PRIVACY POLICY

Your privacy is important to us. The purpose of this Privacy Policy is to inform you of how Belinda Bath Images collects, uses and processes your personal data in accordance with the Personal Data (Privacy) Ordinance (Cap. 486 of the Laws of Hong Kong) (“ PDPO”), the associated regulations and guidelines as may from time to time be issued by the Privacy Commissioner for Personal Data, Hong Kong and (where applicable) the General Data Protection Regulation (EU) 2016/679 (“GDPR”) of the European Union.

For the purpose of the GDPR, Belinda Bath Images, whose address is at Apartment 32D, Tower 1, Aria, 51 Fung Shing Street, Ngau Chi Wan, Kowloon, is the controller who determines the purpose and means of processing of your personal data collected through the website owned and operated by us or on my behalf or other channels described in paragraph 2 of this Privacy Policy.

This Privacy Policy is designed to assist you in understanding how we collect, use, disclose and/or process the personal data you have provided to us, as well as to help you to make an informed decision before providing us with your personal data.

1. Introduction
We intend to collect, use, process and disclose your personal data in the manner set forth in this Privacy Policy.

2. Information We Collect
There are two broad categories of information that we collect from you – (A) personal data and online identifiers and (B) non-personal data.

A. Personal Data and Online Identifiers

1. "Personal data" means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly.

2. We collect certain types of personal data, including your name, contact information (e.g. address, phone number, email address), payment information (e.g. credit or debit card information) and any other information which you may provide in any forms submitted to us or via other forms of interaction with us.

3. Personal data is collected by us in various circumstances, including the following:

When you contact us through the ‘Contact Me’ page on our website;
When you submit your personal data to us for any other reason.

4. It is voluntary for you to supply your personal data to us, although you may not be able to use our services or acquire our goods if you do not supply your personal data. We may not process your order for goods and/or services, and no contract for provision of such goods and/or services will be formed, if you do not supply the personal data required on our relevant order/subscription forms.

5. We may also obtain personal data about you from other sources and combine it with information you provide to us. If you provide us with any personal data relating to a third party (e.g. information of spouse, children, parents, employees and/or authorized representatives), by submitting such information to us, you represent to us that you have obtained the consent of the third party to you providing us with their personal data for the respective purposes.

6. When you visit and use our websites, we may also collect information about you using online identifiers such as cookies and web beacons:

(i) Cookies are small data files sent to your browser or device to store information about you when you visit our websites. Cookies will do a lot of different jobs, such as letting you navigate between pages efficiently, identify your behavior, remembering your preferences and generally improving your user experience. They can also help to ensure that the advertisements you see online are more relevant to you and your interests.

(ii) Most browsers automatically accept cookies. You can, however, modify your browser settings to disable cookies. If you choose to do so, some of the functionality of our websites may be impaired.

(iii) We may also use cookies from third parties to help us provide you and others with social plugins and other customized content and experiences.

(iv) Some cookies will not collect information that personally identifies you. They will collect more general information such as how users arrive at and use our website, or a user’s general location. However, some other cookies can identify you and may contain or collect personal data. The type of information Belinda Bath Images collects as a result of a cookie is specific to your computer and may include, without limitation, the Internet Protocol (IP) address and the date and time you accessed our websites. The data stored on a "cookie" can be retrieved by Belinda Bath Images when you visit our websites.

(v) When you visit our website, you will see a pop-up seeking your consent to the placing and use of cookies on your device. You may either give such consent or reject the placing and use of cookies. You can also remove existing cookies from your device using your browser options. If you want to block future cookies being placed on your device you can change your browser settings to do this. For more information on managing cookies see aboutcookies.org, which contains comprehensive information about how to restrict or block cookies on a wide variety of browsers.

