. It does not 
include information that has been anonymised or de-identified such that it can 
no longer be linked to an individual.

Depending on how you use the Services and where you are located, we may 
collect or process the following categories of personal data:

- Contact details: your name, billing address, shipping address, phone number 
  and email address.
- Payment and financial information: payment method, payment confirmation, 
  transaction details, and other payment-related information. Card details are 
  collected and processed directly by our payment providers; we do not store 
  full card numbers.
- Account information: your username, password, security questions, 
  preferences and settings.
- Transaction information: items you view, add to cart, add to wishlist, or 
  purchase, return, exchange or cancel, and your past transaction history.
- Communications: information you provide when you contact us, for example 
  when you submit a customer support enquiry.
- Device information: information about your device, browser or network 
  connection, your IP address and other unique identifiers.
- Usage information: information about how and when you use or navigate the 
  Services.

2. Sources of Personal Data

We may collect personal data from:
- You directly, when you create an account, use the Services, contact us, or 
  otherwise provide personal data to us;
- Automatically through the Services, including from your device and through 
  cookies and similar technologies;
- Our service providers, when they perform services on our behalf and collect 
  or process your personal data for us;
- Our partners and other third parties.

3. How We Use Your Personal Data

We may use your personal data to:
- Provide, tailor and improve the Services: to fulfil our contract with you, 
  process payments, fulfil and ship orders, process purchases, returns, 
  exchanges and cancellations, create and manage your account, arrange 
  shipping, and provide a personalised shopping experience.
- Marketing and advertising: to send marketing, advertising and promotional 
  messages by email or other channels, and to show you online advertisements 
  for products or services based on your activity on the Services and other 
  websites.
- Security and fraud prevention: to verify your account, provide a secure 
  payment and shopping experience, detect, investigate and act on possible 
  fraudulent, illegal or malicious activity, and keep our Services secure. If 
  you register an account, you are responsible for keeping your account 
  credentials safe. We strongly recommend that you do not share your username, 
  password or other access details with anyone.
- Communicate with you: to provide customer support, respond to your requests 
  and maintain our business relationship.
- Legal and compliance purposes: to comply with applicable law, respond to 
  lawful requests from public authorities, investigate or participate in legal 
  proceedings, and enforce our terms or policies.

4. Legal Basis for Processing

Where applicable law requires a legal basis, we process your personal data on 
one or more of the following bases: your consent; performance of a contract 
with you; compliance with a legal obligation; and our legitimate interests in 
operating, securing and improving our business. Where we rely on your consent, 
you may withdraw it at any time, and we will stop the relevant processing 
unless another legal basis applies.

5. How We Disclose Personal Data

We may disclose your personal data to third parties for legitimate purposes, 
including:
- Shopify, and vendors and service providers who perform services on our 
  behalf (for example IT management, payment processing, data analytics, 
  customer support, cloud storage, fulfilment and shipping);
- Business and marketing partners, to provide marketing services and deliver 
  advertisements. These partners will use your information in accordance with 
  their own privacy notices;
- Third parties when you direct, request or otherwise consent to such 
  disclosure, for example to arrange shipping, or through your use of social 
  media widgets or login integrations;
- Our affiliates and corporate group;
- In connection with a business transaction such as a merger or insolvency, to 
  comply with legal obligations, to enforce our terms or policies, and to 
  protect or defend our rights and the rights of our users or others.

6. Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal data 
about your access to and use of the Services in order to provide and improve 
the Services for you. Information you submit to the Services will be 
transmitted to and shared with Shopify, as well as third parties who may be 
located in countries other than your country of residence. Shopify is 
responsible for processing your personal data for these purposes, including 
responding to requests to exercise your rights in relation to such processing. 
To learn more about how Shopify uses your personal data and the rights you may 
have, please visit the Shopify Consumer Privacy Policy at 
https://www.shopify.com/legal/privacy.

7. International Transfers of Personal Data

Because our business and our service providers operate across borders, your 
personal data may be transferred to, stored in and processed in jurisdictions 
outside your country of residence, including Hong Kong, Singapore, the United 
States, Canada and other jurisdictions where Shopify, our payment providers, 
our shipping partners and our marketing partners operate.

Where required by applicable law, we take steps to ensure that such transfers 
are carried out in accordance with applicable data protection requirements, 
including by relying on contractual commitments, assessing the level of 
protection in the destination jurisdiction, or relying on your consent. By 
using the Services, you acknowledge that your personal data may be 
transferred, stored and processed outside your country of residence.

8. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes 
described in this Privacy Policy, including to maintain your account, provide 
the Services, comply with legal, tax and accounting obligations, resolve 
disputes, and enforce our contracts and policies. We will delete or 
anonymise personal data that is no longer required for these purposes.

9. Security

We implement administrative, technical and physical safeguards designed to 
protect your personal data against unauthorised access, use, disclosure, 
alteration or destruction. However, no security measure is completely 
effective, and we cannot guarantee absolute security. We recommend that you 
do not send sensitive or confidential information to us through unsecure 
channels.

If a personal data breach occurs, we will notify the relevant regulatory 
authority and affected individuals where required by applicable law, within 
the time limits prescribed by that law (in most Southeast Asian jurisdictions, 
notification to the regulator is required within 72 hours of becoming aware of 
the breach).

10. Your Rights

Subject to your country of residence and applicable law, you may have the 
following rights in relation to your personal data:

- Right of access: to request access to the personal data we hold about you.
- Right to correction: to request correction of inaccurate or incomplete 
  personal data we hold about you.
- Right to erasure: to request deletion of your personal data, subject to 
  legal retention requirements.
- Right to withdraw consent: to withdraw consent you have given for the 
  processing of your personal data.
- Right to data portability: in certain jurisdictions (including Malaysia and 
  Singapore), to request that your personal data be transmitted to another 
  data controller, where technically feasible.
- Right to object: to object to certain processing, including processing for 
  direct marketing purposes.

These rights are not absolute and may apply only in certain circumstances, and 
we may decline your request where permitted by law. We may need to verify your 
identity before processing your request.

To exercise any of these rights, please contact us using the details below. We 
will respond within the time limits prescribed by applicable law. We will not 
discriminate against you for exercising any of these rights.

11. Applicable Privacy Laws in Southeast Asia

We serve customers across Southeast Asia. Depending on where you are located, 
the following laws may apply to our processing of your personal data:

- Singapore: Personal Data Protection Act 2012 (PDPA)
- Malaysia: Personal Data Protection Act 2010 (as amended by the Personal Data 
  Protection (Amendment) Act 2024)
- Indonesia: Personal Data Protection Law No. 27 of 2022
- Philippines: Data Privacy Act of 2012 (Republic Act No. 10173)
- Thailand: Personal Data Protection Act B.E. 2562 (2019)
- Vietnam: Personal Data Protection Law No. 91/2025/QH15

12. Marketing Communications and Cookies

We may send you promotional emails. You may opt out at any time by using the 
unsubscribe option shown in our emails. If you opt out, we may still send you 
non-promotional communications, such as those relating to your account or 
orders.

We use cookies and similar technologies to operate the Services, remember your 
preferences, understand how the Services are used, and to deliver relevant 
advertising. You can manage cookie preferences through your browser settings. 
Please note that disabling certain cookies may affect the functionality of the 
Services.

13. Children's Data

The Services are not directed to minors as defined under the laws of your 
jurisdiction, and we do not knowingly collect personal data from minors 
without the consent of a parent or guardian where such consent is required. If 
you are a parent or guardian and believe that your child has provided personal 
data to us, please contact us using the details below to request deletion.

14. Third Party Websites and Links

The Services may contain links to websites or other online platforms operated 
by third parties. We are not responsible for the privacy or security practices 
of those platforms, or for the accuracy, completeness or reliability of 
information they contain. We encourage you to review their privacy policies. 
Information you share on public or semi-public platforms, including 
third-party social networks, may be viewable by other users of those 
platforms.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our 
privacy practices or for other operational, legal or regulatory reasons. We 
will post the revised Privacy Policy on this website, update the "Last 
updated" date, and provide notice where required by applicable law.

16. Complaints

If you have a complaint about how we handle your personal data, please contact 
us using the details below. Depending on where you are located, you may also 
have the right to lodge a complaint with your local data protection 
authority — for example, the Personal Data Protection Commission in Singapore, 
the Personal Data Protection Department in Malaysia, the National Privacy 
Commission in the Philippines, or the relevant authority in your jurisdiction.

17. Contact Us

If you have any questions about our privacy practices or this Privacy Policy, 
or if you would like to exercise any of your rights, please contact us:

DJC Technology Limited
Room 1508, 15/F, Grand Plaza Office Tower Phase 2
625 Nathan Road, Mong Kok, Hong Kong
Email: china.bob.ding@gmail.com