True North Market (“True North”, “we”, “us”, or “our”) respects your privacy. This Privacy Policy explains what personal data we collect when you visit our storefront (including truenorth.market and related domains), create an account, browse products, place an order, or contact us; how we use and share that data; how long we keep it; and the choices available to you.

By using our website or services, you acknowledge this Policy. If you do not agree, please do not use the site. Where consent is required by law for a specific activity (for example, certain marketing emails), we will ask for it separately.

This Policy is designed to align with the Hong Kong Personal Data (Privacy) Ordinance (Cap. 486) (“PDPO”) and, where applicable, other consumer and privacy laws that may protect you.

1. Who we are and how to contact us

True North Market is a curated online storefront offering jewelry and related goods from selected brands, with checkout and account experiences that may integrate iGNITE Connect and payment processing via Stripe.

Privacy questions, access requests, and complaints: Email: hello@truenorth.market Web: /contact

2. Scope

This Policy covers personal data processed in connection with:

• browsing and using the True North Market website and admin tools where relevant;
• account registration and sign-in (including via iGNITE Connect);
• shopping cart, wishlist, currency and locale preferences;
• checkout, payment, order fulfillment, shipping, and returns;
• customer support and email communications;
• optional marketing (only where permitted and, where required, with consent).

It does not cover third-party websites we link to (brand sites, payment provider pages, or iGNITE properties outside our control). Those services have their own privacy notices.

3. Personal data we collect

We collect information you provide, information created when you use the site, and information from service providers who help us operate the store.

3.1 Information you provide

• Identity and contact details: name, email address, phone number, delivery and billing addresses.
• Account details: login identifiers associated with your True North or iGNITE Connect account, profile preferences, and saved addresses.
• Order details: products selected, quantities, variants (for example letter or size options), gift notes, and order history.
• Communications: messages sent via contact forms, email, or support channels, including attachments you choose to send.
• Marketing preferences: opt-in or opt-out status where applicable.

3.2 Payment information

Payments are processed by Stripe. We do not store full card numbers on our servers. Stripe may receive cardholder name, payment method details, billing address, and fraud-prevention signals under Stripe’s own terms and privacy policy. We receive payment status, limited transaction identifiers, and information needed for receipts, refunds, and accounting.

3.3 Information collected automatically

• Device and technical data: IP address, browser type, device type, operating system, language, referring URL, and approximate location derived from IP.
• Usage data: pages viewed, products viewed, search queries, clicks, scroll and session timing, cart events, and error logs.
• Cookies and similar technologies: see Section 6.

3.4 Information from partners

• iGNITE Connect: when you sign in or register through iGNITE, we may receive identifiers and profile fields needed to authenticate you and complete checkout (for example name and email), subject to iGNITE’s policies and your account settings.
• Fulfillment and logistics partners: delivery status and related updates.
• Fraud and security tools used by our payment or hosting providers.

We do not knowingly collect sensitive personal data (such as health or biometric data) for storefront shopping. Please do not submit such information unless we expressly request it for a lawful purpose.

4. How we use personal data

We use personal data for the following purposes:

• Providing the storefront: display catalogs, remember cart and wishlist state, apply currency/locale settings, and personalize non-marketing browsing experience.
• Account management: create and maintain accounts, authenticate users (including via iGNITE Connect), and secure access.
• Order processing: accept and confirm orders, process payments via Stripe, arrange Hong Kong local delivery, send shipping and order updates, and handle returns or exchanges according to our policies.
• Customer support: respond to inquiries, resolve disputes, and improve service quality.
• Operations and improvement: analytics, debugging, performance monitoring, A/B testing of layout (where used), and product assortment decisions based on aggregate trends.
• Security and fraud prevention: detect abuse, protect accounts, and comply with payment network rules.
• Legal and compliance: keep records required for tax, accounting, consumer protection, and lawful requests from authorities.
• Marketing: send newsletters or promotional messages only where allowed by law and, where required, with your consent. You may unsubscribe at any time using the link in an email or by contacting us.