3. Purposes and legal bases for collection, use, disclosure and processing of Personal Data Depending on your relationship with us, your personal data may be collected, used, disclosed and/or processed for one or more of the following purposes and, where you are a data subject in the European Economic Area (“EEA”), on the following legal bases recognized under the GDPR:

Purposes of processing

Legal bases for processing

(a)

To provide goods and services to you ordered or requested (e.g. shipping of prints)

- consent

- contract performance

- legitimate interests (to allow us to provide our good and services)

(b)

To verify your payments

- contract performance

- legitimate interests (to ensure payments have been properly made)

(c)

To send you information about any administrative changes, updates and/or amendments to our policies, terms and conditions

- consent

- contract performance

- legitimate interests (to keep you informed about changes that may affect you)

(d)

To respond to or follow up on your queries and/or requests

- legitimate interests (to allow us to respond to you)

(e)

To protect and enforce our contractual and legal rights and obligations

- legal claims

(f)

To comply with any applicable laws and regulations or to assist in law enforcement and/or investigations by any governmental authority, public agency, statutory board or similar authority

- legal obligation

- legal claims

- legitimate interests (to prevent unlawful activities)

4. Legal bases
Where you are a data subject in the EEA, the legal bases for our processing and use of your personal data are set out in paragraph 3 above and further elaborated as follows:

(a) Consent: where you have consented to our use of your personal data. You may withdraw your consent to the use of your personal data by contacting us.

(b) Contract performance: where processing of your personal data is necessary for the performance of our contract with you or in order to take steps at your request prior to entering into a contract with us;

(d) Legitimate interests: where our use of your personal data is necessary for our legitimate interests. We will only rely on this basis if we consider that such legitimate interests are not overridden by any interests or fundamental rights and freedoms that you may have, or any prejudice that you may suffer, from the relevant use of your personal data; and

(e) Legal claims: where your personal data is necessary for us to establish, exercise or defend any legal claims.

5. Sharing of Personal Data

A. In order to facilitate our business operations and provision of goods and services, your personal data may be disclosed, for one or more of the purposes listed in paragraph 3 above, to the following third parties (whether located in Hong Kong or abroad):

1. Agents, contractors or third party service providers (“ Service Providers”) who provide operational services to us, such as information technology, administration of our website, shipping of prints of magazines or other communications to you about our products and services, as well as storage and archival services;

2. The credit bureau, or in the event of default or disputes, any debt collection agencies or dispute resolution centres;

3. Banks, credit card companies and their respective service providers;

4. Our professional advisors such as our auditors and lawyers;

5. Relevant government regulators or authority or law enforcement agency to comply with any laws or rules and regulations imposed by any governmental authority; and

6. Any other party to whom you authorise us to disclose your personal data

B. In situations in which the above third parties receive your personal data from us, we will require the third parties to exercise reasonable care in protecting your personal data so that it is in compliance with the PDPO and (where applicable) the GDPR.

6. Direct marketing
We may use your personal data for direct marketing purpose. We may not use your personal data for such purpose unless we have received your consent to such intended use. Our direct marketing may be conducted via various communication channels such as your email address, correspondence address, phone number and SMS. In this connection, please note that:

(a) your name, email address, correspondence address, home phone number, mobile phone number, fax, gender, date of birth, and age may be used by us in direct marketing.

(b) we will use your personal data for direct marketing purpose only in accordance with the PDPO.

(c) you may indicate your consent to the intended use and provision of your personal data for direct marketing purposes above by ticking the box(es) indicating your consent when providing us with your personal data through our websites or through order forms or subscription forms.

Please refer to paragraph 10 below on how to opt out of our direct marketing communications.

7. Your rights
You may request to access or correct your information in accordance with the PDPO. We may charge a reasonable fee for the processing of such data access request(s).

In addition, where you are a data subject in the EEA, in certain circumstances you have the right under the GDPR to:

(a) access and rectify your personal data;

(b) request us to erase your personal data without undue delay;

(d) where our processing of your personal data is based on consent, withdraw your consent at any time;

(e) object to our processing of your personal data on the basis of legitimate interests, unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims;

(f) object to direct marketing (including any profiling for such purposes) at any time;

(g) receive your personal data which you have provided to us, in a structured, commonly used and machine-readable format and to transmit such data to another data controller without hindrance from us; and

(h) lodge a complaint with a supervisory authority.

Where you are a data subject in the EEA, we will not charge a fee when we deal with your requests to exercise the rights (a) to (g) above.

You may do so by submitting your request to us via email or letter. Please refer to our contact details at paragraph 15 of this Privacy Policy.

