Privacy policy

Last updated: July 3, 2026

MastrAuto3D operates this store and website, including all related information, content, features, tools, products and services, to deliver a tailored shopping experience to customers (collectively referred to as the "Services"). This website and store are powered by Shopify to facilitate all Services provided to you. This Privacy Policy outlines how we collect, use and disclose your personal information when you browse, access, purchase goods, complete transactions via the Services or communicate with our team. In the event of any conflict between our Terms of Service and this Privacy Policy, the terms within this Privacy Policy shall govern all matters related to the collection, processing and disclosure of your personal data.
Please read this Privacy Policy thoroughly. By accessing and using any of our Services, you confirm that you have reviewed and fully understood how we collect, utilise and share your personal information as set forth in this document.

Personal Information We Collect and Process

The term "personal information" refers to any data that can identify you or be reasonably linked to an individual. This excludes anonymised or de-identified data that cannot be traced back to a specific person. The categories of personal information we collect or process vary based on your interaction with our Services, your residential location and applicable legal requirements, including derived inferences generated from such data:
  • Contact details: full name, residential address, billing address, delivery address, phone number and email address
  • Financial information: credit/debit card numbers, bank account details, payment credentials, transaction records, payment confirmations and other billing data
  • Account information: usernames, login passwords, security question answers, personal preferences and site settings
  • Transaction records: product views, cart additions, wishlist items, purchases, returns, exchanges, order cancellations and historical order history
  • Customer communications: all content submitted via support enquiries, emails, message forms and direct conversations with our team
  • Device metadata: device model, browser type, network connection details, IP address and unique device identifiers
  • Usage analytics: behavioural data recording how and when you navigate, click and interact with our website and Services

Sources of Personal Information

We obtain personal information from the following channels:
  • Direct submissions from you: information you voluntarily provide when registering an account, browsing the site, submitting support tickets or completing checkout
  • Automatic site collection: data captured via your device during site visits through cookies, tracking pixels and comparable tracking technologies
  • Authorised third-party service providers: data collected on our behalf by vendors supporting our IT infrastructure, payment processing, analytics and logistics
  • Partner platforms and external third-party organisations

How We Use Your Personal Information

We process your personal data for the following legitimate purposes, depending on your engagement with our platform:

1. Deliver, Customise and Optimise Our Services

We use your data to fulfil contractual obligations, process payments, ship orders, manage returns and exchanges, retain your browsing preferences, send order-related notifications, host customer product reviews and generate personalised product recommendations. This data also supports ongoing platform optimisation and feature improvements.

2. Marketing & Targeted Advertising

We send promotional communications via email, SMS or postal mail with your consent, and display targeted advertisements across our website and third-party platforms based on your browsing, cart and purchase history.

3. Account Security & Fraud Prevention

Personal data is used to verify account identities, secure payment workflows, detect and investigate fraudulent, illegal or harmful activity, and protect the safety of our platform and users. If you register an account, you are solely responsible for safeguarding your login credentials and must not share usernames, passwords or access details with any third parties.

4. Customer Support & Relationship Management

We rely on your contact and order data to respond to support requests, resolve service issues and maintain consistent customer communication.

5. Legal Compliance & Enforcement

We process personal information to comply with local regulatory requirements, respond to formal legal requests from law enforcement and government authorities, participate in civil litigation and dispute resolution, and investigate potential violations of our Terms of Service and internal policies.

How We Disclose Your Personal Information

We may share your personal data with third parties for legitimate business purposes in the scenarios outlined below, subject to the protections defined in this Privacy Policy:
  • Authorised service providers including Shopify, logistics partners, payment processors, cloud storage vendors, data analytics agencies and customer support contractors delivering operational services on our behalf
  • Marketing and advertising partners supporting personalised ad campaigns across external platforms. These partners will process your data in accordance with their independent privacy policies. You hold the right to opt out of targeted cross-site advertising based on your location, via the opt-out link provided on our website
  • Third parties you explicitly authorise us to share data with, including shipping carriers and social media platforms connected via site login widgets
  • Our affiliated corporate entities and internal group companies
  • External parties during corporate restructuring events such as mergers, acquisitions or insolvency proceedings; to satisfy mandatory legal disclosures including subpoenas and court warrants; to enforce our terms of service; and to defend the legal rights of MastrAuto3D, platform users and third parties

Our Relationship with Shopify

All Services are hosted on the Shopify platform. Shopify collects and processes your personal information to operate, maintain and improve our store experience. Any data you submit to our website will be transmitted to Shopify and selected international third-party vendors to complete order fulfilment and platform operations.
We utilise Shopify’s advanced business tools that aggregate customer interaction data from our store alongside data from other Shopify merchants. In these scenarios, Shopify acts as the independent data controller responsible for processing your personal information and handling all data rights requests related to this aggregated data processing.
You may review Shopify’s consumer data practices and exercise your legal data rights via their official resources:

Third-Party Links & External Platforms

Our website may contain hyperlinks to unaffiliated third-party websites and social platforms. We do not control these external sites and accept no liability for their privacy, data security or content accuracy. Before sharing personal information on external platforms, please review their independent privacy policies. Any content posted on public social media widgets may be accessed by external users without additional restrictions from our side; inclusion of external links does not constitute official endorsement of the platform or its operators.

