私隱政策｜衣服‧服飾的收購和販賣的話就來2nd STREET

1. Privacy Statement

2nd STREET HONGKONG, LIMITED (hereinafter referred to as the “Company”) recognizes that the protection of personal information is important to us. The Company, hence, establishes and publishes this Privacy Policy regarding the handling of personal information for customers who purchase products from us, customers who sell used items, business partners, vendors, and other suppliers.

The Company manages the personal data of the customers in accordance with the Personal Data (Privacy) Ordinance (Cap.486) (hereinafter referred to as “PDPO”), the data protection principles, and other relevant laws and regulations applicable in Hong Kong (collectively referred to as the “Law”). This Privacy Policy explains how the Company, as a data administrator, collects, uses, and discloses the personal data of the customers.
If you do not agree to this privacy policy, the Company may not be able to provide you with all services or conduct transactions with you.

2. Collection of personal data

According to the legal principles set out in the Law, the Company collects the following personal information to achieve the purposes outlined herein.
Additionally, the Company may process sensitive personal information in accordance with the special criteria stipulated by the Law.

In addition to collecting personal information directly from you, the Company may also collect the personal information from other sources such as directors, representatives, assignees, employees, and government agencies.

2.1 Information to be collected from the customers

Name, Date of birth, Phone number, Address, Bank account information, Electronic payment information, Email address, signature, driver's license, passport information, HKID number, information about products and services, Images Captured by Surveillance Cameras

3. Purposes of processing personal data

The Company shall, depending on the relationship between you and the Company, collect, use, or disclose the personal information for various purposes as outlined below.

3.1 Customers

To enter into a contract with you or your company, or to take steps to enter into such a contract,

To fulfill our contractual obligations related to the provision of the Company’s products, benefits, or services; to verify identity and eligibility; to process purchase orders; to deliver products or services; to handle transaction payments; to issue invoices for payments and remittances; to provide after-sales service; to ensure compliance with internal procedures; and to receive or deliver information or documents between you and the Company,

To manage the relationship with you,
For example, to contact you regarding any information about the Company’s products and services, to communicate with you, and to manage your complaints,

To provide information about products and services from other companies that the Company deems appropriate,

To conduct surveys or monitoring by the Company or by other companies that the Company deems appropriate,

To perform marketing analysis on the sales and usage status of products and services, and to provide analysis data,
whereas, if the Company provides analysis data to third parties, the Company shall not disclose your personal information to the third parties,

To improve the products and services that the Company provides
Notwithstanding, this is only applicable if the Company determines that it is necessary and beneficial for you,

To manage risks and conduct internal audits and administrative matters,
for example, to prevent or detect fraud and to investigate requests for the use of internal information systems to ensure company transparency,

To comply with relevant laws such as tax regulations, to report information to government authorities based on legal requirements or upon receiving orders or seizure warrants, and to establish, comply with, exercise, or defend legal claims, including conducting investigations and enforcement actions based on legal processes and other regulations,

For security reasons, to manage access to the Company’s buildings and premises, and to monitor the security of the Company’s facilities. This includes monitoring, preventing, deterring, and (if necessary) investigating unauthorized access to the Company’s buildings and premises, which may involve recording images of individuals contacting us through CCTV cameras, and

To record your information in the Company’s database.

3.2 Suppliers, vendors and other business partners

To consider your products, goods, or services; to compare prices and estimates; to enter into a contract with you; or to take steps to enter into such a contract with you,

To fulfill our contractual obligations, including but not limited to procuring products, goods, and services sold to customers in the Company’s stores; processing purchase orders; handling payments; issuing invoices for remittances and taxes; monitoring and evaluating customer services; and receiving and delivering information and documents between you and the Company, in accordance with the Company’s internal procedures,

To manage the relationship with you, such as contacting you regarding any information about the Company’s or your products and services,

To manage risks and conduct internal audits and administrative matters,
for example, to prevent or detect fraud and to investigate requests for the use of internal information systems to ensure company transparency,

To verify identity for the fulfillment of your obligations,

To comply with relevant laws such as tax regulations, to report information to government authorities based on legal requirements or upon receiving orders or seizure warrants, and to establish, comply with, exercise, or defend legal claims, including conducting investigations and enforcement actions based on legal processes and other regulations,

For security reasons, to manage access to the Company’s buildings and premises, and to monitor the security of the Company’s facilities. This includes monitoring, preventing, deterring, and (if necessary) investigating unauthorized access, which may involve recording images of individuals contacting us through CCTV cameras, and

To record your information in the Company’s database.

