Privacy notice – HomeSave Express

Who is responsible

WHATECH MOBILE CO., LIMITED decides why and how your personal data is used on HomeSave Express, and is responsible for it under the EU General Data Protection Regulation (GDPR).

Controller: WHATECH MOBILE CO., LIMITED
Registered office: Room 505, 5th floor, Beverley Commercial Centre, 87-105 Chatham Road South, Tsim Sha Tsui, Kowloon, Hong Kong
Contact person: Huanbin Lin
Data protection e-mail: privacy@homesaveexpress.com
Other questions: support@homesaveexpress.com

What we collect

Order form on a shop product page
First and last name, phone number, delivery address and country; your e-mail address and a note if you add them; the item and the quantity.
Order form on a product page in your language
Full name, phone number and delivery address; the item; the campaign details in the link you arrived by; and a check of your connection and browser (IP address, browser and device details) that tells real orders from automated ones.
The confirmation call
What you confirm or change on the call, such as the items or the delivery address.
Support form and e-mails
Your name, e-mail address, the order reference if you give it, the topic and your message.
A refund
The account holder's name and the IBAN you send us.
Every visit
What your browser sends with each request: IP address, browser type, the page asked for and the time. Kept in short-lived server logs.
Your browser
Your cookie answer and the few items listed on the cookie page.
Advertising tags, with your yes
Which advert brought you here and whether the visit led to an order.

What we collect
Where	What
Order form on a shop product page	First and last name, phone number, delivery address and country; your e-mail address and a note if you add them; the item and the quantity.
Order form on a product page in your language	Full name, phone number and delivery address; the item; the campaign details in the link you arrived by; and a check of your connection and browser (IP address, browser and device details) that tells real orders from automated ones.
The confirmation call	What you confirm or change on the call, such as the items or the delivery address.
Support form and e-mails	Your name, e-mail address, the order reference if you give it, the topic and your message.
A refund	The account holder's name and the IBAN you send us.
Every visit	What your browser sends with each request: IP address, browser type, the page asked for and the time. Kept in short-lived server logs.
Your browser	Your cookie answer and the few items listed on the cookie page.
Advertising tags, with your yes	Which advert brought you here and whether the visit led to an order.

We never ask for special kinds of data, such as health information, and there is no field for them.

Why we use it

Taking your order, confirming it by phone, delivering it and collecting payment
The contract with you (GDPR art. 6(1)(b))
Returns, refunds and the legal guarantee
The contract, and our legal duties (art. 6(1)(b) and (c))
Keeping order records for tax and accounting
Legal obligation (art. 6(1)(c))
Answering your messages
Your request, and our legitimate interest in helping customers (art. 6(1)(b) and (f))
Stopping fake and automated orders; keeping the site secure
Legitimate interest (art. 6(1)(f))
Measuring which adverts lead to orders, and showing our adverts to people who have visited the shop
Your consent (art. 6(1)(a)), which you can take back at any time

Why we use it, and the legal basis
What for	Legal basis
Taking your order, confirming it by phone, delivering it and collecting payment	The contract with you (GDPR art. 6(1)(b))
Returns, refunds and the legal guarantee	The contract, and our legal duties (art. 6(1)(b) and (c))
Keeping order records for tax and accounting	Legal obligation (art. 6(1)(c))
Answering your messages	Your request, and our legitimate interest in helping customers (art. 6(1)(b) and (f))
Stopping fake and automated orders; keeping the site secure	Legitimate interest (art. 6(1)(f))
Measuring which adverts lead to orders, and showing our adverts to people who have visited the shop	Your consent (art. 6(1)(a)), which you can take back at any time

We do not sell your data, and we do not use it to send you advertising by e-mail, text message or phone.

Our forms check for signs of automated sending, such as a form filled in faster than a person could. This may stop a submission, but no decision that affects you in any other way is made automatically: the confirmation call is made by a person.

Who else handles it

Vercel Inc.
What they do
Hosts the site, delivers its pages and runs its order and support forms. Keeps short technical logs of each request.
Where
United States
The courier or postal operator in the destination country
What they do
Delivers the parcel and collects the payment. Receives your name, delivery address, phone number and the amount to collect.
Where
Your country
Our order-confirmation partner
What they do
Makes the confirmation call before dispatch and receives orders sent from product pages in your language. Receives your name, phone number, address and the order details.
Where
European Union
Google Ireland Limited
What they do
Advertising tag: measures which Google adverts lead to orders and can show our adverts to people who have visited the shop. Works in a restricted mode, without cookies, until you say yes to advertising.
Where
Ireland, with transfers to the United States
Meta Platforms Ireland Limited
What they do
Advertising pixel: does the same for Meta adverts. Loaded only after you say yes to advertising.
Where
Ireland, with transfers to the United States

