PRIVACY NOTICE
Decca Furniture Limited ("the Company", "we", "us", or "our") respects your privacy and is committed to protecting your personal data.
This Privacy Notice explains how we collect, use, disclose, transfer, and store your personal data when you visit decca.com.hk (the "Website"), interact with our digital catalogs, submit commercial inquiries, or visit our regional showrooms.
1. Compliance Framework
As a global corporate entity headquartered in the Hong Kong Special Administrative Region ("HKSAR"), our data processing practices are primarily governed by the Personal Data (Privacy) Ordinance (Cap. 486) ("PDPO"). Where our data processing involves individuals located in the European Union (EU), United Kingdom (UK), or specific jurisdictions in the United States (such as California), we also endeavor to respect applicable local data protection regimes (including the GDPR, UK GDPR, and CCPA) as they apply to our cross-border commercial operations.
2. The Data We Collect About You
Personal data means any information about an individual from which that person can be identified. We may collect, use, store, and transfer different kinds of personal data about you, classified as follows:
- Identity Data: First name, last name, job title, and professional credentials (e.g., architect, interior designer, purchasing agent).
- Contact Data: Corporate email address, telephone numbers, company name, billing address, and regional location.
- Inquiry & Technical Specifications Data: Project details, floor plans, millwork requirements, custom furniture dimensions, and specific fabric/finish preferences you upload or submit through our procurement contact forms.
- Technical & Usage Data: Your internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and details regarding how you navigate our portfolio pages.
3. How We Use Your Personal Data
We will only use your personal data when the law allows us to. Most commonly, we use your data under the following circumstances:
| Purpose / Activity | Type of Data | Lawful Basis (Including PDPO Principles) |
|---|---|---|
| To process and respond to your B2B commercial inquiries, RFQs, and custom manufacturing requests. | Identity, Contact, Project Specifications | Necessary to take steps at your request prior to entering into a commercial procurement contract. |
| To schedule, manage, and confirm your private viewings or consultations at our regional showrooms. | Identity, Contact, Location | Necessary for the performance of customer service and business operations. |
| To send you digital catalogs, architectural source files, and design assets. | Identity, Contact, Location | Consent volunteered by you upon submitting the asset download form. |
| To send you direct marketing communications regarding new collections, design trends, and showroom openings. | Identity, Contact, Location | Explicit, freely given Opt-In Consent (as required under HK PDPO Direct Marketing provisions). |
4. Disclosures & Cross-Border Data Transfers
Decca is a global operational enterprise with centralized manufacturing facilities located in Mainland China and Thailand, also regional showrooms, affiliates, and distributors spread across Asia, Europe, and North America.
To fulfill your inquiries and deliver bespoke furniture solutions, your personal data may be transferred to, stored at, and processed in a destination outside the HKSAR. This includes transferring data to:
- Our group subsidiary companies and manufacturing affiliates for engineering estimation and production planning.
- Third-party logistics, freight forwarding, and white-glove installation partners responsible for delivering physical assets to your project sites.
- Cloud service providers and secure IT infrastructure vendors hosting our customer relationship systems.
When we transfer your data across borders, we take all reasonable steps to ensure that your data is treated securely, receives an adequate level of protection equivalent to the PDPO standards, and is processed strictly in accordance with our explicit instructions.
5. Data Security & Retention
We have implemented robust, industry-standard technical and organizational security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. Access to your personal data is strictly limited to employees, agents, and contractors who have a legitimate business "need-to-know."
We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or statutory reporting requirements.
6. Your Legal Rights
Under the Hong Kong Personal Data (Privacy) Ordinance, you possess specific statutory rights regarding your data. Where international regulations apply, these rights are extended inline with local mandates. You have the right to:
- Request Access: Check whether we hold personal data about you and request a copy of that data.
- Request Correction: Demand that any inaccurate or incomplete personal data we hold about you be rectified.
- Object to Direct Marketing: Exercise your right to opt out of marketing communications at any time, entirely free of charge.
- Request Erasure/Restriction: Where applicable under international laws (e.g., GDPR), request the deletion of your personal data or restriction of its processing under specific conditions.
To exercise any of these rights, or to file an inquiry regarding our privacy practices, please contact us.
7. Language Prevalence
In accordance with the multilingual operational standards of our Website, this Privacy Notice is published in English, Traditional Chinese (中文繁體), and Simplified Chinese (中文簡體). In the event of any discrepancy, ambiguity, or contradiction between the English version and any translated versions, the English version shall prevail as the definitive legal text.
8. Updates to This Privacy Notice
We reserve the right to modify this Privacy Notice at any time to reflect updates in our data processing workflows or changes to applicable regional legislation. Any amendments will be posted directly to this page with an updated "Last Updated" timestamp at the top. We encourage you to review this notice periodically.
