Privacy policy

Last Updated: 8 June 2026

1. Introduction

OVO operates this online store and website, including all associated content, features, digital tools, merchandise and customer services (collectively, the "Services"), to deliver a curated, premium shopping experience to users and customers. This website and the Services are hosted and enabled by Shopify, our authorized e-commerce platform service provider.

This Privacy Policy sets out how OVO collects, processes, uses and discloses your personal data when you access, browse and use our Services, place orders, complete transactions, or communicate with our team. In the event of any inconsistency between our Terms and Conditions and this Privacy Policy, this Policy shall prevail concerning all matters relating to the collection, processing, and disclosure of your personal information.

Please review this Privacy Policy thoroughly. By accessing and using any part of our Services, you acknowledge that you have read, understood, and unconditionally consented to the data collection, usage, and disclosure practices outlined within this Privacy Policy.

2. Definition of Personal Information

For the purpose of this Policy, "Personal Information" refers to any data that relates directly or indirectly to an identifiable living individual, consistent with the definition under the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong. Anonymized or de-identified information that cannot be linked, directly or indirectly, to identify a specific individual is not classified as Personal Information.

Depending on how you interact with our Services, your residential location, and in compliance with applicable legal requirements and permitted practices, we may collect and process the following categories of Personal Information, including reasonable inferences derived from such data:

Contact Information: Your full name, residential address, billing address, delivery address, contact phone number, and email address.
Financial & Payment Data: Payment card details (credit and debit cards), financial account identifiers, transaction records, selected payment methods, payment confirmations and other related payment metadata.
Account Credentials & Preferences: Registered username, password, security verification questions, personalised service preferences and account settings.
Transactional Data: Records of products you browse, save to cart or wishlist, purchase, return, exchange, or cancel, together with your historical order and transaction records.
User Communications: All information you provide when contacting our customer support team, submitting inquiries, or engaging in other written or verbal communications with OVO.
Device & Technical Information: Metadata related to your accessing device, browser type, network configuration, public IP address, and other unique technical identifiers.
Service Usage Analytics: Data regarding your interaction behavior across the Services, including access time, navigation paths, feature usage and engagement patterns.

3. Sources of Personal Information

We may obtain and collect your Personal Information from the following lawful sources:

Direct Submission by You: Information you actively provide to us when registering an account, browsing or using our Services, submitting inquiries, communicating with our support team, or otherwise voluntarily disclosing your personal data.
Automatic Collection via the Services: Technical and usage data are automatically collected from your device during your visit to and interaction with our website and Services, including information collected through cookies, tracking pixels, and similar tracking technologies.
Authorized Service Providers: Data obtained from our trusted third-party service providers, who collect and process your Personal Information on our behalf to support platform operations, payment processing, logistics and technical services.
Third-Party Partners: Legally obtained information from our business partners or other compliant third parties, where permitted under the Personal Data (Privacy) Ordinance and relevant data protection laws.

4. How We Use Your Personal Information

Subject to your interaction with our platform and the Services you utilize, we may process your Personal Information for the following lawful, specified purposes in compliance with the Personal Data (Privacy) Ordinance:

Provision, Customization, and Optimization of Services We process your Personal Information to perform our contractual obligations, deliver core shopping functions and continuously enhance our Services. This includes processing payments, fulfilling and delivering orders, retaining your account settings and favorite items, sending account and order-related notifications, managing purchases, returns and exchanges, maintaining your registered account, arranging logistics and after-sales support, enabling product reviews, and delivering personalized product recommendations tailored to your browsing and purchase history. Such usage also allows us to analyze user behavior to refine website functionality, interface design, and overall service quality.
Marketing and Promotional Communications Subject to your marketing consent where required by law, we may use your data to deliver promotional content via email, SMS or postal mail, and display targeted advertisements on our platform or third-party websites. Such marketing may be personalized based on your historical purchases, cart records, browsing activity, and other behavioral data generated from your use of the Services.
Platform Security and Fraud Risk Mitigation We utilize your Personal Information to verify user identity, secure account access, protect payment transactions, and maintain a safe shopping ecosystem. We may process data to detect, investigate, and prevent fraudulent conduct, illegal operations, malicious activities, and security threats, as well as to safeguard the safety of our platform, users and public interests. If you register an account with OVO, you are solely responsible for safeguarding your login credentials. We strongly advise against disclosing your username, password, and access details to any third party.
User Communication and Customer Support We use your contact and relevant personal data to respond to inquiries, provide after-sales support, resolve service issues, and sustain normal business communication throughout our user relationship.
Statutory Compliance and Legal Proceedings

We may process your Personal Information to comply with Hong Kong statutory requirements and lawful official requests from law enforcement or government authorities. Data may also be used to conduct internal investigations, participate in civil discovery, and in pending or existing litigation, and to enforce our Terms and Conditions, Privacy Policy, and other applicable rules.

