Last Updated: 25-09-2025
1. Who We Are (Data Controller)
Kidspot International Limited (“the Company”, “we”, or “Mr. Poco”), as the data controller under the Hong Kong Personal Data (Privacy) Ordinance (Cap.486, “PDPO”), is responsible for the processing of personal data in connection with our e-shop and related services.
Contact: eshop@mrpoco.com
2. What We Collect
Information You Provide
- Name, email, phone number, shipping and billing addresses, preferred language
- Account credentials, shopping history, order and payment information (processed by licensed payment providers)
- Product preferences, survey responses, uploaded content such as photos or comments
- Customer service inquiries, return or warranty requests (including proof of purchase)
Information Collected Automatically
- IP address, device identifiers, browser and operating system details
- Date/time of visits, referring URLs, browsing activity
- Cookies and similar technologies (see Section 6)
From Third Parties
- Social media login or profile data (e.g., when you sign in via Facebook/Instagram)
- Purchase records at partner department stores or retail counters (where membership is used)
3. How We Use Your Data
We process personal data for the following purposes:
- Contractual necessity: processing orders, payments, shipping, returns and refunds
- Customer support: providing after-sales service and responding to inquiries
- Legitimate interests: service improvement, fraud prevention, site security, customer relationship management, analytics
- Legal obligations: accounting, tax, regulatory compliance, dispute resolution
- Direct marketing: with your explicit consent, to send promotions, offers, and event information (see Section 4)
We may also anonymize or aggregate your data for statistical and research purposes.
4. Direct Marketing
- We will only send promotional communications if you have given explicit consent.
- Channels may include email, SMS, social media, app push notifications, or other digital platforms.
- You may unsubscribe at any time free of charge by:
- Clicking the “unsubscribe” link in our emails, or
- Contacting us at eshop@mrpoco.com
Even if you unsubscribe, we may still send you non-marketing messages such as order confirmations or service notices.
5. How We Share Your Data
We do not sell your personal data. We only share data in the following cases:
Service Providers (Data Processors)
- E-commerce platform/hosting: SHOPLINE
- Payment providers: Shopline Payments, PayPal, Stripe (depending on your chosen method)
- Logistics: SF Express, Hongkong Post, or other delivery partners
- Marketing & analytics tools: Google, Meta, email/SMS service providers
Other Circumstances
- Compliance with legal or regulatory requirements
- Fraud prevention and protection of rights and safety
- Corporate transactions (merger, acquisition, asset transfer)
Cross-Border Transfers
Some providers may store or process data outside Hong Kong. We will ensure adequate protection levels consistent with Hong Kong law.
6. Cookies & Tracking Technologies
What are Cookies?
Small text files stored on your device to remember preferences, maintain login sessions, and analyze usage.
How We Use Them
- Essential cookies for site operation
- Analytics cookies to understand performance and usage
- Marketing cookies to deliver relevant ads
Managing Cookies
You may disable or delete cookies via your browser settings. Please note that some features may not function properly without cookies.
For more details, refer to browser-specific help guides (e.g., Chrome, Safari, Firefox).
7. Data Retention
- We retain personal data only for as long as necessary to fulfill the purposes described in this policy.
- Transaction and accounting records are typically retained for up to 7 years to comply with legal obligations.
- After expiry, data will be securely deleted or anonymized.
8. Data Security
We implement appropriate technical and organizational measures such as encryption, access controls, and confidentiality agreements to protect your data.
However, no system is 100% secure, and we cannot guarantee absolute security of information transmitted online.
9. Your Rights
Under the PDPO, you may:
- Request access to the personal data we hold about you
- Request corrections to any inaccuracies
- Object to or opt out of direct marketing at any time, free of charge
To exercise your rights, contact us at eshop@mrpoco.com . We may need to verify your identity before processing requests. A reasonable fee may apply for access requests as permitted by law.
10. Minors
This site is not intended for individuals under 18 years of age.
We do not knowingly collect data from children.
If you are a parent or guardian and believe your child has provided us with personal data, please contact us to request deletion.
11. Updates to This Policy
We may update this Privacy Policy to reflect changes in our services or legal requirements. Significant changes will be notified on our website, with the “Last Updated” date revised accordingly.
12. Contact Us
- For questions, requests, or complaints regarding this Privacy Policy or our handling of your data:
- Email: eshop@mrpoco.com
