fankitzy Customer Information
Privacy Policy
How fankitzy handles personal data across browsing, checkout, delivery, support, and account services.
Introduction
This Privacy Policy explains how fankitzy, operated by Yi Yi Sports Limited, collects, uses, stores, shares, and protects personal data when individuals browse the website, create an account, place an order, request customer service, or otherwise interact with us. It is intended to provide transparent information in line with generally applicable privacy principles and, where relevant, the General Data Protection Regulation (GDPR). This policy should be read together with any specific privacy notice presented at the point where information is collected.
Data Controller
For the processing activities described in this policy, the data controller is Yi Yi Sports Limited, operating the website under the name fankitzy. The business address is Unit 11, 13/F, Block C, Wong King Industrial Building, 192–198 Choi Hung Road, San Po Kong, Hong Kong, Postal Code 999077. Questions about personal data or requests to exercise privacy rights may be submitted through the Contact Page; we may request information necessary to verify the identity and authority of the requester.
Data We Collect
We may collect access and device data, such as IP address, browser type, device identifiers, operating system, language, referring page, pages viewed, timestamps, and security logs. We also collect order data, including products, sizes, quantities, prices, transaction references, billing information, and order status; contact data, including name, delivery address, billing address, and customer service correspondence; payment-related data provided to payment processors; shipping data provided to carriers; account data; and cookie or similar-technology data. We seek to collect only information reasonably necessary for the relevant purpose.
Purposes of Data Processing
Personal data is processed to operate and secure the website, present products, manage accounts, verify and fulfill orders, authorize payments, arrange delivery, provide tracking, process returns and refunds, respond to inquiries, prevent fraud and abuse, maintain business records, improve site performance, measure service quality, and comply with legal obligations. Where permitted, data may also be used to communicate service updates or marketing information, subject to consent and opt-out rights. We do not use personal data for materially incompatible purposes without providing appropriate notice or obtaining consent where required.
Legal Bases Under the GDPR
Where the GDPR applies, processing may rely on performance of a contract or steps requested before entering a contract, for example to accept payment and deliver goods. Processing may also rely on compliance with legal obligations, such as accounting, tax, consumer-protection, sanctions, or recordkeeping requirements; legitimate interests, such as website security, fraud prevention, service improvement, and the defense of legal claims; and consent for activities that require it, such as certain non-essential cookies or promotional messages. When legitimate interests are used, we consider the impact on individuals and apply safeguards intended to avoid disproportionate effects.
Cookies and Similar Technologies
Cookies, local storage, pixels, and comparable technologies may be used to remember selections, maintain sessions, secure checkout, detect misuse, measure website performance, and understand how visitors interact with pages. Essential technologies may operate because they are necessary to provide the website or a requested service. Non-essential analytics or advertising technologies, if used, are activated in accordance with applicable consent requirements, and available preference controls should be used to accept, reject, or revise choices.
Payment and Shipping Service Providers
Payment details are submitted to payment processors or acquiring institutions that authorize transactions, conduct fraud checks, and administer refunds. Shipping information is shared with carriers, logistics providers, customs intermediaries, or fulfillment partners to prepare labels, transport parcels, provide tracking, and resolve delivery issues. These providers process information under their own legal obligations and privacy notices as well as under contractual requirements applicable to services performed for us.
Disclosure to Third Parties
We may disclose personal data to service providers supporting hosting, security, analytics, customer service, order management, payment, logistics, professional advice, and technical operations. Information may also be disclosed when reasonably necessary to comply with law, court orders, lawful authority requests, protect rights or safety, investigate fraud, enforce terms, or complete a corporate transaction subject to appropriate safeguards. We do not sell personal data in the ordinary meaning of exchanging it for money.
International Data Transfers
Because online commerce may involve providers located in different jurisdictions, personal data may be processed outside the country in which it was collected. Where required, we use recognized transfer mechanisms such as adequacy decisions, standard contractual clauses, contractual security commitments, and supplementary measures. No transfer mechanism eliminates every risk, but we seek to select reputable providers and apply protections appropriate to the nature of the data and service.
Data Retention
We retain personal data only for as long as reasonably necessary for the purposes described, including order fulfillment, warranty and return administration, customer service, fraud prevention, legal claims, accounting, tax, and regulatory compliance. Retention periods differ by record type and may be extended when a dispute, investigation, chargeback, or legal hold is active. When data is no longer required, it is deleted, anonymized, or securely isolated in accordance with operational and legal requirements.
Data Security
We use reasonable technical and organizational measures designed to protect personal data against unauthorized access, alteration, disclosure, loss, or destruction. Measures may include access controls, encrypted transmission, provider due diligence, logging, backups, vulnerability management, and staff procedures. No internet system can be guaranteed completely secure, so customers should also use strong passwords, protect devices, and report suspected account misuse promptly.
Rights of Data Subjects
Subject to applicable law and exceptions, individuals may request access to personal data, rectification of inaccurate data, erasure, restriction of processing, and data portability in a structured and commonly used format. Individuals may also object to processing based on legitimate interests and may have the right to complain to a competent data protection authority. We may ask for identity verification, clarify the scope of a request, or retain information where a legal exemption or obligation applies.
Withdrawal of Consent and Right to Object
Where processing relies on consent, consent may be withdrawn at any time for future processing without affecting the lawfulness of processing that occurred before withdrawal. Where processing is based on legitimate interests, an individual may object on grounds relating to their particular situation, and direct marketing may be objected to at any time. Requests may be sent through the Contact Page, and available unsubscribe or cookie-preference controls should be used where provided.
Children’s Privacy
The website is intended for customers capable of entering into online purchase arrangements under applicable law and is not directed to young children. We do not knowingly seek to collect personal data directly from a child who cannot lawfully provide it. A parent or guardian who believes that a child has submitted personal data without appropriate permission should contact us so the information can be reviewed and, where appropriate, deleted.
Contact
Privacy questions, concerns, and rights requests may be submitted through the Contact Page. Please describe the request clearly and provide enough information to identify the relevant account, order, or communication, but do not send passwords, complete card numbers, or one-time security codes. Written correspondence may also be directed to Yi Yi Sports Limited at Unit 11, 13/F, Block C, Wong King Industrial Building, 192–198 Choi Hung Road, San Po Kong, Hong Kong, Postal Code 999077.
Changes to This Privacy Policy
We may revise this Privacy Policy to reflect changes in services, technology, legal requirements, or processing practices. The revised version will be posted on the website with an updated effective date where the site design permits. Material changes may also be highlighted through an appropriate notice, but visitors are encouraged to review this page periodically.