Companies that handle personal data for us
Who	What they do	Where
Vercel Inc.	Hosts the site, delivers its pages and runs its order and support forms. Keeps short technical logs of each request.	United States
The courier or postal operator in the destination country	Delivers the parcel and collects the payment. Receives your name, delivery address, phone number and the amount to collect.	Your country
Our order-confirmation partner	Makes the confirmation call before dispatch and receives orders sent from product pages in your language. Receives your name, phone number, address and the order details.	European Union
Google Ireland Limited	Advertising tag: measures which Google adverts lead to orders and can show our adverts to people who have visited the shop. Works in a restricted mode, without cookies, until you say yes to advertising.	Ireland, with transfers to the United States
Meta Platforms Ireland Limited	Advertising pixel: does the same for Meta adverts. Loaded only after you say yes to advertising.	Ireland, with transfers to the United States

Each of them uses your data only for the task we give it, under a written agreement. Beyond these, data goes only where an order or the law needs it: to the banks that carry a refund transfer, and to public authorities when we are legally obliged to answer them.

Transfers outside Europe

WHATECH MOBILE CO., LIMITED is based in Hong Kong, outside the European Economic Area, and Vercel Inc. is in the United States. Google and Meta may also pass data from Ireland to the United States.

These transfers take place on the standard contractual clauses approved by the European Commission, which bind the receiving company to European levels of protection. You can ask for a copy at privacy@homesaveexpress.com.

How long we keep it

Orders and their invoices, including bank details given for a refund
How long
10 years after the order
Why
Tax and accounting law
Orders never confirmed, or cancelled before dispatch
How long
90 days
Why
To answer questions about them; then deleted
Support messages and e-mails
How long
24 months after the last message
Why
To follow up on the same matter
Technical server logs
How long
30 days
Why
To look into faults and misuse
Your cookie answer (in your browser)
How long
12 months
Why
So the question is not asked on every visit

How long we keep it
What	How long	Why
Orders and their invoices, including bank details given for a refund	10 years after the order	Tax and accounting law
Orders never confirmed, or cancelled before dispatch	90 days	To answer questions about them; then deleted
Support messages and e-mails	24 months after the last message	To follow up on the same matter
Technical server logs	30 days	To look into faults and misuse
Your cookie answer (in your browser)	12 months	So the question is not asked on every visit

When the time is up, the data is deleted or made anonymous.

Your rights

Access: Ask what we hold about you and receive a copy.
Correction: Have wrong or incomplete details put right.
Erasure: Have data deleted when we no longer need it or should not have it.
Restriction: Have its use paused while a question about it is settled.
Portability: Receive the data you gave us in a common file format, or have it passed to someone else.
Objection: Object to any use based on our legitimate interest.
Withdrawing consent: Take back a yes at any time. What happened before stays lawful.

Write to privacy@homesaveexpress.com. We answer within 30 days, free of charge. To protect your data, we may ask you to confirm who you are, for example with your order reference and the phone number used for the order.

Complaints

If you think we have handled your data wrongly, you can complain to the data protection authority of the country where you live or work, or where the problem happened.

Our own supervisory authority is the Office of the Privacy Commissioner for Personal Data, Hong Kong.

We would be glad to hear from you first at privacy@homesaveexpress.com: most things can be put right quickly.

Advertising tags and your choice

Many people find this shop through adverts. To know which adverts work, the site can use a Google tag and a Meta pixel. What they do depends on the answer you give in the cookie panel.

Before you answer, or if you say no

The Google tag runs in a restricted mode (Google Consent Mode): it writes no advertising cookies and reads none.
Advertising identifiers are removed from what it sends. What reaches Google is a basic signal without cookies, such as the page, the time and the fact that there is no consent, which Google uses only in aggregate to estimate how adverts perform.
The Meta pixel is not loaded at all.

If you say yes to advertising

The Google tag may store cookies that link a click on a Google advert with a later order.
When you place an order, it reports the order reference, its value and the currency, so the advert can be credited.
The Meta pixel is loaded and records page views and an order in the same way.
Google and Meta may later show you our adverts on other sites and apps.

What we never pass on

Your name, phone number, address and e-mail address are never sent to Google or Meta.

You can change your answer at any time with the button above or “Cookie settings” at the foot of every page. Google explains how it uses data from sites like this one at policies.google.com, and Meta at facebook.com/privacy/policy.

Children

The shop is meant for adults. It is not aimed at anyone under 16, and we do not knowingly collect their data. If you believe a child has sent us personal details, write to privacy@homesaveexpress.com and we will delete them.

Keeping it safe

Every page and form travels over an encrypted connection (HTTPS). Order details are seen only by the people and partners who need them to confirm, deliver or look after the order.

Changes to this notice

When this notice changes, the date at the top changes too. Important changes are announced on this page before they apply.

A question about your data?

Write toprivacy@homesaveexpress.com

We answer within 30 days.

1Who is responsible

2What we collect

3Why we use it

4Who else handles it

5Transfers outside Europe

6How long we keep it

7Your rights

8Complaints

9Advertising tags and your choice