Privacy notice

We collect the details needed to take an order, deliver it and answer your messages. We do not sell personal data, and we do not hand it to anyone for their own marketing.

Advertising and measurement tools are switched on only if you agree to them in the cookie notice. Saying no changes nothing about how the shop works for you.

We are established in Hong Kong and we sell to customers in the European Union, so this notice is written under the EU General Data Protection Regulation, which applies to us under its Article 3(2), and under the Hong Kong Personal Data (Privacy) Ordinance. Wherever you live, you can use the rights described further down.

The data controller — the company that decides how your personal data is used — is WHATECH MOBILE CO., LIMITED, Huanbin Lin, Room 505, 5th floor, Beverley Commercial Centre, 87-105 Chatham Road South, Tsim Sha Tsui, Kowloon, Hong Kong. It is the seller: it buys the goods it sells, takes your order, confirms it by phone, sends it out, collects payment on delivery and deals with returns and warranty claims.

The same company built this website and runs it, runs its advertising and its Google Ads campaigns, and holds the advertising accounts. Whatever your question is — an order, a parcel, a return or your data — WHATECH MOBILE CO., LIMITED is the one to ask, at care@livingsave.com.

Anything that concerns your personal data goes to a separate address, privacy@livingsave.com, read by the person responsible for it. The desk is open every day, 08:00–20:00 Central European Time; we answer data requests within 30 days.

It depends on what you do on the site:

• When you order: your name, the delivery address with country and postcode, phone number, email address, the products you chose and the way you pay.
• When you write to us: your name, your email address, the order number if you give one, and whatever you put in the message.
• Automatically: the IP address an order or a message came from, plus basic technical details about your browser, used among other things to recognise fake orders.
• With your agreement: cookie and browsing data used for advertising, as described in the cookie notice.

There is nothing here about card or bank details, because the shop never asks for them: you pay the driver in cash when the parcel is handed over. See payment methods.

We do not ask for special category data — health, beliefs, anything of that kind — and we would rather you did not write it to us.

Data protection law asks us to name a legal basis for each use. Here they are, one by one:

• Handling your order — confirming it by email or phone, passing delivery details to the carrier, dealing with returns and warranty claims. Basis: the contract between you and us.
• Answering your messages — replying to what you sent through the contact form or by email. Basis: steps taken at your request, and our legitimate interest in supporting customers.
• Keeping records — the invoices and accounts that tax law obliges us to keep. Basis: a legal obligation.
• Stopping abuse — checking orders, IP addresses and phone numbers for signs of fraud before goods leave the warehouse. Basis: our legitimate interest in protecting the business and its customers.
• Advertising and measurement — seeing which campaigns bring visitors, and showing our products again on other platforms. Basis: your consent, which you can withdraw whenever you like.
• Improving the shop — aggregate figures on which pages and products people use. Basis: our legitimate interest in running a shop that works.

We do not take decisions about you by purely automated means that would have a legal or similarly significant effect on you.

This is the whole list. Nobody outside it receives anything.

• Vercel Inc., United States — our hosting provider and the registrar of our domain: hosts this website and delivers its pages. It processes the technical request data every website receives, and holds the runtime logs in which an order or a message first lands. Processor, under a data processing agreement.
• Your data comes to us. Where a service provider works for us — for the telephone confirmation of your order, or for technical operations — it acts on our instructions, sees only what that task needs and may not use it for anything of its own.
• The courier or postal operator in your country — receives your name, delivery address, phone number and the amount to collect at the door, because a parcel cannot be delivered without them. The courier is chosen per country; we tell you which one on the confirmation call, or whenever you ask.
• Customs authorities, where a parcel crosses a border that requires a declaration — the details that country's rules oblige us to state.

Advertising and measurement. When, and only when, you have accepted advertising cookies, browsing and conversion data also reaches Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) for Google Ads. Decline, and the tag stays in the restricted state described in the cookie notice: no cookies and no advertising identifiers. What it does with the data is set out in the cookie notice and under how Google uses it. This site uses no Meta (Facebook, Instagram) pixel.

The advertising accounts those tools report to are in the name of WHATECH MOBILE CO., LIMITED, which pays for them and answers for them.

We do not sell personal data, we do not rent it out, and we do not pass it to anyone for their own marketing.

