Privacy Policy
Effective: 30 September 2026
1. Who we are
bibashops.hk is operated by Argentown International Limited. We are the data user responsible for personal data collected through the Store, and we handle it in accordance with the Personal Data (Privacy) Ordinance (Cap. 486) ("PDPO").
2. What we collect
(a) Account and order data: name, title, email, phone number, delivery address, order history. (b) Payment: processed by our third-party payment processor — we never receive or store full card numbers. (c) Newsletter subscription status. (d) Basic technical data needed to run the Store (session cookies, shopping-bag contents, language preference), and the analytics and advertising cookies described in section 6.
3. Why we collect it
To process and deliver your orders; to provide customer service, returns and exchanges; to maintain your account; to send our newsletter only if you have subscribed (you can unsubscribe at any time via the link in each email); to meet legal and accounting obligations; and to prevent fraud.
4. Direct marketing
We use your email address for direct marketing only with your consent, as required by the PDPO. You may withdraw consent at any time, free of charge, by using the unsubscribe link or contacting Customer Service.
5. Who we share it with
Delivery companies (to deliver your order); our payment processor (to take payment); and IT service providers that host and maintain the Store. Your personal data is stored in Hong Kong. The exceptions are the cookie data in section 6, which Google and Meta process on their own systems, and the chat assistant: if you use it, the message you type is sent to our AI service provider outside Hong Kong to generate a reply, and is not stored afterwards — see section 12. We never sell personal data.
6. Cookies
We use three kinds of cookies on the Store:
(a) Necessary cookies keep you signed in, hold your shopping bag and remember your language. When you pay, our payment processor (Stripe) also sets cookies to help prevent fraud. The Store cannot work without these.
(b) Analytics cookies. Google Analytics (Google LLC) tells us, in aggregate, how visitors find and use the Store — for example which pages are viewed and where visits come from — so that we can improve it. We do not use it to identify you.
(c) Advertising cookies. The Meta Pixel (Meta Platforms, Inc.) tells us whether visits and purchases follow our Facebook and Instagram posts or ads, and helps us show our ads to people interested in BIBA. If you are logged in to Facebook or Instagram, Meta may link this information to your account under its own privacy policy.
Google and Meta may process this information outside Hong Kong. You can block or delete cookies in your browser settings; the Store will still work, except that blocking necessary cookies stops sign-in and the shopping bag. You can also opt out of Google Analytics with Google's browser add-on (tools.google.com/dlpage/gaoptout) and manage Meta's ad preferences in your Facebook or Instagram settings.
7. Security
Personal data is stored on secured systems with access limited to those who need it. Payment pages are encrypted (HTTPS/TLS).
8. Retention
We keep personal data only as long as needed for the purposes above: transaction records are kept for 7 years to meet legal and accounting requirements; account data until you ask us to delete your account; newsletter data until you unsubscribe.
9. Your rights
Under the PDPO you may request access to, and correction of, your personal data. Send requests to Customer Service (below); we respond within 40 days as the PDPO requires, and may charge a reasonable fee for access requests as the PDPO permits.
10. Third-party links
The Store may link to third-party sites (e.g. our social media); their privacy practices are their own.
11. Changes
We may update this policy; the current version is always available on this page with its effective date.
12. Chat assistant
Our website offers a chat assistant so you can ask questions about our products, delivery, returns and care.
Before you can send your first message, we ask you to agree to our Terms and Conditions and to this Privacy Policy. The chat will not accept a message until you do, and we collect nothing from you if you simply open the chat and close it again. Your agreement is recorded in your own browser, not on our servers — you can withdraw it at any time using the Withdraw consent link in the chat window, or by clearing your browser data.
What happens to your messages. To produce a reply, the messages you send are transmitted to an AI service provider acting on our behalf. We do not store your conversation, and your conversations are not used to train AI models.
What we do store. Two things, neither of which contains your conversation: (1) a daily count of how the assistant was used — for example how many conversations were opened, and how many were passed to a colleague; these counts hold no message text, no identifier and no cookie. (2) Your IP address, for up to 25 hours — used only to limit how many messages can be sent from one connection, so that the service is not abused; it is deleted automatically after that period and is not used for anything else.
You do not need to give us your name, email address or phone number to use the chat. If you choose to share contact details so a colleague can follow up, we use them only for that purpose, and that email is kept like any other customer-service enquiry.
Please do not send payment card details, identity document numbers or passwords in the chat — we will never ask for them.
You may request access to, or correction of, your personal data held by us using the contact details in this policy.
13. Contact
Privacy matters and access/correction requests: cs.biba.hk@gmail.com.