Privacy Policy

Last Updated and Effective Date: 1 September 2026

Red Leaves (Hong Kong) Limited (hereinafter referred to as “the Company”, “we”, “us” or “our”) is the operator of RegettaCanoe. We respect your privacy and value our relationship with you.

When you browse or use the RegettaCanoe online store (the “Store”), which is supported by our SaaS service provider SHOPLINE (“SHOPLINE”), we may collect, process and use personal data relating to you.

We may also collect and process your personal data when you browse the Store, register as a member, purchase our products, or use other services provided through the Store. We understand the importance of your personal data and are committed to taking reasonable measures to protect the security of your personal data.

This Privacy Policy explains what personal data we may collect, how we use and process such data, when we may share it with third parties, and the rights and choices available to you regarding our use of your personal data.

This Privacy Policy covers the following:

• What information we collect
• Information you provide to us
• Why and how we use your personal data
• How we use Cookies and similar tracking technologies
• How we process, share, transfer and disclose personal data
• Your rights and choices
• How we protect personal data
• Updates to this Privacy Policy
• How to contact us

1. What Information We Collect

We may collect your personal data through various channels, including when you use the Store, contact us, or browse or use our social media or social networking pages, such as Facebook and Instagram.

Our products may also be available at department stores, retail stores and other physical retail locations. If you have registered as a member of our Store, we may collect transaction or membership records relating to your purchases at relevant physical retail locations.

When you browse the Store, our social media pages or related applications, we may also automatically collect certain information about your device and usage through Cookies, web server logs, Web Beacons and other similar technologies.

2. Information You Provide to Us

When you register as a member, make a purchase, contact us, participate in an activity or use other services through the Store, you may provide us with the following types of personal data:

• Contact information: such as your name, delivery address, email address, mobile phone number or other contact number;
• Account information: such as your membership account, login name and password;
• Payment information: such as payment method, payment transaction details, billing information and delivery information;
• Personal information: such as age, date of birth, gender and language preferences, where applicable;
• Purchase information: such as purchase history, order details, product preferences and membership information;
• Content you provide: such as product reviews, comments, photographs, videos, survey responses or other content you voluntarily provide;
• Social media information: information you may provide when interacting with us through social media, such as your name, profile picture, publicly available information, likes or other information you choose to share; and
• Device and technical information: such as IP address, device type, operating system, browser type, device identifiers and other online identifiers.

You may choose whether to provide your personal data to us. However, if you do not provide certain information that is necessary for us to provide a particular service, we may not be able to provide you with certain products, services, membership functions or promotional offers.

3. Why and How We Collect and Use Your Personal Data

We collect and use your personal data primarily to provide our products and services and to operate our business. This may include:

• Processing and managing your orders, payments and delivery arrangements;
• Providing membership, customer and after-sales services;
• Verifying your identity and maintaining transaction security;
• Processing returns, refunds and other after-sales matters;
• Responding to your enquiries, comments and requests;
• Managing and maintaining your membership account;
• Maintaining and analysing your purchase history and product preferences;
• Providing information about our products, services, promotions and offers;
• Preventing, detecting and investigating fraud, unauthorised use and other unlawful or inappropriate activities;
• Handling and resolving customer complaints, disputes and other issues;
• Enforcing the terms and conditions and return and exchange policies of the Store;
• Improving the Store, our products, services and customer experience;
• Conducting market research, data analysis and customer relationship management;
• Complying with applicable laws, regulations, court orders or requirements of government authorities; and
• Other purposes that are notified to you and for which your consent has been obtained at the time the personal data is collected.

If we need to use your personal data for a new purpose that is different from the purposes described above, we will, where applicable, provide you with appropriate notice at the time of collection or before using your personal data for such new purpose.

4. Direct Marketing

Where permitted under applicable laws and regulations, we may use your personal data to provide you with information about the Company, RegettaCanoe products and services, promotions, events and other marketing communications.

Direct marketing communications may be sent through:

• Email;
• SMS;
• Telephone;
• Postal mail;
• Social media;
• Online platforms or applications; or
• Other applicable electronic communication channels.

Where applicable laws require us to obtain your consent before sending direct marketing communications, we will only do so after obtaining your consent.

