私隱政策

最後更新：2026年8月5日

重要提示

本政策只涵蓋 PL A-VENTURE Shopify 網店、實體產品訂單及相關售後安排。Equipment Rental、Gear Storage、Lessons、Camps、活動及旅遊相關服務所收集的資料，受其各自的私隱通知或個人資料收集聲明規管。

01政策目的及資料使用者

本私隱政策說明 PL A-VENTURE LIMITED（「PL A-VENTURE」、「我們」、「本公司」）如何在營運 PL A-VENTURE Shopify 網店（「本網店」）時收集、使用、保存、披露及保障個人資料。

就本政策涵蓋的個人資料而言，PL A-VENTURE LIMITED 一般為決定收集目的及使用方式的資料使用者。我們依照香港《個人資料（私隱）條例》（第486章）（「私隱條例」）及其他適用的資料保障法律處理個人資料。

02適用範圍及不包括的服務

本政策適用於瀏覽及使用本網店、建立或使用顧客帳戶、實體產品訂單、付款、送貨或取貨、客戶服務，以及與 Product Registration、Warranty、Care & Repair、Trade-in及 PL Credit 有關的資料處理。

本政策不適用於 Equipment Rental、Gear Storage、Lessons、Camps、活動、旅遊安排或其他另有私隱通知的服務。即使相關服務的按金或費用透過 Shopify 處理，該服務另行收集的護照或身份證明、身體尺寸、酒店或住宿、健康、受傷、緊急聯絡人及服務安排資料，仍受相關服務的獨立私隱通知或個人資料收集聲明規管。

03我們收集的個人資料

視乎你與本網店的互動，我們可能收集：

• 身份及聯絡資料：姓名、電郵地址、電話號碼、國家／地區、帳單及送貨地址；
• 帳戶資料：登入識別資料、帳戶偏好、購物及 PL Credit 紀錄。密碼一般由 Shopify 系統處理，我們不會以可讀形式取得你的密碼；
• 訂單及交易資料：所購產品、數量、金額、貨幣、折扣、付款狀態、退款、換貨、發票或收據、送貨、追蹤及取貨紀錄；
• 付款相關資料：付款方式、交易識別碼、付款狀態及付款卡的有限資料。完整付款卡資料通常由 Shopify 或相關付款服務供應商直接處理，我們一般不會取得完整卡號或安全碼；
• 產品及售後資料：產品型號、購買來源及日期、訂單號碼、收據、相片、產品狀況、故障或損壞說明、維修、保養、Trade-in及相關通訊；
• 查詢及內容：電郵、訊息、評論、問卷回覆、投訴，以及你主動提供的相片、影片或其他內容；
• 市場推廣偏好：是否同意接收 PL News、偏好及退訂紀錄；
• 裝置及網店使用資料：IP地址、瀏覽器及裝置類型、作業系統、Cookie或類似技術識別碼、瀏覽頁面、點擊、來源網址、購物車及結帳活動，以及在相關工具啟用時的分析或廣告互動資料；
• 防詐騙及保安資料：登入、付款或訂單風險訊號、可疑活動及為保障本網店與顧客而合理需要的紀錄。

請勿透過一般網店表格或訊息提交與交易無關的身份證、護照、醫療、健康或其他敏感資料。

04資料來源

我們主要直接從你收集資料，例如你瀏覽本網店、建立帳戶、下單、付款、登記產品、申請售後服務、加入 PL Credit、訂閱通訊或聯絡我們時。我們亦可能從 Shopify、付款服務供應商、物流或取貨服務、授權零售商（例如核實產品購買資料）、防詐騙工具，以及你授權的第三方取得履行相關用途所需的資料。

