Skip to content

Cash on delivery 10 EU countries EUR 4.99 flat

MarketSaves

Privacy Policy

What MarketSaves collects when you order or write to us, why, who receives it, how long it is kept and how to use your rights under the General Data Protection Regulation (GDPR).

Last updated 
On this page · 12 sections

1Who is responsible for your data

The controller of the personal data collected on marketsaves.com is the seller, WHATECH MOBILE CO., LIMITED. It decides why and how your data are used and it is the company you should contact about them.

Controller
WHATECH MOBILE CO., LIMITED
Address
Room 505, 5/F, Beverley Commercial Centre, 87-105 Chatham Road South, Tsim Sha Tsui, Kowloon, Hong Kong
Privacy contact
help@marketsaves.com

We have not appointed a data protection officer, because our activity does not fall within the cases in which the GDPR requires one. Privacy requests are handled by the customer service team at the address above; write "Privacy" in the subject line.

2The advertising operator and its role

Adverts for MarketSaves are managed by a separate company, a separate advertising company. It runs the advertising accounts on Google and Meta through which our adverts are shown.

The operator is not the seller and is not the controller of your order data. It does not receive your name, phone number, address or messages. What it sees are the statistics that the advertising platforms produce: how many people saw or clicked an advert, how many orders followed and their value. If you have accepted advertising cookies, those platforms may link such events to an online identifier; the cookie choice on this site controls that, and the Cookie Policy describes it.

Where the operator handles any personal data on our behalf in the course of this work, it does so on our written instructions under a data processing agreement. Because it is established outside the European Economic Area, that agreement includes the European Commission's standard contractual clauses.

3What we collect

When you order

The order form asks for: delivery country, first name, last name, phone number, address, town or city and postcode. Email and delivery notes are optional. With the form we store the product, quantity and total, the date and time, the IP address the form was sent from and, if you arrived through an advert, the campaign label contained in the link. We do not collect payment data: you pay the courier in cash.

When we phone you

The confirmation call checks the order and the address. We note the outcome (confirmed, changed, cancelled, not reached). If a call is ever recorded, you are told at the start of the call and can object.

When you write to us

The contact form collects the topic, your name, your email address, an optional order reference, your message and the IP address. If you email us, we receive whatever you choose to write and attach.

When you return an item

For a refund we ask for the name of the account holder and the IBAN. These are used for that transfer only.

When you browse

The site stores a few small entries in your browser that it needs to work, and sets advertising cookies only if you accept them. Our hosting provider keeps short-lived technical logs (IP address, time, page requested, browser type) to deliver the pages and keep the service secure. Details are in the Cookie Policy.

We do not ask for, and ask you not to send, special categories of data such as health information. We do not buy data about you from third parties.

4Why we use it and on what legal basis

Taking your order, phoning you to confirm it, delivering it and collecting payment through the courier

Data
Order form details, order contents
Legal basis
Performance of the contract and steps taken at your request before it (Art. 6(1)(b) GDPR)

Handling withdrawals, returns, refunds and guarantee claims

Data
Order details, messages, photos you send, bank account for the refund
Legal basis
Performance of the contract (Art. 6(1)(b)) and legal obligations under consumer law (Art. 6(1)(c))

Keeping accounting and tax records

Data
Name, address, order contents and amounts, refund records
Legal basis
Legal obligation (Art. 6(1)(c))

Answering messages sent through the contact form or by email

Data
Name, email, topic, order reference, message
Legal basis
Your consent given with the form (Art. 6(1)(a)); where the message concerns an order, performance of the contract (Art. 6(1)(b))

Protecting the shop against abuse: repeated fake orders, automated form submissions, serial refusal of parcels

Data
IP address, time of submission, phone number, delivery outcome of earlier orders
Legal basis
Legitimate interest in running a cash-on-delivery service that is not abused (Art. 6(1)(f))

Knowing, in aggregate, which adverts lead to orders

Data
The campaign label carried by the link that brought you to the site, stored with the order
Legal basis
Legitimate interest in measuring advertising without identifying visitors (Art. 6(1)(f))

Advertising measurement and remarketing through Google Ads and the Meta pixel

Data
Online identifiers, cookie data, pages viewed, order value
Legal basis
Your consent, given in the cookie choice and revocable at any time (Art. 6(1)(a))

Establishing, exercising or defending legal claims

Data
Whatever part of the above is relevant to the claim
Legal basis
Legitimate interest (Art. 6(1)(f))

Where we rely on legitimate interest, we have weighed it against your interests and keep the processing to what the purpose needs. You can object at any time; see Your rights. We do not send newsletters or marketing messages, and we do not sell or rent personal data to anyone.

