Effective date: 3 November 2026
1. Who is responsible?
RUSTY VELVET LIMITED is responsible for personal information collected through this store. Our company address is UNIT F26/F, BILLION PLAZA 2., 10 CHEUNG YUE STREET CHEUNG SHA WAN, HONG KONG. Direct privacy and data-access requests to RUSTY10316@outlook.com.
2. Information you provide
We collect account details such as username and email; order details such as name, billing and shipping addresses, telephone number, selected garments and size; and support messages you choose to send. Do not include sensitive identity, health or financial information in messages unless we specifically need it and provide a suitable method.
3. Information collected automatically
The site processes IP addresses, browser information, request times, security logs and essential session and cart identifiers. These support operation, security, fraud prevention and troubleshooting. We do not currently enable advertising trackers or a third-party marketing analytics service.
4. Why we use information
We use information to create and secure accounts, save carts, process order requests, arrange fulfilment when payment is confirmed, provide order status, manage returns, answer support requests and meet applicable record-keeping obligations. We seek any additional consent required for a new, unrelated purpose.
5. Payments
This website does not collect full card numbers or payment-provider passwords. Order records contain the selected payment method, total and payment status; confirmed transaction references may be recorded when a payment service is connected. A saved pending order may contain no transaction reference because no charge has occurred. Payment providers handle payment information under their own privacy notices when used.
6. Essential cookies
WordPress login cookies maintain your authenticated session. WooCommerce cookies, including woocommerce_items_in_cart, woocommerce_cart_hash and wp_woocommerce_session_* where used, maintain the bag and shopping session. Security and form cookies may also be used where required. Browser controls can remove or block cookies, but login, cart or checkout may then stop working. We do not set optional advertising cookies on the current site.
7. Who receives information
Access is limited to staff who need the information and service providers needed for hosting, maintenance, communications, payment processing when connected, and delivery when an order is dispatched. We share only information needed for the relevant service or a lawful obligation. We do not sell customer personal information.
8. International processing
We operate from Hong Kong. Hosting, communications, payment or delivery providers may process information in other countries as needed for the service. We take reasonable steps to protect information shared with providers, including appropriate access limits and contractual safeguards where required.
9. Retention
We retain information only for the purpose for which it is needed and for applicable accounting, legal or dispute requirements. Unpaid and cancelled order records are scheduled for review or removal after 30 days; completed order records are retained for up to 7 years where needed for business records. Support messages are normally reviewed for removal after 12 months. Account information remains while the account is active, subject to deletion requests and any justified retention need. Backup copies expire through the backup cycle.
10. Security
We use account controls, limited administrative access and HTTPS when serving the public domain. No service can guarantee absolute security. Keep your password private and contact us if you suspect account misuse. We may request proportionate verification before releasing order or account information.
11. Your choices and rights
You can update account and address information through My account, and ask to access, correct or delete personal information by contacting RUSTY10316@outlook.com. We may need to verify your identity and retain limited records where legally required. We will explain any lawful limit on a request. You may also contact an applicable privacy authority, including the Hong Kong Privacy Commissioner for Personal Data.
12. Children
The store is intended for adults or people shopping with appropriate parental or guardian supervision. We do not knowingly solicit personal information from children for independent accounts. Contact us if a child has supplied information without appropriate permission.
13. Communications and changes
Order acknowledgements and replies to support requests are service messages. No newsletter signup or optional marketing programme is currently enabled. We update this notice when our practices change and display the effective date above. Material changes will be communicated as required.