Personal data we collect
- Order and account data: name, email address, phone number, delivery and billing address, and order history.
- WhatsApp opt-in: your phone number, if you choose to receive WhatsApp messages from us.
- Device and usage data: a device identifier, an abbreviated IP address, browser and device type, and the pages and actions on our site.
- Advertising identifiers: including an irreversibly hashed form of your email or phone number where available, used for advertising measurement.
Purposes
We use personal data to process and deliver orders, provide customer support, operate accounts, send WhatsApp messages you opt into, measure and improve our website and advertising, prevent fraud and abuse, and comply with legal and accounting obligations.
Is providing data required?
Providing personal data is voluntary. However, if you do not provide the data needed to fulfil an order or request, we may be unable to provide the relevant product or service. Analytics and advertising data are collected automatically as you browse. You can limit them using the controls in Section 05.
Who we share data with
We may transfer personal data, in and outside Hong Kong, to the following classes of recipients, only for the purposes set out above:
- Service providers who host our website, store data, process payments, fulfil orders, and send messages you request, acting on our instructions.
- Advertising and measurement partners (Meta and Reddit), who receive certain data, including hashed identifiers, to measure and optimise our advertising. Reddit may use this data to match your activity across devices. You can manage your Reddit ad preferences in your Reddit Safety & Privacy settings (reddit.com/settings/privacy), and Meta ad preferences via your Facebook/Instagram ad settings.
- Regulators or authorities where required by law.
Cookies and automatically-collected data
We use essential and functional cookies to operate the site and remember your cart, and advertising cookies set with Meta and Reddit to measure and optimise advertising. We also process an abbreviated IP address and browser type. You can block or delete cookies in your browser, though some features may then stop working, and use the advertising opt-outs in Section 04.
Retention
We keep personal data only for as long as necessary to fulfil the purposes set out above, including any period required to meet legal, tax or accounting obligations, after which it is deleted or anonymised.
Security
We take practicable steps, including access controls and encryption, to protect personal data against unauthorised access, processing, loss or destruction.
Your rights: access and correction
You have the right under the PDPO to request access to, and correction of, your personal data, and to ask about our data policies and practices.
To exercise these rights, contact our Privacy Officer at privacy@manicpanichk.com.
We may charge a reasonable fee for complying with a data access request, as permitted by the PDPO.
Notices at the point of collection
WhatsApp opt-in. By submitting your number you agree to receive WhatsApp messages from Manic Panic HK. We use it only to send those messages and to identify your account. You can opt out at any time.
Checkout. We collect your contact, delivery and order details to process and deliver your order, and share them with our payment, logistics and platform providers for that purpose.
Changes to this policy
We may update this policy periodically. The “Last updated” date above reflects the latest revision.