1. Introduction
CRESTA LIMITED (“we,” “our,” or “us”) is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our global e-commerce platform specializing in women’s dresses. By using our website and services, you consent to the data practices described in this policy.
2. Information We Collect
We collect various types of information to provide and improve our services:
- Personal identifiers (name, email address, phone number)
- Shipping and billing addresses
- Payment information processed through secure gateways
- Purchase history and style preferences
- Customer service communication records
- Technical data including IP address, browser type, and device information
3. Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Performance of contract to fulfill your orders
- Your explicit consent for specific processing activities
- Legitimate business interests
- Compliance with legal obligations
4. How We Use Your Information
We use the collected information for these primary purposes:
- Processing and delivering your dress orders
- Managing your account and preferences
- Providing customer support and service
- Sending marketing communications with your consent
- Personalizing your shopping experience
- Improving our website functionality and product offerings
- Preventing fraud and enhancing security measures
5. Data Sharing and Disclosure
We may share your information with trusted third parties in these circumstances:
- Payment processing partners for transaction completion
- Shipping and logistics providers for order delivery
- Marketing and analytics service providers
- Legal authorities when required by law or to protect our rights
6. International Data Transfers
As a global e-commerce company based in Hong Kong, your data may be transferred to and processed in countries outside your residence. We ensure appropriate safeguards are implemented for such international data transfers to maintain protection standards.
7. Data Security Measures
We implement comprehensive security measures to protect your data:
- SSL encryption technology for data transmission
- Secure payment gateways compliant with PCI DSS standards
- Restricted access to personal data on a need-to-know basis
- Regular security assessments and system updates
8. Data Retention Period
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law. We regularly review our data retention practices to ensure compliance.
9. Your Rights and Choices
You have the following rights regarding your personal data:
- Right to access and receive copies of your personal data
- Right to correct inaccurate or incomplete information
- Right to request deletion of your personal data
- Right to withdraw consent for marketing communications
- Right to object to certain processing activities
- Right to data portability where applicable
10. Cookies and Tracking Technologies
Our website uses cookies and similar technologies to:
- Enhance user experience and website functionality
- Analyze website traffic and user behavior
- Personalize content and advertisements
- Remember your preferences and shopping cart items
11. Third-Party Links
Our website may contain links to third-party sites. We are not responsible for the privacy practices, content, or security of these external websites. We encourage you to review their privacy policies before providing any personal information.
12. Children’s Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with their information, please contact us immediately.
13. Marketing Communications
We will only send you promotional emails with your explicit consent. You can opt-out of receiving these communications at any time by using the unsubscribe link in our emails or contacting us directly.
14. Policy Updates
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. The revised policy will be posted on our website with an updated effective date.
15. Contact Information
For any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact our Data Protection Officer:
Email: [email protected]
Response Time: Within 24 business hours