Globalmai Privacy Policy

Effective Date: February 11, 2026
Last Updated: February 11, 2026
Operating Entity: MATHYKAY HONG KONG LIMITED
Website:https://www.globalmai.com

Your privacy is critically important to us. This Privacy Policy explains in a clear, transparent mannerwhat personal datawe collect when you visit our website (https://www.globalmai.com), purchase our clothing and daily-use products, or interact with us; how we use, share, protect, and delete that data; and your rights as a global user.

Please pay special attention to the bolded sections—they highlight your essential rights. By using our website, you acknowledge that you have read and understood this policy.

1. What Personal Information We Collect

We collect the following categories of personal information on lawful, fair, and necessary bases:

1.1 Information You Actively Provide

· Account & Identity Information: When you register an account or place an order, you provide your name, email address, phone number, shipping address.

· Transaction & Payment Information: To complete purchases, you provide payment details (e.g., credit card number, PayPal account). We do not store full payment card numbers; this data is processed directly by our PCIDSS compliant payment partners.

· Customer Support & Aftersales Information: When you contact us for returns, refunds, or inquiries, you may provide order numbers, contact details, and communication records.

When you register an account, you provide your name, email address, shipping address, and phone number. When you place an order, we collect payment information (processed directly by our payment partners, we do not store full card numbers).

1.2 Information Collected Automatically

          We automatically collect your IP address, browser type, device identifiers, browsing behavior (pages viewed, items added to cart, checkout attempts) via cookies             and similar technologies.

· Device & Technical Information: IP address, browser type, operating system version, device identifiers.

· Log & Behavioural Data: Browsing history, click behaviour, search queries, time spent on pages, navigation paths.

· Location Information: Your delivery address (for shipping) and approximate geographic location derived from your IP address (for advertising compliance).

1.3 Information from Third Parties

          If you log in via Facebook or Google, we receive your public profile name and avatar (with your consent). We also receive hashed email and purchase events from                      Meta Pixel for advertising analytics.

· We use Meta Pixel, Conversions API, and Google Analytics. Meta may share anonymised campaign performance reports with us. We do not collect your passwords from these platforms.

2. Cookies & Similar Tracking Technologies

Our website uses cookies, web beacons, pixel tags, and similar technologies for the following purposes:

2.1 Strictly Necessary Cookies
Essential for you to navigate the site, maintain shopping cart state, and complete checkout. These cookies do not require your consent. Disabling them will make the website unusable.

2.2 Functional & Preference Cookies
Remember your language preferences, currency, and region to enhance your shopping experience.

2.3 Analytics & Performance Cookies
We use Google Analytics and Meta Pixel to count visitors, analyse page clicks, measure conversion rates, and improve our store design.

2.4 Advertising & Marketing Cookies – Meta Compliance Focus
With your explicit consent (via our cookie banner), we activate Meta Pixel and Facebook Conversions API.
These tools collect:

· Your shopping behaviour (viewing products, adding to cart, initiating checkout, purchasing)

· IP address, hashed email, hashed phone number
This data is sent to Meta. Meta uses it to:

· Show you personalised clothing & product ads across Facebook/Instagram

· Provide us with campaign performance analytics

· Crossdevice matching (if you are logged into Facebook)

Your Choice:
When you first visit our site, you will see a clear cookie consent banner. You have the right to reject advertising cookies. If you reject, Meta Pixel will not be activated on your browser. You may also clear cookies via your browser settings at any time.

3. How We Share Information with Meta (Facebook) & Other Third Parties

3.1 Sharing with Meta Platforms, Inc. – Mandatory Disclosure
We share limited customer information with Meta (Facebook, Instagram) only if you have given your unambiguous consent via the cookie banner.

· Purpose: Creating Custom Audiences, optimising ad delivery, measuring marketing effectiveness.

· Data shared: Hashed email, hashed phone number, IP address, e-commerce events (ViewContent, AddToCart, Purchase, etc.).

· How Meta uses this data: Meta may associate this information with your Facebook/Instagram account (if you have one) or use it to build interest profiles. Meta does not sell this data to us. Meta’s processing is governed by its own Privacy Policy.

