Skip to Content

Privacy - Policy

Privacy - Policy

1. Introduction

HKERSHOP is committed to protecting your privacy and the security of your personal data. When collecting, processing, storing, and using your data, we comply with applicable laws and the highest security standards. This policy is intended to help you clearly understand how we handle your data.


2. Data Collection

We may collect your data in the following situations:

  • When you place an order or register an account on our website

  • When you contact our customer service team

  • When you subscribe to our newsletters or promotional campaigns

The data we collect includes (but is not limited to): your name, contact details, delivery address, payment information, and purchase history.


3. Use of Data

The data we collect will be used to:

  • Process orders and arrange delivery

  • Provide customer support and after-sales service

  • Conduct market analysis and improve our services

  • Provide you with updates on new products or offers you may be interested in (only with your consent)


4. Data Protection and Security Measures
4.1 Security-First Website Design

To prevent the most common security vulnerabilities, we implement the following:

  • Protection against SQL injection:We use advanced application programming interfaces (APIs) to avoid manual SQL queries.

  • Protection against cross-site scripting (XSS):We use an advanced templating system that automatically escapes externally supplied input.

  • Protection against remote procedure call (RPC) abuse:Our system architecture blocks access to private methods, reducing the risk of exploitable vulnerabilities.

4.2 Encryption of Customer Data

  • Encryption in transit and at rest:All customer data is encrypted during transmission and while stored.

  • End-to-end communication protection:All data communication with clients is secured using256-bit SSL (HTTPS)encryption.

  • Internal server protection:Data communication between servers is protected with end-to-end encryption.

  • Server security:Servers are subject to strict security controls and continuously updated to patch the latest SSL vulnerabilities.

  • SSL certificate standards:All SSL certificates use a2048-bit modulusand a completeSHA-2 certificate chain, achieving anA+ rating.​

  • Database and backup encryption:All data (both live and backups) is protected usingAES-256 encryption at rest.​


5. Third-Party Access

We do not sell or transfer your data to any third party. Data may only be shared in the following circumstances:

  • With third-party service providers required for payment processing or logistics

All partners must comply with security and privacy standards equivalent to ours.


6. Data Retention

We will retain your data only for as long as necessary to fulfill the purposes stated in this policy, and will delete or anonymize it in accordance with legal requirements.


7. Your Rights

You have the right to:

  • Access and obtain a copy of the personal data we hold about you

  • Request corrections or updates to your data

  • Request deletion of, or restriction on the processing of, your data (except where required by law)

To make a request, please contact our customer service via WHATSAPP 。


8. Policy Updates

We may update this Privacy Policy from time to time. The latest version will be published on our website and will take effect immediately upon posting.


9. Contact Us

If you have any questions about this Privacy Policy, please contact us via:

📍 WHATSAPP：WHATSAPP