Privacy Policy

1. Controller and scope

The controller is TIMES GLOBAL SHOPPING CO., LIMITED, registered at UNIT 9, 1/F, THE CLOUD, 111 TUNG CHAU STREET, TAI KOK TSUI, HONG KONG. This Policy covers:

• Times Cross-border Mall websites, applications and later versions
• Support forms and customer-service channels
• Accounts, orders, messages and after-sales services we operate
• Third-party services we choose in order to provide those functions

2. Personal information we collect

We collect only what is needed to provide the service. The exact items depend on the functions you use. You may withhold non-essential information, although some features may then be unavailable.

• Account information: mobile number, email, password or verification code, nickname, avatar, account ID
• Identity and contact information: name, phone and, where required for after-sales, risk control or law, verification documents
• Orders and transactions: goods, quantity, price, order number, payment status, invoice data, refunds and after-sales records
• Delivery information: recipient name, address, postal code and phone number
• Support records: forms, emails, call or chat logs and resolution notes
• Device and logs: model, OS, app version, language, IP address, crash and performance logs, timestamps
• Location: only after you grant permission, to help with addresses or service coverage
• Camera, photos and microphone: only when you upload images, scan a code or use voice support
• Push tokens: for order, delivery or service notices; you can disable them in system settings

3. How we collect information

Information may be provided by you, generated while you use the service, or returned by payment and logistics partners in the minimum scope needed to complete a transaction.

• Registration, sign-in, profile forms, orders, after-sales and contact forms
• Device, log or location data after the relevant permission is granted
• Order-status information from payment or logistics providers
• Account identifiers from a third-party sign-in that you choose to use

4. How we use personal information

We process information only for the purposes below or purposes directly related to them. Where law requires it, we will obtain a fresh consent before a new purpose.

• Create, verify and administer accounts and keep sign-in secure
• Process orders, payment status, delivery, refunds, exchanges and after-sales
• Answer enquiries and record customer-support outcomes
• Send notices about accounts, orders, security or service changes
• Identity checks, fraud prevention, risk control, troubleshooting and security audits
• Improve performance and quality using de-identified or aggregated data
• Meet legal, regulatory, accounting or dispute-resolution duties

5. Application permissions

Applications request system permissions only when a function needs them. Except where essential to basic security, you may refuse or withdraw a permission in Settings. Refusal affects only that function and does not block browsing public product information.

• Camera: scan codes or capture after-sales evidence
• Photo library: avatars, receipts or support images
• Location: help fill a delivery address or check coverage
• Notifications: order, delivery and service messages
• Network: load products, submit orders and sync the account

6. Third parties and SDKs

The app may integrate SDKs for payments, maps, sharing, push, crash reporting or the application framework. Actual use depends on the app version, OS and features you use. Recipients are required to protect information to a standard not lower than this Policy and to use it only for the relevant function. They process information under their own terms. Categories may include:

• Application framework and crash logs for stability
• Payment services (we do not store full card numbers)
• Maps or location after you grant permission
• In-app customer service or messaging
• System push services
• WeChat or similar sharing or sign-in, only when you use that function

7. Sharing, transfer and disclosure

We do not sell personal information. We share the minimum necessary information only to provide the service, with your express consent, to comply with law, or to protect the lawful interests of users, the Company or the public.

• Payment, logistics, hosting, SMS, customer-service and risk-control providers
• Regulators, law-enforcement or courts where legally required
• A successor in a merger, acquisition or asset transfer, required to follow this Policy

8. Cookies and similar technologies

The website may use cookies, local storage or similar tools to keep a session, remember language, protect security and measure visits. You may restrict or clear cookies in your browser, although some pages may stop working. We do not collect unrelated sensitive information merely through cookies.

9. Retention, location and security

We keep personal information only for as long as needed for the purposes in this Policy and applicable law. Account data is kept while the account exists. Order and transaction data is kept for finance, tax or dispute periods. Logs are kept for a shorter period.

The Company is incorporated in Hong Kong. Information may be processed on secure servers in Hong Kong and in regions where the service is delivered. Where a cross-border transfer is involved, we use contractual and technical safeguards and give any notice required by law.

We use encryption in transit, access control, least privilege, logging and staff confidentiality. No internet transmission is perfectly secure. If an incident occurs we will take remedial action and notify affected users as required.

10. Your rights

Subject to applicable law, you may request access, correction, a copy or deletion of personal information, restrict or object to certain processing, withdraw consent, or complain. We may verify your identity and generally reply within 30 days. Withdrawal does not affect processing already completed on a lawful basis.

• View or edit some account details under Me in the app
• Turn off push or withdraw permissions in system settings
• Email contact@tsgaitech.com to exercise a right
• Submit a request through the contact form on this site

11. Children

The services are intended for adults. Minors should use them only with a parent or guardian’s consent and guidance. We do not knowingly collect children’s personal information. If you believe a minor provided information without appropriate consent, contact us and we will delete or otherwise handle it as required by law.

12. Recommendations and notices

We may show products that may interest you based on browsing or order history. This is not automated decision-making with legal or similarly significant effects. You may turn off personalised recommendations in the app if that control is available, or ask us to disable it. Service and security notices may remain necessary.

13. Third-party sites and platforms

Our site or related services may link to third-party platforms. Once you leave our service, that third party’s privacy practices apply. Please read their policy before providing information.

14. Updates

We may update this Policy for product, legal or security reasons. The current version is posted on this page with its date. For material changes we will provide reasonable notice in the app, on the website or by email. Continued use means you are aware of the updated Policy. If you disagree, stop using the services and you may request account deletion.