· We never share any special category data (health, politics, religion) nor any data from children under 13.

3.2 Sharing with Other Service Providers
We share necessary personal data only with the following categories of partners, under strict Data Processing Agreements (DPAs):

· Logistics & delivery carriers: name, phone, address

· Payment processors: order amount, payment verification data (we never store full card numbers)

· Customer support platforms: name, order number, chat history

· Analytics providers: Pseudonymised behavioural data

3.3 Legal & Regulatory Disclosures
We may disclose your information if required by law, legal process, or governmental authority.

3.4 International Transfers
Our website is hosted on servers located in [e.g., United States / Singapore / Hong Kong]. If you are located in the European Economic Area (EEA) or the United Kingdom, your data may be transferred outside the EEA. We have implemented European Commission Standard Contractual Clauses (SCCs) and other appropriate safeguards to ensure your data receives adequate protection.

4. Your Rights: Access, Correction, Deletion, Account Closure

This section is the most critical part for Meta Platform approval. As a global user, you have the following rights – regardless of your country of residence, and free of charge:

4.1 Right to Access
You may request a copy of all personal data we hold about you.
Send an email to vivfeng@hotmail.com with the subject “Data Access Request”. We will provide the data in a commonly used, machine-readable format (CSV) within 15 working days.

4.2 Right to Rectification
If your personal information (e.g., name, address) is inaccurate, you can update it via your account dashboard or contact us to correct it.

4.3 Right to Erasure (Right to be Forgotten) – META MANDATORY
You have the absolute right to request the deletion of your personal data. This right applies globally, costs nothing, and does not require you to provide any justification.

How to request deletion:

· Option A: Log into your account, go to “Settings – Privacy” and click “Request Deletion of My Account & Data”. We will automatically process this request within 7 days.

· Option B: Send an email to vivfeng@hotmail.com with the subject “Data Deletion Request”. Include the email address registered with us and your full name. We will delete your data within 7 working days and send you a confirmation.

Exceptions: We may retain minimal information if required by law (e.g., tax records must be kept for 6 years). In such cases, we will restrict processing of that data.

4.4 Right to Withdraw Consent
You may disable cookies via your browser, or email us at any time to withdraw your consent for marketing. Withdrawal does not affect the lawfulness of processing before withdrawal.

4.5 Right to Close Your Account
You may selfclose your account in “Settings – Security”. After closure, your personal data will be placed into deletion queue within 30 days.

5. Data Retention & Security

5.1 Retention Periods
We retain your personal data only as long as necessary to fulfill the purposes outlined in this policy:

· Order information: 5 years after order completion (to comply with tax and accounting laws).

· Account information: Until 30 days after you delete/close your account.

· Browsing logs: 26 months (for trend analysis).

· After these periods, data is either anonymised or permanently deleted.

5.2 Security Measures
We employ industrystandard safeguards:

· TLS 1.3 encryption (fullsite HTTPS)

· Encrypted storage for sensitive fields (email, phone)

· Strict access controls (only authorised personnel with 2FA)

· Regular security audits and penetration testing

No method of transmission over the Internet is 100% secure. If a data breach occurs that affects your rights, we will notify you within 72 hours via email/website notice and inform the relevant supervisory authority.

6. Children’s Privacy

Our products (clothing, daily goods) are intended for the general adult population. We do not knowingly collect personal information from anyone under the age of 14. If you are a parent/guardian and believe your child has provided us with personal data, please contact us immediately – we will delete it.

7. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

· Material changes (e.g., purpose of collection, new sharing partners) will be notified via prominent website notice or email.

· The “Effective Date” at the top will always reflect the latest version. Your continued use of the website after such updates constitutes your acceptance of the revised policy.

8. How to Contact Us

If you have any questions about this Privacy Policy, or wish to exercise your rights, please contact our Data Protection Officer:

Data Protection Officer: JING FENG
Email: vivfeng@hotmail.com
Phone: +852 70968722
Postal Address: Unit89,3/F Yau Lee Centre,, No.45 Hoi Yuen Road, Kwun Tong, Hong Kong

Response commitment: All requests (access, correction, deletion) will be acknowledged within 7 working days; complex cases resolved within 30 days maximum.