4. Legal basis for processing of personal data

The legal basis for processing your personal data is as follows:

Basis of consent: when the Company is required by the law to obtain consent for processing,

When the processing activity is necessary to fulfill contractual obligations between you and the Company,

When the processing activity is necessary for the pursuit of the Company’s legitimate interests,
notwithstanding, this does not include cases where your fundamental rights outweigh such interests, and

When the processing activity is necessary for compliance with the Company’s legal obligations.

5. Retention period of personal data

The Company shall retain your personal data for the period necessary to achieve the aforementioned purposes of obtaining and processing the personal data.
The specific criteria for determining the Company’s retention period include the duration of the ongoing relationship with you, compliance with the applicable laws, adherence to legal statutes of limitations for the exercise or defense of legal claims, and the necessity of retaining personal data for other legal or business reasons.

Please note that personal data shall only be stored, if necessary, after the expiration of the retention period. Once the retention period has expired, or storage is no longer necessary (whichever applies), the Company shall destroy the data or erase it from the Company’s systems.

6. Disclosure of personal information to third parties

The Company may share and disclose your personal data with the following third parties in accordance with the Law for the purposes set out in this Privacy Policy. The Company shall inform you and seek consent when necessary to comply with the Law.

When you have consented to the provision of your personal information,

When there is a request for disclosure from legal authorities such as police or courts, and the disclosure is made in accordance with the law,

When entrusting all or part of the handling of personal information to a third party within the scope necessary to achieve the purposes of use (the Company shall take measures to prevent the leakage, loss, or alteration of personal information, including selecting the contractor, concluding contracts regarding the handling of personal information with the contractor, and providing guidance and supervision to the contractor as necessary), and

With the consent of the customer, personal data shall be transferred to recipient companies located in other countries, such as Japan, by entering into standard personal data protection agreements, including binding corporate rules or data processing contracts, in accordance with the PDPO, thereby implementing appropriate protective measures.

7. Rights of the data subject

You have the following rights regarding the personal data that the Company collects and processes.

7.1 Right of access to personal data

You have the right to access your personal data, obtain a copy of that data, and request disclosure of where the Company obtained that personal data.

7.2 Right of rectification of personal data processing

You have the right to rectify any inaccurate personal data to ensure that the data is complete, up to date and to avoid any misleading information.

7.3 Right of access to personal data and right to object to rectification

You have the right to contest if the Company refuses your access to personal data or the right to rectify personal data processing.

7.4 Right to confirm the retention of personal data

You have the right to confirm whether the Company holds any personal data concerning them.

If you wish to exercise the rights mentioned above, please contact us at "10. Contact Information" in this Privacy Policy.
The Company respond promptly within the limits prescribed by the Law after confirming your identity through the designated procedures.
The Company may refuse the exercise of the above rights. In this case, the Company shall inform you of the reasons for the refusal.

8. Data protection security measures

The Company shall implement appropriate and stringent security measures to prevent unauthorized access to personal information, as well as loss, destruction, alteration, and leakage of personal information.

When the Company delegates the processing of your personal information to a third party under the Company’s instructions, the Company shall conduct necessary and appropriate supervision of that third party to protect your personal information in accordance with the PDPO.

9. Amendments to the Privacy Policy

The Company shall regularly review and update this Privacy Policy to improve the processing and protection of personal data.

Notwithstanding, when consent from the data subject is required by the law, the updated privacy policy shall apply only to those data subjects who have provided consent in the manner specified by the Company.

In the event that the personal information protection policy is revised, the updated privacy policy shall be posted in the Company’s stores.
Additionally, if there are significant updates to this Privacy Policy, such as changes in the purposes of processing activities, the Company shall notify or inform the Employees as appropriate.

The updated privacy policy shall take effect from the date of issuance.

Privacy Policy