Privacy Policy

1. Who is responsible for your data

GIGGLE TECHNOLOGY CO., LIMITED is responsible for the personal data described in this notice when you use the Giggle Fone storefront and related services. Questions and privacy requests may be sent to [email protected] or made by phone at +852 5106 6241.

This notice describes how the current online store works. It is operational information and does not limit any rights you have under applicable law.

2. Data we collect and where it comes from

• Account and identity data, such as your name, email address, telephone number, login details, and identifiers received when you choose Google or Facebook sign-in.
• Order and delivery data, such as products, prices, payment status, billing and delivery details, addresses, returns, refunds, warranty requests, and communications about an order.
• Payment-related data. Payment providers process payment credentials; we receive transaction references, status, and limited details needed to reconcile and support the purchase.
• Communications and content, including support enquiries, feedback, newsletter choices, and Ask AI prompts, replies, conversation identifiers, and related logs.
• Device, security, and usage data, such as IP address, browser and device information, requested pages, timestamps, referral information, security checks, and diagnostic logs.
• Marketing and attribution data, including newsletter engagement, campaign parameters, partner attribution codes, analytics events, and consent choices.
• Information stored on your device, including cookie preferences, locale and storefront choices, login/session information where applicable, and cart contents kept in local storage.

We collect data directly from you, automatically from your browser or device, from our commerce and order management platform, and from service providers involved in login, security, payment, delivery, communications, and analytics.

3. Why we use data

• Provide accounts, carts, checkout, payments, order fulfilment, delivery, returns, refunds, warranties, and customer support.
• Authenticate users, protect accounts and transactions, prevent abuse and fraud, and maintain service reliability.
• Answer Ask AI requests and retain conversation records so the feature works, support can investigate issues, and the service can be improved.
• Send service messages and, where you choose to subscribe, marketing newsletters. You may unsubscribe from marketing at any time.
• Measure traffic, understand feature use, diagnose problems, and improve the storefront. Non-essential analytics and optional session replay are controlled by your consent, except for any strictly limited audience measurement configured to satisfy an applicable consent exemption.
• Remember locale, storefront, consent, cart, and partner attribution choices and calculate commissions or campaign performance.
• Comply with legal obligations, respond to lawful requests, establish or defend legal claims, and enforce our terms.

4. Mandatory and optional information

Data marked as required during account creation, checkout, payment, delivery, or a support process is needed to provide that service or meet legal and security requirements. Without it, we may be unable to create an account, accept or deliver an order, process a return, verify a request, or reply to you.

Newsletter sign-up, feedback, Ask AI, social sign-in, non-essential analytics, and optional session replay are optional. Refusing them does not prevent ordinary browsing or purchasing, although the related feature or personalisation will not be available.

5. Who receives data

We disclose only the data reasonably needed to operate the service to: our commerce and order management platform; hosting, database, content-delivery-network and security providers, including Cloudflare; payment providers such as Stripe, Payoneer, and WeChat Pay; Google or Facebook when you choose their sign-in service; delivery and logistics providers; email, newsletter, and customer-communication providers; Google Analytics, Microsoft Clarity, and a privacy-focused traffic analytics service where enabled; professional advisers; and courts, regulators, law-enforcement bodies, or other authorities where required.

Some providers act on our instructions and others process data under their own terms, especially payment, social-login, and delivery providers. Their own privacy notices may also apply.

6. International transfers

Our storefront and providers may process data in more than one country. The destination depends on the provider, service, and transaction; we do not claim that all data stays in Hong Kong, France, the European Economic Area, or any other single location.

Where applicable law requires safeguards for a transfer, we will use an appropriate lawful mechanism and supplementary protections as required. You may contact us for information about safeguards relevant to your data.

7. How long we keep data

We keep data only for as long as reasonably needed for the purpose collected, including service delivery, security, dispute handling, and applicable accounting or legal duties. Order and payment records are retained while needed to fulfil the order and then for the period required to handle returns, warranties, disputes, records, and legal obligations. Account data is kept while the account is active and afterwards only as needed for closure, security, disputes, and legal duties.

Support, feedback, and Ask AI records are kept while needed to respond, maintain context, investigate issues, improve the service, and handle disputes, then deleted or de-identified under our operational retention process. Newsletter data is kept until you unsubscribe or we no longer need the list, subject to a limited suppression record so we respect your choice.

Partner attribution is stored for up to 30 days. The cookie-consent choice is stored for up to 12 months. Session, security, locale, and storefront data expire or are removed when no longer needed for their function. Cart contents in local storage remain on your device until cleared by the site, your browser, or you.

8. Cookies, local storage, analytics, and session replay

Essential cookies and similar storage support security, login, locale and storefront selection, consent records, and other functions needed to provide the site. Cart contents are stored in your browser’s local storage and may be synchronised with your account when the service supports it.

Our cookie banner lets you accept or reject non-essential analytics and change your choice later through Cookie settings in the footer. With consent, Google Analytics, Microsoft Clarity, our traffic analytics service, ecommerce measurement, and optional sampled session replay may collect usage events and pseudonymous identifiers. Session replay is configured to mask content, but you should not enter sensitive information in free-text fields.

For the France storefront, limited audience measurement may operate without cookies only where it has been specifically configured to meet all conditions of an applicable consent exemption. This mode is off by default and is not a claim that an exemption has been approved. Other analytics and session replay remain consent-controlled.

9. Your rights

Subject to the GDPR and applicable law, you may request access, correction, deletion, restriction, and portability; object to processing based on legitimate interests; withdraw consent at any time without affecting earlier processing; and object to direct marketing.

To exercise a right, email [email protected]. We may request information needed to verify your identity and request. You may also complain to the Commission nationale de l’informatique et des libertés (CNIL) or the competent supervisory authority where you live.

10. Recommendations, analytics, and automated decisions

We use browsing, cart, campaign, and purchase signals to measure performance and may use them to order or recommend products and content. Ask AI generates responses from your prompt and available service information. These activities may involve profiling, but the storefront does not use solely automated processing to make decisions that produce legal or similarly significant effects about you.

11. Security

We use organisational and technical measures designed to protect personal data, including access controls, transport encryption, security monitoring, bot protection, and service-provider controls. No internet service is completely secure. Protect your credentials and avoid sending payment credentials, identity documents, or other sensitive data through Ask AI or ordinary email unless specifically requested through an appropriate channel.

12. Children

The storefront is intended for people who can lawfully enter a purchase contract. It is not directed to children, and we do not knowingly collect personal data from children for their independent use of the service. A parent or guardian who believes a child has provided data should contact us.