Privacy Policy

Last updated: 30 September 2026

Your privacy, in plain words. FBAHELP COMPANY LIMITED is responsible for data collected through the Tiny Fox Hole store. We use your details to answer you, give you secure access to your orders and, when sales are open, prepare and deliver your toys. You can ask what information we hold or request a correction at tinyfoxhole.opt@gmail.com. The full details are below.

1. Who is responsible for your data

The Tiny Fox Hole online store at tinyfoxhole.com is operated by FBAHELP COMPANY LIMITED (“Tiny Fox Hole”, “we”, “us”), Unit 18, 8/F, Peter Leung Industrial Building, 103 Wai Yip Street, Kwun Tong, KL, Hong Kong. FBAHELP COMPANY LIMITED is the seller and the organisation responsible for the personal data described in this policy. Under Hong Kong’s Personal Data (Privacy) Ordinance, it is the data user; where another applicable privacy law uses the term, it is the controller.

For privacy questions or requests, email tinyfoxhole.opt@gmail.com.

2. When this policy applies

This policy covers visits to our website, messages sent through the contact form or by email, requests for product notifications, access to the customer account, and, when checkout is available, orders, payments, production updates, delivery, returns and refunds. It does not replace the separate privacy notices of payment providers or websites reached through external links.

3. Information we collect

Depending on what you do on the site, we collect:

• Contact and order details: your name, email address, telephone number, billing and delivery addresses, products, quantities, prices, delivery preferences and any order notes you choose to provide.
• Account and order-access details: your email address, records needed to verify access to your orders, and information about your sign-in session. Our customer account uses a temporary link sent to your email; you do not need to send us a password to ask about an order.
• Messages and requests: the information you put in our contact form, emails to us, customer-service requests, order-correction requests and optional product-notification requests.
• Payment and delivery records: when those services are available, payment status and transaction references returned by the provider used at checkout, and tracking or delivery updates provided by fulfilment and delivery partners. We do not ask you to put full card numbers or security codes in our contact form, order notes or email.
• Technical information: IP address, browser and device information, timestamps, essential cookies and records needed to operate and protect the site, forms and account access.

Please avoid including identity documents, health information or other sensitive details in free-text fields unless we specifically request information necessary to handle your case through an appropriate channel.

4. Where the information comes from

Most information comes from you when you browse, contact us, request access to your orders or place an order. The website also collects some technical information automatically. When relevant, we receive payment confirmation from the provider shown at checkout and delivery updates from our fulfilment or delivery partners. We do not treat returning to the website after payment as proof that an order was paid; the payment must be confirmed through the payment system.

Fields marked as required in a form are needed to respond to that request or, when checkout is open, to accept and fulfil the order. Without them we may be unable to do so. Optional notes and marketing or product notifications are voluntary.

5. Why we use information

We use personal data to operate the website and customer account; answer enquiries; accept, prepare, deliver and support orders; confirm payments; handle corrections, returns and refunds; prevent misuse and protect the site; keep business and accounting records; and meet legal obligations or resolve disputes.

We use an email address to send a requested one-time sign-in link and necessary account or order messages. Those messages are separate from marketing. We send promotional or product-notification messages only where the applicable requirements for your choice or consent have been met. You can stop them by using the unsubscribe method in the message or contacting us.

Where EU or UK data-protection law applies, the corresponding grounds may be steps requested before a contract, performance of a contract, legal obligations, our legitimate interests in operating and securing the store and responding to enquiries, or consent where required. You can withdraw consent for future processing based on it; this does not affect processing already carried out lawfully.

6. Customer account and email links

You can request a sign-in link on the customer-account page using the email address associated with your orders. We send a temporary link to that address; it expires after 20 minutes. After your email is verified, the account shows orders that the website can link to you. A successful sign-in may be remembered on your device for up to 14 days. Anyone who can access your email or signed-in device may be able to view your order information, so please protect them and contact us if you suspect unauthorised access.

