We collect the following types of personal data: Account Information: When you register, we collect your name, email address, phone number, and password. Transaction Data: When you buy or sell items, we collect payment information, shipping addresses, and transaction history. Payment card details are processed securely by our payment provider (Stripe) and are not stored on our servers. Profile Information: Information you choose to add to your profile, including your profile photo, bio, and preferences. Communication Data: Messages exchanged through our platform, customer support enquiries, and feedback. Technical Data: IP address, browser type, device information, operating system, and browsing behaviour on our Platform, collected via cookies and similar technologies. Authentication Data: Photographs and information submitted for item authentication purposes.

We use your personal data for the following purposes: - To operate and maintain the Platform, including processing transactions, facilitating shipping, and enabling communication between buyers and sellers. - To verify your identity and prevent fraud. - To authenticate items listed on the Platform. - To communicate with you regarding your account, orders, and customer support requests. - To personalise your experience and provide relevant recommendations. - To send marketing communications (where you have consented or where permitted by law). You may opt out at any time. - To comply with legal obligations and enforce our Terms of Service. - To analyse usage patterns and improve the Platform.

We may share your personal data with the following parties: Other Users: Your public profile information and listing details are visible to other users. Your shipping address is shared with sellers to fulfil orders. Service Providers: We engage trusted third-party providers for payment processing (Stripe), shipping logistics, email services, analytics, and cloud hosting. These providers are contractually obligated to protect your data. Legal Requirements: We may disclose your data when required by law, regulation, or court order, or to protect the rights, safety, or property of Luxee, our users, or the public. Business Transfers: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred as part of the transaction. We do not sell your personal data to third parties for their own marketing purposes.

We implement industry-standard security measures to protect your personal data, including: - Encryption of data in transit (TLS/SSL) and at rest. - Secure payment processing through PCI-DSS compliant providers. - Regular security assessments and monitoring. - Access controls limiting employee access to personal data on a need-to-know basis. While we take reasonable steps to protect your information, no method of electronic storage or transmission is 100% secure. We encourage you to use strong passwords and protect your account credentials.

We use cookies and similar tracking technologies to enhance your experience on the Platform. For detailed information about the cookies we use and how to manage them, please refer to our Cookie Policy.

Under the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong ("PDPO"), you have the following rights: Right of Access: You may request access to the personal data we hold about you. Right of Correction: You may request correction of any inaccurate or incomplete personal data. Right to Opt Out: You may opt out of receiving direct marketing communications at any time by updating your notification preferences or contacting us. To exercise any of these rights, please contact us at privacy@luxee.hk. We will respond to your request within 40 days, as required by the PDPO. We may charge a reasonable fee for processing data access requests, as permitted under the PDPO.

We retain your personal data for as long as necessary to fulfil the purposes described in this policy, including: - Active account data is retained for the duration of your account. - Transaction records are retained for 7 years to comply with Hong Kong tax and regulatory requirements. - Communication records are retained for 3 years after your last interaction. - Technical data (logs) is retained for 12 months. When personal data is no longer required, we securely delete or anonymise it.

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us: Data Protection Officer Luxee Limited Central, Hong Kong Email: privacy@luxee.hk For complaints regarding the handling of your personal data, you may also contact the Office of the Privacy Commissioner for Personal Data (PCPD) in Hong Kong.