Privacy Policy
Carmela Group Limited (“the Company”, “we”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store and protect your personal data when you use our corporate hub at center.carmelafashion.com and, where relevant, our wholesale shop at shop.carmelafashion.com (together, the “Websites”).
Scope
This policy applies to professional visitors and business customers who browse the hub, submit an enquiry form, or register, place orders or contact us through the wholesale shop. Our services are intended for professional buyers aged 18 or over.
Data we collect
- Hub enquiry form: name, company, email, phone / WeChat (optional), interest (Apparel / Footwear / Both / Private label), message, and technical source metadata (for example which button opened the form and the page URL)
- Company information on shop accounts (name, registration number, registered address, VAT number where applicable)
- Contact details (name, job title, telephone number, email address)
- Account data on the shop (login email, encrypted password)
- Order and transaction data on the shop (order numbers, products, invoice/delivery addresses, payment method)
- Website behaviour (IP address, browser type, pages visited — analysed via Google Analytics where enabled)
- Communication records (emails with our customer service)
- Marketing preferences
Purposes of processing and legal basis
- Respond to hub enquiries and route them to our team — legitimate interests / steps prior to a contract
- Process and fulfil shop orders — performance of the contract
- Provide customer support
- Verify identity and prevent fraud — legitimate interests
- Send transactional emails and invoices
- Analyse website usage (Google Analytics) — legitimate interests
- Send marketing emails only with your consent — consent
Data sharing
We share data only with the following parties:
- Internal recipients for enquiries: customer-service mailboxes used by our directors and team (including julia, tiffanyyip and gavin addresses) plus system mail from a noreply sender when automated notices are used
- Airwallex (payment service provider) — primarily for the online shop; the minimum data necessary to process payment. Card numbers and CVV are never stored on our Websites
- SF Express International (carrier) — primarily for the online shop; recipient name, address and telephone number
- Google Analytics (anonymised IP where configured)
- Professional advisers, only where required by law
We never sell or rent your personal data.
Retention periods
- Hub enquiry records: retained as long as needed to handle the request and for ordinary business follow-up, then deleted or minimised
- Order/transaction data: 10 years from the last transaction
- Account data: deleted 30 days after account closure
- Marketing lists: deleted immediately upon unsubscribing
Your rights
Residents of France and the European Union in particular may at any time contact [email protected] to:
- Access, rectify or delete their data
- Restrict or object to processing
- Obtain data portability
- Withdraw marketing consent
- Lodge a complaint with the CNIL (Commission nationale de l'informatique et des libertés)
Security measures
We use SSL encryption, firewalls and regular security audits. However, no internet transmission is 100% secure.
Cookies
We use necessary cookies and may use analytics cookies (Google Analytics — IP addresses anonymised) and marketing cookies. Details are in our Cookie Policy. You may refuse non-essential cookies in your browser settings. This hub does not currently show a separate cookie consent banner.
Updates to this policy
We may update this policy from time to time. Material changes will be notified by email where appropriate.
Contact us
- Email: [email protected]
- Phone: +852 5115 7176 / +33 6 10 98 43 05
- Address: Flat B, 2/F., 1 U Lam Terrace, Sheung Wan, Hong Kong
Carmela Group Limited — a company registered in Hong Kong.