1. Who we are
This policy is issued by Neksoft Limited, trading as MorCommerce, a company incorporated in Hong Kong (Business Registration No. 81332214), with its registered office at Unit 1603, 16/F, The L. Plaza, 367–375 Queen's Road Central, Sheung Wan, Hong Kong ("MorCommerce", "we", "us"). MorCommerce is the data user responsible for the personal data described here, as defined under the Personal Data (Privacy) Ordinance ("PDPO").
2. Data we collect
- Customers: name, email address, billing and shipping address, purchase and subscription history, and communications with us.
- Payment data: card details are entered into and processed by our PCI DSS–compliant payment processors. We receive limited information such as card brand, last four digits and expiry date. We don't store full card numbers.
- Partners: contact details, business and identity verification documents, beneficial ownership information, and payout details.
- Website enquiries: the details you submit through our contact form.
- Technical data: IP address, device and browser information, used for fraud prevention and security at checkout.
3. How we use it
- To process purchases, deliver access, manage subscriptions and send receipts.
- To calculate and remit taxes and keep records required by law.
- To provide support, handle refunds, cancellations and disputes.
- To prevent fraud and payment abuse and keep our services secure.
- To verify and pay partners, and to meet our legal, regulatory and payment-network obligations.
- To send service messages. We send marketing only where you have agreed, and you can opt out at any time.
4. Who we share it with
- Payment processors and fraud-prevention providers, to process and protect payments.
- The partner who supplied your product, only as far as needed to fulfil your order and provide support (for example, your name, email and shipping address).
- Shipping carriers, to deliver your order.
- Service providers who host our systems or send emails on our behalf, under confidentiality obligations.
- Tax authorities, regulators, law enforcement or courts, where required by law.
- A buyer or successor in the event of a merger or sale of our business.
We don't sell personal data.
5. Transfers outside Hong Kong
Our processors and service providers may store or process data outside Hong Kong. Where we transfer data, we take reasonable steps to make sure it receives a level of protection comparable to the PDPO.
6. Retention
We keep transaction and tax records for at least seven years, as required by Hong Kong record-keeping obligations. We keep other personal data only as long as needed for the purposes above, then delete or anonymise it.
7. Your rights
Under the PDPO you can request access to, and correction of, the personal data we hold about you, and you can opt out of direct marketing. Depending on where you live, you may have additional rights, such as deletion or objection. Send requests to [email protected]. We may charge a fee permitted by the PDPO for data access requests, and we'll respond within 40 days.
8. Security
We use access controls, encryption in transit and reputable infrastructure providers to protect personal data. No system is completely secure, but we work to protect your data and will notify you where required if a breach affects it.
9. Cookies
This website doesn't use advertising or analytics cookies, and doesn't load third-party trackers. Checkout pages may use strictly necessary cookies set by our payment processors for security and fraud prevention.
10. Contact and changes
For privacy questions, contact our data protection contact at [email protected]. We may update this policy, and the date at the top shows when it last changed.