Privacy policy

Pinotera Limited — Privacy Policy
Last Updated: May 19, 2026
Pinotera Limited ("the Company", "the Site", "we", "us", or "our") operates this online store and website, including all related information, content, features, tools, products, and private client services, to provide you with a curated shopping and tasting experience (collectively, the "Services").
Our digital storefront infrastructure is powered by Shopify, which provides the e-commerce framework enabling us to deliver these Services to you. This Privacy Policy describes how we collect, use, and disclose your personal data when you visit, utilize, or make a purchase or other transaction through the Services, or otherwise communicate with us.
Please read this Privacy Policy carefully. By using, accessing, or transacting through any of our Services, you explicitly acknowledge and agree to the collection, processing, use, and disclosure of your personal data as detailed herein. If you do not agree to these terms, you must immediately cease accessing our platform.
1. Categories of Personal Data We Collect and Process
When we refer to "personal data" or "personal information," we mean any information that identifies, relates to, or can reasonably be linked to a specific living individual. It does not include anonymous or de-identified aggregation. Depending on how you interact with our private client portals, storefront, or tasting events, we collect and process the following categories of data:

• Contact Details: Full name, physical billing address, shipping address, and mobile/WhatsApp phone number.
  
• Financial and Transaction Information: Forms of payment, transaction parameters, purchase history, items viewed, basket additions, return records, and payment confirmations. (Note: Pinotera Limited does not store raw credit card numbers on its proprietary servers; all payments are tokens handled securely via encrypted third-party gateways).
  
• Account Credentials: Registered usernames, encrypted passwords, security verification settings, and custom account preferences.
  
• Client Communications: Text logs, images, and context details included in any support inquiries or booking requests submitted through our mobile channels or forms.
  
• Technical Usage Data: Device identifiers, internet protocol (IP) addresses, browser variants, operating systems, network connection metadata, and logs indicating how and when you navigate our Site.
  

2. Sources of Personal Data
We gather personal data through three principal channels:

1. Directly From You: When you register a private client profile, place an allocation order, sign up for a masterclass, or communicate directly with our management team.
   
2. Automated Tracking Technologies: Collected seamlessly via cookies, web beacons, and pixels as you navigate our e-commerce interface.
   
3. Authorized Third-Party Providers: Operational data synchronized from our hosting platform (Shopify), integrated payment processors, and downstream logistics/courier partners.
   

3. Purpose of Processing Personal Data
Pinotera Limited processes your data under strict statutory grounds to execute contracts, protect business integrity, and maintain high-tier private client relationships:

• Fulfillment of Contractual Duties: Processing allocations, verifying commercial transactions, managing warehouse logistics, arranging courier delivery, and administering masterclass event bookings.
  
• Security & Fraud Mitigation: Authenticating client accounts, preserving secure payment gateways, and detecting or taking immediate legal action against fraudulent, malicious, or unauthorized activity.
  
• Targeted Marketing & Engagement: With your explicit opt-in consent (where required by local law), we utilize your contact coordinates to send exclusive allocations, updates on rare arrivals, and private tasting invitations via WhatsApp or text. You maintain an absolute right to opt out of marketing materials at any time.
  
• Statutory and Legal Compliance: Adhering to the prevailing corporate, tax, and licensing ordinances of the Hong Kong Special Administrative Region (HKSAR), or responding to valid legal processing demands from law enforcement bodies.
  

4. Disclosure and Sharing of Personal Data
We do not sell, rent, or trade your personal data to third parties for independent commercial exploitation. We disclose data to restricted categories of entities strictly to deliver our operations:

• Service Infrastructures: Principally with Shopify (our primary host), as well as encrypted payment processors, technical data analysts, and third-party fulfillment and courier networks.
  
• Corporate Affiliates: Sharing strictly within our internal corporate group or partners where necessary to administer regular business operations.
  
• Legal Enforcement: When mandatory to comply with prevailing laws, respond to subpoenas, or legally protect and defend the rights, property, and safety of Pinotera Limited, our clients, or the public.
  

5. Relationship and Data Handling with Shopify
As our storefront is hosted by Shopify, your data is securely transmitted to and stored within Shopify’s centralized data centers. Shopify utilizes certain enhanced analytical tools incorporating consumer data across different merchants to optimize security, combat fraud, and refine services.
In these circumstances, Shopify acts as an independent data controller for those specific optimizations. To fully understand how Shopify manages your data, please review the Shopify Consumer Privacy Policy (https://privacy.shopify.com/en).
6. Age Restrictive Protocols (Underage Data)
Pinotera Limited deals exclusively in premium wines, champagnes, and craft spirits. Our website, products, and services are strictly prohibited to individuals under the legal drinking age (18 years of age in Hong Kong). We do not knowingly collect, store, or process personal data from individuals under the age of 18. If it is discovered that an underage individual has bypassed verification and submitted personal data, it will be immediately deleted from our databases.
7. Data Security and Retention Standards

• Security Safeguards: We employ industry-standard encryption protocols (including SSL technology) to secure transaction paths. However, no digital storage mechanism or transmission channel across the internet can be guaranteed as completely impenetrable.
  
• Retention Limits: Your data is kept only for the duration necessary to satisfy the commercial purposes detailed in this policy, manage your ongoing client profile, satisfy Hong Kong tax audit requirements, or resolve outstanding civil disputes.
  

8. Your Legal Rights Under Hong Kong Law
Under the Hong Kong Personal Data (Privacy) Ordinance (PDPO), you possess definitive statutory rights regarding the processing of your personal information. These include:

• The Right to Access: The right to verify whether we hold your personal data and request a readable copy.
  
• The Right to Correction: The right to mandate the immediate rectification of inaccurate, outdated, or incomplete data.
  
• The Right to Opt-Out: The right to withdraw consent for direct marketing communications or request account closure.
  

To execute any of these data privileges, you must contact our management team through our official mobile channel. We will verify your identity prior to releasing any information to protect against unauthorized data breach.
9. Amendments to this Policy
We reserve the absolute right to alter, modify, or update this Privacy Policy at any time without prior individual notice. Any revised versions will be posted directly to this interface with an updated "Last Updated" date. Your continued interaction with our platform represents explicit consent to the current policy text.
Contact Management
For questions regarding our data practices, to file a privacy complaint, or to exercise your statutory rights under the PDPO, please contact us exclusively via our mobile business line or at our physical headquarters:

• Mobile / WhatsApp: +852 6950 3700