Zengguang (Hong Kong) Industrial Co., Ltd. (hereinafter referred to as "we", "us", or "our") places great importance on and is committed to protecting your privacy. This Privacy Policy explains in a transparent manner how we collect, use, store, transfer, and protect your personal information, as well as the rights you are entitled to under applicable law. Please read and fully understand this policy before using our website.

Article 1 – Collection of Personal Information

We collect personal information through the following channels:

1.1 Information You Voluntarily Provide: When you register an account, place an order, subscribe to our newsletters, participate in marketing campaigns, or contact our customer service team, you may provide information including but not limited to your name, contact details (email address, phone number), shipping address, billing address, payment information (e.g., credit card details or third‑party payment account information), and personal preferences.

1.2 Information We Automatically Collect: When you visit or use our website, our systems may automatically record your device information (such as IP address, device model, operating system version), browser type and settings, access time and duration, browsing history, click behavior, search keywords, referral URLs, and other similar data for purposes of website optimization and user behavior analysis.

1.3 Cookies and Similar Tracking Technologies: We use cookies, pixel tags, web beacons, and other similar technologies to enhance your browsing experience. For more details on how we use these technologies, please refer to Article 7 of this policy.

1.4 Information from Third‑Party Sources: Where permitted by law, we may receive information about you from our partners (such as payment service providers and social media platforms) that you have authorized to share such information with us.

Article 2 – Use of Personal Information

We use your personal information for the following legitimate purposes:

• Processing your orders, arranging logistics and delivery, and providing after‑sales support and return/exchange services;

• Managing and maintaining your account, and ensuring transaction security;

• Sending you order status updates, logistics tracking information, and other important website notifications;

• Sending you marketing communications, promotional offers, and personalized product recommendations (where we have obtained your explicit consent);

• Continuously improving the functionality of our website, product recommendation algorithms, and overall customer service quality;

• Monitoring, preventing, and investigating fraudulent activities, illegal transactions, or other violations of our Terms of Service;

• Fulfilling legal and regulatory compliance obligations, and responding to lawful requests from governmental or judicial authorities.

Article 3 – Legal Basis for Data Processing

We process your personal information in accordance with applicable data protection laws and regulations (including but not limited to Hong Kong's Personal Data (Privacy) Ordinance and the EU General Data Protection Regulation (GDPR)), based on one or more of the following legal grounds:

• Performance of a contract with you (e.g., processing orders and arranging deliveries);

• Compliance with our legal obligations;

• Pursuit of our legitimate business interests (such as website security, data analysis, and service optimization), provided that such interests do not override your privacy rights;

• Your explicit prior consent (e.g., for sending you marketing communications).

Article 4 – Sharing and Disclosure of Information

We solemnly undertake that we do not sell or rent your personal information. We may share your information with third parties only in the following specific circumstances:

4.1 Service Providers: We may share necessary information with trusted third‑party service providers (including payment processors, logistics carriers, cloud hosting providers, email distribution platforms, and data analytics services) to enable them to perform services on our behalf. These providers are only authorized to use your information to the extent necessary to provide such services and are bound by strict confidentiality obligations.

4.2 Legal and Regulatory Requirements: We may disclose your personal information when required by law, court orders, or government regulatory authorities to protect our legal rights, ensure user safety, or safeguard the public interest.

4.3 Business Reorganization: In the event of a merger, acquisition, asset sale, or other material business changes, your personal information may be transferred as part of the transaction. We will notify you in advance and ensure that the receiving party continues to honor the commitments set forth in this Privacy Policy.

4.4 With Your Explicit Authorization: We may use your information for other purposes not listed in this policy only after obtaining your separate and explicit consent.

Article 5 – Cross‑Border Data Transfers

As our business serves customers worldwide, your personal information may be transferred to locations outside your jurisdiction (including Hong Kong SAR, Mainland China, the United States, and member states of the European Economic Area). Regardless of where your data is stored, we implement appropriate technical and organizational measures and ensure that such cross‑border transfers comply with applicable data protection laws (e.g., through entering into Standard Contractual Clauses or relying on other legally recognized transfer mechanisms) to safeguard your data rights.

Article 6 – Data Retention Period

We retain your personal information only for as long as reasonably necessary to fulfill the purposes set out in this policy, unless a longer retention period is required or permitted by law. Retention periods vary depending on the type of information and its intended use: for example, transaction‑related records are generally retained for seven (7) years after completion of the transaction to comply with tax and accounting requirements, while marketing preference data will be promptly deleted upon withdrawal of your consent.

