Effective Date: 01/01/2020
Last Updated: 10/05/2025

Tangs & Co. Group (“Tangs & Co.”, “we”, “our”, or “us”) is committed to protecting your privacy and handling your personal data responsibly. This Privacy Policy outlines how we collect, use, store, and protect your information when you use our services in the United Kingdom and Hong Kong SAR.

1. Scope of This Policy

This policy applies to all personal data collected through:

• Our websites and mobile applications

• Online purchases and registrations

• Communications and customer support

• Marketing activities and social media platforms

It applies to all users and customers residing in or accessing our services from the UK and Hong Kong SAR.

2. Data We Collect

We may collect the following types of personal data:

A. Identifiable Information

• Name

• Email address

• Phone number

• Postal address

• Date of birth (if needed for verification or delivery)

B. Transactional and Technical Data

• Payment details (processed securely via third-party gateways)

• Purchase history

• IP address, browser type, and device information

• Website interaction and usage analytics

C. Marketing Preferences

• Newsletter sign-ups

• Product preference data

• Communications and engagement records

We do not knowingly collect data from individuals under the age of 16 without parental consent.

3. How We Use Your Data

We use personal data for the following purposes:

• To process and fulfil orders

• To provide customer service and respond to enquiries

• To personalise content and user experience

• To send promotional emails or marketing communications (where consented)

• To improve our website and services

• To comply with legal obligations in the UK and Hong Kong

We only process your data where it is lawful under:

• UK GDPR (e.g., consent, contract, legal obligation, legitimate interest)

• Hong Kong PDPO (e.g., for purposes directly related to the original reason for collection)

4. Sharing Your Data

We may share your personal data with:

• Trusted service providers, including payment gateways, delivery partners, and IT support

• Regulatory bodies, if legally required

• Marketing and analytics providers, where lawful and with your consent

We do not sell your data to third parties.

5. Data Transfers

Your data may be stored or processed outside your country of residence, including in the UK, Hong Kong, or other jurisdictions with appropriate safeguards in place.

Where we transfer data internationally:

• From the UK, we comply with the UK International Data Transfer Agreement (IDTA).

• From Hong Kong, we ensure that third-party processors follow comparable privacy protections.

6. Data Retention

We retain personal data only as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or reporting obligations.

Typically, we retain order and account data for 6–7 years (to comply with financial regulations), and marketing data until you withdraw consent.

7. Your Rights

If you are in the UK, you have rights under the UK GDPR:

• Access your data

• Rectify inaccurate data

• Request erasure (“right to be forgotten”)

• Restrict or object to processing

• Data portability

• Withdraw consent at any time

If you are in Hong Kong, under the PDPO you have rights to:

• Access and correct your personal data

• Be informed of the purpose of data use

• Withdraw consent for direct marketing

To exercise your rights, contact us at:
📧 [Insert Privacy Contact Email]

We will respond within 1 month (UK) or 40 days (HK) of receiving your request, unless legally restricted.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Enable website functionality

• Improve user experience

• Measure marketing effectiveness

You can manage cookie preferences through your browser settings. For full details, please refer to our Cookie Policy.

9. Data Security

We implement technical and organisational safeguards to protect your data against loss, misuse, or unauthorised access. These include:

• SSL encryption

• Secure payment processing

• Access control and audit logging

Despite our efforts, no method of transmission is 100% secure.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect legal or operational changes. We will notify you of significant changes via our website or by email where appropriate.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights:
📧 Email: help@tangsandco.com

If you are unsatisfied with our response:

• UK residents may contact the ICO (Information Commissioner’s Office).

• HK residents may contact the Office of the Privacy Commissioner for Personal Data (PCPD).