05收集及使用目的

我們可能為以下目的處理個人資料：

• 建立及管理顧客帳戶、核實身份及維持帳戶安全；
• 接收、審核、處理及履行訂單，包括付款、送貨、取貨、通知、退貨、換貨及退款；
• 提供 Product Registration、Warranty、Care & Repair、Trade-in、PL Credit及其他相關售後安排；
• 回覆查詢、處理投訴、提供支援及保存溝通紀錄；
• 偵測、調查及防止欺詐、濫用、付款爭議、保安事故及違法活動；
• 維持、分析、測試及改善本網店、產品、顧客服務及使用體驗；
• 在取得所需同意後發送產品、活動、優惠及 PL News，並管理你的推廣選擇；
• 履行會計、審計、稅務、法規、法律申索、執法要求及其他法律責任；
• 執行我們的條款及政策，以及保障本公司、顧客及其他人士的權利、財產及安全。

如我們擬將個人資料用於與原收集目的不相容的新目的，會按適用法律提供通知及在需要時先取得你的同意。

06是否必須提供資料

除非個別表格另有註明，標示為必填的資料是處理相關要求所需。你可選擇不提供資料，但我們可能因此無法建立帳戶、接受或履行訂單、安排付款或送貨、核實產品登記、提供保養或維修、處理 Trade-in、管理 PL Credit，或回覆你的要求。用於一般市場推廣的資料及同意屬自願提供，不會成為購買產品的條件。

07直接促銷及 PL News

我們只會在已向你清楚說明擬使用的個人資料種類及推廣產品／服務類別，並取得適用法律所需的同意或表示不反對後，使用你的姓名、電郵、電話或推廣偏好發送 PL A-VENTURE 產品、會員、PL Credit、活動或相關優惠資訊。

市場推廣選項會與購物或其他必要條款分開，並不會預先勾選。你可隨時使用訊息內的退訂方式，或電郵至 info@pl-aventure.com 免費撤回同意。撤回只影響其後的直接促銷，不影響我們發送訂單、帳戶、保安、PL Credit到期或售後服務所需的非推廣通知。

08Cookie、分析及類似技術

本網店及其服務供應商可能使用 Cookie、pixels、local storage及類似技術，以維持購物車與登入、記錄偏好、保障交易、量度網站表現、分析使用情況，以及在已啟用並獲得所需同意時提供個人化或廣告功能。

必要技術用於本網店核心運作。分析、個人化及廣告技術則按實際啟用的工具、你的所在地及同意選擇運作。你可透過本網店的 Cookie Preferences／Cookie偏好設定（如顯示）管理非必要技術，亦可使用瀏覽器設定限制 Cookie；但停用必要 Cookie 可能影響購物車、登入或結帳。

09Shopify 的資料處理

本網店由 Shopify 提供技術平台。Shopify 會按其與我們的合約及自身適用的私隱條款處理顧客及訪客資料，以提供網店、結帳、付款、保安、分析及已啟用的相關服務。Shopify 是一家在加拿大設總部並全球營運的服務供應商，資料可能在香港以外處理。

如本網店啟用 Shopify Network Intelligence 或其他 Enhanced Services，Shopify 可能按適用設定及你的同意選擇，結合不同商戶的資料提供防詐騙、個人化、表現分析或廣告相關功能；其他商戶不會因此直接取得我們的顧客資料。你可參閱 Shopify Privacy Portal 及 Shopify Consumer Privacy Policy，了解 Shopify 的處理方式及可用選擇。

10資料披露及接收者

我們不會以個人資料換取金錢出售顧客名單。為上述目的及在合理需要的範圍內，我們可能向以下類別的接收者披露資料：

• Shopify及提供網站託管、帳戶、結帳、支付、分析、客戶服務或保安功能的供應商；
• 銀行、付款服務供應商、支付網絡及防詐騙服務；
• 速遞、郵政、物流、倉儲及取貨服務供應商；
• 提供電郵、訊息、雲端儲存、維修、技術支援、審計、會計、保險或法律服務的供應商及專業顧問；
• 為核實購買、處理保養、維修或 Trade-in而有合理需要的授權零售商或合作方；
• 在企業重組、合併、融資或資產轉讓時的實際或潛在交易方及顧問，但須受適當的保密及資料保障措施約束；
• 法律、法院命令或主管機關要求的政府、監管、執法、司法或稅務機關；
• 在你指示、授權或另行同意下的其他人士。

