Privacy Policy
Effective date: 15 July 2026Last updated: 15 July 2026
This Privacy Policy applies to AFS Online Shop at https://www.afsonlineshop.com/, which is operated by ANTIC FASHION COMPANY LIMITED (collectively, “AFS”, “we”, “us” or “our”). It explains how we collect, use, disclose, retain and protect personal data when you browse our website, create a member account, purchase products, contact customer service, or interact with us through Facebook, Instagram, Messenger, WhatsApp or other channels.
1. Information We Collect
Depending on the services you use and how you interact with us, we may collect the following information:
1.Identity and contact information: your name, email address, telephone number, recipient name, delivery address, billing address and other contact information you provide.
2.Account and order information: member account information, login records, shopping-cart contents, products ordered, order number, transaction date, payment and refund status, delivery records, returns or exchanges, and order-related requests.
3.Payment and transaction information: payment method, transaction amount, currency, transaction reference, payment status and limited transaction details supplied by a payment provider. Full payment-card numbers, online banking credentials and payment authentication data are generally processed directly by payment providers, and we do not normally receive or store the complete information.
4.Communications and customer-service information: messages, enquiries, complaints, images, attachments and related records that you send by email, telephone, WhatsApp, Facebook, Instagram, Messenger, website forms or other channels.
5.Meta Platform Data: if you interact with us through Facebook, Instagram, Messenger or another Meta feature, we may receive, depending on the feature, your settings and the permissions you grant, your Meta user or account identifier, public name, publicly available profile information, email address, message content, attachments, interaction records and related technical information. We collect only the information reasonably necessary to provide the relevant feature or service.
6.Device and website-usage information: IP address, browser and device type, operating system, language, time zone, cookies or similar identifiers, pages viewed, click and search activity, referring URL, session data, error and security logs, and information about website performance and usage.
7.Marketing preferences: whether you agree to receive offers, product information or marketing communications, together with subscription, opt-out and communication preferences.
8.Legal and security information: information reasonably necessary to verify identity, prevent fraud, handle disputes, protect the website and comply with legal obligations.
Where information is necessary to process an order, payment, delivery, refund or another service you request, failure to provide it may prevent us from completing the transaction or providing the relevant service.
2. How We Collect Information
We may collect information:
1.directly from you when you register an account, place an order, complete a form, subscribe to communications or contact customer service;
2.automatically when you browse or use the website through cookies, pixels, analytics tools, server logs and similar technologies;
3.from third parties that help us provide services, such as SHOPLINE, payment providers, logistics and delivery providers, analytics providers and security providers;
4.from Facebook, Instagram, Messenger, WhatsApp or other third-party platforms when you interact with us through those platforms, in accordance with your settings and permissions; and
5.from public sources, business partners or fraud-prevention services where permitted by law.
3. How We Use Information
We may use personal data to:
1.create, manage and protect member accounts;
2.process orders, payments, refunds, deliveries, returns, exchanges and after-sales services;
3.confirm transactions, provide order updates and respond to enquiries;
4.provide and improve our website, products, services, features and customer experience;
5.analyse website traffic, usage, advertising effectiveness and technical performance;
6.personalise website content and provide relevant marketing where you have consented or where otherwise permitted by law;
7.conduct identity verification, security monitoring, fraud prevention, troubleshooting and abuse investigations;
8.enforce terms and handle complaints, disputes, claims or legal proceedings;
9.maintain appropriate transaction, accounting, audit and business records; and
10.comply with applicable laws, regulations, court orders and regulatory requirements.
Unless we obtain your voluntary and express consent, or the law otherwise permits, we will not use personal data for a new purpose unrelated to the original purpose of collection.
4. Cookies, Analytics and Advertising Technologies
We and our service providers may use cookies, pixels, tags, local storage and similar technologies to maintain shopping-cart and login sessions, remember preferences, protect the website, analyse traffic, improve functionality, measure campaign performance and display more relevant content or advertising.
These tools may include SHOPLINE/Shoplytics, Google Analytics, Google Tag Manager, Google reCAPTCHA, Meta Pixel and similar services. Their providers may process device identifiers, IP addresses, browsing information and interaction data under their own policies. You may block or delete cookies through your browser settings and use the privacy and advertising settings offered by the website or relevant platforms. Disabling essential cookies may prevent some website features from operating correctly.
5. When We Disclose Information
We do not sell your personal data or Meta Platform Data. To operate the website and provide the services you request, we may disclose necessary information on a need-to-know basis and subject to appropriate safeguards to the following categories of recipients:
1.E-commerce and technology providers, such as SHOPLINE and providers of website hosting, membership, order management, cloud services, technical support, error monitoring and security;
2.Payment providers and financial institutions, such as Stripe and the card, digital-wallet, Faster Payment System or other payment services displayed at checkout;
3.Logistics and delivery providers for delivery, tracking, returns and delivery-related support;
4.Communications, analytics and marketing providers, including email, messaging, Google and Meta-related services, for communications, analytics or consented marketing functions;
5.Professional advisers and business service providers, including auditors, accountants, lawyers, insurers and fraud-prevention providers;
6.Government, regulatory, law-enforcement or judicial authorities where required by law or reasonably necessary to protect the rights, safety and property of us, our users or others; and
7.Parties connected with a corporate transaction, including advisers, prospective parties or successors in a merger, reorganisation, financing, asset sale or business transfer, subject to confidentiality and appropriate safeguards.