We are established in Hong Kong, and some of the organisations above are based in, or use servers in, other countries outside the European Economic Area — the United States among them.

The European Commission has not adopted an adequacy decision for Hong Kong. When you place an order, the details we need to take it, confirm it and deliver it reach us in Hong Kong because that transfer is necessary to perform the contract between you and us (Article 49(1)(b) GDPR).

For everything else we rely on the safeguards the law provides: the standard contractual clauses adopted by the European Commission in Decision 2021/914, signed with each provider that sits outside the European Economic Area — Vercel in the United States among them — together with the technical measures that go with them, encryption in transit and access limited to the people who need it. Ask at privacy@livingsave.com and we will send you a copy of the clauses that cover your data.

Real periods, counted from the event named, not "as long as necessary":

• A completed order, with the invoice and the delivery record: 7 years from the end of the financial year, the period the Hong Kong Inland Revenue Ordinance sets for business records.
• An order that was never confirmed — the phone rang out, or you decided against it on the call: 90 days, then it goes.
• Messages sent through the contact form or by email: 24 months after the last reply, so a warranty question can be traced back to what was said.
• Technical logs — IP address, browser, the pages a request touched: 12 months, kept for security and for tracing abuse.
• Your cookie answer: 12 months from the day you gave it, after which the notice asks again.
• Withdrawal and refund records: 7 years, with the accounting records they belong to.

At the end of a period the record is deleted, or stripped of everything that points back to a person and kept only as a number in a total.

This shop sells household goods — kitchen, garden, cleaning, small tools and small electronics — to adults. It is not aimed at anyone under 16, we do not market to that age group, and we do not knowingly collect their personal data.

If you are a parent or guardian and believe a child has sent us something, write to privacy@livingsave.com and we will delete it.

We advertise on Google, so this deserves its own section rather than a line in a list.

Nothing from Google runs until you answer the cookie notice. Google Consent Mode v2 is in place: before you agree, the Google tag is loaded in its restricted state — it writes no cookies, sets no advertising identifier and sends only a cookieless signal that a page was seen. If you accept advertising cookies, the consent signal is updated and the tag starts working normally.

With your agreement, Google Ireland Limited receives the fact that a visit followed one of our adverts, which pages of the shop that visit touched, and whether it ended in an order, together with the order value and a reference number that means nothing outside our own records. It uses this to report on our campaigns and, where you have allowed it, to show our products to you again elsewhere.

What Google does not get from the pages of this shop: your name, your address, your phone number, the contents of a message you sent us, or what you hand the driver. We do not upload customer lists to it.

Google is an independent controller for what it does with the data afterwards; its own account of that is in the Google privacy policy (policies.google.com/privacy), and you can limit the use made of it in Google's ad settings (adssettings.google.com).

At no cost, you can ask us to:

• Show you what we hold about you and give you a copy.
• Correct anything that is wrong or incomplete.
• Erase your data where we have no legal duty to keep it.
• Restrict what we do with it while a question is being settled.
• Hand it over in a machine-readable format, to you or to another company.
• Stop any use based on our legitimate interests, and any marketing use, without telling us why.
• Withdraw consent to advertising cookies, at any moment, as explained in the cookie notice.

Write to privacy@livingsave.com from the address you ordered with, or quote the order number, so that we can find the right records. An answer comes within 30 days, and it costs you nothing.

If a request is unusually broad we may ask you for one more detail to narrow it down — never as a way of putting it off.

Tell us first, at privacy@livingsave.com — most things are settled in one exchange of emails.

You do not have to stop there. You may complain to the data protection authority of the country where you live or work, or where you think the problem happened; every EU and EEA country has one, and the complaint is free. Where we are established, the authority is the Office of the Privacy Commissioner for Personal Data, Hong Kong (pcpd.org.hk).

For anything about personal data: privacy@livingsave.com. For an order, a parcel or a return: care@livingsave.com. By post, to Huanbin Lin at Room 505, 5th floor, Beverley Commercial Centre, 87-105 Chatham Road South, Tsim Sha Tsui, Kowloon, Hong Kong.

If we change the way data is used, this page and the date at the top change with it. A change that affects you materially — a new processor, a new purpose — is also announced on the site, and we do not apply it retrospectively to data already collected.