Privacy policy

Last updated: 8 October 2026

Maison Alexa is operated by Octopus Group Limited (Hong Kong Company No. 80767723), Unit 2019, Level 20, Infinitus Plaza, 199 Des Voeux Road Central, Central, Hong Kong ("we", "us"). We respect your privacy and handle personal data in line with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong ("PDPO"). This policy also serves as our Personal Information Collection Statement.

1. What we collect

  • Identity and contact details: name, phone number, email address, delivery and billing addresses, and WhatsApp details if you message us.
  • Order details: items, sizes, metals, engraving text, proofs you approve, and order history.
  • Payment information: processed securely by our payment providers. We don't store full card numbers.
  • Customs information (Mainland China orders): where China Customs requires it, the recipient's name and ID number for clearance.
  • Technical data: IP address, device and browser type, and the pages you visit, collected through cookies and similar tools.
  • Your preferences, such as language and marketing choices.

It's your choice whether to provide personal data, but without the details marked as required we can't process your order.

2. How we use it

We use your data to process, make, personalise and deliver your order; take payment and prevent fraud; arrange customs clearance; provide exchanges, repairs and aftercare; reply to your questions; run and improve our website; meet legal, tax and accounting obligations; and, only with your consent, send you marketing.

3. Direct marketing

We send news, launches and offers by email, SMS or WhatsApp only if you've given your consent (for example by ticking the box at checkout or sign-up). We may use your name and contact details for marketing of jewellery and related services. You can withdraw consent at any time, free of charge, using the unsubscribe link or by messaging us on WhatsApp. We don't sell or provide your personal data to others for their own marketing.

4. Who we share it with

We share data only as needed for the purposes above, with:

  • our e-commerce platform (Shopify) and IT, hosting and analytics providers;
  • payment providers (for example Shopify Payments, Alipay and WeChat Pay);
  • couriers (for example SF Express, DHL and FedEx) and customs authorities;
  • our workshops and craftsmen, for production details only (for example engraving text, without payment data);
  • professional advisers, and authorities where the law requires it.

These parties may only use your data to provide their services to us.

5. Transfers outside Hong Kong

Some of these providers store or process data outside Hong Kong (for example in Canada, the United States, Singapore or Mainland China). We take reasonable steps so that your data receives a level of protection similar to the PDPO. Clients in Mainland China: to fulfil your order from Hong Kong, we need to transfer your personal information to Hong Kong and to the parties above. By placing an order, you separately consent to this transfer.

6. How long we keep it

We keep personal data only as long as needed for the purposes above. Order and transaction records are kept for at least 7 years for accounting and tax purposes. Marketing data is kept until you unsubscribe.

7. Security

We use reasonable technical and organisational measures to protect your data against unauthorised access, loss or misuse. Our website uses encrypted (HTTPS) connections. No online transmission is completely secure, however.

8. Cookies

We use essential cookies to run the store (for example your cart and checkout), and, where you allow it, analytics and marketing cookies. You can manage cookies in your browser or through our cookie banner. Blocking essential cookies may stop the store from working properly.

9. Your rights

Under the PDPO, you can ask whether we hold your personal data, request a copy, and ask us to correct it. To do so, send a written request with your name and order number by WhatsApp (+852 5938 3934) or by post to the address above, marked "Data Protection Officer". We'll respond within 40 days. We may charge a reasonable fee for a data access request, as the PDPO allows. You can also withdraw marketing consent at any time.

10. Children

Our website isn't directed at children under 18, and we don't knowingly collect their data without a parent's or guardian's consent.

11. Changes

We may update this policy from time to time. The latest version is always on this page.

12. Contact

Data Protection Officer, Maison Alexa c/o Pan Ocean Advisory Group Ltd, Unit 2019, Level 20, Infinitus Plaza, 199 Des Voeux Road Central, Central, Hong Kong · WhatsApp +852 5938 3934.

If the English and Chinese versions are inconsistent, the English version prevails.