Waaship

Privacy Policy

Our Policy
waaship ("waaship", "we", "us", "our") recognises the importance of your privacy and maintaining the confidentiality of your personal information. This Privacy Policy applies to all products and services provided by us and sets out how we may collect, use and disclose your personal information. We pledge to comply with the requirements of the Personal Data (Privacy) Ordinance (Cap. 486) (the "HK Privacy Ordinance") in Hong Kong and the Macau Personal Data Protection Act (Law 8/2005) ("Macau Privacy Act") in Macau. In doing so, we will ensure compliance by our staff with the strictest standards of security and confidentiality.

Collection Of Personal Data
1. Your privacy is important to us and we have taken steps to ensure that we do not collect more information from you than is necessary for us to provide you with our services and to protect your account.
2. We may ask you to provide personal information when you use our websites and services. The personal data that we may ask you to supply include without limitation to salutation, name, date of birth, telephone number, email address, and residential, work and shipping address ("Personal Data").
  1. This section is applicable to waaship, and concerns the relationship between your customers and waaship, in connection with the personal data regulations:
    You authorise us the access on behalf of you to process including without limitation to the name, address, telephone number, email address, and shipping address of the persons receiving the consignments; and
  2. Information about the individual type of item sent and the value/price of the item.
  3. You authorise us to enable shipping processes for you and as a natural part of this, waaship processes various personal data on your behalf in the service period.
  4. This concerns data about your customers, i.e. data relating to the persons who are the recipients of the shipped orders.
3. Please note that it is mandatory for you to provide certain categories of Personal Data (as specified at the time of collection).
4. In the event that you do not provide any Personal Data marked as mandatory, we may not be able to provide you with our products or services.
Purpose And Use Of Your Information
1. If you provide any Personal Data to us, you authorise us to collect, retain and use Personal Data about you for the following purposes:
  1. verifying your identity;
  2. providing you with services and responding to your queries, feedback, or claims;
  3. performing research or statistical analysis in order to improve our products and services and for marketing and promotional purposes;
  4. handling logistics processes on behalf of you;
  5. providing you with a log-in email for our websites; and
  6. making such disclosures as may be required for any of the above purposes or as required by law or in respect of any feedback or claims made by you.
2. You further agree that we may disclose and transfer (whether in Hong Kong, Macau, or abroad) your Personal Data to third-party services providers engaged by us to provide (a) data entry services, (b) customer database management services, (c) customer contact services (and service providers may contact you regarding promotions, customer service or other activities deemed appropriate), (d) secure data disposal services and (e) logistics services("Third Party Service Providers"). These Third-Party Service Providers are under a duty of confidentiality to us and are only permitted to use your Personal Data in connection with the purposes specified in 2.1 above, and not for their own purposes (including direct marketing).
3. When necessary we may also disclose and transfer (whether in Hong Kong, Macau, or abroad) your Personal Data to our professional advisers, law enforcement agencies, insurers, government and regulatory, and other organisations for purposes specified at 2.1.6 above.
4. Only with your consent or with your indication of no objection, we may use your name, phone number, residential, work or shipping address, and email address ("Marketing Data") to provide marketing materials to you, including services provided by waaship.
5. We may share aggregate data that does not allow you to be identified with third parties for various purposes (including marketing and advertising) and may use this data in order to better understand your needs and to improve and adapt our products and services.
6. It is emphasized that the logistics providers("Third Party Service Providers") to which personal data is disclosed as part of this agreement are the Data Controller’s (your customer’s) Data Processors, not waaship’s Data Processors. – waaship has only an intermediary function in this regard.
7. Any Personal Data supplied by you will be retained by us and will be accessible by our employees, any Third Party Service Providers engaged by us and third parties referred to at 2.3 above, for or in relation to any of the purposes stated in 2.1 herein.
The Data Processor’s Obligations
1. The Data Processor may only process the personal data in question in accordance with the instructions of the Data Controller (your customer), i.e. the instructions given by waaship under which the Data Processor shall manage logistics processes for the Data Controller.
2. The Data Processor is required to comply with the currently-applicable personal data legislation and shall notify the Data Controller (your customer) immediately if an instruction from the Data Controller (your customer) is, in the Data Processor’s opinion, contrary to the Hong Kong Privacy Ordinance and the Macau Privacy Act.
3. The Data Processor shall use appropriate technical and organisational security measures to ensure that personal data is not destroyed, lost, degraded, or disclosed to unauthorised bodies, misused or otherwise processed in breach of personal data legislation, whereby the Data Processor shall implement the measures necessary pursuant to article 32 of the General Data Protection Regulation.
4. The Data Processor is obliged to inform the Data Controller (your customer) without undue delay of any data breach. In this regard, the Data Processor shall inform the Data Controller (your customer) of:
