Who is behind this site
The data controller — the company that decides how your personal data is used — is WHATECH MOBILE CO., LIMITED (contact person: Huanbin Lin), Room 505, 5th floor, Beverley Commercial Centre, 87-105 Chatham Road South, Tsim Sha Tsui, Kowloon, Hong Kong. It is the seller: it buys the goods it sells, takes your order, confirms it by phone, sends it out, collects payment on delivery and deals with returns and warranty claims.
The same company built this website and runs it, runs its advertising and its Google Ads campaigns, and holds the advertising accounts. Whatever your question is — an order, a parcel, a return or your data — WHATECH MOBILE CO., LIMITED is the one to ask, at support@homesaveexpress.com.
- Controller
- WHATECH MOBILE CO., LIMITED
- Registered office
- Room 505, 5th floor, Beverley Commercial Centre, 87-105 Chatham Road South, Tsim Sha Tsui, Kowloon, Hong Kong
- Contact person
- Huanbin Lin
- Data protection e-mail
- privacy@homesaveexpress.com
- Other questions
- support@homesaveexpress.com
We are established in Hong Kong and we sell to customers in the European Union, so this notice is written under the EU General Data Protection Regulation (GDPR), which applies to us under its Article 3(2), and under the Hong Kong Personal Data (Privacy) Ordinance. Wherever you live, you can use the rights described below.
What we collect
Order form on a shop product page
First and last name, phone number, delivery address and country; your e-mail address and a note if you add them; the item and the quantity.Order form on a product page in your language
Full name, phone number, delivery address and the item, together with the campaign details of the link you arrived by (utm tags and subid, or the Google click id when there is no subid).The confirmation call
What you confirm or change on the call, such as the items or the delivery address.Support form and e-mails
Your name, e-mail address, the order reference if you give it, the topic and your message.A refund
The account holder's name and the IBAN you send us.Automatically
The IP address an order or a message came from, plus basic technical details about your browser, used among other things to recognise fake orders. Kept in the server logs for up to 12 months.Your browser
Your cookie answer and the few items listed on the cookie page.The advertising tag, with your yes
Which advert brought you here and whether the visit led to an order.
We never ask for special kinds of data, such as health information, and there is no field for them.
Why we use it
Taking your order, confirming it by phone, delivering it and collecting payment
The contract with you (GDPR art. 6(1)(b))Returns, refunds and the legal guarantee
The contract, and our legal duties (art. 6(1)(b) and (c))Keeping order records for tax and accounting
Legal obligation (art. 6(1)(c))Answering your messages
Your request, and our legitimate interest in helping customers (art. 6(1)(b) and (f))Stopping fake and automated orders; keeping the site secure
Legitimate interest (art. 6(1)(f))Measuring which adverts lead to orders, and showing our adverts to people who have visited the shop
Your consent (art. 6(1)(a)), which you can take back at any time
We do not sell your data, and we do not use it to send you advertising by e-mail, text message or phone.
Our forms check for signs of automated sending, such as a form filled in faster than a person could, and orders, IP addresses and phone numbers are checked for signs of fraud before goods leave. A check may hold back a submission, but no decision that affects you in any other way is made automatically: the confirmation call is made by a person.
Who else handles it
This is the whole list. Nobody outside it receives anything.
Your data comes to us. Where a service provider works for us — for the telephone confirmation of your order, or for technical operations — it acts on our instructions, sees only what that task needs and may not use it for anything of its own.
Vercel Inc.
- What they do
- Our hosting provider and the registrar of our domain: hosts this website, delivers its pages and runs its order and support forms. It processes the technical request data every website receives, and holds the server logs in which an order or a message first lands. Processor, under a data processing agreement.
- Where
- United States
The courier or postal operator in your country
- What they do
- Delivers the parcel and collects the payment, so it receives your name, delivery address, phone number and the amount to collect at the door. The courier is chosen per country; we tell you which one on the confirmation call, or whenever you ask.
- Where
- Your country
Customs authorities
- What they do
- Where a parcel crosses a border that requires a declaration: the details that country's rules oblige us to state.
- Where
- The countries the parcel crosses
Advertising. When, and only when, you have accepted advertising cookies, browsing and conversion data also reaches Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) for Google Ads; see the advertising tag and your choice. The advertising accounts it reports to are in the name of WHATECH MOBILE CO., LIMITED, which pays for them and answers for them.
