Updated May 12, 2025

This privacy notice provides information on how Design Pool Limited is a limited liability company doing business as NATIVE UNION with a registered office at 33/F, 88 Hing Fat Street, Hong Kong (hereinafter referred to as “Native Union” and “we”) process your personal data.

We have written this notice in simple language to help you make informed decisions, ensuring that you understand and have control over the information we collect, how it is used, and when it is shared.

To review, correct, or erase your personal information, to object to processing or to transfer your personal information to another party, please email us at [email protected]  

 

Where did we get your data from?

We collect information about you when you register an account with us, namely your name, e-mail address, telephone number, your username and password, your consent records, or place an order for our products so we can deliver your order, your purchase and payment details.

We also collect information whenever you go to one of our websites using your internet browser (like Mozilla Firefox, Google Chrome or Microsoft Internet Explorer), we get some information automatically. This information may include the address of the web page you went to, your computer's IP (Internet Protocol) address, and the version of the browser you used to go to the website. Anonymous website usage information is collected using Google Analytics. Cookies may be stored on your computer to remember actions you take on our website, such as adding a product to your cart, or selecting your shipping country – you can delete these at any time through your web browser’s settings.

 

What data do we process, for what purposes, on what basis, and for how long?

We act as a controller in the following processing operations.

Purpose	Legal ground	Data	Storage period	Data recipients
To track online behavior for statistics	Consent	Data collected by Google Analytics	Until you withdraw consent	Google LLC
To improve your browsing experience	Legitimate interest	Browsing history, preferences, cookies	Until you withdraw consent	Internal teams, analytics providers
To create your account	Contract performance	Name, email, password, contact details	As long as your account is active	Internal teams, third-party service providers (e.g., CRM, authentication providers)
Manage your online purchases	Contract performance	Name, contact details, payment information, order history	Retained as required by tax and accounting laws – 7 years	Payment processors, logistics partners
Organize shipping, billing, returns, exchanges, and refunds	Contract performance	Name, address, order details, payment information	Retained as required by tax and accounting laws – 7 years	Shipping carriers, payment processors
Provide after-sale services (Customer Care)	Contract performance	Contact details, purchase history, communications	Duration necessary to resolve the issue	Customer support teams, logistics partners
Conduct surveys	Consent	Email, feedback, responses	Until you withdraw consent	Internal teams, survey platforms
Fraud prevention	Legal obligation	IP address, payment details, transaction data	As required by applicable laws	Security and fraud detection services
Compliance with legal obligation	Legal obligation	Necessary data based on legal requirements	As required by applicable laws	Regulatory authorities, legal advisors
Direct marketing (newsletters, promotions, contests)	Consent	Email, purchase history, preferences	Until you withdraw consent	Internal teams, email marketing providers

 

Who do we share your personal information with?

Google LLC

Our emailing, as well as Google Analytics services are provided by Google LLC. Address: Google LLC, Google Data Protection Office, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA. Relevant privacy policy of Google. Unfortunately, the country of data recipient doesn’t ensure an adequate level of protection of your personal data. Standard Contractual Clauses are used to transfer your data to Google to ensure that they are properly protected. For more information: click on this link.

Shopify
Shopify Inc. provides our e-commerce platform, enabling us to process orders, manage inventory, and facilitate payments. Address: 151 O’Connor Street, Ground Floor, Ottawa, ON K2P 2L8, Canada. Relevant privacy policy of Shopify. Unfortunately, the country of data recipient doesn’t ensure an adequate level of protection of your personal data. Standard Contractual Clauses are used to transfer your data to Shopify to ensure that they are properly protected. For more information: Shopify Privacy Policy. https://www.shopify.com/hk-en/legal/privacy

Gorgias
Gorgias is a help desk platform used for managing customer support inquiries and interactions. Address: 34 Harriet St, San Francisco, CA 94103, USA. Relevant privacy policy of Gorgias. Unfortunately, the country of data recipient doesn’t ensure an adequate level of protection of your personal data. Standard Contractual Clauses are used to transfer your data to Gorgias to ensure that they are properly protected. For more information: Gorgias Privacy Policy https://www.gorgias.com/legal/privacy .

Klaviyo
Klaviyo is an email and SMS marketing automation platform. Address: 125 Summer St, Floor 6, Boston, MA 02110, USA. Relevant privacy policy of Klaviyo. Unfortunately, the country of data recipient doesn’t ensure an adequate level of protection of your personal data. Standard Contractual Clauses are used to transfer your data to Klaviyo to ensure that they are properly protected. For more information: Klaviyo Privacy Policy https://www.klaviyo.com/legal/privacy/privacy-notice .

By using our services, you acknowledge and agree to the transfer of your data to these entities under the mentioned safeguards to ensure the security and confidentiality of your personal information.

 

Your Rights

If we process your data based on your consent (for marketing purposes and other), you have the right to withdraw your consent at any time. If you would like to exercise your right to withdraw your consent, you may opt-out using the “Unsubscribe” link at the bottom of any of our marketing emails, or please contact us if you have any questions.

You have the following rights:

·       To request information about the processing of your personal data and get access to the personal data held about you. Individuals have a right of access that gives them the right to obtain a copy of their personal data, as well as other supplementary information. It helps individuals to understand how and why companies are using their data, and check the lawfulness of the processing.

·       To request that any incorrect, inaccurate or incomplete personal data be corrected. Individuals have the right to have inaccurate personal data rectified. An individual may also be able to have incomplete personal data completed – although this will depend on the purposes for the processing.

·       To request that personal data be erased when it is no longer needed or if processing is unlawful. Individuals have the right to have personal data erased. This is also known as the 'right to be forgotten'. The right is not absolute and only applies in certain circumstances.

·       To request the restriction of processing your personal data in specific cases. Individuals have the right to restrict the processing of their personal data in certain circumstances. This means that an individual can limit the way that an organization uses their data. This is an alternative to requesting the erasure of their data.

·       To receive your personal data in a machine-readable format and transfer them to another controller ('data portability'). Individuals have the right to data portability that gives individuals the right to receive personal data they have provided to a controller in a structured, commonly used and machine readable format. It also gives them the right to request that a controller transmits those data directly to another controller.

·       To object to the processing of your personal data for marketing purposes, or if there are grounds relating to your particular situation. Individuals have the right to object to the processing of their personal data at any time. This effectively allows individuals to stop or prevent you from processing their personal data.

·       Not to be subject to a decision based solely on automated processing Individuals have the right to request that decisions based on automated processing of their personal data, which significantly affect them, are made by natural persons and not only by computers. In such cases, they also have the right to express their point of view and challenge the decision.

·       To withdraw your consent at any time. The GDPR gives a specific right to withdraw consent. 

Please do not hesitate to contact us if you have any questions or wish to exercise your rights by emailing [email protected] . 

 

California Privacy Rights

If you are a California resident, California law may provide you with additional rights regarding our use of your personal information, to learn more, please visit the CCPA Privacy Notice.

Contact

Design Pool Limited
Address: 33/F, 88 Hing Fat Street, Hong Kong.
Phone: +852 2522 0880
Fax: +852 2522 0803
Email: [email protected]