Privacy Policy

Who is responsible

This policy explains what personal data KiKi Mobile (“we”, “us”, “our”) collects when you use kikimobile.store, how we use it, who we share it with, and the rights you have. The data controller is KiKi Mobile, Flat G, 15/F, Block 6 Island Harbourview, 11 Hoi Fai Road, Tai Kok Tsui, Kowloon, Hong Kong. For privacy requests, contact sales@kikimobile.store (subject: Privacy).

What we collect

• Identity & contact: name, email, shipping and billing address, phone number.
• Order data: items ordered, amounts, currency, delivery status, order history.
• Payment data: we never see or store your full card number, CVV or expiry. No card data is collected during this preview. When sales open, card details will be held only by our PCI-DSS Level 1 card processor and we will receive only a token and a “paid” result.
• Account data: email, salted password hash, saved addresses, wishlist (if used).
• Marketing data: if you subscribe, your email and consent record. Marketing email is not being sent during this preview.
• Support data: anything you send when you contact us, including photos of damaged items.
• Device & usage data: IP address, browser and device type, pages viewed, referring site, country — collected via Google Analytics 4 in anonymised mode (IP truncation on).
• Cookie data: see the Cookie Policy.

Legal bases we rely on

Depending on where you live, we process your data under one or more of: performance of a contract (to fulfil your order); our legitimate interests (fraud prevention, analytics, service improvement); your consent (marketing emails, optional cookies); and legal obligation (tax/accounting records).

What we use it for

• Process, pack, ship and deliver orders, and handle returns and refunds.
• Take payment and screen for fraud.
• Send transactional emails (confirmation, shipping, delivery).
• Send marketing emails — only with your opt-in consent; every email has an unsubscribe link, and you can withdraw consent at any time.
• Improve the store through aggregated, anonymised analytics.
• Comply with tax, accounting and consumer-protection law.

Who we share it with

We do not sell your personal information. Because checkout is paused during this preview, we share the minimum necessary to run the store and answer support email. When sales open, the processors we use will be published on this page and on the Payment methods page, and we will share only what each one needs to do its job.

How long we keep it

• Orders: at least 7 years for tax and accounting reasons.
• Accounts: until you delete the account, then up to 24 months for fraud prevention, then erased.
• Newsletter: until you unsubscribe.
• Support threads: 24 months, then anonymised.
• Analytics: 14 months in identifiable form, then aggregated.

Your rights

Depending on where you live — GDPR/UK GDPR (EEA & UK), PIPEDA (Canada), CCPA/CPRA (California), LGPD (Brazil), PDPA (Singapore) — you have the right to:

• Be told what we hold and why (this policy).
• Access a copy of your data.
• Correct inaccurate data.
• Delete your data (“right to be forgotten”), subject to our legal retention duties.
• Restrict or object to processing, including direct marketing.
• Withdraw consent at any time (where processing is based on consent).
• Receive your data in a portable format.
• Lodge a complaint with your local data-protection authority.

Email sales@kikimobile.store to exercise any right. We respond within 30 days; complex requests may take longer and we will tell you.

Automated decisions

We do not make decisions that legally affect you using only automated processing, except limited fraud screening by our payment processor, which you can contest by contacting us.

Children

KiKi Mobile is a store for adult shoppers. We do not knowingly collect data from anyone under 16. If you believe a child provided us data, contact us and we will delete it.

How we protect it

HTTPS everywhere; passwords stored as salted hashes; access on a need-to-know basis; vendor security reviewed; payment handled by a PCI-DSS Level 1 processor so card numbers never reach us. No system is perfectly secure — if you believe your data is compromised, tell us immediately.

Breach notification

If a breach affects your personal data and the law requires it, we will notify you and the relevant authority without undue delay.

Cookies

See the Cookie Policy for the full list and your controls.

Changes to this policy

We may update this policy. The “Last updated” date below always reflects the most recent change. Material changes are announced by email to newsletter subscribers.

Contact

Email sales@kikimobile.store (subject: Privacy). Data controller: KiKi Mobile, Kowloon, Hong Kong.

Last updated: October 12, 2026