Children’s Personal Data

Our Services are intended exclusively for adult users. We do not knowingly collect personal information from minors under the legal age of majority within your jurisdiction. If you are a parent or legal guardian and discover your child has submitted personal data to us without consent, please contact our support team via the details listed below to request full deletion of their records.
As of the effective date of this Privacy Policy, we have no confirmed knowledge that we sell or share personal information belonging to individuals under the age of 16 as defined under applicable regional privacy legislation.

Information Security & Data Retention

No digital security protocol is fully impenetrable, and we cannot guarantee absolute data security during internet transmission. We strongly advise against sending sensitive or confidential personal data over unencrypted communication channels.
The retention period for your personal data varies based on business requirements: we retain records to maintain active customer accounts, deliver ongoing Services, comply with legal record-keeping obligations, resolve outstanding disputes and enforce contractual agreements. Once data is no longer required for these purposes, it will be securely deleted or anonymised.

Your Legal Rights & Preference Controls

Subject to your country of residence, you may hold partial or full access to the data rights listed below. These rights are not absolute and may only apply under specific circumstances; we reserve the right to decline certain requests where permitted by governing law:
  1. Right of Access / Data Disclosure: Request a full copy of all personal data we hold related to you
  2. Right to Erasure: Request permanent deletion of your stored personal information
  3. Right to Rectification: Request correction of inaccurate or incomplete personal records
  4. Right to Data Portability: Receive a machine-readable copy of your personal data and request secure transfer to a third-party controller where eligible
  5. Right to Opt Out of Data Sales & Targeted Advertising: Restrict us from selling or sharing your data for cross-site targeted marketing, as defined under local privacy regulations. You may submit this opt-out request directly via the dedicated link on our website.
If you access our website with Global Privacy Control (GPC) enabled on your browser or device, we will automatically recognise this signal as a formal opt-out request for targeted advertising applicable to your current device and browser. If your device can be linked to an active Shopify customer account, the opt-out preference will be applied to your full account. We do not recognise alternative "Do Not Track" browser signals outside of the official GPC standard. You may learn more about Global Privacy Control at https://globalprivacycontrol.org/.

Manage Promotional Email Subscriptions

You may unsubscribe from all marketing email communications at any time using the unsubscribe link embedded within every promotional email sent by our team. After unsubscribing, we will continue sending transactional emails critical to your account, including order confirmations, shipping updates and service notifications.

Additional Rights for EEA & UK Residents

If you reside within the European Economic Area or the United Kingdom, you hold supplementary data rights under GDPR and UK data protection legislation, subject to statutory exceptions:
  • Right to object to or restrict certain categories of data processing
  • Right to withdraw previously granted consent for data processing (with no retrospective impact on lawful processing completed prior to withdrawal)
You may submit all data rights requests either via dedicated tools hosted on our website or by contacting our support team using the contact information below. All requests processed by Shopify can be managed via the Shopify Privacy Portal linked above.
We will not discriminate against any customer who exercises their legal data rights. We may require formal identity verification before processing your data request to comply with regulatory standards. You may appoint an authorised agent to submit rights requests on your behalf; we will require formal written proof of authorisation from you before accepting any agent-led submission and may follow up with you directly to verify identity. All valid requests will receive a formal response within the statutory timeline mandated by local law.

Formal Complaints

If you hold concerns regarding our processing of your personal information, please contact our support team first via the channels listed below. Depending on your location, you may submit an appeal to our internal team or file an official complaint with your local data protection supervisory authority. A full directory of EEA supervisory authorities is available via official EU regulatory resources.

International Data Transfers

Your personal information may be transferred, stored and processed in jurisdictions outside your country of residence.

When transferring data out of the European Economic Area or the United Kingdom, we rely on approved legal transfer mechanisms such as the European Commission’s Standard Contractual Clauses or equivalent UK official data transfer agreements, unless the receiving country has been formally recognised as providing adequate data protection standards.

Amendments to This Privacy Policy

We reserve the right to update this Privacy Policy periodically to reflect changes to our operational practices, legal obligations or regulatory requirements. All revised versions will be published on our website with an updated "Last updated" date, and mandatory regulatory notifications will be issued where required by law.

Contact Information

For all enquiries regarding this Privacy Policy, our data processing practices, or to submit formal data rights requests:
  • Phone: +852 5474 7658
  • Email: support@mastrauto3d.com
  • Address: Flat/RM 404A, 4/F, Beverley Commercial Centre, 87-105 Chatham Road South, Tsim Sha Tsui, Kowloon, Hong Kong SAR
For the purposes of applicable data protection legislation, MastrAuto3D acts as the official data controller for all personal information collected through our website and Services.