Privacy Policy and Personal Information Collection Statement

This Privacy Policy (“Privacy Policy”) sets out how Supermoon Limited and its subsidiaries (collectively, “the Owners”, “we”, “our” or “us”) collect, use, store, hold, process, deal with and handle Personal Data (as defined below), under the Personal Data (Privacy) Ordinance (Cap.486) (“PDPO”).

For the purpose of this Policy and Statement, “Personal Data” means any personally identifying information or sensitive data from which it is practicable for the identity of an individual to be ascertained, including but not limited to name, age, gender, photo image, address, contact details, Hong Kong identity card or passport/entry permit numbers, bank account data, education background, academic, employment history, work related qualification or license, assessment and performance records, and co-curricular data.

Privacy Policy

We are committed to the protection of Personal Data which you provided to us. Our policies and procedures are designed to ensure that your Personal Data is protected. We are committed to comply with the PDPO when collecting, using, storing, holding, processing, dealing with and handling Personal Data in the Hong Kong Special Administrative Region of the People’s Republic of China (“Hong Kong”).

To ensure that you can make informed decisions and feel confident about providing your Personal Data to us, we outline in this Privacy Policy our policy and practices and the rights and options you have concerning the collection, process and use of your Personal Data.

This Privacy Policy contains the following important information regarding your interaction with us:

1. The Personal Data We Collect

1.1 The types of Personal Data we collect from you will depend on the specific type of services, business matters and products as requested by, or provided to, you. The types of Personal Data may include (without limitation) the following:

(a) your personal information (e.g. your name, gender, date of birth, Hong Kong identity card, passport or other personally identifiable number);

(b) your contact information (e.g. telephone numbers, mailing addresses, email addresses and fax numbers);

(c) your business information (e.g. company name, business title and associated contact information); and

(d) your customer information (e.g. customer and user records for the purposes of providing services, facilities and products; opening, maintaining and terminating accounts; responding to and following up on customer enquiries; bank account data and credit card or other payment methods data for processing payments and billing; and other records for the purposes of engaging and managing our professional relationships with contractors and their staff who provide services to us).

1.2 Certain Personal Data (e.g. relating to your personal information, contact information, business information and/or customer information) are required for specific services, business matters and/or products if you fail to supply such Personal Data as requested from each specific service, business matter and/or products, we may not be able to provide or deliver you the services or products. By providing your Personal Data to us, you acknowledge that such provision is fair and reasonable in the circumstances.

2. Purposes for which your Personal Data are Collected and Used

2.1 The purposes for which your Personal Data are collected and used may include (without limitation) one or more of the following purposes:

(a) for the supply of any services, products, facilities and/or other subjects (together, the “Services”) which we or any of our subsidiaries, holding companies, joint ventures and associated companies (together, “Supermoon Group”) may offer to you, or you may require from us, from time to time;

(b) for payment purposes for any of the Services of Supermoon Group, including verification of credit card details with third parties;

(c) for use of our online Services available at any of the websites of Supermoon Group and/or through other telecommunication channels;

(d) with your consent, for marketing or promoting any of the Services of Supermoon Group (e.g. sending you updates on our latest offers and promotions in relation to any of our Services from time to time);

(e) for identification and verification purposes in connection with any of the Services that may be supplied to you;

(f) for communicating with you by email, mail, fax, phone or other means, including but not limited to contacting you regarding your enquiries or complaints;

(g) to provide you with a better personalised experience in respect of our website, mobile applications, products and/or services;

(h) to verify your identity before processing any request from you;

(i) to process billing, payments and sales/business orders (including verifying your payment details);

(j) for making disclosures when required by law, regulation, or court order of any jurisdiction and/or as requested by any government, regulatory or law enforcement authority or administrative organisation, which may be within or outside Hong Kong;

(k) for compliance of any applicable legal or regulatory obligations within or outside Hong Kong; and

(a) for handling and following up with your comments, suggestions, enquiries, requests and/or complaints to/against any Supermoon Group companies.

2.2 We will not knowingly or intentionally use, share, disclose, transfer or sell your Personal Data in ways which are unrelated to the abovementioned purposes (or purposes as specified in a personal information collection statement (or a document in a similar nature) when we collect your Personal Data) without your prior consent.

3. Disclosure and Transfer of Personal Data

3.1 The Personal Data will be kept confidential and may be held or stored locally, regionally or globally, whether in Hong Kong or out of Hong Kong.