Article 7 – Cookies and Similar Technologies

This website uses the following categories of cookies:

• Strictly Necessary Cookies: These are essential for the basic operation of the website, including shopping cart functionality, user login authentication, and security protection. These cannot be disabled.

• Functional Cookies: These remember your language preferences, regional settings, and browsing history to enhance the convenience of your website experience.

• Analytics Cookies: These help us analyze website traffic, user sources, and page popularity to improve website performance.

• Advertising Cookies (if applicable): These are used to display relevant product advertisements to you and to limit the frequency of ad repetition.

You may manage or delete cookies through your browser settings. Please note that disabling strictly necessary cookies may cause certain features of the website to malfunction. We may also use third‑party analytics tools (such as Google Analytics), whose data collection practices are governed by their own privacy policies.

Article 8 – Data Security

We adopt industry‑standard security technologies and management measures to protect your information, including but not limited to SSL encryption, network firewalls, strict access controls, regular security vulnerability assessments, and employee training on data protection. However, please be aware that no method of data transmission over the Internet or wired/wireless networks can be guaranteed 100% secure, and we therefore cannot guarantee the absolute security of information transmission. In the event of a data security incident, we will notify you and the relevant regulatory authorities in accordance with applicable laws.

Article 9 – Your Data Protection Rights

Under applicable data protection laws, you enjoy the following rights with respect to your personal information:

• Right of Access: The right to request a copy of your personal information, including information about the purposes of processing, categories of data, and recipients.

• Right to Rectification: The right to request the correction or supplementation of inaccurate or incomplete personal information.

• Right to Erasure (Right to be Forgotten): The right to request the deletion of your personal information under certain circumstances (e.g., when the data is no longer necessary for processing, when you withdraw your consent, or when the processing is unlawful).

• Right to Restriction of Processing: The right to request the temporary restriction of processing of your information under certain circumstances (e.g., when you contest the accuracy of the data).

• Right to Data Portability: The right to request that the personal information you have provided be transferred to another data controller in a structured, commonly used, and machine‑readable format.

• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing that occurred prior to withdrawal.

• Right to Object to Marketing: You have the right to opt out of receiving marketing communications at any time via the unsubscribe link in our emails or by contacting us directly.

To exercise any of the above rights, please submit your request in accordance with the instructions in Article 14 of this policy. We will respond within 10 days and will not charge a fee (unless the request is manifestly unfounded or excessive).

Article 10 – Children's Privacy

This website and the services offered are not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If you are under 18, please do not register an account or provide any personal information on this website. If we discover that we have inadvertently collected such information, we will delete it promptly.

Article 11 – Links to Third‑Party Websites

This website may contain links to third‑party websites or applications (e.g., social media platforms, payment service pages). These third parties operate independently and are subject to their own privacy policies. We accept no responsibility or liability for their data processing practices. When you leave our website, this Privacy Policy no longer applies. We encourage you to read the privacy statements of any third‑party platforms you visit.

Article 12 – Updates to This Privacy Policy

We reserve the right to update this Privacy Policy from time to time to reflect changes in applicable laws or adjustments to our business operations. In the event of material changes (such as substantial expansion of the types of information we collect or fundamental changes in the way we process information), we will notify you in advance via a prominent notice on our website or by email. The revised policy will take effect upon publication, and your continued use of our website after such updates constitutes your acceptance of the revised policy.

Article 13 – Complaints and Regulatory Recourse

If you believe that your privacy rights have been violated, you have the right to file a complaint with the Office of the Privacy Commissioner for Personal Data in Hong Kong or other competent regulatory authorities. We sincerely recommend that you contact us directly before filing a complaint, so that we have the opportunity to resolve your concerns in a timely manner.

Article 14 – Contact Us

If you have any questions, comments, or wish to exercise your data rights regarding this Privacy Policy, please reach out to us through the following channels:

Email: hkzengguang@gmail.com
Address: Unit 701, Room 108, Block B, Technology Building, No. 14 New Mandarin Plaza, Tsim Sha Tsui, Museum Road, Kowloon, Hong Kong SAR

We have designated a dedicated person responsible for privacy matters, and we will respond to your request within 10 working days.