5Who receives your data

Your data are passed only to those who need them for the purposes above:

  • Carriers in your country (postal operators and parcel couriers): name, address, phone number and the amount to collect, so that they can deliver the parcel and take payment. Carriers are controllers in their own right for the delivery service.
  • Customer service and phone confirmation partners: call-centre companies that phone you in your language on our behalf to confirm the order. They act as our processors and see the order they are confirming.
  • Warehouse and fulfilment partners that pack and label the parcel: name, address, phone number, order contents.
  • Hosting and database providers that run this website and store its database, and an email delivery provider that sends order confirmations. They process data only on our instructions. Some of them are companies based in the United States.
  • Google Ireland Limited and Meta Platforms Ireland Limited, only if you have accepted advertising cookies, for the purposes described in the Cookie Policy.
  • Our bank, when we send you a refund.
  • Accountants, auditors, legal advisers and public authorities, where the law requires it or where it is necessary to defend a claim.

The advertising operator is not on this list for order data: as explained above, it does not receive them.

6Transfers outside the European Economic Area

Some of our technical providers, and the advertising operator, are based in the United States. When personal data are transferred there, the transfer is covered either by the provider's certification under the EU–US Data Privacy Framework, which the European Commission has recognised as adequate, or by the standard contractual clauses adopted by the Commission, together with additional safeguards where needed. You can ask us for a copy of the relevant safeguards at the privacy contact above.

7How long we keep it

Confirmed orders and their delivery, refund and guarantee records
Six years after the end of the financial year of the order, the period for which tax and company law in our country of establishment require business records to be kept.
Orders that were never confirmed (we could not reach you, or you cancelled on the call)
Six months, then deleted or made anonymous.
Contact form messages and emails
Two years after the last message in the conversation, unless they belong to an order, in which case they follow the order.
Bank details given for a refund
Kept with the refund record for the accounting period above and used for nothing else.
IP addresses attached to orders and messages
Twelve months, then removed from the record.
Blocks placed on an IP address or phone number for abuse
While the block is needed and reviewed at least once a year.
Browser storage and advertising cookies
As listed in the Cookie Policy.

Where a dispute or a legal claim is open when a period ends, the data it concerns are kept until the matter is closed.

8Your rights

Under the GDPR you can, at no cost:

  • access your data and receive a copy;
  • have inaccurate data corrected;
  • have data erased when we no longer have a reason to keep them (records the law obliges us to keep cannot be erased early);
  • ask us to restrict processing while a question about the data is settled;
  • object to processing based on legitimate interest, on grounds relating to your situation;
  • receive the data you gave us in a structured, commonly used format, or have them sent to another controller (portability), where processing is based on contract or consent;
  • withdraw consent at any time, without affecting what was done before: for cookies, use the "Cookie settings" control in the footer.

Write to help@marketsaves.com or use the contact form with the topic "Privacy request". We may ask for information that confirms your identity, such as the phone number used for the order. We answer within one month; the law allows two further months for complex requests, and we would tell you if we needed them.

9Complaining to a supervisory authority

If you think we have handled your data unlawfully, we would like the chance to put it right first. You also have the right to lodge a complaint with a data protection authority. The authority that supervises us is:

Office of the Privacy Commissioner for Personal Data, Hong Kong (pcpd.org.hk)

You may instead complain to the data protection authority of the EU country where you live or work, or where the matter occurred.

10What happens if you do not give data; automated decisions

The fields marked as required in the order form are needed to conclude and perform the contract: without a name, a phone number and a full address we cannot confirm or deliver an order. Optional fields can be left empty without any consequence. Advertising cookies are always optional.

We do not make decisions about you that are based solely on automated processing and that have legal or similarly significant effects. The site automatically limits how many forms can be sent from one connection in a short time; if this stops a genuine order, contact us and a person will look at it.

11Security and children

Pages and forms are served over an encrypted connection. Forms are protected against automated and cross-site submission. Access to the order database is limited to the staff and partners who need it and is protected by authentication. No system is perfectly secure; if a breach were to put your rights at risk, we would inform you and the supervisory authority as the law requires.

The shop is for adults. We do not knowingly collect data from anyone under 18. If you believe a minor has placed an order, tell us and we will cancel it and delete the data.

12Changes to this policy

We update this page when our processing or the law changes. The date at the top is the date of the current version. If a change affects how we use data we already hold in a way you would not expect, we tell you before it takes effect, by email where we have your address.