5. How We Disclose Your Personal Information

We may disclose your Personal Information to external third parties for legitimate business purposes, strictly in accordance with this Privacy Policy and the Personal Data (Privacy) Ordinance (Cap. 486). Disclosure will only be made under the circumstances set out below:

Third-Party Service Providers We may share your Personal Information with Shopify, independent vendors, and authorized third-party contractors that perform outsourced services on our behalf. This includes, without limitation, IT infrastructure administration, payment processing, data analysis, customer support, cloud data storage, order fulfillment, and logistics delivery services.
Marketing and Commercial Partners We may disclose your data to our business and marketing partners to deliver customized promotional campaigns and targeted advertising. We leverage Shopify’s ecosystem to enable cross-merchant personalized advertising, which generates tailored content based on your browsing and transactional activity across external merchant platforms and websites. Our partners shall process your Personal Information in compliance with their respective privacy policies. Subject to your jurisdiction of residence, you retain the right to opt out of data sharing for cross-site targeted advertising derived from your activity across third-party platforms. You may exercise your opt-out rights via the designated link on our website.
Disclosure With Your Direction or Consent We will disclose your Personal Information to third parties where you explicitly instruct, request, or provide voluntary consent. Common scenarios include data sharing for product delivery arrangements and information processed through embedded social media widgets, third-party account login integrations, and other connected tools.
Corporate Group and Affiliates Your Personal Information may be shared internally among our affiliated companies and within our corporate group for administrative, operational, risk control and service optimization purposes.
Legal Requirements and Corporate Transactions We may disclose your Personal Information in connection with corporate transactions, including mergers, asset acquisitions, business transfers or insolvency proceedings. We may also disclose data to fulfill statutory obligations, respond to valid legal processes such as subpoenas and search warrants, enforce our Terms of Service and internal policies, and protect the legal interests, data security and safety of our platform, OVO, our users and third parties.

6. Relationship with Shopify

Our Services are fully hosted and operated by Shopify, our designated e-commerce platform provider. To deliver, maintain, and optimize the Services for you, Shopify may collect and process Personal Information related to your access to and use of our website and store.

All data you submit through our Services will be transmitted to Shopify and its authorized third-party service providers, which may be located outside your jurisdiction of residence. Such cross-border data transfer is necessary to facilitate platform operation, payment processing, order fulfillment, and ongoing service improvement.

To support business growth, enhance security, and deliver personalized user experiences, we utilize advanced Shopify-powered features. These features analyze data from your interactions with our store, other Shopify-powered merchants, and the Shopify platform ecosystem.

For the operation of these enhanced cross-platform features, Shopify acts as an independent data controller and processes your Personal Information in accordance with its own privacy governance. Shopify is solely responsible for handling all user requests relating to data rights exercised in connection with such processing, including access, correction, and deletion requests.

For full details on how Shopify processes your Personal Information and the statutory data rights available to you, please refer to the Shopify Consumer Privacy Policy. You may manage your privacy preferences, limit ad data usage, erase or access your data via the official Shopify Privacy Portal:https://privacy.shopify.com/en

7. Third-Party Websites and External Links

Our Services may contain hyperlinks to external websites, social platforms and online services operated and controlled by independent third parties. When you access these unaffiliated third-party sites, you are strongly advised to review their respective privacy policies, security guidelines, and terms of service prior to use.

OVO assumes no responsibility or liability for the privacy protection, data security, accuracy, completeness or reliability of content hosted on third-party platforms. Any information you disclose on public or semi-public online spaces, including content shared via third-party social media widgets and integrated platforms, may be accessible to other platform users without restriction by OVO or relevant third parties. The inclusion of external links on our Services does not constitute official endorsement of the platform operators, brand owners or published content, unless explicitly stated by OVO in writing.

