Privacy Policy

Privacy Policy

Effective: 12 August 2026

1. Who we are

bibashops.hk is operated by Argentown International Limited. We are the data user responsible for personal data collected through the Store, and we handle it in accordance with the Personal Data (Privacy) Ordinance (Cap. 486) ("PDPO").

2. What we collect

(a) Account and order data: name, title, email, phone number, delivery address, order history. (b) Payment: processed by our third-party payment processor — we never receive or store full card numbers. (c) Newsletter subscription status. (d) Basic technical data needed to run the Store (session cookies, shopping-bag contents, language preference).

3. Why we collect it

To process and deliver your orders; to provide customer service, returns and exchanges; to maintain your account; to send our newsletter only if you have subscribed (you can unsubscribe at any time via the link in each email); to meet legal and accounting obligations; and to prevent fraud.

4. Direct marketing

We use your email address for direct marketing only with your consent, as required by the PDPO. You may withdraw consent at any time, free of charge, by using the unsubscribe link or contacting Customer Service.

5. Who we share it with

Delivery companies (to deliver your order); our payment processor (to take payment); and IT service providers that host and maintain the Store. Your personal data is stored in Hong Kong. The one exception is the chat assistant: if you use it, the message you type is sent to our AI service provider outside Hong Kong to generate a reply, and is not stored afterwards — see section 12. We never sell personal data.

6. Cookies

The Store uses cookies that are necessary for it to function (sign-in session, shopping bag, language). If we introduce analytics cookies in future, this policy will be updated first.

7. Security

Personal data is stored on secured systems with access limited to those who need it. Payment pages are encrypted (HTTPS/TLS).

8. Retention

We keep personal data only as long as needed for the purposes above: transaction records are kept for 7 years to meet legal and accounting requirements; account data until you ask us to delete your account; newsletter data until you unsubscribe.

9. Your rights

Under the PDPO you may request access to, and correction of, your personal data. Send requests to Customer Service (below); we respond within 40 days as the PDPO requires, and may charge a reasonable fee for access requests as the PDPO permits.

10. Third-party links

The Store may link to third-party sites (e.g. our social media); their privacy practices are their own.

11. Changes

We may update this policy; the current version is always available on this page with its effective date.

12. Chat assistant

Our website offers a chat assistant so you can ask questions about our products, delivery, returns and care. If you use it, we collect the messages you send, the time of the conversation, the page you opened the chat from, and a temporary session identifier.

Before you can send your first message, we ask you to agree to our Terms and Conditions and to this Privacy Policy. The chat will not accept a message until you do, and we collect nothing from you if you simply open the chat and close it again. Your agreement is recorded in your own browser, not on our servers — you can withdraw it at any time using the Withdraw consent link in the chat window, or by clearing your browser data.

You do not need to give us your name, email address or phone number to use the chat. If you choose to share contact details so that a colleague can follow up, we will use them only for that purpose.

The chat is answered by an automated assistant, and a member of our team can take over at any time — just ask. To produce a reply, your messages are sent to an AI service provider acting on our behalf. Your conversations are not used to train AI models.

We do not keep a log of your chat conversation. Your messages are sent to the AI service provider only to generate a reply, and are not stored by us afterwards. The only lasting record is an email you choose to send us when you ask a colleague to follow up, which we keep like any other customer-service enquiry. Please do not send payment card details, identity document numbers or passwords in the chat — we will never ask for them.

You may request access to, or correction of, your personal data held by us using the contact details in this policy.

13. Contact

Privacy matters and access/correction requests: cs.biba.hk@gmail.com.