Privacy Policy

Effective Date: October 1, 2024

Easty Supply Chain (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy outlines how we collect, use, store, and protect your personal data in accordance with applicable data protection laws, including but not limited to:

  • The General Data Protection Regulation (GDPR) of the European Union (EU Regulation 2016/679);
  • The Personal Information Protection Law (PIPL) of the People’s Republic of China;
  • The Personal Data (Privacy) Ordinance (PDPO) of Hong Kong (Cap. 486).

By using our website (https://eastyhk.com) or our services, you agree to the collection and use of information in accordance with this policy and the above legal frameworks.

1. Information We Collect

We may collect the following types of personal data:

  • Identity Information: such as your name, email address, and phone number.
  • Contact Information: such as mailing address and company name.
  • Transactional Information: such as order details and payment data.
  • Technical Data: such as IP address, browser type, time zone settings, device type, and browsing actions.
  • Any information you voluntarily submit through contact forms or email correspondence.

2. Purpose of Data Use

We process your personal data to:

  • Fulfill contractual obligations (e.g., order processing and customer support);
  • Improve website functionality and user experience;
  • Meet legal and regulatory obligations;
  • Communicate with you effectively;
  • Prevent fraud and ensure security.

The legal basis for processing your data may be your consent, our contractual obligations, our legitimate interests, or our legal duties under relevant data protection laws.

3. Data Sharing and Transfers

We do not sell your personal information. We may disclose your data to:

  • Authorized third-party service providers (such as payment processors, logistics partners, IT service providers), under confidentiality agreements;
  • Regulatory authorities or law enforcement when required by law;
  • Successor entities in case of a business transfer (e.g., merger, acquisition).

Where data is transferred outside of your jurisdiction, we ensure appropriate safeguards are in place, including standard contractual clauses or equivalent measures required under GDPR or PIPL.

4. Data Security and Retention

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or misuse. Data is stored securely and retained only as long as necessary for the purposes for which it was collected, or as required by law.

5. Your Data Rights

Under applicable laws (e.g., GDPR, PIPL, PDPO), you may have the right to:

  • Access your personal data;
  • Correct inaccurate or incomplete data;
  • Request deletion of your data;
  • Withdraw consent to data processing;
  • Restrict or object to data processing;
  • Request data portability (under GDPR);
  • Lodge a complaint with a data protection authority.

To exercise these rights, contact us via the channels below.

6. Cookies and Tracking Technologies

We may use cookies or similar technologies to improve user experience. For details, please refer to our separate Cookie Policy (available upon request or posted on our site).

7. Third-Party Links

Our website may contain links to other websites. We are not responsible for the privacy practices of such third-party sites. Please review their privacy notices individually.

8. Children’s Privacy

Our services are not intended for children under 16. We do not knowingly collect data from individuals in this age group. If such data is identified, we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy to reflect changes in legal or operational requirements. The latest version will always be available on this page with the effective date clearly stated.

10. Contact Us

If you have any questions or concerns about this Privacy Policy or wish to exercise your legal rights, please contact us at: