Protection of your Data

1. Data controller

Reboot Global Corporation Limited, a Hong Kong company registered under number 80572683, Flat 5, 4/F, Won Hing Building, 74-78 Stanley Street, Central, Hong Kong.
Contact for any data-related question: [email protected]
We act as a data user under the Hong Kong Personal Data (Privacy) Ordinance (Cap. 486) and as a data controller under the GDPR and UK GDPR where those apply.

Performance of the contract: order processing, delivery, invoicing, warranty and after-sales service.
Legal obligations: retention of accounting and tax records.
Legitimate interests: site security, fraud prevention, improvement of our services.
Consent: marketing communications and non-essential cookies.

Your data is used for direct marketing only with your prior consent, in accordance with Part VIA of the Hong Kong Personal Data (Privacy) Ordinance (Cap. 486).
Commercial electronic messages comply with the Hong Kong Unsolicited Electronic Messages Ordinance (Cap. 593).
You may withdraw consent at any time, free of charge, using the unsubscribe link or by writing to [email protected].
We never sell or rent your data to third parties for marketing purposes.

Order and invoicing data: 7 years, in line with the business-record retention obligations applicable in Hong Kong.
Customer account: 3 years from the last activity, then deleted or anonymised.
Browsing data and cookies: 13 months at most.
Data is not kept longer than necessary for the purposes pursued.

Our internal teams responsible for orders, logistics and customer service.
Our providers: host, carriers, payment providers, analytics and support tools.
Those providers act only on our instructions and are bound by confidentiality and security obligations.
Public authorities where the law requires it.

Our hosting servers are located in the European Union; certain administrative operations are carried out from Hong Kong.
Hong Kong is not covered by a European Commission adequacy decision. Transfers from the European Economic Area or the United Kingdom are therefore governed by standard contractual clauses together with additional security measures.
You may ask us for a copy of the safeguards in place.

Encryption of communications, controlled and restricted access, logging, and regular system updates.
These measures give effect to the data security principle (Data Protection Principle 4) of the Personal Data (Privacy) Ordinance (Cap. 486).
In the event of a breach presenting a risk to your rights, we will inform you and notify the competent authority within the applicable time limits.

Under the Personal Data (Privacy) Ordinance (Cap. 486): the right to access your data and the right to request its correction.
If you are resident in the European Economic Area or the United Kingdom: rights of access, rectification, erasure, restriction, portability, objection and withdrawal of consent.
How to exercise them: [email protected], or by post to the registered office above.
We reply within 40 days for requests under the Hong Kong Ordinance and within one month for requests under the GDPR.
We may ask for proof of identity where there is doubt as to who is making the request.

Strictly necessary cookies keep the site working and allow orders to be processed.
Analytics and personalisation cookies are only set after you consent.
You can change your choice at any time through the consent banner or your browser settings.

You may complain to the Privacy Commissioner for Personal Data in Hong Kong.
If you are resident in the European Economic Area or the United Kingdom, you may also complain to the data protection authority of your country of residence.
We encourage you to contact us first so that we can resolve the matter quickly.

Last updated: August 2026