Privacy policy
Last Updated: July 2026
A2K London ("A2K London," "we," "us," or "our") is the trading name of Timeway Enterprises Ltd., a company incorporated in Hong Kong. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit www.a2k.london (the "Site"), place an order, create an account, or otherwise interact with our services.
We encourage you to read this Privacy Policy carefully to understand how your information is handled.
1. Scope and Updates
This Policy applies to personal data collected through the Site and through any related order, customer-service, or marketing communications, regardless of the device or channel used. It does not cover the practices of third-party platforms we merely link to, or of vendors acting in their own capacity rather than on our instructions.
We may revise this Policy from time to time — for example, if we start offering a new service, change payment or delivery partners, or need to reflect a change in the law. Material changes will be reflected in an updated “Last Updated” date above, and where a change meaningfully affects your rights we will take reasonable steps to bring it to your attention (such as a Site notice or an email to registered customers) before it takes effect.
2. Personal Data We Collect
We collect only what is reasonably needed to run the Site and fulfil orders. The categories below reflect our practice over the past 12 months.
2.1 Provided directly by you
- Identity and contact details — name, email address, phone number, billing and delivery address.
- Order details — items purchased, order value, payment confirmation (not full card numbers — see 2.3), returns and exchange records.
- Account details — username, password (stored in hashed form), and any security information you set up to protect your account.
- Correspondence — anything you send us via email, contact forms, live chat, or social media messaging, including attachments you choose to share.
2.2 Collected automatically
When you browse the Site, our servers and analytics tools automatically log technical information such as your IP address, browser and device type, pages viewed, referring links, and approximate location inferred from your IP address. We use cookies and similar technologies to do this; see Section 5 for detail and how to control them.
2.3 Received from third parties
- Payment processors — confirm to us that a payment has succeeded or failed. We do not receive or store your full card number; that is held by the processor under its own security standards (e.g. PCI-DSS).
- Platform providers (such as Shopify), payment providers, and logistics partners — our e-commerce platform, payment processors, and courier partners share the operational data (e.g. order and delivery status) needed to run the Site and fulfil your order.
- Advertising and analytics partners — where you have interacted with our ads or emails, these partners may pass back engagement data (e.g. that an ad was clicked) so we can measure performance.
3. How and Why We Use Your Data
| Purpose | Why we're allowed to do this |
|---|---|
| Process orders, payments, delivery and returns | Necessary to perform our contract with you |
| Set up and maintain your account | Necessary to perform our contract with you |
| Respond to customer service queries | Our legitimate interest in supporting our customers, and/or contract performance |
| Send order and account notifications | Necessary to perform our contract with you |
| Send marketing communications | Your consent (where required by law) or our legitimate interest in promoting our products; you can opt out at any time |
| Detect and prevent fraud, abuse, and security incidents | Our legitimate interest in keeping the Site and our customers safe |
| Analyse Site usage to improve performance and content | Our legitimate interest in operating and improving the Site |
| Comply with legal, tax, and accounting obligations | Necessary for compliance with a legal obligation |
We do not use automated decision-making that produces legal or similarly significant effects on you without human involvement, and we do not use your data to infer sensitive characteristics about you.
4. Who We Share Data With
We disclose personal data only where there is a genuine operational, legal, or contractual reason to do so:
- Service providers — payment processors, delivery and courier companies, IT hosting and security providers, and customer-service tools, each bound by contract to use your data only to provide their service to us.
- Professional advisors — lawyers, accountants, or auditors, where needed for their engagement.
- Authorities and legal counterparties — where disclosure is required to comply with law, respond to a valid legal request, or protect our rights, property, or safety, or that of our customers.
- Successors in a corporate transaction — if A2K London is involved in a merger, acquisition, or asset sale, customer data may transfer as part of that transaction, subject to this Policy or a comparable one.
We do not sell personal data to third parties for their own independent marketing purposes, and we have not done so in the past 12 months.
5. Cookies and Similar Technologies
We use a small number of essential cookies needed to operate the shopping cart, checkout, and account login, plus optional analytics and marketing cookies that help us understand Site performance and measure advertising. You can manage or withdraw consent to non-essential cookies through the cookie banner on the Site, or by adjusting your browser settings to block or delete cookies. Blocking essential cookies may prevent parts of the Site — such as checkout — from working correctly.
Our Site does not currently respond to browser “do not track” signals, as no common industry standard for interpreting them has been adopted.
6. International Data Transfers
A2K London is based in Hong Kong, and some of our service providers are located in other jurisdictions, including the European Economic Area, the United Kingdom, and elsewhere. Where we transfer personal data of individuals in the EEA or UK outside those regions, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses or an equivalent mechanism recognised by the competent UK authority, unless the destination is already recognised as providing an adequate level of protection.
7. Retention
We keep personal data only for as long as reasonably necessary for the purposes described in this Policy — typically for the duration of your account, plus a period afterwards to meet tax, accounting, consumer-protection, and dispute-resolution obligations under Hong Kong and other applicable law. Where data is no longer needed, we delete or anonymise it.
8. Security
We apply appropriate technical and organisational safeguards — including encryption in transit and access controls — to protect the data we hold. No system is completely secure, however, and we cannot guarantee that data transmitted to us over the internet will be free from unauthorised access. Please avoid sending highly sensitive information (such as full card details) to us by email.
9. Children's Data
The Site is intended for adults and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, please contact us using the details in Section 12 so we can delete it.
10. Your Rights
Depending on where you are based, you may have the following rights in relation to your personal data. These are not absolute and may be subject to exceptions under applicable law:
- Access a copy of the personal data we hold about you
- Correct inaccurate or incomplete data
- Request deletion of your data
- Request a portable copy of data you provided to us
- Object to, or request that we restrict, certain processing
- Withdraw consent where processing is based on consent
- Opt out of marketing communications at any time, via the unsubscribe link or by contacting us directly
To exercise any of these rights, contact us using the details in Section 12. We may need to verify your identity before acting on a request, and, where permitted by law, may ask an authorised agent to provide proof of authorisation. We aim to respond within the timeframe required by applicable law, and will not discriminate against you for exercising any of these rights.
11. Complaints
If you're unhappy with how we've handled your data, please raise it with us first using the contact details below so we can try to resolve it directly. If you remain unsatisfied, you may also have the right to lodge a complaint with your local data protection authority — for example, the Office of the Privacy Commissioner for Personal Data in Hong Kong, or, for EEA residents, your national supervisory authority.
12. Contact Us
Timeway Enterprises Ltd.
Trading as A2K London
Unit A03, 8/F
Park Fook Industrial Building
615–617 Tai Nan West Street
Cheung Sha Wan
Kowloon
Hong Kong
Email:
support@a2k.london
Unless stated otherwise, Timeway Enterprises Ltd. is the data controller responsible for the personal data described in this Policy.