PRIVACY POLICY

Privacy Policy for Diorella.me

Last Updated: 1 November 2026  


Welcome to Diorella.me (the "Website"). Your privacy is important to us. This Privacy Policy outlines how we collect, use, disclose, and protect your personal data in compliance with Hong Kong’s *Personal Data Privacy Ordinance (PDPO)* and other applicable laws. By using our Website, you agree to the terms of this policy.  


---


1. Data Controller

Diorella.me, operated by Citta Hong Kong Limited, with its registered office at Level 1, 28 Stanley Street, Central, Hong Kong, is the data controller responsible for your personal data.  


---


2. Information We Collect

We collect the following types of data:  

- Provided by You:  

  - Name, email, shipping/billing address, phone number, payment details.  

  - Account credentials (if you create an account).  

  - Communications (e.g., customer service inquiries).  

- Automatically Collected:  

  - Browsing behavior (IP address, device type, pages visited) via cookies.  

  - Purchase history and preferences.  


---


3. How We Use Your Information

Your data is used to:  

- Process orders, deliver products, and manage payments.  

- Communicate about orders, accounts, or inquiries.  

- Send marketing communications (with your consent).  

- Improve our Website, services, and user experience.  

- Comply with legal obligations.  


---


4. Legal Basis for Processing

We process your data based on:  

- Contractual Necessity: To fulfill orders.  

- Consent: For marketing communications (you may withdraw consent anytime).  

- Legitimate Interests: Website optimization and fraud prevention.  


---


5. Sharing Your Information

We may share your data with:  

- Service Providers: Payment gateways (e.g., PayPal, Stripe), logistics partners, IT support.  

- Legal Authorities: When required by law or to protect our rights.  

- Business Transfers: In mergers, acquisitions, or asset sales.  


---


6. International Data Transfers

Your data may be transferred to and processed in countries outside Hong Kong. We ensure safeguards (e.g., contractual clauses) are in place to protect your data.  


---


7. Data Retention

We retain your data only as long as necessary for:  

- Fulfilling orders or legal obligations.  

- Resolving disputes or enforcing agreements.  


---


8. Your Rights

Under PDPO, you have the right to:  

- Access, correct, or delete your personal data.  

- Withdraw consent for marketing.  

- Object to specific data uses.  

- Lodge a complaint with the Hong Kong Privacy Commissioner.  


To exercise these rights, contact us at info@diorella.me.  


---


9. Cookies

We use cookies to:  

- Enable essential site functions (e.g., shopping cart).  

- Analyze traffic via tools like Google Analytics.  

- Personalize ads (with your consent).  


Manage preferences via your browser settings or our cookie banner.  


---


10. Third-Party Links

Our Website may link to external sites. We are not responsible for their privacy practices.  


---


11. Children’s Privacy

We do not knowingly collect data from individuals under 18. If you believe a minor has provided data, contact us immediately.  


---


12. Changes to This Policy

Updates will be posted here with a revised "Last Updated" date. 


---


13. Contact Us

For questions or requests regarding your data:  

Email: info@diorella.me  

Company: Citta Hong Kong Limited (Diorella.me)  


---


*Thank you for trusting Diorella.me with your privacy.*