WhatsMall Limited (referred to hereinafter as the "Company") recognises its responsibilities in relation to the collection, holding, processing, use and/or transfer of personal data under the Personal Data (Privacy) Ordinance (Cap. 486) ("PDPO"). Personal data will be collected only for lawful and relevant purposes and all practicable steps will be taken to ensure that the personal data held by the Company are handled in an appropriate manner. The Company will take all practicable steps to ensure security of the personal data and to avoid unauthorised or accidental access, erasure or use.
We keep static information such as personal data you entered in our site once you have enrolled as our member / supplier and the said information will be kept for a maximum period of 7 years after your ceasing to be a member / supplier. We will also retain all information in respect of transactions and instructions for a maximum period of 7 years. The 7-year retention period is in keeping with the local financial industry's standard code of practice.
All personal information being passed to us will be encrypted using SSL. When it is necessary for us to pass your personal information to our bank(s) to process your credit card payment request, whether as a payee or a recipient, the information will be encrypted using SSL or SET.
Please note that if you do not provide us with your personal data, we may not be able to provide the information, products or services you need or process your request.
From time to time it is necessary for the Company to collect your personal data which may be used, stored, processed, transferred, disclosed or shared by us for purposes ("Purposes"), including:
Personal data will be kept confidential but, subject to the provisions of any applicable law, may be provided, transferred or disclosed to any one or more of the following parties (whether within or outside Hong Kong) for the Purposes set out above :
The Company intends to :
Before using your personal data for the purposes and providing to the transferees set out above, the Company must obtain your consent (which includes an indication of no objection), and only after having obtained such consent, may use and provide your personal data for any promotional or marketing purpose.
You may in future withdraw your consent to the use and provision of your personal data for direct marketing. If you wish to withdraw your consent, please inform us in writing to the address in the section on "Access and correction of personal data".
Under the PDPO, you have the right to ascertain whether the Company holds your personal data, to obtain a copy of the data, and to correct any data that is inaccurate. You may also request the Company to inform you of the type of personal data held by it.
For correction of data, you can either login to your account to update the data or submit your request in writing. Requests for access or for information regarding policies and practices and kinds of data held by the Company should be addressed in writing to:
Data Privacy Officer
Unit 1702-02, 17/F,
K. Wah Centre,
191, Java Road,
(In the event of any inconsistency between English and Chinese versions of this Statement, the English version shall prevail.)