Legal · Effective 27 October 2026

Privacy Policy

This policy explains what personal data we collect when you visit this website, contact us or buy from us, how we use it and the choices you have.

1. Who we are

This website is operated by Apex Trade & Retail Limited, a company incorporated in Hong Kong and trading as Crestline (“we”, “us”, “our”). We are the data user responsible for your personal data under the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong (“PDPO”).

2. Data we collect

• Contact details — your name, company, email address, phone number and delivery or billing address.
• Order information — products, quantities, invoices, payment status and shipping records.
• Correspondence — the content of emails, enquiries, specifications and files you send us.
• Technical data — IP address, browser type, device information and pages visited, collected through server logs.

We do not knowingly collect personal data from anyone under 18.

3. How we use your data

• to answer enquiries and prepare quotations;
• to process, ship and support your orders, including returns and refunds;
• to issue invoices and meet our accounting, tax and customs obligations;
• to prevent fraud and keep our website and systems secure;
• to send you news or offers, only where you have agreed to receive them.

We will not use your personal data for direct marketing without your consent. You can withdraw consent at any time by writing to us or using the unsubscribe link in any marketing email.

4. Payments

Card and online payments are handled by third-party payment providers. We do not receive or store your full card number or security code; we only receive confirmation of the payment and limited details such as the card type and last four digits.

5. Who we share data with

We share personal data only as needed to run our business:

• payment processors and banks;
• couriers, freight forwarders and customs brokers delivering your goods;
• manufacturers and inspection partners, limited to what is needed to fulfil your order;
• IT, hosting and email providers acting on our instructions;
• professional advisers, and authorities where the law requires it.

We do not sell personal data.

6. International transfers

Because we trade internationally, your data may be processed outside Hong Kong — for example by a courier in the destination country. Where this happens we take reasonable steps to ensure the data is protected to a standard comparable to the PDPO.

7. How long we keep data

We keep personal data only for as long as needed for the purposes above. Business and transaction records are kept for at least seven years, as required by Hong Kong law. Enquiries that do not lead to an order are deleted after two years.

8. Security

We use reasonable technical and organisational measures to protect personal data against unauthorised access, loss or misuse, including access controls and encrypted connections. No method of transmission over the internet is completely secure.

9. Cookies

This website does not use advertising or tracking cookies. Fonts are loaded from Google Fonts and product images from Unsplash’s image service; both receive your IP address in order to deliver the files. If we add analytics or other cookies in future, we will update this policy and ask for consent where required.

10. Your rights

Under the PDPO you may ask us for a copy of the personal data we hold about you and ask us to correct it if it is inaccurate. We will respond within 40 days. We may charge a reasonable fee for a data access request, as permitted by law.

11. Changes to this policy

We may update this policy from time to time. The latest version will always be published on this page with its effective date.

12. Contact

Questions about this policy or your personal data can be sent to: