Privacy Policy

Company: NICSECT LIMITED (hereinafter “we”, “us”, “our”)

Applicable Scope: This Privacy Policy governs our collection, processing, storage, use, and disclosure of your personal data when you use our e-commerce website https://gloamgrain.com/ (hereinafter “the Site”) and purchase our women’s fashion products (e.g., tops, dresses) (hereinafter “the Services”).

1. Information We Collect

We only collect personal data necessary to provide the Services, which falls into two categories:

1.1 Personal Data You Voluntarily Provide

• Account & Registration: Name, email address ([email protected] for communication), and password (encrypted) when you create an account.
• Order & Payment: Shipping address, contact number, and payment-related details (e.g., last 4 digits of credit card numbers, processed by third-party payment gateways) to fulfill orders.
• Communication: Content of your inquiries, feedback, or complaints when you contact our customer service.

1.2 Automatically Collected Data

• Technical information: IP address, browser type, device model, and operating system to ensure the Site’s stable operation.
• Usage data: Browsing history (e.g., viewed products), search records, and order history to optimize your shopping experience.
• Cookies: Small text files stored on your device to remember your preferences (e.g., language settings). You may disable Cookies via your browser settings, but this may affect some Site functions.

2. How We Use Your Information

We process your personal data only for the following legitimate purposes, consistent with the PDPO:

1. Fulfill orders: Process payment, arrange delivery, and send order confirmations.
2. Provide customer service: Respond to your inquiries, handle returns/exchanges, and resolve after-sales issues.
3. Marketing (with your consent): Send promotional information (e.g., new arrivals, discounts) via email. You may unsubscribe at any time by replying to our marketing emails or contacting [email protected].
4. Improve Services: Analyze usage data to optimize product selection, Site functionality, and user experience.
5. Security protection: Detect and prevent fraud, unauthorized access, or other illegal activities to safeguard your account and transaction security.

3. Third-Party Disclosure

We will not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your data only with trusted third parties who assist us in providing the Services, and these parties are bound by strict confidentiality obligations:

• Payment processors (e.g., PayPal): To securely complete transaction processing (they do not store your full payment details).
• Logistics partners: To deliver your orders (only share necessary shipping information, e.g., name and address).
• Site hosting providers: To maintain the Site’s operation (only access data required for technical support).

4. Your Rights Under the PDPO

As a data subject, you have the following rights under Hong Kong’s PDPO. To exercise these rights, please contact us at [email protected] with your full name and account information (if applicable):

1. Right to access: Request a copy of the personal data we hold about you.
2. Right to correction: Request correction of inaccurate or incomplete personal data.
3. Right to deletion: Request deletion of your personal data (subject to legal obligations, e.g., retaining order records for tax compliance).
4. Right to withdraw consent: Withdraw your consent for non-essential data use (e.g., marketing), without affecting prior data processing based on your former consent.

5. Data Storage & Security

• Storage Location: Your personal data is primarily stored in Hong Kong. If stored outside Hong Kong (e.g., for international logistics coordination), we ensure the receiving party complies with the PDPO and adopts equivalent security measures.
• Storage Period: We retain your data only for as long as necessary to fulfill the purposes stated in this Policy or as required by law (e.g., order records retained for 7 years for tax purposes).
• Security Measures: We use SSL encryption for data transmission, implement access controls (only authorized staff can access data), and conduct regular security audits to prevent data leakage, loss, or tampering.

6. Policy Updates

We may update this Privacy Policy to comply with changes in laws or business needs. When updates occur:

• We will post the revised Policy on the Site with a new “Effective Date”.
• For material changes (e.g., changes to data use purposes or third-party sharing rules), we will notify you via email (if you have an account) or a pop-up on the Site.
• Your continued use of the Site and Services after the update constitutes acceptance of the revised Policy.

7. Contact Us

If you have questions, complaints, or requests regarding this Privacy Policy or your personal data, please contact us at:

Email: [email protected]

8. Governing Law

This Privacy Policy is governed by the laws of Hong Kong, China, and shall be interpreted in accordance with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong.