Privacy Policy
1. Introduction
This privacy policy explains how we collect, use, store, and protect users’ personal data through our e-commerce website and our mobile application available on Android and iOS.
We comply with the applicable laws and regulations, including the General Data Protection Regulation (GDPR - EU 2016/679) and the French Data Protection Act.
By using our services, you agree to this privacy policy.
2. Data Controller
The data controller is:
Fiveaces Motor Club
Contact email: contact@fiveaces.hk
3. Data Collected
We collect only the data necessary for the provision of our services. This data may include:
a) When creating an account or placing an order:
-
First and last name
-
Email address
-
Billing and shipping address
-
Phone number
-
Payment information (processed via secure providers)
b) When using the website or app:
-
IP address, device type, operating system, language
-
Browsing data (pages visited, products viewed)
-
Purchase history and preferences
c) Data specific to the mobile application:
-
Device identifiers (IDFA, Android ID – only for technical or marketing purposes, if authorized)
-
Geolocation data (with your consent), used solely to improve delivery or offer location-based services
4. Purpose of Data Processing
The collected data is used for the following purposes:
-
Creating and managing your user account
-
Processing and delivering your orders
-
Providing customer support and order tracking
-
Improving user experience (features, navigation)
-
Sending notifications (by email or push, with prior consent)
-
Preventing fraud and securing transactions
-
Complying with legal obligations (billing, accounting, etc.)
5. Data Recipients
Your data is processed by our internal teams and may be shared with:
-
Our technical service providers (hosting, payment, delivery)
-
Our marketing partners (only if you have given explicit consent)
-
Competent legal authorities, where required by law
No personal data is ever sold to third parties.
6. Legal Basis for Processing
The legal basis for data processing includes:
-
Performance of a contract (orders, deliveries, customer service)
-
Compliance with legal obligations (accounting, security)
-
Your consent (notifications, geolocation, marketing)
-
Our legitimate interest in improving our services
7. Data Retention
Your data is retained for:
-
The duration of your account + 3 years of inactivity
-
10 years for accounting documents (invoices)
-
A maximum of 13 months for cookies and analytics data
-
Until withdrawal of consent for marketing data
8. Your Rights
In accordance with the GDPR, you have the following rights:
-
Right to access your data
-
Right to rectify or delete your data
-
Right to restrict or object to processing
-
Right to data portability
-
Right to withdraw your consent at any time
You may exercise these rights by contacting us at:
contact@fiveaces.hk
If you believe your rights have not been respected, you may file a complaint with the CNIL (www.cnil.fr).
9. Data Security
We implement technical and organizational measures to ensure the security of your data, including:
-
SSL/TLS encryption for payments
-
Secure storage on GDPR-compliant servers
-
Restricted access to sensitive data
10. Data Collected by App Stores
Our Android and iOS applications may share technical data with Google or Apple (such as usage statistics, performance, crash reports). For more information, please refer to:
11. Data Transfers Outside the EU
If some of our service providers are located outside the European Union, we ensure that they offer an equivalent level of data protection (standard contractual clauses, adequacy decisions, etc.).
12. Cookies and Trackers
We use cookies and similar technologies for functional, analytical, and personalization purposes. You may configure your cookie preferences at any time via our cookie banner or through your device settings.
13. Changes to This Policy
This privacy policy may be updated at any time. You will be informed of any significant changes via notification or banner.