Privacy Policy

This Privacy Policy explains how ECOM DDTL LIMITED ("we", "us", or "our"), operating the website https://the-orthopedic-shop.com ("the Site"), collects, uses, and protects the personal information you share with us when you visit the Site or place an order.

1. Who we are

The Site is operated by:

ECOM DDTL LIMITED
Business Registration Number (BRN): 77238892
Room 01, 26th Floor, Working View Commercial Building, 21 Yiu Wah Street, Causeway Bay, Hong Kong
Email: contact@the-orthopedic-shop.com
Phone: +852 9290 1652

For any question about this Privacy Policy or your personal data, you can contact us at the email above.

2. What information we collect

When you visit or use our Site, we may collect the following categories of personal information:

Information you provide directly:

  • Name and last name
  • Email address
  • Shipping and billing address
  • Phone number (if provided)
  • Order details and purchase history
  • Content of any message you send us

Information collected automatically:

  • IP address and approximate location (city/country level)
  • Browser type, operating system, device information
  • Pages viewed, time spent on the Site, referring pages
  • Cookies and similar tracking technologies (see Section 7)

Payment information:
We do not directly collect or store your full payment card details. Payments are processed by our third-party payment providers (such as Shopify Payments, Stripe, or PayPal), who handle your payment information in accordance with their own privacy policies and PCI-DSS security standards.

Information we do NOT collect:
We do not ask for or collect any health, medical, or sensitive personal information. Our products are sold as comfort items for everyday use, and no medical information is required to place an order. Please do not send us health-related information through our contact channels.

3. How we use your information

We use your personal information for the following purposes:

  • To process and fulfill your orders (preparation, shipment, delivery, returns)
  • To communicate with you about your order or answer your questions
  • To send you order confirmations, shipping notifications, and, if you have subscribed, occasional marketing emails (you can unsubscribe at any time)
  • To improve the Site, our products, and the shopping experience
  • To detect, prevent, and address fraud, security issues, or misuse of the Site
  • To comply with our legal and regulatory obligations

We do not use automated decision-making that produces legal or similarly significant effects on you.

4. Legal basis for processing

Where required by law (for example under the EU/UK GDPR if you are a resident of those regions), we process your personal information on one or more of the following legal bases:

  • Contract performance: to fulfill your order and provide customer support
  • Legal obligation: to comply with tax, accounting, or other legal requirements
  • Legitimate interest: to improve our services, prevent fraud, and secure the Site
  • Consent: for marketing communications and non-essential cookies (see Section 7)

5. Who we share your information with

We share your personal information only with the following categories of recipients, and only to the extent necessary:

  • Shipping and fulfillment providers, to prepare and deliver your order
  • Payment providers (Shopify Payments, Stripe, PayPal, or similar), to process your payment
  • Website hosting (Shopify Inc., 150 Elgin Street, Ottawa, Ontario, Canada), for the technical operation of the Site
  • Analytics and marketing tools (such as Google Analytics, Meta Pixel), to understand how the Site is used and to measure the effectiveness of our advertising
  • Legal or regulatory authorities, if required by law or a valid legal request

We do not sell your personal information to third parties.

6. International data transfers

As we operate from Hong Kong and use service providers based in the United States, Canada, and the European Union, your personal information may be transferred outside your country of residence. Where required by law, we ensure that appropriate safeguards are in place (such as standard contractual clauses or equivalent protections).

7. Cookies and tracking technologies

We use cookies and similar technologies on the Site for the following purposes:

  • Essential cookies: required for the Site to function (cart, checkout, authentication)
  • Analytics cookies: to understand how visitors use the Site (Google Analytics)
  • Advertising cookies: to show relevant ads and measure their performance (Meta Pixel, Google Ads)

You can manage your cookie preferences at any time via the cookie banner displayed on your first visit, or through your browser settings. Disabling non-essential cookies may affect the functionality of some parts of the Site.

8. How long we keep your information

We keep your personal information only as long as necessary for the purposes described above:

  • Order data: for the duration of the commercial relationship and for the period required by tax and accounting laws (typically 7 years)
  • Marketing data: until you unsubscribe or ask us to delete it
  • Analytics data: usually for 14 to 26 months, depending on the tool used

9. How we protect your information

We take reasonable technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Payments are handled by PCI-DSS-compliant providers, and the Site uses SSL encryption for all data transmitted between your browser and our servers.

No method of transmission or storage on the internet is 100% secure, but we do our best to protect your information and to notify you promptly in the event of a data breach affecting your data.

10. Your rights

Depending on where you live, you may have the following rights regarding your personal information:

  • Access: request a copy of the personal information we hold about you
  • Correction: ask us to correct inaccurate or incomplete information
  • Deletion: ask us to delete your personal information (subject to legal retention obligations)
  • Objection or restriction: object to or restrict certain types of processing
  • Portability: receive your data in a structured, commonly used format
  • Withdrawal of consent: withdraw your consent at any time (for example, unsubscribe from marketing emails)
  • Non-discrimination: exercise your privacy rights without being denied service or charged a different price (California residents)

For California residents (CCPA/CPRA):
You have the right to know what personal information we collect, use, and share; the right to request deletion; the right to opt out of the sale or sharing of your personal information (we do not sell your personal information); and the right to non-discrimination.

For EU/UK residents (GDPR):
You have the right to lodge a complaint with your local data protection authority if you believe we have not respected your privacy rights.

To exercise any of these rights, please contact us at contact@the-orthopedic-shop.com. We will respond within the time frame required by applicable law.

11. Children's privacy

The Site is not directed to children under the age of 13 (or 16 in some jurisdictions), and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in the law. The "Last updated" date at the top of this page will always reflect the most recent version. For significant changes, we will notify you by email or through a notice on the Site.

13. Contact

For any question or request regarding this Privacy Policy or your personal information, please contact us at:

ECOM DDTL LIMITED
Email: contact@the-orthopedic-shop.com
Phone: +852 9290 1652
Address: Room 01, 26th Floor, Working View Commercial Building, 21 Yiu Wah Street, Causeway Bay, Hong Kong