Privacy Policy

Company: AXSAHI LIMITED
Address: Rm 701, Unit 127, 7/F, Tower B, New Mandarin Plaza, 14 Science Museum Road, Tsim Sha Tsui, Hong Kong
Contact: office@axsahi.com

We respect your privacy and are committed to protecting your personal data. We collect and use customer information in accordance with applicable data protection laws (for example, the EU’s GDPR, UK GDPR, and California’s CCPA/CPRA) and only as needed to operate our store. This Privacy Policy explains:

• What information we collect: the types of personal data gathered from you (customer details, payment/transaction details, technical data, etc.).
• How we use it: the purposes for which we process your data (order fulfillment, customer support, marketing, etc.) and on what legal basis (contract, consent, legitimate interest, legal obligation).
• Third-party sharing: which service providers we share data with (e.g. payment processors, shipping carriers, analytics and marketing tools) and how they use it.
• Cookies and tracking: our use of cookies and similar technologies on this site.
• Data retention: how long we keep your personal data.
• Your rights: how you can access, correct, or delete your data and manage consents.
• Security: measures we take to protect your data.
• International transfers: cross-border processing details.
• Children’s privacy: our policy regarding minors.
• Changes: how we will notify you of policy updates.

Information We Collect

We collect information you provide directly to us (for example, when you create an account, place an order, request a quote, or contact customer support) and information automatically collected when you visit the site (via cookies and analytics). This may include:

• Contact and Account Data: Name, billing address, shipping address, email address, phone number, account username, and other account/profile details.
• Order and Transaction Data: Products ordered (type, model, quantity), order number, order status, payment amount, payment method, invoice information, shipping method, and any returns or refunds associated with the order.
• Payment Data: If you pay online, we will collect payment information (such as credit card or bank account details) only as needed to process the transaction. Note: Full payment card details are handled securely by our payment processors (e.g. Stripe, PayPal) and are not stored on our servers.
• Device and Usage Data: IP address, browser type, operating system, referring website, pages viewed, links clicked, and other standard web log information. We also collect data via cookies and similar technologies to track site usage, remember preferences, and provide a better experience.
• Communications: Any information you send us via contact forms, email, or support requests (e.g. product inquiries, complaint details, custom order specifications).

According to the UK’s Information Commissioner’s Office, individuals have a right to be informed about how their data is collected and used. We provide this information here and encourage you to review it in full.

How We Use Your Information

We use your personal data to operate our business and provide our services. Typical uses include:

• Order Processing: We use your contact and payment data to fulfill your orders. For example, “you need [the customer’s] address to ship [the product] and [their] email to update them on their order status”. Without the necessary data, we cannot complete your purchase.
• Customer Service: We may use your email or phone number to respond to your inquiries or support requests, provide order status updates, and handle returns or warranty claims.
• Account Management: We use account data (username, email, password) to create and manage your user account on our site.
• Payments and Refunds: We process payments (and any refunds) through secure payment gateways. Personal data is used to verify and complete transactions.
• Marketing and Communications: With your consent, we may send promotional emails or newsletters about new products, promotions, or events. You may opt out of marketing messages at any time.
• Legitimate Business Interests: We process data (under a legitimate interest basis) to improve our website, products, and services. For example, we analyze site usage to optimize our store, prevent fraud, and maintain security.
• Legal Compliance: We may use or retain your data to comply with legal obligations (such as tax laws or product safety regulations) and to enforce our legal rights.
• Analytics and Advertising: We may share data with analytics tools (like Google Analytics) and advertising platforms (like Meta/Facebook) to measure site performance and tailor marketing.

Under data protection laws, each processing purpose above must have a lawful basis. For orders and account management, the basis is contractual necessity. For marketing emails or optional surveys, it is your consent. For fraud prevention or site security, it is our legitimate interest. For compliance with laws, it is legal obligation.

Third-Party Sharing

We do not sell your personal data. However, we do share information with third-party service providers to operate our store. These include:

• Payment Processors: We use services like Stripe and PayPal to handle payments. They receive your payment information solely to process your transaction.
• Shipping Carriers: We share your shipping address and contact details with carriers (e.g. FedEx, DHL) so they can deliver your orders.
• E-commerce Platform: Our website runs on WordPress/WooCommerce (hosted by our provider). We may share data with our hosting provider for site operation and backup.
• Analytics and Marketing Services: We use analytics (e.g. Google Analytics) to understand site usage, and we may use email marketing (e.g. Mailchimp) or social media ads. These tools process data to help us analyze traffic and send communications. We will link to each provider’s privacy policy when possible.
• Other Service Providers: This includes any additional services we integrate (e.g. live chat support, review platforms, accounting software).

