Personal data, handled under HK PDPO.

1. Data we collect

Account & order data

Name, business name, email address, phone number, billing and shipping addresses, order history, payment reference (we do not store full card numbers — Stripe tokenises on our behalf).

Correspondence

Email threads, support tickets, WhatsApp messages to the sales number, and call notes where relevant to a quote or RMA.

Technical data

IP address, browser user agent, and timestamp for security logging and fraud prevention. We do not run third-party advertising pixels.

2. How we use it

• Fulfilling orders — picking, packing, courier labelling, customs paperwork.
• Communicating about the order — dispatch notifications, delivery issues, RMA handling.
• Account management for enterprise customers — quoting, proforma invoicing, NET30 reconciliation.
• Meeting statutory obligations — HK Inland Revenue, customs declarations, AML screening for high-value orders.
• Improving the service — analysing aggregate order patterns, never resold to third parties.

3. Retention

Transactional records (invoices, shipping documents, tax paperwork) are retained for seven years as required by the HK Inland Revenue Ordinance (Cap. 112) and general commercial prudence. Marketing-consent data is retained for two years after last interaction, then deleted. Server logs are rotated after 90 days.

4. Your rights under PDPO

Under the Hong Kong Personal Data (Privacy) Ordinance you have the right to:

• Access — request a copy of the personal data we hold about you (DPP 6).
• Correction — ask us to correct inaccurate data.
• Cessation — withdraw consent to direct marketing at any time, without charge.
• Complaint — lodge a complaint with the Office of the Privacy Commissioner for Personal Data (PCPD), 12/F, Sunlight Tower, 248 Queen's Road East, Wan Chai.

Data-access requests should be emailed to privacy@marble.marsfront.com. PDPO allows us up to 40 calendar days to respond; we aim for ten business days.

5. GDPR addendum (EU residents)

Where we process personal data of individuals located in the EU/EEA, we do so on the following lawful bases under Article 6 GDPR:

• Contract (Art. 6(1)(b)) — fulfilling orders you have placed with us.
• Legal obligation (Art. 6(1)(c)) — customs, tax, AML compliance.
• Legitimate interests (Art. 6(1)(f)) — fraud prevention, service security, B2B relationship management.
• Consent (Art. 6(1)(a)) — opt-in marketing only.

EU residents additionally have the rights of erasure, restriction, portability and objection under GDPR Chapter III. Cross-border transfer of EU data to Hong Kong is performed under Standard Contractual Clauses. Our data protection contact (acting as DPO) is reachable at support@marble.marsfront.com.

6. Cookies

This site uses strictly functional cookies only — session identifier, cart state, CSRF token. We do not set analytics, advertising, or social-media tracking pixels. No consent banner is served because no consent-bearing cookies are placed.

7. Contact

Privacy matters go to privacy@marble.marsfront.com. Postal correspondence: Marble Electronics Limited, Unit 1204, 12/F, Nexxus Building, 77 Des Voeux Road Central, Central, Hong Kong, Hong Kong SAR, China.