服務供應商只應在提供服務所需範圍內處理資料，並須受適當的合約、保密或保安安排約束；但某些第三方亦可能按其自身法律責任獨立處理資料。

11跨境處理

由於 Shopify、付款、物流、雲端、電郵、分析及其他服務供應商可能在香港以外營運，你的個人資料可能被傳送至、儲存於或由其他司法管轄區的人員處理。當我們安排跨境處理時，會採取合理及切實可行的步驟，例如選用具適當保障措施的供應商、限制存取及使用合約保障，以維持與適用法律相符的資料保障水平。海外法律及政府存取制度可能與香港不同。

12資料保存

我們只會在達成收集目的、維持合理業務紀錄、處理爭議，以及履行法律、會計、稅務或合約責任所需的期間保存個人資料。保存期會因資料種類及用途而異：

• 訂單、付款、發票、退款及相關會計或稅務紀錄，一般會按香港適用的紀錄保存要求保存最少七年；
• 帳戶及 PL Credit 資料會在帳戶或 Credit 有效期間及其後處理查詢、爭議、防詐騙與法律責任所合理需要的期間保存；
• 產品登記、保養、維修及 Trade-in資料會在提供相關保障或服務，以及處理其後合理申索所需的期間保存；
• 客戶服務及投訴紀錄會按個案性質、申索期限及法律需要保存；
• 直接促銷資料會保存至你撤回同意或我們停止相關推廣；為確保不再發送，我們可能保留最少量的退訂紀錄；
• Cookie及分析資料按相關工具、Cookie設定及供應商的適用保存期處理。

保存期屆滿後，我們會在合理可行情況下刪除、匿名化或安全隔離資料，但備份系統中的資料可能在正常輪替週期內才完全清除。

13資料保安

我們採取合理及切實可行的行政、技術及實體措施，按資料的敏感程度及風險防止未經授權或意外存取、處理、刪除、遺失或使用，包括限制員工及供應商存取、帳戶權限管理、適當的傳輸或平台保安及事故處理程序。

然而，任何互聯網傳輸或儲存系統均不能保證絕對安全。你應使用獨特而安全的密碼、保護登入資料，並在懷疑帳戶或交易被未經授權使用時立即通知我們。

14查閱、更正及其他要求

你可根據私隱條例要求確認我們是否持有你的個人資料、查閱該等資料及更正不準確資料。有效的查閱資料要求一般會在收到後40日內處理；如有法定理由未能在限期內完成，我們會按法律要求通知你。我們可要求足夠資料核實身份及定位相關紀錄。

在法律准許下，我們可就查閱資料要求收取不超乎適度、並與處理該要求直接相關及必要成本相稱的費用；如有費用，會預先通知。更正要求不另收費。

你亦可要求刪除資料、限制或反對某些處理、撤回同意，或在適用法律賦予相關權利時要求資料副本或可攜資料。該等權利並非在所有地區或情況下均屬絕對，並可能受身份核實、保存紀錄、法律申索、防詐騙及其他法定例外限制。Shopify以自身身份處理的資料或選擇，亦可透過 Shopify Privacy Portal處理。

15兒童及未成年人

本網店並非以兒童為對象，我們不會明知而為直接促銷目的向未達所在地適用年齡的兒童收集個人資料。未成年人如需購物，應由父母或合法監護人同意並代為完成交易。如你相信兒童在未獲適當同意下向我們提供個人資料，請聯絡我們。

