Legal

Privacy policy

We collect only what we need to answer your enquiry and supply your order. We don't sell your data, and this website uses no tracking cookies.

Last updated 19 October 2026

Who we are

This website is run by Michel d'Or Ltd. (Business Registration No. TBC), Unit 5 & 6, 5th Floor, Wah Shing Centre, 11-13 Shing Yip Street, Kwun Tong, Kowloon, Hong Kong. We are responsible for the personal data described here: the "data user" under Hong Kong's Personal Data (Privacy) Ordinance and the "controller" under the EU and UK General Data Protection Regulation (GDPR).

For any privacy question, write to micheldor@gmail.com.

What we collect, and why

When you email, call or message us, we receive what you choose to send: usually your name, company, email address, phone number, delivery address, the products and quantities you need, and the logo or artwork to put on them. We use it to:

• answer your questions and send quotes and proofs;
• produce, ship and invoice your order;
• keep the business and tax records the law requires.

You don't have to give us any of this, but without contact details we can't reply, and without a delivery address we can't ship your order.

Under the GDPR, we process this data to take the steps you ask for before a contract and to perform it, to meet legal obligations, and for our legitimate interest in running the business and answering customers.

Marketing. We will not use your details to send you marketing unless you have agreed to it, and you can withdraw that agreement at any time.

When you visit the website

The site has no account, contact form or analytics that track you. Our host, Cloudflare, briefly processes technical data (such as your IP address and browser type) to deliver the pages and protect the site from attacks. Fonts and images come from our own domain, so nothing is sent to Google or other third parties when you browse.

Cookies

We set no cookies of our own and use no advertising or tracking cookies, so we don't ask for cookie consent. Cloudflare may set a strictly necessary security cookie to tell people from automated attacks. It isn't used to track you.

Who else sees your data

We share your data only with the services we need to work:

• Google (Gmail), our email provider;
• Cloudflare, our website host;
• couriers and the workshops that make or print your order, when needed to deliver it;
• our accountants and authorities, where the law requires.

Some of these providers store data outside Hong Kong and the EU, including in the United States. Google and Cloudflare protect such transfers with the EU Standard Contractual Clauses and the EU-US Data Privacy Framework.

How long we keep it

We keep enquiries for TBC after our last contact, and order and invoice records for as long as tax and company law requires (in Hong Kong, at least 7 years). Then we delete them.

Your rights

You can ask us for a copy of the personal data we hold about you and ask us to correct it. If the GDPR applies to you, you can also ask us to delete it, restrict or object to its use, or send it to you in a portable format.

Email micheldor@gmail.com and we will reply within 40 days, as Hong Kong law requires, or within one month if you are in the EU or UK. If you aren't satisfied, you can complain to the Privacy Commissioner for Personal Data, Hong Kong or to the data protection authority in your country.

Security

The site is served only over encrypted HTTPS, and access to our email and accounts is limited to our staff.

Changes

If we change this policy, we will publish the new version here with a new date.