7. Payments

The payment methods offered may change and are identified at checkout before you pay. The selected payment provider handles the payment information required for that method under its own privacy terms. We receive the payment status and transaction details needed to confirm, administer, refund and reconcile the order. The identity and privacy notice of each available payment provider will be shown before online checkout opens.

8. Who receives information

We share information only as needed for the purposes described above with:

• authorised Tiny Fox Hole and FBAHELP staff who handle orders and customer support;
• our website host, website and database administrators, security and backup providers;
• the email-delivery service used to send site messages and the email service that receives our correspondence;
• the internal production, order and packing systems used to fulfil orders;
• the payment provider shown at checkout, once payments are enabled;
• warehouses, fulfilment partners, postal services and couriers handling the delivery;
• professional advisers and authorities where the law or a legitimate dispute requires it.

WordPress and WooCommerce are software used by our store; they are not, by themselves, a statement that every visitor’s data is sent to their developers. We do not sell customer personal data or pass it to another business for that business’s own direct marketing without the permission required by law.

9. Processing in other countries

FBAHELP COMPANY LIMITED is based in Hong Kong. Our website infrastructure, email services, staff and fulfilment partners may process information in other countries. This may include your country, Hong Kong, the country where the website is hosted and countries used by our service providers or delivery partners. We limit access and sharing to what is needed for each service. If a specific international-transfer safeguard is required by the law that applies to your data, we will provide information about the relevant arrangement on request.

10. How long we keep information

We do not apply one fixed retention period to every type of information. We keep personal data while it is needed to fulfil and support an order, answer an enquiry, provide access to an account, protect the site, resolve a dispute or meet a legal or accounting obligation. The relevant criteria include the type of record, whether an order or request is still open, the last relevant activity, any dispute or refund, and applicable record-keeping requirements.

When information is no longer needed for these purposes, we delete or anonymise it unless the law requires us to keep it. A limited record of a completed sale, payment or refund may therefore remain after delivery instructions, optional notes or routine correspondence are no longer needed. You may request deletion of your personal data; we will explain if a legal obligation or another applicable exception requires us to retain part of it.

11. Security

We use reasonable measures to protect personal data, including HTTPS connections, access controls and limited access for people who need information to operate the store. The customer-account sign-in link is temporary and is sent to the email address associated with an order. No website or email system can guarantee absolute security. If you think someone has accessed your information without permission, contact us promptly.

12. Cookies and external resources

The website uses essential cookies and similar technologies for sessions, account access, shopping-cart functions when enabled, and site security. These functions may not work if essential cookies are blocked. The current site also loads fonts from Google Fonts; requesting those files causes your browser to connect to Google’s service, which can receive technical information such as your IP address. If we add optional analytics or advertising technologies, we will update this policy and provide the choices required by applicable law before using them.

13. Marketing choices

Order confirmations, sign-in links, delivery updates and replies to your enquiries are service messages. Promotional emails and optional product notifications are handled separately. You may opt out of marketing at any time, free of charge, using the method in the message or by emailing tinyfoxhole.opt@gmail.com. We may keep the minimum information needed to honour an opt-out.

14. Your privacy rights

Depending on the law that applies to you, you may request access to and correction of your information and may have rights to deletion, restriction, objection or portability. You can object to direct marketing and withdraw any consent used for future processing. We may need to verify your identity before responding. We may retain information where an accounting, legal, fraud-prevention or dispute obligation applies. To make a request, email tinyfoxhole.opt@gmail.com. Where applicable, you may also complain to the relevant data-protection authority, including Hong Kong’s Office of the Privacy Commissioner for Personal Data.

15. Children’s privacy

Our products may be intended for children, but our website, contact form and checkout are for adults. Children should not submit personal data or place orders without a parent or guardian. Contact us if you believe a child has sent us personal data inappropriately.

16. Changes and contact

We will update this policy when the store, its payment methods, providers or data practices change. The date at the top of the page will show the current version. A significant change will receive any additional notice required by applicable law.

FBAHELP COMPANY LIMITED
Unit 18, 8/F, Peter Leung Industrial Building
103 Wai Yip Street, Kwun Tong, KL, Hong Kong
tinyfoxhole.opt@gmail.com