Information we collect
We may collect your name, email, phone number, delivery and billing address, order and return history, messages you choose to send, and technical information such as device type, browser, IP address, access time and security logs. Full payment-card details are processed by Shopify or its payment providers; AvioBijou does not store full card numbers or security codes.
How we use information
We use information to create and manage customer accounts, process orders and payments, arrange delivery, provide after-sales support, answer enquiries, detect fraud and abuse, maintain website security, and—only with the consent required—send marketing you have chosen to receive.
Required and optional information
Fields identified for checkout, delivery, refunds or account verification are required to provide the relevant service; without them we may not be able to complete it. Marketing choices, preferences and other non-essential information are voluntary and are not treated as consent by default.
Sharing and international processing
We disclose information only as needed to Shopify, payment providers, delivery partners, cloud hosting and security providers, professional advisers and lawful authorities. Some providers may process information outside Hong Kong. Where practicable, we require purpose limits and access controls. We do not sell personal information.
Retention and security
We retain information only as long as necessary for orders, after-sales support, accounting, disputes and legal obligations, then delete or de-identify it. We use HTTPS, least privilege, input validation, security headers, rate limits and protected administration sessions; no internet transmission can be guaranteed absolutely secure.
Access, correction and deletion
You may request access to or correction of personal data we hold and, where applicable, account deletion or cessation of direct marketing. We may verify identity and respond as permitted by Hong Kong’s Personal Data (Privacy) Ordinance. Information in a Shopify customer account can be managed through the account page.
Children
This site is not directed to people under 18. A parent or guardian should assist a minor with purchases and personal information. If we learn that we collected a child’s information without appropriate permission, we will take reasonable steps to delete it.
Updates
We may update this policy when our services, providers or legal requirements change. We will provide reasonable notice of material changes and update the date shown above.