This Privacy Policy explains how Natural Fashion Home Limited handles personal information collected through the website at https://www.naturalfashion.lol and through visits to the cloth hall at Rm 1905 Nan Fung Centre, 264-298 Castle Peak Rd, Tsuen Wan, Hong Kong - 999077, Hong Kong (HK). The website was built and is maintained by the developer NaturalFashion on behalf of the company. It describes what is collected, why it is collected, how it is protected and what choices a visitor has. Please read it before sending an enquiry or placing an order.
Natural Fashion Home Limited supplies fabric bolts, cushion sets, curtain orders and upholstery cloth. Most of the personal information the company holds is ordinary business contact information gathered so that a question can be answered, a measure can be confirmed or a delivery can be completed. The company does not operate an advertising network and does not sell personal information to any third party.
01. Scope of this policy
This policy covers the website and every offline interaction that relates to an order or a showroom visit. It applies to a person who simply browses the pages, to a buyer who sends an enquiry through the contact form, and to a customer whose details appear on an order confirmation. It does not cover an external website reached through a link from this site, because that site is governed by its own notice.
Where a separate written agreement with a business customer sets different terms for personal data, that agreement prevails for the data it covers. In every other case this policy is the reference point for how information is handled.
02. Identity of the controller
The organisation responsible for the personal information described here is Natural Fashion Home Limited, registered address Rm 1905 Nan Fung Centre, 264-298 Castle Peak Rd, Tsuen Wan, Hong Kong - 999077, Hong Kong (HK). Questions, requests and complaints about privacy can be sent to tech@gtompsx.buzz or raised by telephone on +13317161528 during showroom hours.
The developer NaturalFashion built the public interface of the website and maintains the contact form behaviour. The developer handles the technical side of the site and does not use visitor information for any purpose of its own.
03. Information you give directly
When you complete the contact form or write by email, the company receives the name you type, the email address you supply, the subject line you choose and the content of your message. Where you call the showroom, the company may note your name, your telephone number and a short summary of the conversation so the enquiry can be followed up.
When you place an order, the company records the name and contact details of the buyer, the delivery address where relevant, the window or furniture measures agreed at the desk and the cloth numbers on the cut sheet. Where a deposit or balance is paid, a record of the payment method and date is kept for accounting purposes, but full card numbers are not stored on this website.
04. Information collected automatically
The website is a small set of static pages. It does not run a marketing tracker and does not build a profile of browsing behaviour across other sites. The hosting provider may record a standard server log containing the requested page, the date and time of the request, a truncated network address and the browser type reported by the visitor. These logs exist to keep the site available and secure.
The site uses no analytics cookies and no advertising cookies. A small amount of browser storage may be used by the page script to remember interface state during a single visit, and that state is discarded when the browser tab is closed.
05. Why the information is used
Contact details are used to answer an enquiry, to confirm a showroom appointment, to prepare a shortlist of bolts before a visit and to follow up on an order. Measures and cut lists are used to cut cloth correctly and to label pieces for the right room. Delivery details are used to send finished goods to the address given and to arrange a time when someone is present.
Payment records are used to keep accurate accounts and to handle a refund where one is due. Server logs are used to detect errors, to investigate a security incident and to keep the website working. No information is used to make automated decisions about a person and no profile is sold or rented.
06. Legal basis for handling
The company handles contact information because you asked it to respond to you, and handles order information because it is needed to perform the contract for the supply of cloth. Accounting records are kept because the law requires them. Security logs are kept on the basis of a legitimate interest in protecting the website and the people who use it.
Where consent is the basis for a particular action, such as adding your address to a list for season look announcements, that consent can be withdrawn at any time by writing to tech@gtompsx.buzz. Withdrawal does not affect anything the company did before the request was received.
07. Sharing within the company
Details are shared only with the members of staff who need them to do their work. The cutter needs the measures, the desk needs the contact details and the person who packs an order needs the delivery address. Access is limited to the people whose tasks require it and is reviewed when a role changes.
Information is not passed to a marketing department for profiling because the company does not operate one. Staff are reminded that cloth hall customer information is confidential and that it must not be discussed outside the room where the work is done.
08. Sharing with service providers
A small number of outside providers help the company operate. These may include the hosting provider for the website, the email provider that receives messages sent to tech@gtompsx.buzz and a delivery service where finished goods are sent to a buyer address. Each provider receives only the details needed for its task and is expected to protect them.
Where a provider is located outside Hong Kong, the transfer is limited to what the task requires, and the company takes reasonable steps to ensure the provider applies an appropriate standard of protection. A provider is never authorised to use customer details for its own marketing.
