This Privacy Policy explains how Duty Free International Co., Ltd., operating as DF Luxury (referred to as “we”, “us” or “our”), collects, uses, retains and protects personal data that you provide or that is generated when you use our services.

This policy applies to the DF Luxury official website, the Buyer Portal, and personal data processing relating to buyer applications, business enquiries, quotations, orders, delivery, after-sales services and newsletter subscriptions.

We respect your privacy and process personal data in accordance with applicable law and for the purposes described in this policy. If you have any questions about this policy or how we process personal data, please contact us using the details in Section 05.

Depending on the features you use and how you interact with us, we may collect the following information:

• Contact and company information: contact name, company name, email address, telephone number, company location or address, and any websites, social media profiles or other public business pages you provide.
• Buyer application and purchasing information: business type, preferred language, anticipated purchase amount, brands and products of interest, purchasing requirements, business background and other information you enter in your application.
• Account and transaction information: buyer application and review status, account and login records, product selections, enquiries and order details, business correspondence, and the recipient name, delivery address and contact details needed for delivery.
• Subscription information: the email address used for newsletter subscriptions, subscription choices and unsubscribe records.
• Website and security information: IP address, browser and device information, access and activity logs generated when you use the website or Buyer Portal, and information needed for login verification and security protection.

We also use Cookies, browser local storage and similar technologies to maintain login sessions, remember language preferences and product selections, or support website security and traffic analytics. See Section 03 for the relevant purposes, consent requirements and choices.

If you do not provide information necessary for an application, login, transaction or delivery, we may be unable to provide the corresponding service. You may choose not to provide information marked as optional.

We use information for the following purposes, to the extent necessary to interact with you and provide our services:

• Respond to business enquiries, review buyer applications and manage business relationships.
• Verify your identity at login and provide and maintain access to the Buyer Portal.
• Handle purchasing requirements, quotations, orders, delivery and after-sales matters.
• Send necessary notices relating to accounts, transactions or services.
• Maintain website security, prevent unauthorised use, and improve website functionality and user experience.
• Send newsletters and conduct non-essential website traffic analytics after obtaining any required consent.
• Comply with applicable legal obligations or address disputes and lawful requests relating to our services.

Newsletters and unsubscribing

After you subscribe or consent to receive marketing communications, we may email you catalogues, product information, offers and other business updates.

You may request to unsubscribe at any time by using the unsubscribe link in our marketing emails or by contacting contact@dfluxury.co. We will process your unsubscribe request and stop sending you marketing communications in accordance with applicable law. Unsubscribing does not affect login verification emails, order updates or other necessary notices we send to provide our services.

Cookies and similar technologies

We use necessary Cookies or similar technologies to support login sessions, security verification and basic website functions. We also use appropriate functional storage to remember your preferences.

Where applicable law requires consent, we will obtain your consent before enabling non-essential traffic analytics Cookies or similar tracking technologies and provide a way to accept, reject or change your choices.

You can also manage or delete Cookies and website storage through your browser settings. Disabling necessary storage functions may prevent some login or website features from working properly.

Delivery and technology services

To arrange product delivery, we share the recipient name, delivery address and contact details necessary to complete the delivery with our logistics providers.

We also use third-party technology services to support our website, Buyer Portal and related business processes. These include Shopify for website, customer and transaction management; providers of website hosting, data storage and security verification services; and providers of login verification email services. These providers may process personal data to the extent necessary to provide the relevant services.

This website is hosted by Shopify. The platform collects and processes personal data from your visits and purchases, combining it with information about your interactions with other merchants and the platform to provide enhanced services such as personalisation, advertising and service improvements. We share relevant information with the platform and other service providers for these purposes; they may process it in countries outside your location.

For information about the platform’s handling of your data, see its Consumer Privacy Policy. You can use its privacy portal to learn about and exercise applicable rights, including opting out of or objecting to certain processing for enhanced services, or withdrawing consent. For questions about our handling of your data, contact us using the details in Section 05.

We may also disclose necessary information to relevant authorities where necessary under applicable law, valid legal process or lawful requests from competent authorities.

Cross-border data processing

Because we use technology and delivery services across different regions, your personal data may be stored or processed outside your location. We will fulfil the relevant notice, consent and data protection requirements under applicable law.

Data retention

We determine retention periods by considering the nature of the personal data, the purposes for which it is collected and used, and applicable legal requirements. Buyer application information, business correspondence and order information will be retained for as long as necessary to provide services, fulfil transactions, handle after-sales matters or comply with legal obligations.

We may retain relevant information to meet statutory retention obligations, complete transactions or, to the extent permitted by applicable law and necessary in the circumstances, handle disputes or assert or defend legal claims. We will limit its use to the corresponding purposes. The scope and duration of retention remain subject to applicable legal requirements.

When information is no longer needed for those purposes and there is no other lawful basis for retaining it, we will delete or irreversibly anonymise it in accordance with applicable law.

Data security

We use technical and organisational measures appropriate to our services, including login verification, access controls and secure connections, to reduce the risk of unauthorised access, use, alteration or loss of information. No method of internet transmission or storage can guarantee absolute security. If a data security incident requires notification by law, we will handle the incident and provide notification in accordance with applicable requirements.

Depending on applicable law and your circumstances, you may request access to or a copy of your personal data, correction of inaccurate information, deletion, or restriction of or objection to certain processing. Where processing is based on consent, you may also withdraw that consent. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To make any of these requests or ask a question about this policy, please contact:

• Company name: Duty Free International Co., Ltd.
• Privacy contact email: contact@dfluxury.co
• Hong Kong contact address: Block C, Floor G/2, Forest Hill, 1E, Kau To Shan Road, Shatin N.T., Hong Kong.

Please explain your request and provide enough information to identify the relevant account or transaction. We will assess and handle your request in accordance with applicable law and the circumstances of the request. We may ask for additional information reasonably necessary to verify the requester's identity, confirm a representative's authority or locate the relevant information.

We will handle requests within the time limits required by applicable law. Where the law permits us to limit, partially fulfil or refuse a request, we will act in accordance with applicable requirements and explain our reasons. If continued retention of certain information is required or permitted by law, we will explain the reasons and how the information will be handled. You may also lodge a complaint with the competent data protection authority or seek other remedies under applicable law.

We may update this policy to reflect changes to our services, data processing practices or applicable law. The latest version will be published on this page with its effective date and last updated date. For material changes affecting your rights or interests, we will notify you through a website notice, email or another appropriate method as required by applicable law. Where further consent is required, we will obtain it separately.