16第三方網站及政策更新

本網店可能連結至第三方網站或服務，其資料處理受該第三方的私隱安排規管，我們不控制其獨立做法。請在提供資料前閱讀相關政策。

我們可因業務、技術或法律要求不時更新本政策，並在本頁公布新版本及「最後更新」日期。如變更對你的權利或資料使用有重大影響，我們會按適用法律以合理方式另行通知。除法律另有要求外，更新只會向前適用。

17語言及聯絡我們

本政策提供繁體中文及英文版本。如兩個版本有任何歧義、不一致或衝突，概以英文版本為準；適用法律另有規定除外。

如對本政策、我們的資料處理，或查閱、更正、直接促銷及其他私隱要求有任何查詢，請聯絡：

PL A-VENTURE Privacy Policy

Last updated: 5 August 2026

1. Purpose and Data User

This Privacy Policy explains how PL A-VENTURE LIMITED (“PL A-VENTURE”, “we”, “us” or “our”) collects, uses, retains, discloses and protects personal data in operating the PL A-VENTURE Shopify online store (the “Online Store”).

For personal data covered by this Policy, PL A-VENTURE LIMITED is generally the data user that determines the purposes and manner of collection. We process personal data in accordance with Hong Kong’s Personal Data (Privacy) Ordinance (Cap. 486) (“PDPO”) and other applicable data-protection laws.

2. Scope and Excluded Services

This Policy applies to access to and use of the Online Store, customer accounts, physical-product orders, payments, delivery or collection, customer service, and data processing connected with Product Registration, Warranty, Care & Repair, Trade-in and PL Credit.

It does not apply to Equipment Rental, Gear Storage, Lessons, Camps, events, travel arrangements or another service with a separate privacy notice. Even if a deposit or fee for such a service is processed through Shopify, passport or identity documents, body measurements, hotel or accommodation details, health or injury information, emergency contacts and service-arrangement data collected separately for that service are governed by the relevant service privacy notice or personal information collection statement.

3. Personal Data We Collect

Depending on how you interact with the Online Store, we may collect:

• Identity and contact data: name, email, telephone number, country or region, billing address and delivery address;
• Account data: login identifiers, account preferences, purchase history and PL Credit records. Passwords are generally handled by Shopify and are not available to us in readable form;
• Order and transaction data: products, quantities, amounts, currency, discounts, payment status, refunds, exchanges, invoices or receipts, delivery, tracking and collection records;
• Payment-related data: payment method, transaction identifiers, payment status and limited card details. Full card data is usually handled directly by Shopify or the relevant payment provider, and we generally do not receive the full card number or security code;
• Product and after-sales data: product model, purchase source and date, order number, receipt, photographs, product condition, fault or damage descriptions, repair, warranty and Trade-in information and related correspondence;
• Enquiries and content: emails, messages, reviews, survey responses, complaints and photographs, videos or other content you voluntarily provide;
• Marketing preferences: PL News consent, preferences and opt-out records;
• Device and store-usage data: IP address, browser and device type, operating system, cookies or similar identifiers, pages viewed, clicks, referring URL, cart and checkout activity and, where relevant tools are enabled, analytics or advertising interaction data; and
• Fraud-prevention and security data: login, payment or order-risk signals, suspicious activity and records reasonably required to protect the Online Store and customers.

Please do not submit identity cards, passports, medical or health information or other sensitive data unrelated to a transaction through general Online Store forms or messages.

4. Sources of Data

We collect most data directly from you when you browse the Online Store, create an account, order, pay, register a product, request after-sales support, join PL Credit, subscribe or contact us. We may also receive data required for relevant purposes from Shopify, payment providers, delivery or collection services, authorised retailers (for example, to verify a product purchase), fraud-prevention tools and third parties you authorise.