09. What is never done with your data
The company does not sell personal information, does not rent a contact list and does not trade details with another business. The company does not add a visitor to a marketing list unless the visitor has asked to be added. The company does not use personal information to build a cross site advertising profile and does not embed third party tracking pixels on this website.
The company does not ask for sensitive information such as health details, political views or financial account numbers through the website. A buyer should never send such information through the contact form, and any message that contains it will be deleted once it is recognised.
10. Retention of records
An enquiry that does not lead to an order is kept for a reasonable period so the conversation can be continued, and is then deleted. Order records, cut sheets and payment records are kept for the period required for accounting and for handling a later claim about cloth quality or measure, after which they are securely destroyed.
Season look notes that help match a new room to an earlier project are kept while the matching service is offered and are removed on request. Server logs are kept for a short period and are then deleted or overwritten in the normal course of hosting operations.
11. Security measures
The website is served over an encrypted connection. Access to order records is restricted to staff who need them, and the showroom keeps paper cut sheets in a closed drawer when the desk is not attended. Devices used to open customer email are protected by a passcode and kept up to date.
No system is entirely free of risk, and the company cannot promise that an incident will never occur. Where a breach affecting personal information is discovered, the company will act promptly to contain it, will inform affected people where the law requires it and will improve the control that failed.
12. Your rights to access
You may ask what personal information the company holds about you. A request should be sent to tech@gtompsx.buzz with enough detail to identify the records involved, such as your name, the order reference where one exists and the approximate date of contact. The company will respond within a reasonable period.
Where a request is complex or covers many years of records, the company may ask for clarification or agree a longer period for the reply. A reasonable fee may be charged where the law allows and where the request requires substantial effort, and that fee will be explained before any work begins.
13. Correction and deletion
You may ask the company to correct information that is wrong, such as a misspelled name or an out of date address. You may also ask for information to be deleted where there is no continuing reason to keep it, for example an old enquiry that was answered and closed.
Some records cannot be deleted immediately because accounting rules require them or because an open order or claim depends on them. In that case the company will explain the reason and will restrict the record to the purpose that requires it. Deletion requests for information that must be retained will be honoured as soon as the retention period ends.
14. Objection and restriction
You may object to a particular use of your information, such as being included in a season look announcement. You may also ask that a record be restricted while a question about its accuracy is resolved. The company will consider the request and will explain any reason why a use must continue.
Where a request concerns a message that has not yet been answered, the company may ask whether you would like the message kept so the answer can still be sent. Restriction does not automatically remove the record; it limits the purposes for which it is used.
15. Children and young people
The website is intended for adults making decisions about furnishing a home. The company does not knowingly collect information from a child through the contact form. Where a young person sends an enquiry, the company may ask for a parent or guardian to confirm the contact before continuing.
If a parent or guardian learns that a child has sent personal information to the company, they can write to tech@gtompsx.buzz and ask for the message to be removed. Such a request will be handled promptly and the record will not be used for any purpose after removal.
16. Cookies and browser storage
The website sets no advertising cookies and no analytics cookies. The page script may keep a small amount of state in the browser to remember a menu position or a revealed section during a visit. This state stays in the browser and is not sent to the company.
A visitor who prefers to block browser storage can do so in the browser settings without losing access to the content. The pages remain readable when scripting is disabled, because content is visible by default and the script only adds a gentle reveal effect after it loads.
17. Links to other websites
This site may link to a map service or to an email provider. Those sites are separate services with their own privacy notices, and the company does not control what they collect. A visitor should read the notice of any external service before using it.
A link from this site is not an endorsement of everything on the destination page. Where a link no longer points to something useful, it will be removed when it is noticed, and a visitor is welcome to report a broken link by email.
18. Transfers outside Hong Kong
Some service providers, such as a hosting company or an email provider, may store data in another country. Where that happens, the transfer is limited to the data needed for the task and the provider is expected to apply protections consistent with this policy. The company reviews providers when a contract is renewed.
A buyer who prefers that details not be transferred to a particular provider can tell the company at the time of the order, and an alternative arrangement will be discussed where one is practical.
19. Changes to this policy
The company may update this policy when the website changes, when a new service is added or when the law changes. The version published on this page is the current version, and the update date at the top of the page records when it last changed.
Where a change is significant, a note will appear on the homepage for a reasonable period. Continuing to use the website after a change means the updated policy applies, and a visitor who does not accept the change should stop using the contact form.
20. How to contact us about privacy
For any question about this policy, write to tech@gtompsx.buzz or call +13317161528. Written requests should be addressed to Natural Fashion Home Limited, Rm 1905 Nan Fung Centre, 264-298 Castle Peak Rd, Tsuen Wan, Hong Kong - 999077, Hong Kong (HK).
