Privacy Policy

---

Effective Date: 01 April 2026

Last Updated: 01 April 2026

Shop2ship (hereinafter referred to as "we," "us," or "our") is committed to protecting the privacy of our users. We operate in compliance with the Personal Data (Privacy) Ordinance (Cap. 486) of the Hong Kong Special Administrative Region ("PDPO").

This Privacy Policy explains how we collect, use, retain, and disclose your personal data when you use our logistics and package forwarding services.

1. Commitment to Data Protection Principles

We adhere to the six Data Protection Principles (DPPs) outlined in the PDPO, ensuring that:

· DPP1: Data is collected lawfully, fairly, and for a lawful purpose directly related to our functions.

· DPP2: Data is accurate and not kept longer than necessary.

· DPP3: Data is used only for the purposes stated at the time of collection (or directly related purposes) unless consent is obtained for a new purpose.

· DPP4: Data is kept secure against unauthorized access, loss, or misuse.

· DPP5: Our policies and practices regarding personal data are open and transparent.

· DPP6: Data subjects have the right to access and correct their own data .

2. Types of Personal Data Collected

To provide our shipping and logistics services (including freight forwarding and package consolidation), we may collect the following types of personal data:

· Identity Data: Full name, business name (if applicable), and government-issued identification (for customs clearance).

· Contact Data: Billing address, shipping address, email address, and telephone number.

· Transaction Data: Details about packages received, shipping history, customs declarations, and payment information.

· Technical Data: IP address, browser type, cookie data, and browsing actions on our website.

· Identification Documents: For customs compliance or high-value shipments, we may require copies of identification such as a Hong Kong Identity Card or passport to verify identity .

3. Purposes of Collecting and Using Data

We use your personal data for the following legitimate purposes directly related to our business activities:

· To process, consolidate, and forward packages (including auto parts, tools, and heavy equipment).

· To communicate with you regarding shipment status, delivery delays, or customs issues.

· To verify your identity to prevent fraud, unauthorized transactions, and doxxing activities (in line with PDPO anti-doxxing provisions).

· To comply with legal obligations, customs regulations, and law enforcement requests .

· To improve our website functionality and user experience via analytics.

4. Direct Marketing

We will not use your personal data for direct marketing purposes (such as promoting new shipping routes or discounts) without your express and voluntary consent. If you have provided consent, you may withdraw it at any time by contacting us .

5. Cookies and Website Tracking

When you visit our website, we use cookies and similar technologies (such as pixel tags) to enhance your experience.

· Functionality: Cookies remember your preferences to help you use the site efficiently.

· Analytics: We collect non-identifiable data regarding your browsing behavior to compile statistical reports.

· Control: You may choose to reject cookies via your browser settings; however, doing so may result in the unavailability of certain website functions .

6. Data Transfer and Third-Party Processors

Given the nature of our logistics business (Shop2ship), your personal data may be transferred to third parties, including:

· Carriers: DHL, FedEx, UPS, and local delivery partners for the fulfillment of your shipment.

· Customs Authorities: Government agencies in Hong Kong or destination countries to comply with import/export regulations.

· IT Service Providers: Companies that host our website or manage our customer relationship management (CRM) system.

Currently, Section 33 of the PDPO (restricting cross-border data transfers) is not yet in effect. However, we take all reasonable precautions to ensure that any data transferred outside Hong Kong is protected by contractual means or operates under a jurisdiction with similar data protection laws .

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, as required by law, or to protect our legal interests.

· Account Data: Retained for the duration of your active account plus a reasonable period for tax and audit purposes.

· Shipping Records: Retained for a minimum period as required by customs and excise regulations.

· Deletion: Once data is no longer required, we will permanently delete or anonymize it in accordance with DPP2 and Section 26 of the PDPO .

8. Data Security (DPP4)

We take the security of your data seriously. We implement industry-standard security measures to prevent unauthorized access, loss, or misuse:

· Encryption: Data is encrypted using Secure Socket Layer (SSL) protocol during transmission .

· Access Control: Access to personal data is restricted to authorized personnel only.

· Third-Party Security: We contractually require our data processors to maintain the same level of security as required by the PDPO .

9. Your Rights (DPP6)

Under the PDPO, you have the right to:

· Access: Request confirmation of whether we hold your personal data and request a copy of that data.

· Correction: Request correction of any inaccurate data.

· Erasure: Request deletion of your data when it is no longer required for the purpose of collection.

If you wish to exercise these rights, please submit your request in writing using our Data Access Request Form. We reserve the right to charge a reasonable fee for processing access requests as permitted by law. We will respond to such requests within the timeframe stipulated by the PDPO .

10. Doxxing Prohibition

We strictly prohibit the use of our services to collect, disclose, or distribute personal data with the intent to threaten, intimidate, or harass any individual. Such activities constitute an offense under the PDPO (doxxing) and may result in criminal penalties, including fines and imprisonment. We will report any suspected doxxing activities to the Privacy Commissioner for Personal Data (PCPD) or the Hong Kong Police .

11. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. Any changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this page periodically.

12. Contact Us and the Privacy Commissioner

If you have any questions about this Privacy Policy, or if you wish to access or correct your personal data, please contact our Data Protection Officer at:

Shop2ship – Data Protection Officer

Email: shop2ship.co@gmail.com

Address: Tai Po, Hong Kong]