5. Purposes of Collection and Use

We may process personal data to:

• create and manage customer accounts, verify identity and maintain account security;
• receive, review, process and fulfil orders, including payment, delivery, collection, notifications, returns, exchanges and refunds;
• provide Product Registration, Warranty, Care & Repair, Trade-in, PL Credit and related after-sales arrangements;
• answer enquiries, resolve complaints, provide support and retain communication records;
• detect, investigate and prevent fraud, misuse, payment disputes, security incidents and unlawful activity;
• maintain, analyse, test and improve the Online Store, products, customer service and user experience;
• send product, event, offer and PL News information after obtaining any required consent and manage your marketing choices;
• meet accounting, audit, tax, regulatory, legal-claim, law-enforcement and other legal obligations; and
• enforce our terms and policies and protect the rights, property and safety of the company, customers and others.

If we intend to use personal data for a new purpose incompatible with the original collection purpose, we will provide notice and obtain consent first where required by applicable law.

6. Whether Data Is Mandatory

Unless a form states otherwise, information marked as required is necessary to process the relevant request. You may choose not to provide it, but we may then be unable to create an account, accept or fulfil an order, arrange payment or delivery, verify product registration, provide warranty or repair service, process Trade-in, administer PL Credit or answer your request. General marketing data and consent are voluntary and are not a condition of purchasing products.

7. Direct Marketing and PL News

We will use your name, email, telephone number or marketing preferences to send information about PL A-VENTURE products, memberships, PL Credit, events or related offers only after clearly informing you of the intended data and marketing categories and obtaining the consent or indication of no objection required by applicable law.

Marketing choices are separate from purchase or other necessary terms and are not pre-selected. You may withdraw consent at any time, free of charge, through the unsubscribe method in a message or by emailing info@pl-aventure.com. Withdrawal affects future direct marketing only and does not prevent necessary non-marketing notices concerning orders, accounts, security, PL Credit expiry or after-sales services.

8. Cookies, Analytics and Similar Technologies

The Online Store and its service providers may use cookies, pixels, local storage and similar technologies to maintain carts and logins, remember preferences, secure transactions, measure site performance, analyse use and, where enabled and supported by any required consent, provide personalisation or advertising functions.

Essential technologies support the core operation of the Online Store. Analytics, personalisation and advertising technologies operate according to the tools actually enabled, your location and consent choices. You may manage non-essential technologies through Cookie Preferences where displayed, or restrict cookies through your browser. Disabling essential cookies may affect carts, login or checkout.

9. Shopify’s Processing

The Online Store is hosted on Shopify. Shopify processes customer and visitor data under its agreements with us and its applicable privacy terms to provide the store, checkout, payment, security, analytics and enabled related services. Shopify is headquartered in Canada and operates globally, so data may be processed outside Hong Kong.

If Shopify Network Intelligence or other Enhanced Services are enabled for the Online Store, Shopify may, subject to applicable settings and your consent choices, combine data across merchants to provide fraud prevention, personalisation, performance or advertising-related functions. This does not allow other merchants direct access to our customer data. See the Shopify Privacy Portal and Shopify Consumer Privacy Policy for information about Shopify’s processing and available choices.

10. Disclosure and Recipients

We do not sell customer lists for money. For the purposes above and to the extent reasonably necessary, we may disclose data to:

• Shopify and providers of website hosting, account, checkout, payment, analytics, customer-service or security functions;
• banks, payment providers, payment networks and fraud-prevention services;
• couriers, postal, logistics, warehousing and collection providers;
• providers and professional advisers supporting email, messaging, cloud storage, repair, technology, audit, accounting, insurance or legal services;
• authorised retailers or partners where reasonably required to verify a purchase or process Warranty, Repair or Trade-in;
• actual or prospective parties and advisers in a corporate reorganisation, merger, financing or asset transfer, subject to appropriate confidentiality and data safeguards;
• government, regulatory, law-enforcement, judicial or tax authorities where required by law, court order or competent authority; and
• others at your direction, with your authorisation or separate consent.

Service providers should process data only as required to provide their services and be subject to appropriate contractual, confidentiality or security arrangements. Some third parties may also process data independently under their own legal responsibilities.

