Privacy

1. Who we are

The data controller is Auvi Entertainment Inc Limited, Hong Kong. You can contact us about privacy at [email protected] or through the Support section of this website.

2. What we collect

Account data: your email address, name and password. Passwords are stored only as a salted one-way hash (Argon2); we never store or see your plain-text password.

Google sign-in data: if you choose “Continue with Google”, Google shares with us your name, email address and profile picture, and your Google account identifier. We do not request access to your Gmail, Google Drive, Contacts, Calendar or any other Google service.

Sign-in and device data: session records such as IP address, browser type and device information, used to keep your account secure and to detect abuse.

Shopping data: items in your cart and, if you order, your delivery address, contact number and order details needed to fulfil the order.

Support data: messages you send us and any information you include in them.

Newsletter data: your email address, if you subscribe.

Usage data: pages viewed and interactions with the website, collected through cookies and similar technologies described below.

3. How we use Google user data

We use the Google account information described above only to create and sign you in to your AUVI account, to identify you as the same customer when you return, and to show your name and email in your account. We do not use it for advertising, we do not sell it, and we do not transfer it to others except as needed to provide the service, comply with the law, or with your consent.

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data to train artificial intelligence or machine learning models. You can revoke AUVI’s access at any time in your Google Account settings under Security > Third-party apps with account access.

4. How we use personal data

To create and manage your account and sign-in, process and deliver orders, take payment, provide customer support and after-sales service, send the newsletter or service messages you asked for, improve the website, protect it against fraud and abuse, and meet legal obligations. We do not sell your personal data.

5. Cookies, analytics and similar technologies

We use a session cookie to keep you signed in and a language cookie to remember your region and language. Forms may use Cloudflare Turnstile to tell people from bots; Turnstile is provided by Cloudflare and processes limited technical data for that purpose.

We use Google Tag Manager to load measurement tools, such as Google Analytics, that help us understand how the website is used. These tools may set cookies and collect pseudonymous usage data such as pages viewed, approximate location and device type. You can block or delete cookies in your browser settings; some features, such as staying signed in, may then not work.

When you first visit, we ask for your choice. Analytics and marketing cookies and similar technologies stay off until you accept them. You can change your choice at any time using “Cookie settings” in the website footer. Strictly necessary cookies, such as those for sign-in and the cart, are always on.

If you allow analytics or marketing, we use Google Analytics and the Meta Pixel (Meta Platforms) to measure how the website is used and how our advertising performs, and to show relevant offers. These tools receive events such as pages viewed, products viewed, items added to the cart and checkout steps. If you are signed in, we may also send them a hashed (SHA-256, one-way) version of your email address and delivery phone number so that activity can be matched to an account. We never send your plain-text email address or phone number. Meta and Google handle this data under their own privacy policies. If you withdraw consent, we stop sending data and remove the hashed values stored in your browser.

6. Sharing

We share personal data only with service providers that help us operate the website and business, under obligations to protect it: for example hosting and security providers, payment providers, delivery partners, email delivery and analytics providers. We may also disclose data where the law requires or to protect our rights, or in connection with a business transfer.

7. Transfers outside Hong Kong

Some of our providers operate servers outside Hong Kong. Where data is transferred, we take reasonable steps to ensure it receives a comparable level of protection.

8. Retention and security

We keep personal data only as long as needed for the purposes above or as the law requires, and delete or anonymise it afterwards. We use reasonable technical and organisational measures, including encryption in transit, to protect it, but no online service can be completely secure.

9. Children

The website is not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child has given us data, contact us and we will delete it.

10. Your rights and choices

You may request access to, or correction of, your personal data, ask us to delete your account and associated data, and unsubscribe from marketing at any time using the link in our emails. Contact us at [email protected]. We will respond within a reasonable time.

11. Changes to this policy

We may update this policy from time to time. The version published on this page applies from the date shown at the top.