We require all such providers to protect your data and use it only for delivering the contracted service. For example, credit card data is encrypted and processed by the payment gateway only.

Cookies and Tracking

Our website uses cookies and similar technologies (pixels, tags, local storage) to improve your experience and analyze site performance:

• Necessary Cookies: These are essential for core features (keeping you logged in, remembering items in your cart, preventing fraud, securing the checkout). Without them, the site may not function properly.
• Functional Cookies: These remember your preferences (e.g. language, currency) so you don’t have to re-enter them each visit.
• Analytics Cookies: We use cookies (often via Google Analytics) to see how visitors use the site (pages visited, referral source, etc.) so we can improve content and navigation.
• Marketing/Advertising Cookies: We may use cookies to deliver relevant ads on other sites (e.g. Google Ads, Facebook Pixel) and to measure ad performance.

You can usually disable cookies via your browser or a cookie consent tool on our site. However, turning off some cookies (especially necessary ones) may prevent parts of the site (like checkout) from working correctly.

Data Retention

We retain personal information only as long as needed for the purposes outlined above or as required by law. As WooCommerce recommends, we disclose retention periods in our policy. For example:

• Order and Transaction Records: We keep orders, invoices, and payment information for 7 years (to meet tax and accounting obligations).
• Account Information: We keep your account data as long as your account is active. Inactive accounts are retained until deletion is requested or after a period of inactivity.
• Support and Communication Records: Customer service interactions and support tickets are kept for 3 years or until resolved.
• Marketing Consents: We keep records of your consent or opt-out preferences indefinitely, unless you request deletion.

After data is no longer needed, we securely delete it or make it anonymous. For instance, after an order is deleted from the system, personal details in that order are removed or anonymized. If local law requires longer retention (e.g. for warranties or regulatory audits), we may extend these periods as needed.

Your Rights

Under applicable privacy laws, you have rights regarding your personal data. These may include (where applicable) the right to:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Correct any inaccurate or incomplete data.
• Erasure: Request deletion of your personal data (also known as “the right to be forgotten”), subject to any legal retention requirements.
• Restriction: Ask us to limit how we use your data.
• Data Portability: Request your data in a standard, machine-readable format to transfer to another service.
• Object: Object to certain processing (e.g. direct marketing) at any time.
• Withdraw Consent: If processing is based on consent, you can withdraw your consent at any time (this will not affect data processed prior to withdrawal).

To exercise any rights, please contact us at office@axsahi.com. We may request identity verification for security. We will respond to your request in accordance with the law.

Security

We implement reasonable technical and organizational measures to protect your data. For example, our site uses SSL/TLS encryption for all sensitive transmissions (such as during checkout). We work with reputable payment gateways that are PCI compliant. Access to customer data is limited to authorized staff on a need-to-know basis. We regularly update and patch our systems. However, no website can be 100% secure. Please also protect your account by using a strong password and keeping it confidential.

International Transfers

AXSAHI operates globally. Your data may be transferred or processed in countries outside your own (for example, data may be processed in Hong Kong, the EU, or the US by our service providers). Where required (e.g. for EU/UK customers), we use approved transfer mechanisms such as Standard Contractual Clauses or rely on an adequacy decision. Rest assured, we take steps to ensure appropriate safeguards are in place when transferring data internationally.

Children’s Privacy

Our website and products are intended for adults (or business customers). We do not knowingly collect personal information from children under the age of 16 (or under 13 where applicable by law). If you are a parent or guardian and believe your child has provided us with personal data without your consent, please contact us. We will take steps to delete such information immediately.

Third-Party Links

Our website may contain links to third-party sites (such as suppliers, payment providers, or social media). We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any third-party sites before providing them with your personal data.

Changes to This Privacy Policy

We may update this policy over time (for example, to reflect new services or legal changes). The “Last updated” date at the top will be revised. We recommend checking back periodically. In case of significant changes, we may notify customers by email or site notice.

Contact Us

If you have any questions or concerns about our privacy practices, please contact:
AXSAHI LIMITED (艾蕯希有限公司)
Email: office@axsahi.com
Address: Rm 701, Unit 127, 7/F, Tower B, New Mandarin Plaza, 14 Science Museum Road, Tsim Sha Tsui, Hong Kong

You may also contact our Data Protection Officer (if appointed) or file a complaint with your local data protection authority.