We value your privacy. This Privacy Policy describes how MOMUTO Group Limited, a limited company registered in Hong Kong (registration number 80176079), with registered address at Room D07, Phase 8/F, Kai Tak Factory Building, 99 King Fuk Street, San Po Kong, Kowloon City District, Hong Kong ("we", "us", or "our"), collects, uses, shares and processes your personal information as data controller.

1. Data We Collect

We collect personal data that you provide when using our products and services or interacting with us, including:

Account and order data: name, email address, phone number, delivery and billing address, and order history.

Payment data: transaction information processed through secure payment gateways. We do not store card details.

Usage and device data: IP address, browser type, operating system, and browsing behaviour on our website.

User content: logos, images, or other files you upload when designing your kit.

2. Legal Basis for Processing

We process your personal data on the following legal bases, in accordance with the EU General Data Protection Regulation (GDPR) where applicable:

Contract performance: processing is necessary to manage your order, process payment, and arrange delivery.

Legitimate interests: to improve our services, prevent fraud, and ensure platform security.

Consent: for marketing communications and non-essential cookies. You may withdraw consent at any time.

Legal obligation: where required to comply with applicable law.

3. How We Use Your Data

We use your personal data to:

— Process and deliver your orders.

— Communicate with you about your account or order.

— Improve and develop our products and services.

— Send marketing communications where you have given consent.

— Detect and prevent fraud and unlawful activity.

— Comply with our legal obligations.

4. Cookies

We use cookies and similar technologies for site functionality, content personalisation, and usage analysis. Cookies fall into the following categories:

Essential cookies: required for the site to function. No consent needed.

Analytics cookies: help us understand how the site is used. Activated only with your consent.

Marketing cookies: used to deliver relevant advertising. Activated only with your consent.

You can manage your cookie preferences at any time through your browser settings.

5. Sharing Your Data

We may share your personal data with third parties only in the following circumstances:

Service providers: partners who help us operate our business (payment gateways, logistics providers, marketing platforms), bound by confidentiality and data protection agreements.

Legal obligation: when required by law, court order, or competent authority.

Corporate transactions: in the event of a merger, acquisition, or asset sale, your data may be transferred to the new entity, who will be bound by this Policy.

We do not sell your personal data to third parties.

6. International Data Transfers

MOMUTO Group Limited operates from Hong Kong. If you are based in the European Union, your personal data will be transferred outside the European Economic Area. In such cases, we ensure that appropriate safeguards are in place in accordance with the GDPR, including standard contractual clauses or other recognised transfer mechanisms.

7. Security and Retention

We implement technical, administrative, and physical security measures to protect your data against unauthorised access, loss, or disclosure. No internet transmission system is entirely secure.

We retain your personal data for as long as necessary to fulfil the purposes described in this Policy or as required by applicable law.

8. Your Rights

If you are based in the European Union, you have the following rights regarding your personal data:

— Access: request a copy of the data we hold about you.

— Rectification: correct inaccurate or incomplete data.

— Erasure: request deletion of your data in certain circumstances.

— Restriction: limit how we process your data in certain cases.

— Portability: receive your data in a structured, machine-readable format.

— Objection: object to processing based on legitimate interest or for direct marketing.

To exercise any of these rights, contact us at info@momuto.com. We will respond within 30 days.

9. Third-Party Websites

Our site may contain links to third-party websites or services. We are not responsible for their privacy practices. We encourage you to read the privacy policy of any third party before providing them with your data.

10. Changes to This Policy

We may update this Policy periodically to reflect regulatory, technological, or operational changes. We will notify registered users of material changes by email at least 14 days before they take effect. Continued use of the Service after an update constitutes acceptance of the revised Policy.

11. Contact Us

For any questions about this Privacy Policy or how we handle your data, please contact us at info@momuto.com.