Home › Privacy

Privacy

On this page
  1. Data controller
  2. One company does everything
  3. What data we collect and why
  4. Cookies and browser storage
  5. Who we share data with
  6. Transfers outside the European Union
  7. How long we keep data
  8. Your rights
  9. Complaints
  10. Changes

Last updated: 28 October 2026. Information notice pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR).

1. Data controller

WHATECH MOBILE CO., LIMITED, Room 505, 5th floor, Beverley Commercial Centre, 87-105 Chatham Road South, Tsim Sha Tsui, Kowloon, Hong Kong.
Contact person: Huanbin Lin.
Email for any request about your data: privacy@helloeasyemporium.com (we reply within 30 days).

2. One company does everything

WHATECH MOBILE CO., LIMITED created this website and runs it, runs the advertising of the shop, including the Google Ads campaigns, buys and sells the products, confirms orders by phone, ships the parcels and collects payment on delivery. The suppliers who work for us act on our instructions.

3. What data we collect and why

  • Orders: full name, mobile number, delivery address, notes for the courier, chosen product, amount and date. We use them to confirm the order by phone, ship the parcel, collect payment on delivery, assist you and meet tax and accounting obligations. Legal basis: performance of the contract and legal obligation.
  • Messages you send us: your email and the content of your message, so we can reply. Legal basis: pre-contractual measures and request of the data subject.
  • Technical browsing data (for example IP address and device type), to make the site work, keep it secure and prevent abuse. Legal basis: legitimate interest.
  • Measuring our advertising: when you place an order, the confirmed order is reported to Google and to Meta so we can measure how well our advertising works. To Google we report the order value, the currency and an order code. To Meta we report the same and also your IP address, your browser details and, in encrypted (hashed) form, your phone number and your name. Legal basis: our legitimate interest in measuring our advertising. This report is made even if you refuse cookies in the cookie banner.

We do not sell your data. The site is not aimed at children under 16. The site does not accept card payments: we do not collect card data.

4. Cookies and browser storage

The site keeps in your browser only what it needs to work: your cookie choice and, when you order, the data that lets the confirmation page show your order and prevents duplicate orders. Statistics and advertising tools (Google Ads and the Meta pixel) work through cookies and similar identifiers only if you accept them in the cookie banner, except for the order report described above. You can change your choice at any time from the "Cookie settings" link at the bottom of the page. Refusing does not prevent you from ordering. Your choice is valid for 12 months. Details are on the Cookies page.

5. Who we share data with

  • couriers and shipping services, to deliver the parcel;
  • Vercel Inc. (United States), which hosts the website and is the registrar of its domain name, as data processor, under the European Commission's standard contractual clauses;
  • Google Ireland Limited (Ireland), for Google Ads advertising and its measurement;
  • Meta Platforms Ireland Limited (Ireland), for the measurement of our advertising;
  • other suppliers who work for us, who act on our instructions;
  • consultants, banks, tax and judicial authorities, when the law requires it.

6. Transfers outside the European Union

The controller is based in Hong Kong and some of our suppliers are based outside the EU, so the data of EU customers may be transferred outside the EU. We do this only when necessary to perform the contract with you or with adequate safeguards, such as the European Commission's standard contractual clauses.

7. How long we keep data

  • orders, invoices and accounting data: 7 years (tax obligations under the Inland Revenue Ordinance of Hong Kong);
  • orders that were never confirmed: 90 days;
  • support messages: 24 months from the last reply;
  • your cookie choice: 12 months.

8. Your rights

You can ask us at any time to access your data, correct it, delete it, restrict its processing, receive it in a readable format (portability) or object to its processing. Write to privacy@helloeasyemporium.com: we reply within 30 days. We may ask for a document to verify your identity.

9. Complaints

If you believe your data is being processed incorrectly, you can write to us and you can also lodge a complaint with the data protection authority of your country.

10. Changes

If we change this notice, we update the date at the top and, for important changes, we let you know.