  - The nature of the data breach.
  - If possible, the type and number of affected data subjects, as well as the type of personal data concerned and the number of records of personal data concerned.
  - The measures that the Data Processor has taken or proposes should be taken to deal with the data breach, including, where appropriate, measures to limit its potential adverse effects.
  - The probable consequences of the data breach.
5. The Data Processor shall, at the Data Controller's (your customer's) request, provide the Data Controller (your customer) with sufficient information to ensure that the Data Processor has taken the necessary technical and organisational security measures.
6. The Data Processor shall provide all the information necessary to demonstrate that the Data Processor complies with the General Data Protection Regulation’s article 28, whereby the Data Processor shall allow and contribute to audits, including inspections carried out by the Data Controller (your customer) or another auditor authorised by the Data Controller (your customer). It is emphasised that inspections/audits in every respect take place at the Data Controller's (your customer's) expense.
7. The Data Processor shall secure/ensure that the persons who are authorised by the Data Processor to process personal data have committed themselves to confidentiality or are bound by an appropriate statutory professional secrecy obligation.
8. If a data subject asks the Data Processor (usually such requests will be made to the Data Controller) for access to and insight into that person’s personal data, the Data Processor shall immediately forward the request to the Data Controller (your customer).
9. The Data Processor shall assist the Data Controller (your customer) with appropriate technical and organisational tools to enable the Data Controller (your customer) to fulfill the Data Controller's (your customer's) obligations to respond to requests for the exercise of the rights of the data subjects as specified in chapter III of the General Data Protection Regulation.
Information Transfer To Sub-Data Processors Or Third Parties
1. The Data Processor is entitled to disclose personal data to the Data Controller's (your customer's) other data processors (Third Party Logistics Service Providers), and the Data Processor is also entitled to exchange personal data with the customs authorities.
2. In all other cases, the Data Processor may only disclose or transfer personal data to third parties or sub-processors with the prior agreement with the Data Controller (your customer). However, the Data Processor may disclose or transfer personal data without the Data Controller's (your customer's) instructions, if permitted by law.
3. If the Data Processor hands over personal data to another data processor (sub-processor), the Data Processor is obliged to conclude a sub-processor agreement with the sub-processor.
4. The Data Processor shall notify the Data Controller (your customer) if the Data Processor has plans to extend the circle of sub-processors and/or to replace existing sub-processors with others.
Confidentiality
1. Personal Data held by us will be kept confidential in accordance with this Privacy Policy.
2. Any questions, comments, suggestions or information other than Personal Data sent or posted to the site, or any part of the site, by visitors will be deemed voluntarily provided to us on a non-confidential and non-proprietary basis. We reserve the right to use, reproduce, disclose, transmit, publish, broadcast, and/or post elsewhere such information freely, including passing it to any associated company for example, in connection with the development, manufacture, and marketing of products and services and to meet customer needs.
Safety Of Personal Data
1. All reasonable efforts are made to ensure that any personal data held by us is stored in a secure and safe place, and accessed only by our authorised employees or authorised Third Party Service Providers.
2. You should be aware that no system is impenetrable and no information provided over the Internet can be guaranteed to be completely secure. Accordingly, we cannot guarantee the security of any information that you transmit to us or receive from us over the Internet.
Links
1. This site may contain links to other sites and pages which are operated by third parties. We have no control over the content of the linked websites or the way in which the operators of those websites deal with your Personal Data. You should review the privacy policy for those third-party websites to understand the ways in which your Personal Data may be used by those third parties.
Information Collected When You Use Our Website
1. We may use 'cookies' on this site in order to:
  - enable tighter security
  - enable online customers to keep browsing
  - personalise sites for customers
  - build online customer or visitor profiles
  Cookies are pieces of information stored in your hard drive about your preferences on our site, which enable the site to be tailored to you in future visits. Customers who want to disallow cookies can do so on their web browser. However, by disabling cookies you may not be able to access all parts of our website.
Right To Access/ Correct Personal Data
1. Under the Hong Kong Privacy Ordinance and the Macau Privacy Act, you have the right of access to Personal Data held by us about you and to request correction of your Personal Data.
2. If you have any questions regarding this Privacy Policy or if you wish to access or correct your Personal Data, you may send your request in writing to the following address:
  
  Personal Data Officer
  Boxful Limited
  Unit 2202-2203, 299QRC
  287-299 Queen’s Road Central
  Sheung Wan
  Hong Kong
  
  Or,
  
  Email: support@waaship.com
3. In accordance with the Hong Kong Privacy Ordinance and the Macau Privacy Act, we reserve the right to charge you a reasonable fee for the processing of any data access or correction request.
Amendments
1. We may amend or update this Privacy Policy from time to time and all information will be governed by our most recent Privacy Policy, available on our website at www.waaship.com