AmberFinders is a shop run by OTISSHOP LIMITED, a company incorporated in the Hong Kong Special Administrative Region. This page sets out what personal information the shop handles, why, and what you can ask us to do with it.
1. What We Collect
We collect only what an order or a message needs.
At checkout: your name, email address, phone number, shipping address, and billing address if it differs. Card details are entered at checkout and passed straight on for authorisation; see Section 4.
When you write to us: the name, email address, order number and message you type into the contact or cancellation form, or send by email.
Automatically: when your browser loads a page, our hosting provider receives the technical details any website receives — IP address, browser type, the page requested and the time. We do not run analytics or advertising tags.
We do not offer customer accounts, so we hold no passwords.
2. Why We Use It
We use your details to take payment, ship your order, send the order confirmation and tracking emails, answer your messages, and handle returns, refunds and cancellations.
We also use order and technical data to spot and block fraudulent orders, and to keep the records that tax and accounting law requires.
We do not send marketing email unless you ask for it.
3. Who Sees It
AmberFinders does not sell personal information, and does not share it for cross-context advertising.
A small number of service providers handle it for us, each only for the job we give them: our hosting and content delivery provider (Cloudflare, which also stores our product images); our order-management and payment providers; PayPal, if you choose to pay with PayPal; our email delivery provider, which sends order emails; and the postal carriers that deliver your parcel.
We may also disclose information where the law requires it, to answer a valid legal request, or to protect customers or the shop against fraud. If the business is ever sold or merged, customer records would pass to the new owner under the same commitments.
4. Card Data
Card numbers are handled by our payment processor. AmberFinders does not store your full card number or security code; the last four digits may appear on your order record so you can recognise the payment.
5. How We Protect It
Every page is served over an encrypted (HTTPS) connection. Access to order records is limited to the people who fulfil orders and answer support. No system is perfectly secure; if we learn of a breach that affects you, we will tell you.
6. How Long We Keep It
Order records: seven years, the period Hong Kong law requires business records to be kept. Support messages: up to three years after the conversation ends. Server logs: kept by our hosting provider for a short period under its own policy. Card numbers: never kept by us.
7. Where It Is Processed
OTISSHOP LIMITED is based in Hong Kong SAR, and our service providers operate in the United States and other countries. Your information may therefore be transferred to, stored in and processed in Hong Kong SAR, the United States or other jurisdictions. We use providers that apply appropriate safeguards, and we handle personal data in line with Hong Kong's Personal Data (Privacy) Ordinance and the privacy laws that apply to our customers.
8. Your Rights
You can ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it. We may keep what the law requires us to keep, such as order records for tax purposes.
California residents have the rights described on our Do Not Sell or Share page. Residents of the EU or UK may also object to processing and ask for their data in a portable form.
Email support@amberfinders.com with your request. We may ask you to confirm your identity first, and we reply within 30 days. Using these rights will never change how we treat you.
9. Cookies and Do Not Track
We set one essential cookie for checkout security, and keep your cart in your browser's local storage. The details are in our Cookie Policy. We honour a browser Do Not Track or Global Privacy Control signal by leaving all optional categories off.
10. Links to Other Sites
If you follow a link to another site — a carrier's tracking page, or PayPal — that site's own privacy policy applies, not this one.
11. Children
The shop is not meant for children. You must be 18 or older to place an order, and we do not knowingly collect information from anyone under 13. If you think a child has sent us personal information, email support@amberfinders.com and we will delete it.
12. Updates to This Policy
When this policy changes, the date at the top of the page changes with it. If a change affects how we use information we already hold, we will say so on the site before it takes effect.
13. Contact
Questions or requests about your personal information go to:
- OTISSHOP LIMITED (trading as AmberFinders)
- Unit 2904-05, 29/F, Universal Trade Centre, 3 Arbuthnot Road, Central, Hong Kong SAR
- Email: support@amberfinders.com
- Phone: +1 844 704 0409
- Hours: Monday – Friday, 9:00 AM – 6:00 PM EST
We answer within one business day. If you are not satisfied with our answer, you may complain to the data protection authority where you live, or to the Office of the Privacy Commissioner for Personal Data in Hong Kong.