8. Retention of Personal Data

A. We will retain your personal data collected for as long as it is necessary to fulfill the purpose for which it is collected, the legal and/or business purposes of Tatler, and/or as may be required by applicable law.

B. When destroying personal data, we will take commercially reasonable and technically feasible measures to make the data irrecoverable or irreproducible, as may be required by applicable law.

9. Security

A. We take the security and protection of your personal data very seriously. As such, we store your personal data on secure servers and have put in place appropriate security arrangements to prevent unauthorised access, collection, use, disclosure, copying, modification, disposal of your personal data.

B. However, we cannot assume responsibility for any unauthorised use of your personal data by third parties which are wholly attributable to factors beyond our control.

10. Opt-Out

A. If you do not wish to receive any further information from us, you may unsubscribe by clicking the unsubscribe link included in our email correspondence.

11. Automated decision making and profiling
In connection with our business, we will use your personal data to make various decisions about you and your eligibility to access our services, to prevent abusive use of our services, to determine what marketing offers are most likely to be of interest, to ensure security of our systems, to detect fraud or to profile you or assign you to a particular segment. Some of these decisions may be taken on an automated basis including by matching your personal data against other information in our possession or against data models created for us. If you are assigned to a segment, we may use the segment information to tailor our marketing communications (if permitted under applicable laws) to include offers and content that are more relevant to you. You will not be subject to automated decisions that produce legal effects concerning you or similarly significantly affect you, unless we have a lawful basis for doing so.

12. Cross border data transfer
The personal data that we collect or obtain from you may be transferred to jurisdictions that offer lesser protection of personal data than that provided in your jurisdiction. In particular, we may transfer your personal data to Service Provider(s) in jurisdictions outside the EEA and Hong Kong. Such transfer, if subject to the GDPR, would be made with appropriate or suitable safeguards (the details of which can be obtained from our Data Protection Officer) or with your explicit consent. Such transfer may present possible risks for you due to the lack of an adequacy decision or appropriate safeguards.

13. Third Party Sites
Our websites may contain links to other websites operated by third parties such as our business partners. We are not responsible for the privacy practices of websites operated by third parties that are linked to our websites. You are encouraged to learn about the privacy policies of such third party websites. Some of these third party websites may be co-branded with our logo or trademark, even though they are not operated or maintained by us. Once you have left our websites, you should check the applicable terms, conditions and policies of the third party website to determine how they will handle any information they collect from you.

14. Children’s Data
We permit a child under the age of 16 to use our websites and to provide his/her personal data to us provided that the child has obtained his/her parent’s or legal guardian’s consent. If you are a child under the age of 16, you warrant and represent that your parent/legal guardian has consented to your use of our websites and your provision of personal data.

Once you are an individual in the EEA and reach the age of 16, you obtain the right to make decisions in relation to the processing of your personal data, although in some countries such right may arise before the age of 16. When such right arises, you should access the latest version of this Privacy Policy and ensure that you are personally happy for your personal data to continue to be processed by us.

15. Contact Details

A. If you, at any time, wish to:

1. enquire about this policy or about how we may manage, protect and/or process your personal data;

2. complain about the way we manage, protect and/or process your personal data;

3. access or correct your personal data in our control or possession;

4. exercise any other rights you have under the PDPO and (where applicable) the GDPR; or

5. withdraw your consent for us to collect, use, disclose and/or process your personal data;

please do not hesitate to contact us by by email at belindabathimages@gmail.com or by post at Apartment 32D, Tower 1 Aria 51 Fung Shing Street, Ngau Chi Wan, Kowloon, Hong Kong

B. Such enquiry / complaint / request / withdrawal shall be deemed to have been made when received by Belinda Bath Images.

C. Please indicate in the subject header the nature of your correspondence.

16. Changes to Policy

A. As part of our efforts to ensure that we properly manage, protect and process your personal data, we will be reviewing our policies, procedures and processes from time to time.

B. We reserve the right to amend the terms of this Privacy Policy at our absolute discretion. We will notify you of changes to this Privacy Policy by posting the amended policy with the date it was revised on our websites.

C. You are encouraged to visit the websites from time to time to ensure that you are well informed of our latest policy in relation to personal data protection.

Last updated on 7 June 2021.