Privacy Policy

Simplits Limited (“Simplits”, “we”, “us”) is committed to protecting your privacy. This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and the rights you have in relation to it.

This Policy applies to the Simplits website, the Simplits software-as-a-service platform, and any related services (collectively, the “Service”). It does not apply to third-party services that you connect to the Service; those services are governed by their own privacy policies.

Simplits is a company incorporated in Hong Kong with its registered office at Unit B6, 12th Floor, Wing Wah Building, No. 677 King’s Road, Quarry Bay, Hong Kong Island, Hong Kong.

We act as a data controller for personal data we collect about visitors to our website, prospective customers, and account administrators — for example, when you sign up, request access, or contact us.

We act as a data processor for personal data that our customers submit to the Service or that flows through the Service from marketplaces and other connected systems (for example, end-buyer names, shipping addresses, and order details). Our processing of that data on behalf of customers is governed by the customer’s instructions and our Data Processing Addendum (DPA).

We collect the following categories of personal data:

• Account data — name, work email, company name, role, password hash, and any profile information you provide.
• Billing data — billing address, tax identifier, and limited payment metadata. Full payment card details are collected and stored by our payment processor, not by us.
• Usage and device data — IP address, browser and operating system, referring pages, pages viewed, timestamps, and interactions with the Service. This helps us operate, secure, and improve the Service.
• Support and communication data — the content of emails, messages, or calls you exchange with us, and any metadata about those interactions.
• Customer Data processed on behalf of our customers— order, shipping, and buyer-contact data that flows through the Service from connected marketplaces. We process this as a processor; the customer is the controller.
• Cookie and similar technology data — see the Cookies section below.

We use personal data for the following purposes:

• to provide, operate, secure, and improve the Service, including authentication, troubleshooting, and preventing abuse;
• to process payments, send invoices, and manage our commercial relationship with customers;
• to communicate with you about your account, security notices, service announcements, and material changes to our terms or policies;
• to provide customer support and respond to your requests;
• with appropriate consent or where permitted by law, to send marketing communications about Simplits features and products you can opt out of at any time;
• to comply with legal obligations, enforce our terms, and protect our rights, property, and users.

Where the EU or UK General Data Protection Regulation applies, we rely on the following legal bases:

• Contract — to provide the Service to you or take steps at your request before entering a contract.
• Legitimate interests — to secure and improve the Service, to operate our business, to communicate with customers about products they use, and to prevent fraud or abuse. Where we rely on legitimate interests, we assess and balance those interests against your rights.
• Consent — where required, for example for certain marketing communications or non-essential cookies. You can withdraw consent at any time.
• Legal obligation — where we must process personal data to comply with applicable law (for example, tax and accounting).

Under the Hong Kong Personal Data (Privacy) Ordinance, we collect personal data only for lawful purposes directly related to our functions and activities and in a fair manner.

We do not sell personal data. We share personal data only as described below:

• Service providers and sub-processors who help us run the Service — for example, cloud infrastructure, database, email delivery, payment processing, analytics, and customer support. These parties process personal data on our behalf under written contracts and are limited to doing so for the purposes we specify.
• Third parties at your direction — for example, marketplaces, logistics providers, or other services you choose to connect to the Service.
• Professional advisors such as auditors, lawyers, and accountants, under duties of confidentiality.
• Authorities and others where required by law, legal process, or to protect the rights, property, or safety of Simplits, our users, or the public.
• Corporate transactions — in connection with a merger, acquisition, financing, or sale of assets, personal data may be transferred to the relevant parties, subject to appropriate confidentiality protections.

An up-to-date list of sub-processors that process Customer Data on behalf of our customers is maintained in the DPA.

We operate globally. Personal data we collect may be transferred to, stored, and processed in jurisdictions outside the one where you are located, including Hong Kong, the European Economic Area, the United Kingdom, and the United States.

Where personal data is transferred from the EEA, the UK, or Switzerland to a country that is not recognised as providing an adequate level of data protection, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (SCCs) and, where relevant, the UK International Data Transfer Addendum.

We retain personal data for as long as necessary to fulfil the purposes described in this Policy, including to provide the Service, comply with legal, accounting, or reporting obligations, resolve disputes, and enforce our agreements.

Retention periods vary by data category and context. When personal data is no longer needed, we delete or anonymise it. Customer Data processed on behalf of customers is retained and deleted in accordance with the customer’s instructions and our DPA.

Depending on where you are located, you may have the following rights in relation to your personal data:

• access a copy of the personal data we hold about you;
• ask us to correct inaccurate or incomplete personal data;
• ask us to delete personal data in certain circumstances;
• ask us to restrict or object to certain processing, or to port your personal data to another provider;
• withdraw consent where we rely on consent;
• lodge a complaint with your local data protection authority or, in Hong Kong, the Office of the Privacy Commissioner for Personal Data.

To exercise your rights, contact us at privacy@simplits.net. If you are an end-user of a Simplits customer, please contact that customer directly — we will assist them in responding to your request.

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, and destruction. These include encryption of data in transit, access controls based on least privilege, logging and monitoring, and regular reviews of our security practices.

No method of transmission or storage is completely secure. You are responsible for keeping your account credentials confidential and for using strong, unique passwords.

We use cookies and similar technologies to operate and secure the Service, remember your preferences, measure performance, and understand how the Service is used.

• Strictly necessary cookies are required to authenticate users and deliver core functionality.
• Functional cookies remember preferences such as language and region.
• Analytics cookies help us understand how people use our website and product so we can improve them.

You can control cookies through your browser settings and, where required, via our cookie banner. Disabling some cookies may affect the functionality of the Service.

The Service is intended for business users and is not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take appropriate steps to delete it.

We may update this Policy from time to time to reflect changes in our practices, services, or legal requirements. When we make material changes, we will provide reasonable notice, for example by email or in-product notification, and update the “Last updated” date above.

For questions about this Policy or to exercise your rights, contact us at:

If you are in the EEA or the UK and wish to contact our representative or lodge a request, please email privacy@simplits.net and we will route your request accordingly.