No accounts, no tracking across the web, no advertising, nothing sold to anyone. We keep what an order needs and no more.
Who we are
BEADista is a small handmade jewellery shop based in Hong Kong. For anything on this page, write to customer@beadista.com.
What we collect, and when
Browsing the shop
Nothing. There is no account to create and no cookie banner because there are no tracking cookies to consent to. Your basket is stored in your own browser and stays there — it is not sent to us until you place an order, and clearing your browser data deletes it.
Placing an order
To make the piece and get it to you, we need your name, delivery address, email address and whatever you write in the notes. That reaches us as an order email, and we keep it as the record of the sale.
Paying
We never see your card. Card payments happen on Stripe's own checkout page, and Stripe tells us only that the payment succeeded, along with the address you gave them for delivery. Your card number never reaches this website and we could not store it if we wanted to.
Writing to us
The contact form on this site does not send anything anywhere by itself — it opens your own email program with the message ready to send. So we hold your enquiry exactly the way any person holds an email you sent them.
Who else touches it
We use a few services to run the shop. Each one only gets what it needs to do its job, and none of them is allowed to use your details for anything else.
- Stripe — card payments and fraud checks.
- Cloudflare — runs the small piece of software that turns your basket into a payment and sends the order to us.
- Resend — delivers the order email to our inbox.
- Our hosting provider — serves these pages, and keeps ordinary server logs (your IP address, which page, and when) for security. We do not use those logs for anything else.
- Etsy — customers in the United Kingdom, the EU and Norway buy through our Etsy shop, and that purchase is covered by Etsy's privacy policy rather than this one.
- Hongkong Post and our couriers — get the delivery address, because a parcel cannot be delivered without one.
Some of these are outside Hong Kong, so your details travel abroad in the ordinary course of sending you a parcel. We sell your data to nobody, and we do not send marketing emails.
Measuring visits
We currently run no analytics of any kind. We do not know which pages you looked at, how long you stayed, or where you came from.
We use Cloudflare Web Analytics to count visits. It sets no cookies, stores no personal data, and does not follow anyone between websites or build a profile of you — it counts page views, referrers and countries in aggregate, which is enough for us to know whether the shop is working. Nothing it collects identifies you, which is why there is no cookie banner on this site asking your permission for it.
How long we keep things
- Orders and receipts: seven years. Hong Kong requires a business to keep its records that long.
- Enquiries: until the conversation is finished and there is no reason to keep it.
- Your basket: in your browser, until you clear it.
What you can ask for
Under the Personal Data (Privacy) Ordinance you may ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it where we are not required to keep it. Write to customer@beadista.com and we will answer within 40 days, which is the limit the Ordinance sets.
Younger customers
Much of what we make is bought by and for young people. If you are under 18, please order with a parent or guardian. If you believe a child has given us details without a parent knowing, write to us and we will delete them.
Changes to this page
If this policy changes, the date at the top changes with it. There is no mailing list to notify, which is rather the point.