1. How we collect and use information

1.1 The Company collects personal information to ensure we can fulfil our service promises and offer you a personal experience online and in our stores.

1.2 Different levels of personal information may be gathered depending on your usage of our services:

• If you are not a registered user, you are browsing the Sites anonymously as a guest. We will not collect any personal information from you but you may not be able to use all services and features that we offer to registered users.
• You need to input your personal information to register in order for us to process some features and services that we offer to our registered users, such as email updates or requesting information from customer service. We may store some of the data provided for these features and services for such purpose. You have the right to refuse to provide your personal data to us. However, certain services and functions may not be available to you if you do not supply us with data marked with an asterisk (*) on the data collection form.
• You can place an order with us as a registered user on the Sites. We will only collect information necessary to fulfil the relevant order (such as your name, contact details and payment information)
• You may from time to time provide us with your personal data at our physical stores, via your applications for or use of various services that we provide. For instance, you may be required to provide us with your personal data when you apply as a Star Shopper; to purchase from us or make enquiries at our stores or over the telephone; to use our concierge services; to provide feedback to us (such as via a survey); or to participate in our promotions and events. The data we collect may include your name, gender, date of birth, address, mobile phone number, email address, password.
• You can also log into the Sites using sign in services that bridge your social media log in information with the Sites. These services will authenticate your identity and provide you with the option to share certain personal data with us such as your name and email address to pre-populate the sign up form for the Sites. These services give you the option to post information about your activities on the Site to your profile page to share with others within your personal network.
• You may also use other social media features, widgets and/or interactive mini programs that run on the Sites. These features are small content modules that may collect personal data including your IP address, the page you are viewing on the Sites or set a cookie to enable the feature to function properly. These social media feature are either hosted by us or by a third party on the Sites. If the feature is provided by a third party the use of your personal data will be governed by the privacy policy of that third party. Please review these third party privacy policies.

1.3 We may use your personal details for the following purposes:

• Responding to your enquiries;
• Matching personal information with information you provided in one of our stores;
• Marketing our new products, events and/or promotions happening online or in store. Please refer to the section "Direct marketing" for more information;
• Communicating with you based on the personal data that you provide to us, such as by phone, email, SMS, smartphone app push notifications or postal mail;
• Processing features such as sharing a product with a friend, making a store appointment, maintaining your wish list, maintaining your shopping bag on the Sites, and fulfilling any orders you may make with us (including verification and security checks of your details, and processing of your payments)
• Analysing trends and behaviour as well as conducting customer surveys to continuously improve our offerings and services;
• Enabling us to meet the requirements to make disclosure under the requirements of any law, regulation or court order binding on us; and
• All purposes directly related to the above.

1.4 We use cookies to recognise you when you return to the Sites, personalise your shopping experience and maintain the content of your shopping bag. Cookies are small information files stored on your hard drive and are automatically accepted by most browsers. You can change the options of your browser to be notified of new cookies being set, delete old cookies or disable them altogether. Please note that you may not be able to use all features and services offered on the Sites when cookies are disabled.

1.5 We automatically collect anonymous data relating to your online session to gather statistical information on our server's usage and to help us better meet your demands and expectations. This may include but is not limited to your browser type and version, your operating system, your IP address, access dates and times, your device ID, your mobile network information, your location (with your permission) and/or domain name.

2. Third parties

2.1 This policy applies to the Sites, but not to websites, online services or mobile applications maintained by other companies or organizations to which we may link or engage in joint promotions.

2.2 We do not provide any personally identifiable customer information to these advertisers or third-party websites, online services or mobile applications unless your consent is obtained. If you follow a link to any of these websites, online services or mobile applications or submit information to third parties via our websites, online services or mobile applications, please check and read their own privacy notice before submitting your details. Note that we do not accept any responsibility or liability for these policies.

3. Security and protection of your information

3.1 We may use your personal information to meet our customer services commitments. Access to such information is protected by physical, electronic and managerial measures and we therefore limit the access to your information to our employees and agents who need it to do their jobs.

3.2 To protect your information when you use the Sites, we will encrypt any personal information you transmit to us using Secure Socket Layer (SSL) — an industry standard for encryption over the Internet to protect the data you send us.

3.3 We will never ask you for your personal password either in writing or on the phone. Please take reasonable care in protecting the access to your password and computer and mobile device from any unauthorized use.

4. Children

4.1 We do not use the Sites to knowingly solicit information from or market to children or young persons under the age of 18.

4.2 If you are under the age of 18, you must let your parent or guardian know about this policy and our [Terms & Conditions] before you use the Sites and its services.

5. Disclosure of your personal information

5.1 Your personal information held by the Company will be kept confidential but we may disclose information to the following parties, where such disclosure is necessary to satisfy the purpose, or a directly related purpose, for which the data was collected:

• Any subsidiaries, or affiliates of, or companies controlled by, or under common control with the Company;
• Any person or company who is acting for or on behalf of the Company, or jointly with the Company, in respect of the purpose or a directly related purpose for which the data was provided by you;
• Any other person or company who is under a duty of confidentiality to the Company and has undertaken to keep such information confidential, provided such person or company has a legitimate right to such information; and

5.2 Your personal data may also be disclosed to any person or persons pursuant to any statutory or contractual obligations or as required by court of law, provided such person or persons shall be able to prove the required right/authority to access such information. In addition, your personal data may be disclosed under any of the circumstances described in Part VIII of the Ordinance as exemption from the provisions of the Ordinance.

6. Direct marketing

6.1 If you provide us with your personal data, we may use it for direct marketing purpose. We may not use your personal data for such purpose unless we have received your consent. In this connection, please note that:

6.2 We also intend to provide your personal data to other subsidiaries or companies within the Group ("our Associated Companies"), for their use in direct marketing. We may not do so unless we have received your written consent to the intended provision. In this connection, please note that: