Privacy Policy

Last Updated: February 5, 2025

INTRODUCTION

This privacy notice provides you with details of how we collect, use, and process your personal data when you use our website www.catalystlifestyle.com.. By providing us with your data, you confirm that you are over 18 years of age.

Labworks International Design Ltd. is the data controller responsible for your personal data under this privacy policy (referred to as “we,” “us,” or “our” in this document).

Contact Details:

Labworks International Design Limited
Email: cs@catalystcase.com
Postal address: Unit 2, 9/F Yee Lim Industrial Centre (A), 2-28 Kwai Lok St, Kwai Fong, NT, Hong Kong

Maintaining accurate and up-to-date information is important to us. Please notify us of any changes to your personal data through our contact email or by updating your account settings directly. Email us at cs@catalystcase.com OR update your profile by clicking on the link contained within our emails to you.

Your Rights Under the HK Personal Data (Privacy) Ordinance (PDPO)

In line with the Hong Kong Personal Data (Privacy) Ordinance (PDPO), you have specific rights regarding your personal data, which include:

  • Right to Access: You may request a copy of the personal data we hold about you.

  • Right to Correction: You may request us to correct inaccuracies in your personal data.

  • Right to Erasure: Subject to applicable laws, you may request the deletion of your personal data.

  • Right to Object: You may object to the use of your data for direct marketing purposes.

To exercise any of these rights, please submit your request via email at cs@catalystcase.com. We will process and respond to your request in compliance with the PDPO requirements.

WHAT DATA WE COLLECT

We collect and process different types of personal data, including the following:

Categories of Data

Communication Data:

  • Any messages you send to us via our contact form, email, social media, or other communication platforms.
  • Purpose: To respond to inquiries, maintain records, and address legal claims.
  • Lawful Ground: Legitimate interests (e.g., ensuring communication efficiency and legal compliance).

Customer Data:

  • Your name, title, billing and delivery addresses, email address, phone number, purchase history, payment details, etc.
  • Purpose: To fulfil your orders, keep transaction records, and comply with contractual obligations.
  • Lawful Ground: Contractual performance.

User Data:

  • Data about your interaction with the website, including login information, comments, or posts you publish.
  • Purpose: To maintain website functionality, security, and administration.
  • Lawful Ground: Legitimate interests in managing our business and user interactions.

Technical Data

  • Information like IP addresses, browser type, time zones, page visits, and analytics.
  • Purpose: To analyse site usage, maintain website security, and improve marketing strategies.
  • Lawful Ground: Legitimate interests (e.g., improving business processes).

Marketing Data

  • Your preferences for marketing communications and advertisement engagement.
  • Purpose: To deliver promotions, measure their success, and improve marketing.
  • Lawful Ground: Consent or legitimate interests (e.g., promoting business growth).

Sensitive Data:

  • We do not intentionally collect sensitive data, such as race, religious beliefs, or health-related data.

HOW WE COLLECT YOUR DATA

Your data may be collected through:

  • Direct Interactions: Information you voluntarily provide (e.g., newsletters, forms, purchases).
  • Automated Technology: Analytics systems tracking cookies, visits, and online interactions. See our full Cookie Policy here.
  • Third Parties: Marketing or analytics platforms such as Google, Facebook, Instagram and Tiktok.

How We Use Your Data

We use your data for purposes including:

  • Facilitating purchases and deliveries.

  • Managing website functionality and user accounts.

  • Sending marketing communications (with your consent, where required).

  • Protecting against fraud or misuse of your data.

We will only process data for the specific purposes listed above or for related and lawful purposes allowed under Hong Kong law.

MARKETING COMMUNICATIONS

Under the PDPO and other relevant regulations, we will only send you marketing communications if:

  • You have provided explicit or implied consent for such communications.
  • You made purchases or inquired about services from us, provided you’ve not opted out of such messages.
  • You can unsubscribe from marketing emails at any time by using the “unsubscribe” link in our emails or contacting us at cs@catalystcase.com.

Opting out of marketing messages does not impact data collected for transactional or other legitimate purposes.

DISCLOSURES OF YOUR DATA

We may share your data with the following third parties:

  • Affiliate businesses or companies within our group.
  • Payment processors, IT service providers, and logistics companies.
  • Professional advisors, such as legal or financial consultants.
  • Government agencies (if legally required).
  • Market researchers.
  • Fraud prevention agencies and service providers for fraud analysis and prevention.
  • Price comparison sites.
  • Third parties in the context of mergers, asset transfers, or business reorganisations.

We require all third parties to comply with Hong Kong's data protection and privacy regulations, ensuring security and lawful data processing.

