This Privacy Policy explains how UnibuyCosplay collects, uses, stores, and discloses personal data when you visit our website, create an account, place an order, contact us, or otherwise use our services. We handle personal data in accordance with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong and other mandatory laws that apply to a particular transaction.
1. Personal Data We Collect
- Identity and contact data: name, email address, telephone number, billing address, shipping address, and account details.
- Order data: products, sizes, measurements supplied for custom products, order value, delivery method, returns, support history, and transaction status.
- Payment data: payment method, payment confirmation, billing status, and limited transaction references. Where a third-party payment provider is used, that provider processes full card or wallet credentials under its own privacy terms.
- Technical and usage data: IP address, browser, device information, security logs, cookie identifiers, cart activity, and pages viewed.
- Communications: contact forms, email, WhatsApp messages, reviews, photographs, and other information you choose to provide.
2. Required and Voluntary Information
Fields marked as required are needed to create an account, process an order, deliver a parcel, prevent fraud, or respond to a request. If required information is not provided, we may be unable to complete the relevant service. Optional information is provided voluntarily and is used only for the stated or directly related purpose.
3. Purposes of Collection and Use
- To operate accounts, carts, wishlists, checkout, payments, orders, delivery, returns, refunds, and customer support.
- To verify order details, custom measurements, identity, payment status, and delivery information.
- To detect fraud, misuse, security incidents, and technical faults.
- To comply with accounting, tax, customs, dispute, and legal obligations.
- To improve product information, website performance, accessibility, and customer service.
- To send marketing only where permitted and where any required consent has been obtained.
4. Cookies and Similar Technology
Essential cookies and browser storage keep the cart, account session, security settings, language choices, and wishlist working. We may also use limited performance or analytics technology where enabled. You can control non-essential cookies through available consent settings or browser controls, but blocking essential cookies can prevent account, cart, or checkout features from working.
5. Service Providers and Data Transfers
We may disclose only the data reasonably needed to service providers that support website hosting, ecommerce, payment processing, fraud prevention, email, customer support, analytics, accounting, customs clearance, and parcel delivery. We may also disclose data to professional advisers, insurers, regulators, courts, law enforcement, or another party where required by law, necessary to protect legal rights, or connected with a business reorganization.
Some providers may process data outside Hong Kong. Where personal data is transferred or accessed across borders, we take practicable steps appropriate to the service and data involved, including contractual, access-control, and security measures. A provider may also be directly subject to the laws of its operating jurisdiction.
6. Data Retention and Security
We retain personal data only for as long as reasonably necessary for the purpose collected, including order fulfilment, customer support, fraud prevention, accounting, legal claims, and statutory records. Retention periods vary by record type. When data is no longer required, we take reasonable steps to delete, anonymize, or securely isolate it.
We use practicable administrative, technical, and access-control measures designed to protect personal data against unauthorized or accidental access, processing, loss, erasure, alteration, or disclosure. No internet transmission or storage system is completely secure, so absolute security cannot be guaranteed.
7. Direct Marketing
We will not use personal data for direct marketing in Hong Kong without providing the required notice and obtaining consent where required. You may withdraw marketing consent at any time by using an unsubscribe control or emailing us. Service messages about an order, security, or policy change are not marketing messages.
8. Access and Correction
You may ask whether we hold your personal data and request access to or correction of that data, subject to the Personal Data (Privacy) Ordinance and permitted exceptions. We may need to verify identity and may charge only a fee permitted by law. Account holders may update certain details directly through the account area.
9. Children
Our services are not directed to children who cannot lawfully enter a purchase contract. A parent or legal guardian should place and manage an order for a minor and should not provide more information about the minor than is necessary for sizing and fulfilment.
10. Contact and Complaints
For a privacy question, access or correction request, or complaint, contact the Data Protection Contact at service@unibuycosplay.com or WhatsApp +852 5638 1211. Include enough information for us to identify the relevant account or communication. You may also contact the Office of the Privacy Commissioner for Personal Data, Hong Kong, where applicable.
11. Policy Updates
We may update this policy to reflect changes in our services, providers, or legal obligations. The current version and update date will be published on this page. Material changes will be highlighted where reasonably practicable.
Last updated: 30 July 2026