11. Cross-border Processing

Because Shopify and payment, logistics, cloud, email, analytics and other providers may operate outside Hong Kong, personal data may be transferred to, stored in or accessed from other jurisdictions. When arranging cross-border processing, we take reasonable and practicable steps—such as selecting providers with appropriate safeguards, restricting access and using contractual protections—to maintain a level of protection consistent with applicable law. Overseas laws and government-access regimes may differ from those in Hong Kong.

12. Retention

We retain personal data only as long as necessary for the collection purposes, reasonable business records, dispute handling and legal, accounting, tax or contractual obligations. Periods vary by data and purpose:

• order, payment, invoice, refund and related accounting or tax records are generally retained for at least seven years in accordance with applicable Hong Kong record-keeping requirements;
• account and PL Credit data is retained while the account or Credit is active and afterwards for a period reasonably required for enquiries, disputes, fraud prevention and legal obligations;
• Product Registration, Warranty, Repair and Trade-in data is retained as required to provide the relevant coverage or service and deal with subsequent reasonable claims;
• customer-service and complaint records are retained according to the nature of the matter, limitation periods and legal needs;
• direct-marketing data is retained until you withdraw consent or we stop the relevant marketing. We may keep a minimal suppression record to ensure that messages are not resumed; and
• cookie and analytics data is handled according to the relevant tool, cookie settings and provider retention periods.

After a retention period expires, we delete, anonymise or securely isolate data where reasonably practicable, although data in backup systems may remain until the normal rotation cycle is completed.

13. Data Security

We take reasonable and practicable administrative, technical and physical measures appropriate to the sensitivity and risk of the data to protect it from unauthorised or accidental access, processing, erasure, loss or use. Measures include restricting staff and provider access, account-permission controls, appropriate transmission or platform security and incident-handling procedures.

No internet transmission or storage system can be guaranteed absolutely secure. You should use a strong, unique password, protect your credentials and notify us immediately if you suspect unauthorised account or transaction use.

14. Access, Correction and Other Requests

Under the PDPO, you may request confirmation of whether we hold your personal data, access to that data and correction of inaccurate data. A valid data-access request will generally be handled within 40 days after receipt. If a statutory reason prevents completion within that period, we will notify you as required by law. We may require sufficient information to verify identity and locate the relevant records.

Where permitted by law, we may charge a fee for a data-access request that is not excessive and is proportionate to costs directly related and necessary to process the request. We will advise you in advance of any fee. No fee is charged for a correction request.

You may also ask us to delete data, restrict or object to certain processing, withdraw consent, or provide a copy or portable data where applicable law grants that right. These rights are not absolute in every place or situation and may be limited by identity verification, record-retention, legal claims, fraud prevention and other statutory exceptions. Data or choices handled by Shopify in its own capacity may also be managed through the Shopify Privacy Portal.

15. Children and Minors

The Online Store is not directed to children, and we do not knowingly collect children’s personal data for direct marketing. A minor who needs to purchase should do so with the consent and assistance of a parent or legal guardian. If you believe a child has provided personal data without appropriate consent, please contact us.

16. Third-party Sites and Policy Updates

The Online Store may link to third-party sites or services. Their processing is governed by their own privacy arrangements, which we do not control. Please review the relevant policy before providing data.

We may update this Policy from time to time for business, technical or legal reasons and will publish the new version and “Last updated” date on this page. If a change materially affects your rights or the use of your data, we will provide additional reasonable notice as required by applicable law. Unless the law requires otherwise, updates apply prospectively.

17. Language and Contact

This Policy is available in Traditional Chinese and English. If there is any ambiguity, inconsistency or conflict, the English version prevails, unless applicable law requires otherwise.

For questions about this Policy or our data processing, or to make an access, correction, direct-marketing or other privacy request, contact:

PL A-VENTURE LIMITED · REAL MOMENTS, REAL ADVENTURE.