1. Data controller
- Reboot Global Corporation Limited, a Hong Kong company registered under number 80572683, Flat 5, 4/F, Won Hing Building, 74-78 Stanley Street, Central, Hong Kong.
- Contact for any data-related question: contact@kuycon.co
- We act as a data user under the Hong Kong Personal Data (Privacy) Ordinance (Cap. 486) and as a data controller under the GDPR and UK GDPR where those apply.
2. Data we collect
- Identity: surname, first name and, where relevant, company name.
- Contact details: email address, telephone, billing and delivery addresses.
- Orders: purchase history, invoices, correspondence with customer service.
- Browsing: IP address, session identifiers, pages viewed, analytics data.
- We collect no sensitive data and store no payment card details.
3. Purposes and legal bases
- Performance of the contract: order processing, delivery, invoicing, warranty and after-sales service.
- Legal obligations: retention of accounting and tax records.
- Legitimate interests: site security, fraud prevention, improvement of our services.
- Consent: marketing communications and non-essential cookies.
4. Direct marketing
- Your data is used for direct marketing only with your prior consent, in accordance with Part VIA of the Hong Kong Personal Data (Privacy) Ordinance (Cap. 486).
- Commercial electronic messages comply with the Hong Kong Unsolicited Electronic Messages Ordinance (Cap. 593).
- You may withdraw consent at any time, free of charge, using the unsubscribe link or by writing to contact@kuycon.co.
- We never sell or rent your data to third parties for marketing purposes.
5. Retention periods
- Order and invoicing data: 7 years, in line with the business-record retention obligations applicable in Hong Kong.
- Customer account: 3 years from the last activity, then deleted or anonymised.
- Browsing data and cookies: 13 months at most.
- Data is not kept longer than necessary for the purposes pursued.
6. Recipients
- Our internal teams responsible for orders, logistics and customer service.
- Our providers: host, carriers, payment providers, analytics and support tools.
- Those providers act only on our instructions and are bound by confidentiality and security obligations.
- Public authorities where the law requires it.
7. International transfers
- Our hosting servers are located in the European Union; certain administrative operations are carried out from Hong Kong.
- Hong Kong is not covered by a European Commission adequacy decision. Transfers from the European Economic Area or the United Kingdom are therefore governed by standard contractual clauses together with additional security measures.
- You may ask us for a copy of the safeguards in place.
8. Security
- Encryption of communications, controlled and restricted access, logging, and regular system updates.
- These measures give effect to the data security principle (Data Protection Principle 4) of the Personal Data (Privacy) Ordinance (Cap. 486).
- In the event of a breach presenting a risk to your rights, we will inform you and notify the competent authority within the applicable time limits.
9. Your rights
- Under the Personal Data (Privacy) Ordinance (Cap. 486): the right to access your data and the right to request its correction.
- If you are resident in the European Economic Area or the United Kingdom: rights of access, rectification, erasure, restriction, portability, objection and withdrawal of consent.
- How to exercise them: contact@kuycon.co, or by post to the registered office above.
- We reply within 40 days for requests under the Hong Kong Ordinance and within one month for requests under the GDPR.
- We may ask for proof of identity where there is doubt as to who is making the request.
10. Cookies
- Strictly necessary cookies keep the site working and allow orders to be processed.
- Analytics and personalisation cookies are only set after you consent.
- You can change your choice at any time through the consent banner or your browser settings.
11. Complaints
- You may complain to the Privacy Commissioner for Personal Data in Hong Kong.
- If you are resident in the European Economic Area or the United Kingdom, you may also complain to the data protection authority of your country of residence.
- We encourage you to contact us first so that we can resolve the matter quickly.
12. Changes to this policy
- This policy may be updated to reflect legal or technical developments.
- The applicable version is the one published on the site.
Last updated: August 2026