Please include enough detail for the company to identify the records involved. A short note describing what you would like done is usually enough, and the team will reply with the next step.
21. Complaints and escalation
If a response about personal information is not satisfactory, a complaint can be sent in writing to the same address. The company will review the handling of the request and will explain its position within a reasonable period. Where the law provides a route to a supervisory authority, a complainant may also use that route.
The company would rather resolve a concern directly than have it grow, so a buyer or visitor is encouraged to raise a privacy question early, even where the matter seems small.
22. Contact form and email fallback
The contact form on this website does not send a message to a remote database. When it is submitted the page script builds an email and opens the mail application configured on the device. This means the message travels only when the sender chooses to send it from that application, and the sender can review the content before it leaves the device.
Where the mail application does not open, the form shows the company email address so the message can be written directly. The company receives only the email that is actually sent and does not collect partial form entries that were abandoned before sending.
23. Showroom records and paper notes
Paper cut sheets and measure notes are kept at the Tsuen Wan desk while an order is open and for the period needed to handle a later question about the piece. These notes are kept in a closed drawer when the desk is unattended and are destroyed when the retention period ends.
Photographs taken during a season look sitting are labelled by project and stored so a later room can be matched. A buyer can ask for the photographs relating to that project to be removed, subject to any record the company must keep for an open order.
25. Data minimisation in practice
Data minimisation is a principle that is easy to state and harder to keep. The cloth hall applies it by asking for the smallest set of details that allows a task to be completed on the day. A buyer who requests a swatch set aside needs to give a name and a way to be reached, but does not need to give a home address. A buyer arranging a delivery must give a delivery address, but does not need to explain the rest of the room.
Staff are encouraged to ask whether a detail is genuinely needed before writing it down. A note that has no purpose at the end of an order is removed with the rest of the order record when the retention period closes, and a paper slip that is no longer referenced is destroyed rather than left in a drawer.
26. Accuracy of order records
A cut sheet is only as useful as it is accurate. The desk confirms the measure with the buyer and writes the confirmation on the sheet, so a later question can be checked against what was actually agreed. Contact details are read back at the desk to catch a mistyped number before a delivery attempt is made.
A buyer who changes a telephone number or an address after an order should tell the company before collection or delivery. An update sent to tech@gtompsx.buzz is applied to the open order and noted on the record so the change is visible to the person who packs the goods.
27. Third party processors in detail
Three categories of processor may handle personal information. The first is the hosting provider that serves the static pages and keeps brief server logs. The second is the email provider that stores messages sent to the company address. The third is a delivery service used where goods are sent rather than collected.
Each category is chosen for reliability and for a clear security posture. A processor is given access only to what the task requires, is told that the information is confidential and is not permitted to use it for its own purposes. When a contract with a processor ends, the company confirms that data held by that processor is returned or destroyed.
28. Requests from public authorities
The company may receive a request for customer information from a public authority. Such a request is assessed for legal validity and for the scope of what is sought. The company will provide only what is lawfully required and will inform the affected person where it is permitted to do so.
The company does not volunteer customer information to an authority in the absence of a valid request and does not maintain a standing arrangement to disclose personal information for any purpose beyond the ordinary operation of the business.
29. Automated tools and new features
If a future version of the website adds a feature such as an online order status check or a booking calendar, that feature will be described in an update to this policy before or when it goes live. A new feature will not be used to collect more information than the feature needs.
The company does not use automated profiling to decide whether to serve a customer, and no visitor is scored or ranked by an algorithm on this site. Where a tool is used to sort incoming email, a person reviews the result before any action is taken that affects a buyer.
30. Keeping this policy readable
This policy is deliberately written in ordinary language rather than legal shorthand, because a notice that nobody can follow does not help anyone make a choice. Where a technical term is unavoidable it is explained in the sentence that follows it. A reader who finds a passage unclear is welcome to ask for a plain explanation by email.
The developer NaturalFashion reviews the technical statements in this policy whenever the site changes, so that the description of cookies, browser storage and the contact form remains true. If a statement ever stops being accurate, the policy will be corrected rather than left in place.
24. Summary of commitments
Natural Fashion Home Limited collects only what a task needs, shares it only with people who have a reason to see it, keeps it only as long as a purpose remains, protects it with reasonable controls and answers a request about it within a reasonable time.
The developer NaturalFashion keeps the technical side of the site simple for the same reason. There is no hidden tracking layer, no data broker arrangement and no attempt to identify an anonymous visitor. A person who reads this policy should be able to see exactly what the website does.