Service providers should process information only on our instructions and for the specified services. However, certain payment, social-media, analytics or advertising platforms may also process information as independent data users under their own privacy policies.
6. Meta Platform Data
Where we receive or process information through Meta Platform, Meta Business Tools, Facebook, Instagram or Messenger, we will:
1.collect and use only the information necessary to provide a feature requested by a user, respond to messages, provide customer service, support a relevant order or interaction, or perform permitted analytics or marketing;
2.process the information in accordance with this Policy, applicable law and relevant Meta terms;
3.not sell, rent or otherwise trade Meta Platform Data;
4.not use Meta Platform Data for a purpose incompatible with the user’s reasonable expectations or permissions;
5.disclose only necessary information to service providers that provide services to us and are subject to appropriate confidentiality and data-protection requirements; and
6.delete or de-identify relevant information when it is no longer needed or following a valid deletion request, subject to information that applicable requirements require or permit us to retain.
If you remove this website or a related app through your Facebook or Instagram settings, that action may stop future data transmission but may not automatically delete order, communication or transaction records that we lawfully retain. To request deletion of relevant information held by us, please follow the “Data Deletion Requests” procedure below.
7. Direct Marketing
We will use your name, contact details, purchase information or interest information to send AFS product, offer or event communications only where we have obtained the required consent or where otherwise permitted by law. We will not provide your personal data to another company for its own direct marketing without the required consent.
You may withdraw your consent at any time by using the unsubscribe facility in a marketing message or emailing cs@afsonlineshop.com. Your withdrawal will not prevent us from sending necessary order, payment, delivery, security or service messages.
8. Data Retention
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including providing services, maintaining transaction and accounting records, handling returns, disputes or claims, preventing fraud, enforcing agreements and meeting legal or regulatory obligations. Retention periods vary depending on the nature, purpose and risk of the information and applicable contractual or legal requirements.
When information is no longer needed, we take reasonable steps to delete, de-identify or securely dispose of it. Because of backup, disaster-recovery and system cycles, limited copies may remain for a period, but they will remain protected and will be removed through the normal cycle.
9. Data Security
We use reasonably practicable administrative, technical and physical measures to protect personal data from unauthorised or accidental access, processing, erasure, loss, use, alteration or disclosure. Measures may include access controls, encrypted transmission, system monitoring, vendor management and staff confidentiality requirements.
No internet transmission or electronic storage system is completely secure, and we cannot guarantee that a security incident will never occur. If an incident occurs, we will take reasonable measures in light of the circumstances to contain the risk, remediate the issue and notify affected persons or relevant authorities where required by law.
10. Cross-Border Processing
Some service providers or their servers may be located outside Hong Kong, and your information may therefore be processed or stored in other jurisdictions whose data-protection laws may differ. Where applicable and practicable, we take reasonable steps to require recipients to protect information in a manner consistent with this Policy and applicable requirements.
11. Your Rights and Choices
Subject to applicable law and relevant exceptions, you may contact us to:
1.ask whether we hold your personal data;
2.request access to or correction of inaccurate personal data held by us;
3.withdraw direct-marketing consent or update communication preferences;
4.request deletion of, or cessation of use of, information that is no longer needed; and
5.ask about our privacy policy and data-handling practices.
To protect you and others, we may request reasonable information to verify your identity and clarify the scope of a request. We will process valid requests within a reasonable period. We may be unable to delete information immediately or completely where retention is required or permitted by law, or where it remains necessary to complete transactions, handle disputes, protect security, meet legal obligations or establish, exercise or defend legal rights. Where appropriate, we will explain the relevant limitation.
12. Data Deletion Requests
You may request deletion of personal data associated with a member account, order, customer-service interaction or Meta interaction as follows:
1.email cs@afsonlineshop.com;
2.use the subject line “Data Deletion Request / 刪除資料要求”;
3.provide enough information to identify the relevant record, such as your member email address, order number, or the Facebook/Instagram account name you used to contact us; and
4.do not send passwords, full payment-card numbers or online banking credentials.
After receiving a request, we may first verify your identity. Once verified, we will within a reasonable period delete or de-identify information under our control that we no longer need to retain and, where appropriate, notify service providers processing information for us. If information must be retained for legal, accounting, transaction, security, dispute, fraud-prevention or backup-cycle purposes, we will restrict its use and remove it when it is no longer required.
13. Children’s Privacy
The website is not specifically directed at children. If you are under 18, you should use the website and provide personal data only with the consent and guidance of a parent or guardian. If we learn that a child’s personal data was collected in inappropriate circumstances, we will take reasonable steps to handle or delete it.
14. Third-Party Websites and Platforms
Our website may contain links to third-party websites, payment services, social media or other platforms. Once you leave our website, the relevant third party processes information under its own terms and privacy policy. We encourage you to read those policies before providing information.
15. Updates to This Policy
We may update this Policy to reflect changes to our business, services, technology, law or regulatory requirements. The revised version will be published on this page with a new “Last updated” date. If a change materially affects how we use personal data, we will provide an appropriate notice through the website, email or another reasonable method where appropriate.
16. Contact Us
For questions about this Policy or our data-handling practices, or to make an access, correction, consent-withdrawal or deletion request, please contact:
ANTIC FASHION COMPANY LIMITEDTrading name: AFS Online ShopWebsite: https://www.afsonlineshop.com/Email: cs@afsonlineshop.comTelephone / WhatsApp: +852 9430 4444
