Privacy Policy

Moovthing — Privacy Policy

Last updated: 31 July 2026

This Privacy Policy describes how Moovthing ("we," "us," "our," or "Moovthing") collects, uses, discloses, and safeguards your personal data when you visit moovthing.com (the "Site"), create an account, make a purchase, or otherwise interact with us. By using the Site, you agree to the practices described below.

We respect your privacy and are committed to protecting your personal data in accordance with applicable data-protection laws, including (where applicable to your jurisdiction) the Hong Kong Personal Data (Privacy) Ordinance ("PDPO"), the EU/UK General Data Protection Regulation ("GDPR"), and the California Consumer Privacy Act ("CCPA").

1. Information We Collect

We collect personal data from a few different sources:

1.1 You give it to us directly

Account information: name, email, password (hashed)
Order information: billing and shipping address, phone number, payment information (handled by our payment processor)
Communications: messages you send us via contact forms, email, or support requests
Reviews & user-generated content: product reviews or testimonials you submit

1.2 Automatically when you use the Site

Device & connection data: IP address, browser type and version, operating system, device identifiers
Usage data: pages viewed, products viewed, time on page, referral source, click patterns
Cookies & tracking pixels: small data files that help the Site function and help us understand how it's used (see Section 6)

1.3 From third parties

Payment processors: transaction confirmation and fraud-screening data (we never see or store full card numbers)
Shipping carriers: delivery status updates
Advertising partners: aggregated audience data from pixels (e.g. Meta, Google) when you interact with our ads

2. How We Use Your Information

Purpose	Legal basis (GDPR)
Process and fulfil your orders, including shipping and returns	Contract performance
Send order updates, confirmations, and customer support messages	Contract performance
Create and maintain your account	Contract performance
Improve the Site, products, and customer experience	Legitimate interest
Personalize the shopping experience and recommend Products	Legitimate interest / Consent
Run marketing campaigns and display relevant ads (email, SMS, ads)	Consent (where required)
Detect and prevent fraud, abuse, or other illegal activity	Legitimate interest / Legal obligation
Comply with tax, accounting, and other legal obligations	Legal obligation

We will never sell your personal data to third parties or use it in any unethical way.

3. Sharing Your Information

We share your personal data only with the trusted service providers that help us run Moovthing:

Payment processors (Shopify Payments, Shop Pay, portable wallets) — to process transactions
Shipping carriers (e.g., postal services, courier companies) — to deliver your order
Cloud hosting & platform providers (Shopify, hosting services) — to store and operate the Site
Email & SMS providers — to send you order and marketing communications
Analytics providers (Shopify Analytics, Meta Pixel, Google Analytics if enabled) — to understand Site usage
Marketing & advertising platforms (e.g., Meta, Google Ads) — to measure ad performance and reach audiences likely to be interested in our Products
Customer-support tools — to respond to inquiries
Legal & compliance authorities — when required by law or to protect our legal rights

All third-party providers are carefully selected and contractually obligated to protect your data with the same standards we maintain.

4. International Data Transfers

Because we ship worldwide, your personal data may be transferred to and processed in countries other than your own — including Hong Kong, the United States, the European Economic Area, and other locations where our service providers operate.

When we transfer your personal data outside your jurisdiction, we use appropriate safeguards (such as Standard Contractual Clauses approved by the European Commission for GDPR transfers) to ensure your data remains protected.

By using the Site, you understand that your data may be transferred to, stored, and processed in a country other than your country of residence.

5. Data Retention

We retain your personal data only for as long as necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law (for example, tax or accounting records).

Order history is generally retained for 7 years to comply with financial-record-keeping obligations. Marketing data is retained until you unsubscribe or ask us to delete it. Analytics data is retained in aggregated form.

6. Cookies & Tracking Technologies

The Site uses cookies, web beacons, pixels, and similar technologies to function and improve your experience.

6.1 Types of cookies we use

Strictly necessary cookies — required for the Site to function (cart, checkout, login). Cannot be disabled.
Performance & analytics cookies — help us understand how visitors use the Site.
Functional cookies — remember your preferences (country, language, recently viewed products).
Marketing & advertising cookies — used to deliver relevant ads and measure their effectiveness.

6.2 Your cookie choices

You can manage cookie preferences through our cookie consent banner or via your browser settings. For EU/UK visitors, we will request your consent before setting non-essential cookies. You may withdraw consent at any time.

6.3 Pixels used

The Site uses the following pixels/pixel-equivalents when you consent:

Meta (Facebook) Pixel — for ad measurement and audience building
Shopify Pixel / Web Pixels Manager — for analytics and conversion tracking

7. Marketing Communications

If you opt in — or where permitted by law — we may send you marketing emails about new Products, special offers, and other updates.

You can unsubscribe at any time by:

Clicking the "unsubscribe" link at the bottom of any marketing email
Contacting us at [your support email]

Even if you opt out of marketing emails, we will still send you essential transactional messages (order confirmations, shipping updates, return notifications).

8. Your Rights & Choices

Depending on your jurisdiction, you may have some or all of the following rights:

If you are in the EU / EEA / UK (GDPR)

Right of access
Right to rectification
Right to erasure ("right to be forgotten")
Right to restrict processing
Right to data portability
Right to object
Right to withdraw consent
Right to lodge a complaint with your local data-protection authority

If you are in Hong Kong

Right to be informed about how your data is collected and used
Right to access and request correction of your personal data
Right to opt out of direct marketing at any time

If you are in California (CCPA/CPRA)

Right to know what personal data we collect and how we use it
Right to delete your personal data
Right to opt out of the sale or sharing of personal data (we do not sell)
Right to non-discrimination for exercising your rights

How to exercise these rights

Email us at [your support email] with your request. We may need to verify your identity before processing your request and will respond within applicable statutory timelines (typically 30 days for GDPR, 45 days for CCPA).

9. Security of Your Information

We take reasonable and appropriate measures to protect your personal data against unauthorized access, loss, misuse, or alteration:

HTTPS encryption across the Site
PCI-DSS-compliant payment processing via Shopify
Restricted internal access to personal data on a need-to-know basis
Regular review of our security practices

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security, and you use the Site at your own risk.

10. Children's Privacy

The Site is not directed to children under the age of 13 (or 16 in some jurisdictions). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at [your support email] so we can delete it.

11. Links to Other Websites

The Site may contain links to third-party websites or services we do not control. This Privacy Policy does not apply to those third-party sites. We encourage you to read the privacy policies of every site that collects your personal data.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page indicates when the latest changes were made. Material changes will be communicated through the Site or by email where appropriate. Your continued use of the Site after changes constitutes acceptance of the revised Privacy Policy.

13. Contact Us

For any questions about this Privacy Policy or to exercise your data-protection rights, please contact us at:

Moovthing 📧 Email: [your support email — e.g., support@moovthing.com] 🌐 Website: moovthing.com

If you are in the EU/EEA and wish to lodge a complaint with a supervisory authority, a list of national authorities is available at https://edpb.europa.eu/about-edpb/about-edpb/members_en.