8. Children’s Personal Data

Our Services are intended exclusively for adults and are not designed for children who have not reached the age of majority in your local jurisdiction. OVO does not knowingly collect, store, or process Personal Information from minors.

If you are a parent or legal guardian and become aware that your child has voluntarily submitted their personal data to us, you may contact OVO via the contact information listed below to request immediate data deletion. As of the policy effective date, OVO holds no actual knowledge that we share or sell personal information belonging to users under the age of 16, in accordance with applicable data protection regulations.

9. Information Security and Data Retention

We implement industry-standard technical and administrative safeguards to protect your Personal Information from unauthorized access, alteration, disclosure, or destruction. Please note that no internet transmission system or electronic storage method is entirely impenetrable; therefore, we cannot guarantee absolute, flawless data security. Data transmitted to us over public networks may be exposed during transit. We recommend that you refrain from sending highly sensitive or confidential information via unsecured communication channels.

We retain your Personal Information only for as long as necessary to fulfill specified business and legal purposes. Retention periods are determined by ongoing account maintenance, service delivery, contractual performance, statutory compliance, dispute resolution, and policy enforcement obligations. Upon expiry of the required retention period, your data will be securely erased or anonymized in accordance with Hong Kong data protection laws.

10. Your Data Rights and Preference Controls

Depending on your residential jurisdiction, you may hold the following data subject rights under applicable privacy laws, including the Personal Data (Privacy) Ordinance and other international data protection regulations. These rights are not absolute and only apply under statutorily prescribed circumstances; OVO may lawfully decline certain requests where permitted by regulation.

Right of Access: You may request a copy of the Personal Information we hold relating to you.
Right of Erasure: You may request the deletion of your personal data stored by OVO, subject to legal exceptions.
Right of Rectification: You may request correction of inaccurate, incomplete, or outdated Personal Information we maintain about you.
Right of Data Portability: Where applicable, you may obtain your personal data in a machine-readable format and request transfer to a third party, subject to statutory limitations.
Communication Preference Management: You may opt out of promotional marketing emails at any time via the unsubscribe link embedded in our electronic newsletters. After opting out, you will continue to receive essential transactional and account-related notifications, including order confirmations, delivery updates and account security alerts.

You may exercise the above rights through the functional tools available on our Services, or by submitting a request via our contact channels listed below. For rights relating to data processed independently by Shopify, including ad data limitation, data erasure, and data access requests, please visit the official Shopify privacy portal at https://privacy.shopify.com/en.

OVO will not discriminate against you for exercising your statutory data rights. Prior to processing your request, we may verify your identity to prevent unauthorized access to your data by third parties. You may appoint an authorized agent to submit data rights requests on your behalf; we require formal proof of your authorization and may conduct direct identity verification before validating the agent's requests. All legitimate requests will be responded to within the statutory time limit required by applicable law.

11. Complaint Handling

If you have inquiries or complaints regarding how OVO collects, uses or discloses your Personal Information, please contact our data governance team via the contact details below. You may, where applicable, appeal our internal decision or lodge a formal complaint with your local data protection regulatory authority (including the Office of the Privacy Commissioner for Personal Data in Hong Kong).

12. International Data Transfers

Your Personal Information may be transferred to, stored and processed in jurisdictions outside your country of residence, including data servers operated by Shopify and its global affiliates.

Where personal data originating from the European Economic Area (EEA) or the United Kingdom (UK) is transferred overseas, we will rely on approved data transfer mechanisms, including the European Commission’s Standard Contractual Clauses or equivalent UK statutory contractual frameworks. Transfers to jurisdictions with officially recognized adequate data protection levels are exempt from additional safeguard requirements.

13. Policy Updates and Amendments

We may revise this Privacy Policy periodically to reflect updated business practices, operational adjustments, or statutory or regulatory changes. All revised versions will be published on this webpage with an updated "Last Updated" date. We will issue formal notifications for material policy changes as required by applicable privacy laws.

14. Contact Information

For all privacy-related inquiries, data rights requests, or policy clarifications, please contact our team via the following channels:

Tel: +852 2529 8168

Email: sales.hp@ovo.com.hk

Address: 1 Wan Chai Road, One Wanchai, Wan Chai, Hong Kong