You may opt out of receiving our direct marketing communications at any time. If you do not wish us to use your personal data for direct marketing purposes, you may contact us using the method described in the “Your Rights and Choices” section below.

We will not charge you any fee for choosing to stop receiving direct marketing communications.

5. Cookies and Similar Tracking Technologies

5.1 What Are Cookies?

Cookies are small data files stored on your computer, mobile phone or other electronic devices. When you browse the Store, we or our service providers may use Cookies and similar technologies to identify your browser or device, remember your preferences and help us improve the functionality of the Store.

5.2 How Do We Use Cookies?

When you use the Store, we may collect the following information through Cookies or similar technologies:

• Device type and model;
• Operating system;
• IP address;
• Device identifiers;
• Pages visited and browsing activities;
• Clicks and usage information; and
• Other technical information relating to your use of the Store.

We may use Cookies to:

• Maintain and improve the normal operation of the Store;
• Remember your preferences;
• Allow you to remain logged in when navigating between pages;
• Analyse how the Store is used and improve your user experience; and
• Where applicable, provide content or promotional information that is more relevant to you.

5.3 How Can You Manage Cookies?

Most web browsers automatically accept Cookies. However, you can use your browser settings to accept or reject Cookies and delete Cookies that have already been stored on your device.

You may refer to the following official browser support pages:

• Google Chrome: Cookie settings and management
• Microsoft Internet Explorer: Cookie information
• Safari: Safari Support
• Firefox: Firefox Cookie information
• Opera: Opera Support

Please note that if you reject or delete Cookies, certain functions of the Store may not operate properly and your browsing experience may be affected.

6. Processing, Use, Sharing, Transfer and Disclosure of Personal Data

6.1 Processing by Third-Party Service Providers

To provide the Store and related services, we may engage third-party service providers to process certain personal data on our behalf.

For example, we may use third-party payment service providers to process payment transactions and logistics or delivery service providers to fulfil orders. In addition, the Store uses SHOPLINE’s e-commerce and technical services, and we may need to provide SHOPLINE or its relevant service providers with information necessary to process orders and payments, provide customer support, conduct transaction monitoring and perform risk management.

Where applicable, we will require relevant service providers to implement appropriate security measures and to process your personal data only to the extent necessary to provide the relevant services.

If you do not provide personal data that is necessary for us or our service providers to provide certain services, we may not be able to provide certain products or services to you.

6.2 Sharing of Personal Data

Unless one or more of the following circumstances apply, we generally will not share your personal data with third parties:

• You have provided your consent or authorisation;
• It is necessary to fulfil our contractual obligations to you or provide services you have requested;
• It is necessary to comply with applicable laws, regulations, court orders or requirements of government authorities;
• It is necessary to prevent, investigate or address suspected fraud, criminal activity or other unlawful conduct;
• It is necessary to protect your life, physical safety, property or other significant legitimate interests, or those of another person or the Company;
• The information has been made publicly available by you;
• The information has been obtained from lawful and publicly available sources; or
• Disclosure is otherwise permitted by applicable laws or regulations.

6.3 Sharing with SHOPLINE and Relevant Service Providers

To operate the Store and provide products and services to you, we may need to share necessary personal data with SHOPLINE, its affiliates and other relevant service providers.

Such information may be used for:

• Processing and managing orders;
• Processing payments;
• Providing customer service;
• Managing membership accounts;
• Transaction monitoring and risk management;
• Preventing fraud and other unlawful activities; and
• Maintaining and improving relevant services.

We will only share personal data to the extent reasonably necessary for these purposes.

6.4 Sharing with Other Third-Party Partners

We may also share necessary personal data with third-party partners who provide payment processing, logistics, delivery, website technical support, customer service, data analysis or other related services.

We will seek to limit the scope of information shared and only provide information necessary for the relevant services to be performed.

Third-party service providers may process your personal data in accordance with their own privacy policies and terms of service. We therefore recommend that you carefully review the privacy policies and terms of service of any third party before providing personal data to them.

6.5 Third-Party Applications and Services

The Store may include functions, applications, payment services or other services provided by third parties, such as payment gateways, logistics services and social media functions.

When you use these third-party services, your information may be collected and processed directly by the relevant third party. Their privacy practices and handling of personal data may differ from those described in this Privacy Policy.

