Privacy Policy

Last updated: April 20, 2026

This Privacy Policy explains how Iplayable Limited (« we », « us ») processes personal data collected through the garden-destock.com website (the « Site »). We comply with the Hong Kong Personal Data (Privacy) Ordinance (Cap. 486) and, where applicable, the EU General Data Protection Regulation (GDPR) and comparable frameworks such as the California Consumer Privacy Act (CCPA).

1. Data controller

Iplayable Limited — Hong Kong Reg. 2600640 / BRN 68413194
Room 06, 13A/F., South Tower, World Finance Centre, Harbour City, 17 Canton Road, TST, Kowloon, Hong Kong
Email: privacy@garden-destock.com

2. Data we collect

When placing an order: first name, last name, shipping and billing addresses, email, phone number
When subscribing to the newsletter: email address
When browsing the Site: navigation data (anonymized IP address, pages viewed, session duration) via analytics cookies
Payment data: no card information is stored by Iplayable Limited; payments are processed by our secure payment provider

3. Purposes of processing

Process and ship your orders
Manage customer support (returns, claims, after-sales)
Send commercial communications (only with your consent)
Improve the Site and our services (anonymized statistics)
Comply with legal and accounting obligations

4. Legal bases (EU/UK visitors)

Contract performance: order processing, shipping, customer service
Legal obligation: invoicing, tax records
Consent: newsletter, non-essential cookies
Legitimate interest: fraud prevention, service improvement

5. Retention periods

Order data: 7 years (accounting obligation)
Customer account: 3 years after last activity
Newsletter: until unsubscription
Cookies: up to 13 months

6. Recipients of data

Your data is transmitted only to recipients required to deliver the service:

Payment processor (for secure transactions)
Shipping carriers (for delivery)
Hosting provider (for technical storage)
Competent authorities, where legally required

We do not sell, rent, or trade your data to third parties for marketing purposes.

7. International transfers

Data may be transferred outside the customer’s country of residence (including to Hong Kong and the EU). Where a transfer is made to a jurisdiction that does not provide an adequate level of protection, we rely on appropriate safeguards such as Standard Contractual Clauses.

8. Your rights

Depending on your jurisdiction, you may have the following rights:

Right of access to your data
Right of rectification of inaccurate data
Right of erasure (« right to be forgotten »)
Right to restrict processing
Right to data portability
Right to object to processing
Right to withdraw consent at any time

To exercise these rights, email privacy@garden-destock.com. We will respond within one month.

EU/UK residents may lodge a complaint with their local supervisory authority. Hong Kong residents may contact the Office of the Privacy Commissioner for Personal Data (PCPD): www.pcpd.org.hk.

9. Cookies

Our Site uses two categories of cookies:

Essential cookies: required for cart, session, and checkout. No consent required.
Analytics cookies: measure audience anonymously. You may refuse them via the cookie banner shown on your first visit.

You can also configure your browser to block or delete cookies (privacy settings).

10. Security

We implement technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction: HTTPS/TLS encryption, firewalls, restricted access, strong passwords.

11. Minors

The Site is not intended for minors under 16. No order may be placed without the consent of a legal guardian.

12. Policy updates

This policy may be updated at any time. Any modification will be published on this page with a new revision date at the top.

13. Contact

For any question regarding your personal data: privacy@garden-destock.com