Legal bases under the PDPO framework include: fulfilling contracts (orders and accounts), complying with legal obligations, and our legitimate interests in operating a secure, efficient storefront — balanced against your rights and expectations. Where consent is the appropriate basis, you may withdraw it without affecting prior lawful processing.

5. How we share personal data

We do not sell your personal data.

We may share personal data with:

• Payment processors (Stripe) to complete transactions and prevent fraud.
• Shipping and fulfillment partners to deliver orders within Hong Kong.
• Infrastructure and technology providers (for example hosting, databases, email delivery, analytics, error monitoring) acting as processors under instructions.
• iGNITE Connect for authentication and related account services when you choose to use that sign-in path.
• Professional advisers (legal, accounting) under confidentiality where needed.
• Authorities, courts, or regulators when required by applicable law or to protect rights, safety, and security.
• A buyer or successor in the event of a merger, acquisition, or asset sale, subject to appropriate safeguards.

We require service providers who process personal data for us to protect it and use it only for agreed purposes.

6. Cookies and similar technologies

We use cookies, local storage, and similar technologies to:

• Essential operation: keep you signed in, maintain cart contents, remember currency and language, and protect checkout sessions.
• Preferences: store display and browsing choices.
• Analytics and performance: understand how the site is used so we can improve it (in aggregate or pseudonymous form where practical).

You can control cookies through your browser settings. Blocking essential cookies may prevent sign-in, cart, or checkout from working correctly.

7. International transfers

Our primary storefront operations are oriented to Hong Kong. Some providers (for example Stripe, cloud hosts, or email services) may process data in other jurisdictions. Where personal data is transferred outside Hong Kong, we take steps consistent with the PDPO and industry practice so that data remains protected to a standard comparable to local requirements, including contractual safeguards with processors where appropriate.

8. Retention

We keep personal data only as long as needed for the purposes described above, including:

• Account data: for the life of the account, then a reasonable period afterward for security and dispute resolution unless you request earlier deletion where feasible.
• Order and payment records: for the period required by tax, accounting, and consumer laws (often several years).
• Support correspondence: for a period needed to resolve issues and improve service.
• Marketing lists: until you unsubscribe or we purge inactive contacts.
• Server logs: for shorter operational windows unless needed for security investigations.

When data is no longer required, we delete or anonymize it in a manner consistent with our systems’ capabilities.

9. Security

We implement administrative, technical, and organizational measures appropriate to the risk, including encrypted transport (HTTPS), access controls for admin systems, and reliance on reputable processors for payments. No method of transmission or storage is completely secure; if you suspect unauthorized access to your account, contact us immediately and reset your credentials.

10. Your rights and choices

Subject to the PDPO and other applicable law, you may have the right to:

• request access to personal data we hold about you;
• request correction of inaccurate data;
• request erasure or restriction in certain circumstances;
• object to certain processing, including direct marketing;
• withdraw consent where processing is based on consent;
• lodge a complaint with the Office of the Privacy Commissioner for Personal Data, Hong Kong (PCPD), or another competent authority.

To exercise these rights, email hello@truenorth.market with sufficient detail for us to verify your identity and respond. We may need to retain certain information where the law requires it (for example completed order records).

You can also update some account details in your account settings when signed in, and manage email preferences via unsubscribe links.

11. Children

Our storefront is intended for adults. You must be at least 18 (or the age of majority in your place of residence) to create an account or place an order. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will take appropriate steps to delete it.

12. Third-party links and embedded content

Our pages may link to brand stories, social platforms, or partner sites (including iGNITE). We are not responsible for their privacy practices. Review their policies before providing personal data to them.

13. Changes to this Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of the page will change when we do. Material changes may also be highlighted on the site or notified by email where appropriate. Continued use after an update constitutes acknowledgment of the revised Policy, except where consent is required by law.

14. Related policies

For shipping, returns, and purchase terms, see also:

• Shipping — /shipping
• Returns — /returns
• Terms of Use — /terms

15. Contact

True North Market — Privacy Email: hello@truenorth.market Contact form: /contact