Legal
Privacy Policy
What we collect, why we collect it, and who else sees it.
Last updated 9 November 2026
- Seller
- PENDING
- BR number
- PENDING
- Registered address
- PENDING
- Contact
- PENDING
- Jurisdiction
- Hong Kong SAR
1. Who is responsible
PENDING, registered in Hong Kong SAR (business registration PENDING), is the data user responsible for the personal data described here. Our contact for privacy questions is PENDING, and our registered address is PENDING.
We handle personal data in line with the Personal Data (Privacy) Ordinance of Hong Kong SAR ("PDPO").
2. What we collect
We collect only what an order needs:
- Contact and delivery details: name, email address, shipping address, phone number.
- Order content: the design you configured (stones, charms, wrist size, engraving text) and the amount charged.
- Payment metadata: the payment reference and status returned by our payment provider. We never see or store your card number.
- Technical data: the market you selected (stored in a cookie) and standard server logs.
3. Why we use it
To make and ship your order, to answer your questions, to keep accounting and tax records, to prevent fraud, and to fix faults in the site. We do not sell personal data, and we do not use it for advertising profiles.
4. Who processes it for us
Payments are processed by Stripe, which acts as our payment processor and receives the amount, currency, order reference and the email address you give at checkout. Stripe handles card data under its own privacy policy.
Our shop platform and hosting providers store order records on our behalf and are bound to use them only for that purpose.
5. Cookies
We use one functional cookie, `zyuzyu_market`, to remember which market (and therefore which currency) you selected. It contains a four-letter market code and nothing else. We do not use advertising or analytics cookies.
You can delete it at any time in your browser; the site will fall back to the US market.
6. How long we keep it
Order records are kept for seven years to meet accounting requirements. Enquiries that do not become orders are deleted within twelve months. You may ask us for a copy of your personal data, or ask us to correct it, by writing to the address above; we answer within 40 days as required by the PDPO.