Privacy Policy

Privacy Policy

Who we are

Vistating is operated by Quadrant Personal Shopping Trade Co., Limited, incorporated in Hong Kong. Registered address: Room 5065, 5/F, Yau Lee Centre, 45 Hoi Yuen Road, Kwun Tong, Hong Kong. This policy explains how we collect, use, disclose, retain, and protect personal data when you use Vistating.

Information we collect

We may collect account and contact details, delivery and billing addresses, order and refund records, product interactions, device and browser information, cookie preferences, and communications with support. Payment card information is processed by our payment provider; Vistating does not receive or store full payment card numbers.

How we use information

We use personal data to create and secure accounts, process payments and orders, arrange local or cross-border fulfillment, provide tracking and support, prevent fraud, comply with legal obligations, improve the storefront, and communicate service or marketing information where permitted.

How information is shared

We share only the information reasonably required with payment processors, warehouses, fulfillment partners, carriers, cloud and security providers, customer-support tools, analytics providers, professional advisers, and authorities where required by law. These providers may process data only for the services they perform for Vistating or as otherwise permitted by law.

International processing

Because Vistating serves customers in multiple markets and works with regional warehouses and service providers, personal data may be processed outside your country. We use contractual, technical, and organizational safeguards appropriate to the transfer and the applicable law.

Cookies and similar technologies

Essential cookies support sign-in, cart, checkout, security, and language or region settings. Optional analytics or marketing cookies are used according to your cookie preferences. You can change available preferences through Cookie Settings.

Data retention

Order, payment, tax, refund, and fraud-prevention records are retained for 7 years, or longer where required by law. Other personal data is kept only as long as necessary for the stated purpose and is then deleted or anonymized.

Your choices and rights

Depending on your location, you may request access, correction, deletion, restriction, objection, or portability, and may withdraw consent where processing relies on consent. You can unsubscribe from marketing messages at any time. We may need to verify your identity before completing a request.

Security

We use access controls, encryption where appropriate, monitoring, and operational safeguards designed to protect personal data. No online service can guarantee absolute security, so never send passwords, full card details, or security codes through support messages.

Children

Vistating is not directed to children who cannot independently consent under the law of their location. A parent or guardian should contact us if a child has submitted personal data without authorization.

Contact

For privacy questions or requests, email [email protected]. For order support, email [email protected].