INTERNATIONAL TRANSFERS

When transferring personal data outside of Hong Kong, we will ensure appropriate safeguards are in place, such as:

  • Using regions with recognised data protection standards.

  • Enforcing contractual obligations binding parties to adhere to privacy standards.

DATA SECURITY

We employ robust technical and organisational measures to safeguard your personal data against potential breaches, loss, or misuse. In the event of a data breach, we will notify you and relevant authorities if required under the law.

DATA RETENTION

We retain your personal data only as long as necessary to fulfil lawful purposes, including:

  • Legal, accounting, and audit compliance (e.g., retaining transaction records for seven years).
  • Statistical or research purposes (using anonymised data).

When data is no longer necessary, we will securely dispose of or anonymise it.

COOKIES

Our website uses cookies to enhance your browsing experience. You can configure your browser to block cookies; however, some web functionalities may be affected. Learn more in our Cookie Policy here.

THIRD-PARTY LINKS

Our website may include links to external websites or services. We do not control these websites and are not responsible for their content or privacy practices. Please review their privacy notices before sharing any personal data.

Canadian-Specific Rights

If you are a customer in Canada, you have the following rights under the Personal Information Protection and Electronic Documents Act (PIPEDA):

  • Right to Access and Correction: You have the right to request access to the personal data we hold about you, and to request its correction if it is inaccurate or incomplete.
  • Right to Withdraw Consent: You can withdraw your consent for the collection, use, or disclosure of your personal data at any time, subject to legal or contractual restrictions.
  • Right to Know the Purposes of Data Collection: You have the right to be informed of the specific purposes for which your personal information is being collected.
  • To exercise any of these rights, please contact us at cs@catalystcase.com.

Data Transfers Outside Canada

Your personal data may be transferred and stored outside of Canada, including in the United States or other jurisdictions. While your data is in those jurisdictions, it may be accessible to courts, regulatory authorities, and law enforcement according to the laws of those jurisdictions. By using our services, you consent to these cross-border data transfers.

Canada Business Contact Information Exemption

Under PIPEDA, certain information classified as "business contact information," such as your name, title, or email address used for professional purposes, is exempt from some privacy protections under the law. We will maintain the privacy of this data but may use it for business-related communications.

Response and Redress under PIPEDA for Canadian Customers

If you have concerns or complaints about how we handle your personal information, you may contact us directly at cs@catalystcase.com. Alternatively, you can file a formal complaint with the Office of the Privacy Commissioner of Canada (OPC) at https://www.priv.gc.ca.

UK-Specific Rights

If you are a customer in the UK, you have the following rights under the UK General Data Protection Regulation (UK GDPR):

  • Right to Access (Subject Access Request): You may request a copy of the personal data we hold about you and confirmation of how it is being processed.
  • Right to Rectification: You may request that we correct any inaccurate or incomplete personal data.
  • Right to Erasure ("Right to Be Forgotten"): You may request the deletion of your personal data where there is no lawful reason for us to retain it.
  • Right to Restriction of Processing: You may request that we limit the processing of your personal data in certain circumstances.
  • Right to Data Portability: You can request that we transfer your personal data to a third-party service or provider.
  • Right to Object: You have the right to object to the processing of your data for direct marketing or certain other purposes.
  • To learn more about your rights or to make a request, please contact us at cs@catalystcase.com.

Data Transfers outside of the UK

Your personal data may be transferred and processed outside of the UK. Where these transfers occur, we ensure that they are compliant with UK GDPR standards and use mechanisms such as:

  • Adequacy Decisions: Transferring data to countries that the UK considers to provide adequate levels of data protection.
  • Standard Contractual Clauses (SCCs): Using standard contract terms approved by the UK government to safeguard your personal data.

Supervisory Authority

If you are not satisfied with our data practices, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO). You may contact them directly at:

  • Website: https://ico.org.uk/
  • Phone: +44 303 123 1113

Automated Decision-Making and Profiling for UK customers

Under the UK GDPR, you have the right not to be subjected to decisions based solely on automated processing (including profiling) that significantly affect you. If we use automated systems, we will notify you and outline the logic used and your right to request human intervention.

Changes to this Policy

We may update this privacy policy periodically. Any changes will be posted on this page, and we recommend reviewing it regularly to stay informed.

For additional concerns or clarification, you may contact us at: cs@catalystcase.com.

This privacy policy has been designed to comply with the Hong Kong Personal Data (Privacy) Ordinance (PDPO), the Personal Information Protection and Electronic Documents Act (PIPEDA), the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (GDPR), and other relevant privacy regulations.