3.2 Subject to any applicable laws and to facilitate the purposes mentioned under Section 2 “2. Purposes for which your Personal Data are Collected and Used” hereinabove, we may transfer, disclose, release, grant access to or share your Personal Data with third parties located within or outside Hong Kong, and your Personal Data may be transferred within or outside Hong Kong. These third parties may include the following:

(a) any Supermoon Group companies;

(b) any appropriate persons in the Supermoon Group on a “need to know” basis;

(c) any agent, contractor or third-party service provider who provides administrative, marketing, research, distribution, data processing, telemarketing, telecommunications, computer, payment or other services to or support the operation of Supermoon Group’s business (including its/their direct marketing activities);

(d) other business associates such as loyalty programme operators and other companies involved in providing supplier service, customer service or fulfilling customer requests etc.;

(e) credit reference agencies;

(f) any person, government, regulatory or law enforcement authority or administrative organisation;

(g) any person under a duty of confidentiality to any Supermoon Group companies (including auditors, accountants, legal advisers or other advisers);

(h) any agents, service providers, merchants (including but not limited to service providers outside Hong Kong, mailing houses, telecommunication companies, call centres, data processing companies and cloud service providers) engaged by us for any of the purposes stated above; and

(i) other authorised service providers of any Supermoon Group companies to provide services for the abovementioned purposes for which the Personal Data are to be used.

3.3 The Personal Data you provide to us may also be sourced from or transferred to other jurisdictions outside Hong Kong for the purposes mentioned above. Please note that where the Personal Data is disclosed or transferred or access by parties located outside Hong Kong, your Personal Data may not be afforded the same level of protection as it is under the laws of Hong Kong.

4. Data Retention and Accuracy of Personal Data

4.1 Subject to any applicable legal, statutory, regulatory or accounting requirements, the Personal Data you provided to us will be kept by us in the appropriate form only for as long as is necessary to fulfil the purposes mentioned above. Personal Data which is no longer required will be destroyed, unless their continued retention is required to satisfy any applicable legal, statutory, regulatory or accounting requirements or to protect the interest of Supermoon Group.

4.2 In order to maintain accurate Personal Data for the purposes hereinabove, we may from time to time update the Personal Data provided by you voluntarily or upon request of Supermoon Limited. Where there are reasonable grounds for believing that the existing Personal Data became outdated and/or inaccurate for the purposes hereinabove, the existing Personal Data is not to be used for the said purposes unless and until those grounds ceased to be applicable to the existing Personal Data.

5. Your Rights and Contacting Us

5.1 According to the PDPO, you have the right to ascertain whether we hold your Personal Data, to access, obtain, correct and/or change any of your Personal Data held by us by contacting us at the address set out in paragraph 5.2 below. You are entitled to access or correct your Personal Data held by us. You may also: –

(a) request deletion or erasure of your Personal Data;

(b) object to the sharing of your Personal Data; and/or

(c) object to the profiling of your Personal Data.

5.2 Additional rights may be available to you depending on the location of your residence or of our operations. If you would like to exercise any of your rights or obtain a copy of any of your Personal Data, or if you believe that any of your Personal Data which we collect and maintain is inaccurate or would like to request for information regarding our policies and practices and the kinds of Personal Data held by us, please contact us at the following address:

Supermoon Limited
11/F, Yan Hing Centre,
9-13 Wong Chuk Yeung Street, Fo Tan,
N.T., Hong Kong

5.3 We will endeavour to use appropriate technical means to ensure that you can access, update and correct your Personal Data. In accessing, updating, correcting and/or deleting your Personal Data, we may ask you to authenticate your identity in order to protect the safety of your Personal Data.

5.4 To the extent permitted by relevant laws and regulations, we reserve the right to refuse unreasonable requests (for example, requests which infringe the privacy of others or requests for any improper or unlawful purposes).

6. Third-party Data Sharing

We will not sell or rent your Personal Data to third parties for marketing purposes without your prior consent. We may share Personal Data with third-party agents or contractors to assist in services such as marketing, customer service, or payment processing as set out in Section 2 and Section 3 hereinabove. We also reserve the right to disclose Personal Data to legal or government or regulatory authorities in response to lawful requests.

7. Security of Personal Data

7.1 We may use cookies and similar technologies to enhance your browsing experience. These cookies may include third-party cookies (e.g., for advertising purposes) or tools like Google Analytics to analyse website traffic and usage. You may choose to disable cookies through your browser settings, but this may affect your ability to access certain functionalities on our website. More information on managing cookies is available through your browser’s support section.

7.2 We use SSL (Secure Sockets Layer) encryption to protect the transmission of your Personal Data between your device and our systems. This ensures that sensitive information is securely encrypted and protected from unauthorized access during transmission. Look for the padlock icon in your browser’s address bar and “https://” in the URL to confirm SSL is active.

7.3 We respect the Personal Data privacy of all individuals to be in compliance with the requirements of the PDPO so that the privacy of your Personal Data is protected in accordance with the standard required by the applicable laws.

8. Note

This Privacy Policy may be amended from time to time. You may access and obtain a copy of this Privacy Policy, as amended from time to time, at www.supermoon.hk so that you are always informed of the way we collect, process and use Personal Data.

Updated Date: 18 DECEMEBER 2025