Privacy Policy

Welcome to www.natachavan.com (the “Website”), owned by Natacha Van, registered in Hong Kong. This Privacy Policy applies to all Website interactions, whether or not you purchase products. Review our Terms and Conditions and boutique-specific privacy policies in the Legal Area. This policy complies with Hong Kong’s Personal Data (Privacy) Ordinance (Cap. 486) and, where applicable, the EU General Data Protection Regulation (GDPR) 2016/679 (“Privacy Laws”).

1. Data Controller

Natacha Van is the data controller for Website-related processing, including navigation, marketing, profiling, and sales-related data.

2. Data Protection Officer and Contact

Contact our Data Protection Officer at privacy@natachavan.com, Attn: Legal Department, for inquiries, complaints, or to exercise your rights.

3. Types and Purposes of Data Processing

We collect and process the following personal data:

1. Browsing Data: To ensure Website functionality, manage purchases, and for marketing.
2. Account Data: Email, personal details, and password for account registration and management. Social log-in shares data (e.g., name, email) with your consent.
3. Customer Care Data: Personal and purchase details for assistance, with optional call recording (with consent).
4. Purchase Data: Details, delivery, and payment data for online purchases, pre/post-sale services, and boutique interactions.
5. Marketing Data: Details for updates, promotions, and abandoned cart reminders (with consent).
6. Preference Data: Purchase and preference data to tailor products and services (with consent).
7. Anti-Fraud Data: Identification and payment data to prevent fraud, shared with authorities or specialized firms if needed.

4. Legal Basis for Processing

1. Cookies: Legitimate interest (Website functionality) or consent (marketing).
2. Account: Contractual (account services) or consent (social log-in).
3. Customer Care: Contractual (assistance) or consent (call recording).
4. Sales: Contractual and legal obligations.
5. Marketing: Consent.
6. Preferences: Consent.
7. Anti-Fraud: Legitimate interest and legal obligation.

5. Data Sources

Data is collected directly from you (registration, purchases), except for browsing data, social log-in data, and anti-fraud data from third parties.

6. Analysis of Buying Habits

With your consent, we analyze purchase value, frequency, and product types to offer tailored products and services, without intrusive behavioral analysis.

7. Data Processing Methods

Data is processed electronically with security measures to minimize risks of loss, unauthorized access, or non-compliant processing. We use SSL for secure purchases. Ensure your device has updated antivirus and firewall protection.

8. Mandatory or Voluntary Data Provision

Providing browsing data is governed by the Privacy Policy. Other data (e.g., for marketing or preferences) is voluntary; non-provision may limit personalized services but not Website use. Purchase-related data (e.g., email, address, payment details) is mandatory for order fulfillment and legal compliance. Mandatory fields are marked with (*).

9. Data Recipients

Data may be shared with:

1. Natacha Van employees/consultants.
2. Group companies or appointed data processors for contractual/marketing services.
3. Third-party providers (logistics, IT, customer care, anti-fraud).
4. Financial institutions for payments.
5. Authorities for legal compliance or fraud prevention.

10. Cross-Border Data Transfer

Data is primarily processed in Hong Kong. Transfers to non-EU countries use Standard Contractual Clauses and impact assessments to ensure protection. Contact privacy@natachavan.com for details.

11. Data Retention

- Cookies: Per Privacy Policy.
- Account: Until account deletion (unused accounts deleted after 7 years).
- Customer Care: As needed, call recordings up to 45 days.
- Sales: Up to 10 years for tax/legal compliance, longer for legal claims or warranties.
- Marketing/Preferences: 7 years.
- Anti-Fraud: As needed for investigations.

12. User Rights

You have the right to access, correct, delete, restrict, or port your data, and object to processing. Contact privacy@natachavan.com, Attn: Legal Department. File complaints with the Hong Kong Office of the Privacy Commissioner for Personal Data or, for EU residents, your local data protection authority.

Last Updated: June 7, 2025