Beyond these, data goes only where an order or the law needs it: to the banks that carry a refund transfer, and to public authorities when we are legally obliged to answer them. We do not sell personal data, we do not rent it out, and we do not pass it to anyone for their own marketing.
Transfers outside Europe
We are established in Hong Kong, and some of the organisations above are based in, or use servers in, other countries outside the European Economic Area — the United States among them.
The European Commission has not adopted an adequacy decision for Hong Kong. When you place an order, the details we need to take it, confirm it and deliver it reach us there because that transfer is necessary to perform the contract between you and us (Article 49(1)(b) GDPR).
For everything else we rely on the standard contractual clauses adopted by the European Commission in Decision 2021/914, signed with each provider that sits outside the European Economic Area — Vercel in the United States among them — together with encryption in transit and access limited to the people who need it. Ask at privacy@homesaveexpress.com and we will send you a copy of the clauses that cover your data.
How long we keep it
A completed order, with the invoice, the delivery record and any withdrawal or refund (including bank details given for a refund)
- How long
- 7 years from the end of the financial year
- Why
- The period the Hong Kong Inland Revenue Ordinance sets for business records
An order that was never confirmed, or was cancelled before dispatch
- How long
- 90 days
- Why
- To answer questions about it; then deleted
Support messages and e-mails
- How long
- 24 months after the last reply
- Why
- So a later question can be traced back to what was said
Technical server logs
- How long
- 12 months
- Why
- Security, and tracing fake orders and misuse
Your cookie answer (in your browser)
- How long
- 12 months
- Why
- So the question is not asked on every visit
When the time is up, the data is deleted or made anonymous.
Your rights
- Access
- Ask what we hold about you and receive a copy.
- Correction
- Have wrong or incomplete details put right.
- Erasure
- Have data deleted when we no longer need it or should not have it.
- Restriction
- Have its use paused while a question about it is settled.
- Portability
- Receive the data you gave us in a common file format, or have it passed to someone else.
- Objection
- Object to any use based on our legitimate interest.
- Withdrawing consent
- Take back a yes at any time. What happened before stays lawful.
Send your request to privacy@homesaveexpress.com. We answer within 30 days, free of charge. To protect your data, we may ask you to confirm who you are, for example with your order reference and the phone number used for the order.
Complaints
If you think we have handled your data wrongly, you can complain to the data protection authority of the country where you live or work, or where the problem happened.
Where we are established, the authority is the Office of the Privacy Commissioner for Personal Data, Hong Kong (pcpd.org.hk).
We would be glad to hear from you first at privacy@homesaveexpress.com: most things can be put right quickly.
The advertising tag and your choice
Many people find this shop through Google adverts. The advertising accounts are registered to WHATECH MOBILE CO., LIMITED, and it is WHATECH MOBILE CO., LIMITED that pays for the adverts. To know which adverts work, the site can use the Google Ads tag. What it does depends on the answer you give in the cookie panel.
Before you answer, or if you say no
- The Google tag runs in a restricted mode (Google Consent Mode): it writes no advertising cookies and reads none.
- Advertising identifiers are removed from what it sends. What reaches Google is a basic signal without cookies, such as the page, the time and the fact that there is no consent, which Google uses only in aggregate to estimate how adverts perform.
If you say yes to advertising
- The Google tag may store cookies that link a click on a Google advert with a later order.
- When you place an order, it reports the order reference, its value and the currency, so the advert can be credited.
- Google may later show you our adverts on other sites and apps.
What we never pass on
Your name, phone number, address and e-mail address are never sent to Google.
You can change your answer at any time with the button above or “Cookie settings” at the foot of every page. Google is an independent controller for what it does with the data afterwards; its own account of that is in the Google privacy policy (policies.google.com/privacy).
Children
The shop is meant for adults. It is not aimed at anyone under 16, and we do not knowingly collect their data. If you believe a child has sent us personal details, write to privacy@homesaveexpress.com and we will delete them.
Keeping it safe
Every page and form travels over an encrypted connection (HTTPS). Order details are seen only by the people who need them to confirm, deliver or look after the order, and by the service providers above, for their part of the work.
Changes to this notice
When this notice changes, the date at the top changes too. Important changes are announced on this page before they apply.
A question about your data?
Write toprivacy@homesaveexpress.com
We answer within 30 days.