Privacy Policy

This policy explains how Norbu House collects and uses personal data through this website and in our dealings with clients, in line with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong.

We collect only the information you choose to give us — for example when you submit a form on this website, message us on WhatsApp, email us or meet us by appointment. Browsing the website does not require you to provide any personal data.

When you ask us to buy an item, the enquiry form collects your name, WhatsApp number and email address, a description of the item (category, maker, weight or reference, quantity), an optional expected price and whether the item is in Hong Kong.

Photographs you upload with a sell enquiry are stored in private storage, are not publicly accessible and are viewed only by Norbu House to assess the item. Please avoid including people, documents or location details in photographs.

When you contact us by WhatsApp or email, we receive your phone number or email address and the content of your messages. Messages sent by WhatsApp are also subject to WhatsApp's own privacy terms.

If you subscribe to our newsletter we store your email address together with a record of your consent: the date and time, the page on which you subscribed and the wording you agreed to. We use this only to send news and marketing emails from Norbu House.

This website uses a limited number of technologies:

• Language preference — a cookie that remembers whether you chose English or Traditional Chinese.
• Staff sign-in — a session cookie used only by Norbu House staff in the administration area.
• Vercel Web Analytics — aggregated, anonymised page-view statistics that do not use cookies and do not identify individual visitors.

We do not use advertising or cross-site tracking cookies.

We use personal data to:

• respond to enquiries and provide quotations;
• assess, buy, sell and deliver items, and arrange appointments;
• keep records of transactions and meet legal and regulatory obligations;
• send newsletters where you have consented; and
• maintain and improve the website.

Personal data is stored with reputable cloud providers using encrypted connections and access restricted to Norbu House. Seller photographs are held in private storage. No method of transmission or storage is completely secure, but we take reasonable steps to protect your data from unauthorised access, loss or misuse.

We do not sell personal data. We share it only with service providers who help us operate the website and our business, who may store data outside Hong Kong:

• Vercel — website hosting, private file storage and anonymised analytics;
• Neon — database hosting for enquiries and newsletter records;
• an email delivery provider, when used to send newsletters; and
• couriers or insurers, where needed to deliver an item you have purchased.

We may also disclose data where required by law or to a law-enforcement or regulatory authority.

We keep personal data only for as long as needed for the purposes above. Sell enquiries and photographs that do not lead to a transaction are deleted when no longer needed; transaction records are retained for the period required by law. When you unsubscribe, we keep a minimal record of your email address and consent history so that we do not email you again.

We will only use your email address for direct marketing if you have given consent by ticking the newsletter checkbox, which is never pre-selected. Marketing emails may cover new arrivals, items we wish to buy and market notes relating to precious metals and watches. We do not provide your data to others for their marketing.

You may withdraw consent at any time, free of charge, by using the unsubscribe link included in every marketing email or by emailing enquiries@norbu.house. We will stop sending marketing emails promptly.

You may request access to, or correction of, the personal data we hold about you. Please send your request in writing to the address below. We will respond within the period required by the Ordinance and may charge a fee that is not excessive for an access request.

For privacy questions or requests, contact Norbu House at enquiries@norbu.house or through our contact page.