This policy explains how Chaomai Technology Limited (“we”, “us”, “our”) collects, uses, stores and protects your personal data. It applies to the SPMASOFT website and related shopping and customer support services.
1. Who we are
This website is operated by Chaomai Technology Limited. For privacy enquiries, please contact us through the contact form on this website.
2. Data we collect
- Account data: name, email address and login details (passwords are stored in encrypted form).
- Order data: products purchased, amounts, order number, delivery email and transaction status.
- Payment data: processed by third-party payment providers; we do not store full card numbers.
- Contact data: messages and records you submit through forms or customer support.
- Technical data: IP address, browser, device, visit time and cookies.
3. How we use data
- To process orders, confirm payment, deliver product keys and provide after-sales support.
- To respond to enquiries and handle refunds or disputes.
- To send order and service notifications.
- To prevent fraud and abuse and keep the website secure.
- To improve our website, products and customer service.
- To comply with applicable legal, accounting and tax requirements.
4. Legal bases
We process personal data where necessary to perform a contract, with your consent, to comply with legal obligations, or for legitimate business interests such as fraud prevention and service improvement.
5. Sharing and processors
We do not sell your personal data. We may disclose or entrust data to the following types of service providers only as needed to provide our services:
- Payment providers, banks and financial institutions.
- Email, hosting, cloud and CDN providers.
- Customer service and technical support providers.
- Authorities where disclosure is required by law or regulation.
We require processors to apply appropriate confidentiality and security measures.
6. Payments
Payments are handled by third-party payment providers. We do not store your full card number, CVV or banking password. Payment providers may process payment data under their own privacy policies.
7. Cookies and analytics
We use essential cookies for sign-in, cart, language preference and security. We may use website analytics to understand visits and usage; where analytics uses cookies, it is handled in accordance with applicable law and your choices. You can manage or delete cookies in your browser, though some features may stop working.
8. Retention
We retain personal data only for as long as needed for the purposes described above. Order and transaction records are generally kept for at least 7 years in line with Hong Kong tax and accounting requirements. Other data is deleted or anonymised after a reasonable period.
9. Security
We use reasonable measures including SSL encryption, access controls, password protection and processor management to protect personal data against unauthorised access, loss or misuse. No internet transmission can be guaranteed to be completely secure.
10. Your rights
Under the Hong Kong Personal Data (Privacy) Ordinance, you have the right to request access to, correction of, deletion of or restriction of the use of your personal data, and to opt out of marketing at any time. Please contact us through the contact form and we will respond within a reasonable period.
11. Minors
If you are under 18, please use this website and provide personal data only with the consent of a parent or guardian.
12. Third-party sites
This website may link to third-party sites. Their privacy practices are not controlled by this policy; please review their privacy policies.
13. Changes
We may update this policy to reflect legal, service or operational changes. The updated version will be posted on this page and takes effect from the date shown.
14. Contact
If you have any questions about this policy or how we handle personal data, please contact customer service through the contact form on this website.
Last updated: November 2026
15. Cross-border transfers
Our payment, email, hosting, cloud and CDN providers may be located outside Hong Kong. We transfer personal data only as needed to provide the service and require providers to apply appropriate confidentiality and security measures.
16. Cookies and analytics
We use necessary cookies for login, cart, language and security functions. We also use Google Tag Manager and may load analytics tools to understand visits and usage. You can manage or delete cookies in your browser; where an opt-out is required by applicable law, we will provide it.
17. Data breaches
If a personal data breach occurs, we will take remediation steps appropriate to the applicable law and risk, and notify affected individuals and regulators where required.
18. Marketing
We send marketing messages only with any consent required by applicable law, or where otherwise permitted. You can opt out at any time using the unsubscribe link or by contacting us.
19. Operator and contact details
Chaomai Technology Limited, Unit 06, 27/F, Kwong Fat Commercial Centre, 48 Kwong Wah Street, Mong Kok, Hong Kong. Email: [email protected]. Phone: +852 5109 3046. Company Registration No.: 81229261; Business Registration No.: 81229261-000.
If you believe we have not handled your personal data properly, you may complain to the Office of the Privacy Commissioner for Personal Data (PCPD) in Hong Kong.