Privacy Policy

PremLogin (hereinafter referred to as the "Platform", "we", "us" or "our") understands the importance of your privacy. This Privacy Policy explains in detail how we collect, use, store, share, and protect your personal data. Please read this Policy carefully before using the Service. When you register an account, purchase a subscription, contact customer support, or browse this website, you are deemed to have consented to this Policy. This Policy is formulated in accordance with the Hong Kong Personal Data (Privacy) Ordinance (Cap. 486, PDPO), the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable standards.

① Data We Collect

The Platform collects only the minimum data necessary to provide the Service, managed by category and purpose:

• Account Data: email address, password (stored as a salted hash), mobile phone number (optional), nickname, and avatar
• Order Data: product name / order amount / payment method / transaction time
• Usage Data: login time, login IP address, device model, and browser type (used for risk control and service optimization)
• Payment Data: last four digits of your credit card and PayPal email (full card numbers are stored by the payment processor; the Platform never has access to them)
• Customer Support Records: the content of your conversations with our LINE / Telegram / email customer support
• Browsing Preferences: used to remember your login status, language preference, and shopping cart contents

We never collect any in-service usage content from any SaaS platform, such as your Netflix viewing history, Spotify listening history, ChatGPT conversation content, or YouTube subscription lists.

② Cookies and Tracking Technologies

This website uses cookies and similar technologies to maintain your login status, remember your preferences (language / currency), and perform anonymized statistical analysis.

• Essential Cookies: maintain login, shopping cart, and security verification; disabling them will impair the normal operation of the website
• Preference Cookies: remember your language / currency / display settings
• Analytics Cookies: analyze traffic and usage through anonymized, aggregated data to improve the Service
• Validity Period: login cookies last approximately 2 days (extended to 2 weeks if "Remember Me" is selected); preference cookies last approximately 1 year

You may view, block, or delete cookies at any time through your browser settings (the exact steps vary by browser; please refer to your browser's documentation). Blocking essential cookies may render certain features unavailable.

③ Third-Party Account Sign-In

The Platform supports sign-in via third-party authentication services (e.g., Google). When you sign in with a third-party account such as Google, you consent to that service providing the Platform with basic information such as your name and email address, which we use solely to create and sign in to your account.

• We will not thereby gain access to any other content in that third-party service (such as your contacts, cloud files, or browsing history)
• The third-party authentication service's handling of your data is separately governed by its own privacy policy, which we recommend you also read
• You may switch to signing in to the Platform with your email address and password at any time

④ How Your Data Is Used

We process your personal data for the following purposes:

• Providing subscription services, customer support, and order notifications
• Detecting and preventing account abuse, credit card fraud, and money laundering
• Improving the service experience (through aggregated, anonymized data analysis)
• Complying with legal and regulatory requirements (such as tax filing and anti-money-laundering reporting)
• Marketing communications (sent only where you have consented to receive them)

⑤ Data Sharing

We never sell your personal data to any third party. We share necessary data only in the following strictly limited circumstances:

• Payment Channels: sharing the payment data necessary to complete transactions with payment processors such as credit card networks / Google Pay / JKO Pay / PayPal
• Anti-Fraud Cooperation: sharing necessary anomalous IP addresses and suspicious transaction patterns with third-party anti-fraud service providers
• Legal Requirements: disclosure to government authorities pursuant to law (such as criminal investigations or tax audits)
• SaaS Service Providers: the minimum data necessary to activate your subscription (email address only; no payment data)

⑥ Data Retention

We apply differentiated retention periods by data category:

• Account data: erased 30 days after you delete your account
• Order data: retained for 7 years in accordance with applicable accounting and tax legislation (such as the Hong Kong Inland Revenue Ordinance)
• Customer support records: generally retained for 2 years for quality improvement and dispute resolution; records involving anti-money-laundering review are retained for at least 5 years as required by law
• Browsing preferences: 30 days to 2 years, depending on category

⑦ Data Security

We adopt multi-layered technical and organizational measures to protect your data:

• Transport layer: site-wide HTTPS / TLS 1.3 encryption
• Storage layer: passwords hashed with bcrypt; sensitive fields encrypted with AES-256
• Access control: staff access limited to the minimum necessary for their duties; all back-office operations are recorded in audit logs
• Regular penetration testing and third-party security assessments

⑧ Your Rights

Under applicable laws (Hong Kong PDPO / GDPR / CCPA), you are entitled to the following rights:

• Right of Access: request access to all data we hold about you
• Right to Rectification: request correction of inaccurate or outdated data
• Right to Erasure: request deletion of your account and related data (the right to be forgotten)
• Right to Object: object to our processing of your data in specific ways
• Right to Data Portability: export your data in a structured format (JSON / CSV)
• Right to Withdraw Consent: withdraw any consent you have previously given (e.g., for marketing communications) at any time; withdrawal does not affect the lawfulness of processing carried out prior to withdrawal

To exercise any of the above rights, please email privacy@premlogin.com (subject line: Data Rights Request) with your name, contact details, and the right you wish to exercise. We will provide a full response within 30 days; if an extension is required, we will notify you separately, and the period may be extended by up to a further 60 days.

⑨ Cross-Border Transfers

As the Platform's servers are located in Hong Kong and Singapore, your data may be transferred across borders. We have adopted measures such as Standard Contractual Clauses (SCCs) to ensure that cross-border transfers comply with GDPR standards.

⑩ Data Controllers

The Platform is jointly operated by the following companies, which act as joint data controllers of your personal data:

• Hong Kong company: Hongkong PremLogin Limited, registered address: Room 1022A, Beverley Commercial Centre, 87-105 Chatham Road South, Tsim Sha Tsui, Kowloon, Hong Kong
• United Kingdom company: PREMLOGIN LIMITED, registered address: Suite 6630, 61 Bridge Street, Kington, United Kingdom, HR5 3DJ

The above companies are affiliated entities that jointly operate and manage the Platform; all personal data matters relating to the Platform are handled and administered by the above companies. In the event of any discrepancy between language versions, the Traditional Chinese version of this Policy shall prevail.

⑪ Changes to This Policy

Any material change to this Policy will be announced on this website and notified to all registered users by email. A buffer period of at least 30 days will be provided before material changes take effect.

⑫ Contact Us

For privacy-related inquiries, please contact our Data Protection Officer (DPO):

• Email: privacy@premlogin.com
• LINE support: @premlogin
• Telegram: @premlogin_support
• Address: Room 1022A, Beverley Commercial Centre, 87-105 Chatham Road South, Tsim Sha Tsui, Kowloon, Hong Kong