Privacy Policy

Last updated: September 7, 2026

1. About This Policy

MODA FLORA Santa’s Workshop, also known as HKChristmas (“we”, “us” or “our”), operates hkchristmas.com and our related online store, landing pages, campaign pages, forms and services.

This Privacy Policy explains how we collect, use, store and disclose personal information when you browse our websites, shop with us, request information or free content, complete a form, participate in a campaign, subscribe to communications or contact us.

Our online store is powered by Shopify. We also use service providers to support functions such as form processing, customer relationship management, cloud storage and email delivery.

A particular form or campaign may include an additional collection notice explaining its specific purpose and any additional terms. Reading this policy or submitting a form does not, by itself, constitute consent to receive marketing communications.

2. Personal Information We Collect

The information we collect depends on how you interact with us. It may include:

• Contact information: your name, email address, telephone number, billing address and delivery address.
• Form and campaign information: answers, preferences, interests, requests and other information you choose to provide when completing a form, planner, survey, registration or enquiry.
• Consent and communication preferences: your subscription choices, consent records, withdrawal requests and related timestamps.
• Order and transaction information: products ordered, payment confirmations, delivery details, returns, exchanges and purchase history. Payment information is processed through the payment providers used at checkout.
• Account information: details and preferences associated with an account you create.
• Communications: enquiries, feedback and correspondence with us.
• Technical and usage information: browser and device information, IP address, referral information and interactions with our websites, where collected through the services and technologies we use.

We only request information relevant to the purpose described at the point of collection. Please do not submit sensitive information or unnecessary personal information about another person.

3. How We Collect Information

We may collect information:

• Directly from you when you shop, complete a form, request content, subscribe or communicate with us.
• Automatically when you use our websites, through hosting services, cookies and similar technologies, subject to applicable requirements.
• From service providers that process information on our behalf, such as our ecommerce, payment, form, storage and email providers.

Where a field is required, we will identify it on the relevant form or checkout. Providing other information is voluntary. If you do not provide information necessary to process a request, we may be unable to fulfil that request.

4. How We Use Information

We use personal information for the purposes explained when it is collected, including to:

• Process orders, payments, deliveries, returns and exchanges.
• Prepare and deliver content, plans, recommendations or other services you request.
• Process registrations, campaign participation and enquiries.
• Respond to questions and provide customer support.
• Record and manage requests in our customer relationship management systems.
• Notify authorised team members of a submission and support internal handling of your request.
• Remember relevant preferences and personalise the service you request.
• Maintain consent records and respect communication preferences.
• Understand and improve our websites, content and services.
• Protect our systems, prevent misuse and investigate security incidents.
• Meet applicable legal obligations and handle disputes.

Internal handling of a request does not automatically enrol you in a marketing list or authorise unrelated promotional contact.

If we propose to use your information for a materially different purpose, we will provide the relevant notice and obtain consent where required.

5. Marketing Communications

With your consent, we may use your name, email address and relevant preferences to send Christmas inspiration, product updates, event information and offers relating to our Christmas decorations, gifts, seasonal products and related services.

Marketing subscriptions, including the Christmas Believers List, are optional and separate from requests for free content, enquiries or purchases. You do not need to subscribe to marketing to receive content or services you have requested.

We will not treat an unchecked subscription box, silence or a general form submission as marketing consent.

You may withdraw your marketing consent at any time, without charge, by using the unsubscribe facility in our marketing emails or contacting us using the details below.

After you unsubscribe, we may still send non-promotional messages necessary to fulfil your requests, manage orders or respond to enquiries. We may retain a limited suppression record to help ensure that your marketing preference continues to be respected.

Providing your information to another organisation for its own direct marketing would require separate notice and consent where required by applicable law; a subscription to our communications does not constitute that consent.

6. Forms, Landing Pages and Free Content

Our landing pages and forms may offer information, downloadable resources, personalised suggestions, registrations or other services.

The relevant page will explain what you are requesting and how we will use the information needed to fulfil it. Depending on the service, this may involve recording your submission, preparing a response, emailing requested content and notifying our authorised staff.

Information submitted through these pages may be processed separately from our Shopify store, including through Google Apps Script, Google Sheets and Gmail.

Participation does not automatically create a store account, subscribe you to marketing or give permission for unrelated promotional messages.

7. Who May Receive Information

Where necessary for the purposes described in this policy, personal information may be accessed by or disclosed to:

• Authorised staff responsible for customer service, request handling, sales administration and operations.
• Ecommerce and website providers, including Shopify.
• Form-processing, cloud-storage, CRM and email providers, including Google services.
• Payment processors, delivery providers and fulfilment partners where relevant to an order.
• IT, security and professional advisers supporting our operations.
• Authorities or other parties where disclosure is required by law or necessary to protect legal rights.
• Parties involved in a business restructuring or transfer, subject to applicable safeguards and legal requirements.

Service providers receive information relevant to the services they perform. Their processing may also be governed by their own applicable terms and privacy policies.

8. Shopify and Third-Party Services

Shopify provides the ecommerce platform for our store and processes information to operate, maintain and improve its services.

Certain Shopify features, where enabled, may involve additional processing for analytics, personalisation or advertising. Any choices available to you depend on the features used and applicable law.

For information about Shopify’s practices, please see the Shopify Consumer Privacy Policy and Shopify Privacy Portal.

Our websites may contain links to third-party websites. Their privacy practices are governed by their own policies, and we encourage you to review them before providing information.

9. Cookies and Similar Technologies

Our websites and service providers may use cookies and similar technologies to support essential functions, remember preferences and, where enabled, understand website usage or support advertising.

Where required, we will provide information and obtain consent before using non-essential technologies.

You can manage cookies through your browser and any privacy controls provided on the website. Blocking certain cookies may affect some website functions.

10. Data Storage and International Processing

Personal information may be stored or processed in Hong Kong and other countries where our service providers operate.

For example, information processed through Shopify or Google services may be handled outside Hong Kong. We take reasonable steps to address the protection of information handled by service providers and comply with applicable requirements for overseas processing.

11. How Long We Keep Information

We retain personal information for no longer than is necessary for the purposes for which it was collected, taking into account service delivery, legal obligations, dispute resolution and the management of communication preferences.

Relevant factors include:

• Whether a request, order or enquiry is still being handled.
• Whether records are needed for accounting, legal or dispute-related purposes.
• Whether you remain subscribed to communications.
• Whether a limited consent or suppression record is needed to respect your choices.

When personal information is no longer needed, we will take reasonable steps to delete it or anonymise it, subject to applicable legal requirements.

Unsubscribing from marketing does not necessarily require deletion of records needed for an order, legal obligation or suppression request.

12. Security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

Access should be limited to people and service providers who need the information for their responsibilities.

No storage or transmission method can be guaranteed completely secure. Please do not send payment credentials or other sensitive information through general enquiry or campaign forms.

13. Children’s Information

Our shopping, registration and campaign forms are intended for adults.

Some content may help adults prepare activities or celebrations for children, but this does not mean we need children’s identifying information. Please do not provide children’s names, dates of birth or other unnecessary personal details through our general forms.

If you believe a child has provided personal information to us, please contact us so that we can review the matter and take appropriate action.

14. Your Rights and Choices

Subject to applicable law, you may request access to personal information we hold about you and correction of inaccurate information.

You may also contact us to request deletion, raise a concern about our use of your information or withdraw marketing consent. Additional rights may apply depending on your location.

We may need to verify your identity before processing a request. Some information may need to be retained to meet legal obligations or other permitted purposes. We will explain relevant limitations where appropriate.

To make a request, please contact us using the details below and provide enough information for us to identify the relevant record. Please do not send unnecessary identification documents unless requested.

You may also raise privacy concerns with the Office of the Privacy Commissioner for Personal Data, Hong Kong, or another relevant authority.

15. Changes to This Policy

We may update this policy to reflect changes in our services, data practices or legal requirements.

The latest version will be published on this page with an updated date. Where required, we will provide additional notice or obtain consent for relevant changes.

16. Contact Us

For questions about this policy, personal-information requests or marketing preferences, please contact:

MODA FLORA Santa’s Workshop / HKChristmas.com
Email: info@hkchristmas.com
Telephone: +852 6774 4176