We are not responsible for the privacy policies or security practices of third-party websites, applications or services. We recommend that you review the applicable privacy policies and terms of service before using such services.

7. Transfer of Personal Data

In general, we will not transfer your personal data to third parties unless:

• You have provided your consent or authorisation;
• It is necessary to fulfil our contractual obligations to you or provide relevant services;
• It is required by applicable laws, regulations, court orders or government authorities;
• It is necessary to protect your important legitimate interests or those of another person;
• It is necessary to prevent, investigate or address suspected unlawful or criminal activities; or
• It is necessary in connection with a merger, acquisition, restructuring, sale of assets, business transfer or other similar corporate transaction.

Where your personal data needs to be transferred in any of the circumstances above, we will provide you with appropriate notice where required by applicable laws.

If the Company ceases operations and there is no appropriate successor or transferee for your personal data, we will delete or anonymise your personal data where required by applicable laws.

8. Public Disclosure of Personal Data

Unless required by law, authorised by you, or necessary to fulfil our agreement with you or provide relevant services, we generally will not publicly disclose your personal data.

9. Minors

The Store is not intended primarily for individuals under the age of 18.

We do not knowingly collect personal data from minors. If you are a parent or legal guardian and believe that a minor has provided personal data to us without appropriate consent, please contact us using the contact details provided in this Privacy Policy.

Where applicable, we will take reasonable steps to delete such personal data to the extent permitted by law.

10. Your Rights and Choices

Subject to applicable laws and regulations, you may have the following rights in relation to the personal data we hold about you:

• Request access to your personal data;
• Request correction of inaccurate or incomplete personal data;
• Request deletion of your personal data;
• Withdraw any consent you have previously provided;
• Object to or request restriction of certain uses of your personal data;
• Opt out of receiving direct marketing communications; and
• Exercise any other rights available to you under applicable laws.

We may need to take reasonable steps to verify your identity before processing certain requests in order to protect your personal data.

10.1 Opting Out of Marketing Emails

If you no longer wish to receive our marketing emails, you may click the “Unsubscribe” link included in the relevant marketing email.

You may also contact us using the email address provided in the “How to Contact Us” section of this Privacy Policy and request to stop receiving marketing emails.

10.2 Opting Out of Marketing SMS

If you no longer wish to receive our marketing SMS messages, you may follow the unsubscribe instructions provided in the relevant SMS or contact us using the contact details below.

10.3 Social Media

If you no longer wish to interact with us through social media applications, you may remove or disable the relevant functions in accordance with the settings and instructions provided by the relevant social media platform.

10.4 Withdrawal of Consent

If you have previously provided consent for us to collect, use or process your personal data, you may contact us at any time to withdraw your consent.

Please note that, in certain circumstances, withdrawing your consent may mean that we are unable to continue providing certain products or services to you.

10.5 Accessing, Correcting and Deleting Personal Data

If you wish to access, update, correct or request deletion of your personal data held by us, you may contact us at:

sales@regettacanoe.com.hk

We will handle your request within the timeframe required by applicable laws and regulations.

11. How We Protect Your Personal Data

We maintain reasonable and appropriate administrative, technical and physical security measures designed to protect the personal data you provide against accidental or unlawful destruction, loss, alteration, unauthorised access, disclosure or use.

However, no method of transmission over the Internet or method of electronic storage can be guaranteed to be completely secure. While we will make reasonable efforts to protect your personal data, we cannot guarantee that your information will remain completely secure in all circumstances, including while it is being transmitted to us over the Internet or stored on your personal devices.

12. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, services, applicable laws or privacy requirements.

If we make material changes to this Privacy Policy, we will post an appropriate notice on the Store and update the “Last Updated and Effective Date” at the beginning of this Privacy Policy.

We recommend that you review this Privacy Policy periodically to stay informed about how we collect, use and protect your personal data.

13. How to Contact Us

If you have any questions or comments regarding this Privacy Policy or the way we handle your personal data, or if you wish to access, correct or delete your personal data, please contact us at:

Red Leaves (Hong Kong) Limited
Email: sales@regettacanoe.com.hk

Last Updated and Effective Date: 1 September 2026