Privacy policy

Who we are

Broviane Global LIMITED, Unit 29, 10/F, Enterprise Centre, 11 On Lai Street, Sha Tin, Hong Kong, is the data controller for broviane.com. For anything on this page, write to [email protected].

What we collect

When you order: name, shipping and billing address, email, phone for carrier notices, and what you bought. Card details go straight to our payment processor — we never see or store the full number.

When you contact us: your message, any photos you attach, and the email address you wrote from.

When you browse: pages viewed, approximate location from your IP, device and browser type, and referring site. When you review: your display name, rating, text, and any photo you upload.

Why we use it

To make and ship your order, handle returns and refunds, answer your questions, prevent fraud and chargebacks, meet our tax and accounting duties, and — only if you asked — send you the newsletter.

Our legal bases are performance of a contract, legal obligation, consent, and legitimate interests such as fraud prevention and improving the shop.

Who we share it with

Only the services that make the shop run: our payment processors, shipping carriers and local partners, email and support platform, hosting provider, and accountant. Each gets the minimum needed to do its job.

We do not sell your personal data, and we do not share it with data brokers or advertising networks for their own purposes.

Cookies

Essential cookies keep your cart and login working — these can't be switched off. Analytics cookies tell us which pages people actually read. Marketing cookies are used only after you accept them in the banner.

You can change your choices through the cookie link in the footer or block cookies in your browser; without essential cookies, parts of the shop may not work.

How long we keep it

Order and invoice records: 7 years. Support conversations: 24 months. Newsletter subscription: until you unsubscribe, plus a suppression record so we don't email you again. Analytics: 14 months in aggregate.

International transfers

We are based in Hong Kong and some processors are in the EU and US. Where data moves out of the UK or EEA, we rely on Standard Contractual Clauses and review the processor's safeguards.

Your rights

You can ask for a copy of your data, correct or delete it, restrict or object to how we use it, take it elsewhere in a portable format, or withdraw marketing consent.

We answer within 30 days, free of charge. If you're not satisfied, you may complain to your local data protection authority or the Hong Kong Privacy Commissioner for Personal Data.

Data requests

Email [email protected] with the subject “data request”. We reply within 30 days and may ask you to confirm your identity using the email on your order.

Children and changes

The shop isn't intended for anyone under 16 and we don't knowingly collect their data. If a child has ordered, write to us and we'll delete the record.

When we change this policy we update the date at the top; for material changes we email everyone on the newsletter list.