سياسة الخصوصية

Privacy Policy

Last Updated: September 8, 2026

One Step Consulting Limited ("we," "our," or "us") operates this website and independent e-commerce platform. We are fully committed to protecting your personal data and privacy. This Privacy Policy outlines how we collect, use, disclose, and protect your information when you visit our independent e-commerce platform and make a purchase. This policy is written in strict compliance with the Personal Data (Privacy) Ordinance (PDPO) (Cap. 486) of the Hong Kong Special Administrative Region ("Hong Kong").

By accessing the Site and purchasing our products, you consent to the collection and use of your information in accordance with this policy.

Data User (Controller) and Contact

For the purpose of the PDPO, the data user is:

One Step Consulting Limited

Suite C, Level 7, World Trust Tower,

50 Stanley Street,

Hong Kong.

We ensure that all personal data is handled securely, confidentially, and in accordance with Hong Kong law.

Information Collected on Our Independent Platform

Because we operate our own independent shop, we collect and manage data directly through our secure hosting servers and integrated systems:

Identity Data: Your full name, title, and date of birth (only if required for age-restricted products or birthday loyalty rewards).

Contact & Delivery Data: Shipping address, billing address, email address, and phone number.

Transaction & Financial Data: Details about payments to and from you, and other details of products you have purchased from us. Note: Full payment details are encrypted and processed directly by our integrated payment gateways; we do not store your raw credit card numbers or payment credentials.

Technical & Device Data: IP address, login data, browser type and version, time zone setting, location, browser plug-in types, operating system, and data about how you interact with our independent platform.

Purpose of Processing Your Data

We use the collected information for the following necessary operations:

To process and fulfill your orders, including order confirmation, payment processing, and secure shipping.

To manage your account registry, loyalty program, and customer profile.

To provide direct customer service and handle return/refund requests.

To detect, prevent, and mitigate fraudulent transactions or security threats on our platform.

To comply with Hong Kong statutory obligations (e.g., maintaining corporate tax records).

Direct Marketing & Your Consent (PDPO Compliance)

In strict accordance with Hong Kong law, we will never use your personal data for marketing purposes without your explicit prior consent.

During checkout or account creation, you will see a clear, un-checked box to "Opt-In" to our newsletter, exclusive offers, and product updates.

You have the absolute right to withdraw this consent at any time, completely free of charge. You can click the "Unsubscribe" link at the bottom of any email or email us at office@bigprimeshop.com.

Payment Processing and Third-Party Transfers

To handle financial transactions safely, our independent store integrates with secure, industry-standard payment processors. Depending on the payment method you choose at checkout, your financial data will be shared with and processed by:

Credit/Debit Card Processors: To handle major card payments securely via encrypted gateways (Stripe).

Bank transfer against invoice

PayPal: Operates under PayPal’s own privacy agreement. — UNDER CONSTRUCTION

Google Pay: Processed via Stripe Checkout as a card wallet (Google’s payment sheet).

WeChat Pay: Processed via Stripe Checkout (WeChat Pay, charged in HKD).

Alipay / AlipayHK: Processed via Stripe Checkout (Alipay, charged in HKD).

We do not store your financial account passwords or full credit card numbers on our servers. Aside from payment processors, we only share the minimum necessary information with:

Logistics Companies: Local and international couriers to deliver your physical parcels.

Infrastructure Hosting: Cloud servers and technical platforms that keep our website online and secure.

Some third-party processors may store data outside of Hong Kong. We ensure they provide a level of data protection equivalent to the requirements under the PDPO.

Data Security

As an independent operator, we utilize industry-standard security safeguards. Your connection to our site is fully encrypted using Secure Socket Layer (SSL) technology. We restrict access to your personal data to employees and contractors who have a legitimate business need to know.

Data Retention

We retain your personal data only as long as necessary to fulfill the purposes we collected it for. For financial and tax compliance under Hong Kong Inland Revenue law, transaction history and customer billing details will be securely archived for 7 years.

Your Legal Rights (Access and Correction)

Under the PDPO, you possess the right to:

Check whether we hold your personal data.

Request a copy of the personal data we hold about you.

Request the correction of any inaccurate data.

In accordance with the Ordinance, we reserve the right to charge a reasonable administrative fee for processing data access requests. Please direct all data requests to our Data Protection Officer:

By Email: office@bigprimeshop.com

By Mail: One Step Consulting Limited, Suite C, Level 7, World Trust Tower, 50 Stanley Street, Hong Kong.

Cookies

Our independent website uses cookies to recognize your browser and keep track of items in your shopping cart. You can disable cookies via your browser settings, but it may impact certain purchasing functionalities on our shop.

Policy Updates

We reserve the right to modify this Privacy Policy to reflect changes in our business practices or Hong Kong law. Any updates will be published instantly on this page with a revised "Last Updated" date.