PRIVACY POLICY

OX® PRIVACY POLICY

OX Oceanix Watches LTD

The currently effective date 04.12.2025.

Last Updated: 14 .01.2026

This Privacy Policy (“Policy”) explains how OX Oceanix Watches LTD (海洋时计有限公司) (“OX”, “we”, “us”, “our”) collects, uses, discloses, transfers, and stores personal data when you access or use our websites, online store, customer service channels, social media pages, and any other online presence managed by us (collectively, the “Services”).

This Policy should be read together with our Website Terms of Use and, where you make a purchase, our Terms of Sale, Shipping & Returns Policy, and Warranty Policy.

Company details (Data User / Controller):
OX Oceanix Watches LTD (海洋时计有限公司)
TUNG LEE INDUSTRIAL BLDG, ROOM 19C, 12/F, 9 LAI YIP STREET, Kwun Tong, HONG KONG
Company ID: 79329726
Phone: +852 4609 8549
Email: ox@oceanixwatches.com

WHAT PERSONAL DATA DO WE COLLECT ABOUT YOU?

We collect personal data that you provide to us directly when you interact with our Services, for example when you contact us, create an account, place an order, subscribe to communications, participate in promotions or surveys, request customer support, or otherwise communicate with us.

Depending on the context, this personal data may include:

Information you provide directly

Contact information: name, email address, postal address, billing and shipping address, phone number.
Account information: username, password (stored in hashed form where applicable), preferences, favourites or wishlists.
Order and transaction information: products purchased, order history, delivery details, returns, warranty or repair requests.
Payment-related information: payments are processed through third-party payment providers (such as Stripe or PayPal). We do not generally store full payment card details, but we may receive limited transaction-related information (such as payment confirmation or transaction identifiers).
Customer service communications: enquiries, comments, feedback, repair and warranty history.
Marketing and surveys: subscription status, communication preferences, responses to surveys or promotional campaigns.
User-generated content: comments, reviews, photographs, images, or other content you choose to submit.

ID+™SYS / MYOX© mobile application data

If you choose to use the ID+™SYS feature through the MYOX© mobile application:

Sensitive information entered by you (such as emergency contact numbers, allergies, medical notes, or similar information) is entered voluntarily and is stored locally on your smartphone, under your control.
OX Oceanix Watches LTD does not collect or store this sensitive user-entered information on its servers as part of the normal operation of MYOX© / ID+™SYS.

For operational purposes only, we collect and store limited service-related data, such as:

your email address (used as an account identifier),
activation status of the MYOX© / ID+™SYS service, and
limited technical or security logs strictly necessary to operate, maintain, and secure the service.

Information collected automatically

When you access or use our Services, we may automatically collect certain technical and usage information, including:

IP address, browser type, device information, operating system, language settings;
pages viewed, session data, referral URLs, timestamps;
approximate location derived from IP address (not precise GPS unless you expressly allow it);
cookies and similar technologies (see our Cookie Notice for details).

WHAT DO WE BASE THE PROCESSING OF YOUR PERSONAL DATA ON?

We process your personal data in accordance with applicable data protection laws, including the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong (“PDPO”), and, where applicable, other international data protection regulations.

Our processing is based on one or more of the following grounds:

Performance of a contract: where processing is necessary to fulfil an order, provide a product or service, manage an account, or provide customer support.
Consent: where you have given your consent, for example for marketing communications, optional features, or certain cookies. You may withdraw your consent at any time.
Legal obligations: where processing is required to comply with accounting, tax, regulatory, or other legal requirements.
Legitimate interests: where processing is necessary for our legitimate business interests, such as improving our Services, ensuring security, preventing fraud, managing customer relationships, or developing products—provided such interests are not overridden by your rights and expectations.
Where users are located in jurisdictions with extraterritorial data protection laws (such as the European Union/EEA or the United Kingdom), we apply reasonable and proportionate measures to align with the essential requirements of those regulations, where applicable.

FOR WHAT PURPOSES DO WE PROCESS YOUR PERSONAL DATA?

We process your personal data for the following purposes:

To respond to enquiries, requests, and communications submitted through contact forms or other channels.
To create and manage user accounts, including authentication and account preferences.
To process orders, payments (via payment providers), shipping, returns, warranty and repair services.
To provide customer service and after-sales support.
To send transactional communications (order confirmations, delivery updates, service notifications).
Where permitted, to send marketing communications, newsletters, and promotional information, and to manage your participation in campaigns, contests, or surveys.
To analyse usage of our Services, improve website performance, and enhance user experience.
To protect the security and integrity of our systems, prevent fraud, and enforce our Terms and Conditions.
To comply with legal and regulatory obligations.

Where permitted, we may use limited profiling or personalisation (for example, based on purchase or browsing history) to tailor communications or offers, subject to your preferences and applicable law.

DISCLOSURE AND TRANSFER OF YOUR PERSONAL DATA

We may disclose personal data to the following categories of recipients:

Service providers (processors)
We may share personal data with trusted third-party service providers who process data on our behalf and under our instructions, such as:
website hosting and infrastructure providers;
payment processors (e.g., Stripe, PayPal);
logistics and shipping providers;
customer support, email, analytics, and marketing service providers.
These providers are contractually required to process personal data only for the purposes specified by us and to implement appropriate security measures.
Affiliates and authorised partners
Where relevant, we may share limited personal data with authorised distributors, importers, or service partners in countries where our brand is represented, for purposes such as fulfilment, customer support, or warranty service, subject to appropriate safeguards.
Legal and business disclosures
We may disclose personal data where required by law or where necessary to:
comply with legal obligations or lawful requests by authorities;
enforce our Terms and Conditions or other agreements;
protect the rights, property, or safety of OX Oceanix Watches LTD, our customers, or others;
prevent fraud or security threats.
If OX Oceanix Watches LTD or substantially all of its assets are acquired, personal data may be transferred as part of that transaction, subject to applicable legal requirements.
International transfers
As we operate internationally, personal data may be transferred to and processed in countries outside Hong Kong. Where such transfers occur, we implement appropriate safeguards, including contractual protections and technical and organisational security measures, as required by applicable law.

MYOX© / ID+™SYS clarification

User-entered ID+™SYS content stored locally within the MYOX© mobile application on your smartphone is not transferred to or stored on our servers as part of normal operation and is therefore not shared with third parties by OX Oceanix Watches LTD. Only the limited activation and account-related data described above may be processed by us and our service providers.

DURATION OF PERSONAL DATA PROCESSING

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy, including compliance with legal obligations.

Typical retention periods include:

Customer enquiries: up to twelve (12) months after the last interaction, unless further follow-up is required.

Account data: for as long as the account remains active, subject to legal retention obligations.

Orders and transactions: for the period required by applicable accounting and tax laws.

Warranty and repairs: for the warranty period plus a reasonable additional period for after-sales support and legal claims.

Marketing data: until you unsubscribe or object to further processing (with minimal suppression records retained to respect your preference).

MYOX© / ID+™SYS service data: until you disable the service or request deletion, subject to technical and legal constraints.

WHEN DO WE REQUEST YOUR PERSONAL DATA?

If you wish to enter into a contract with us (for example, to purchase products or request services), we must collect certain personal data to perform that contract, such as contact, delivery, and payment-related information. If you choose not to provide required information, we may not be able to complete the transaction or provide the requested service.

WHAT ARE YOUR RIGHTS?

Depending on your location and applicable law, you may have the right to:

request access to your personal data;
request correction of inaccurate or incomplete data;
request erasure or deletion of personal data (subject to legal exceptions);
object to or request restriction of certain processing activities, including direct marketing;
withdraw consent at any time where processing is based on consent;
request a copy of your personal data in a portable format, where applicable.

You also have the right to lodge a complaint with the competent data protection authority.

To exercise your rights, please contact us using the details provided below. We may request information to verify your identity before processing your request.

CALIFORNIA PRIVACY RIGHTS (CCPA / CPRA)

This section applies only to California residents and addresses requirements under the California Consumer Privacy Act as amended by the California Privacy Rights Act (“CCPA/CPRA”).

We do not sell personal information for monetary consideration. However, certain forms of sharing through cookies or similar technologies for advertising or analytics purposes may be considered “selling” or “sharing” under the CCPA/CPRA.

California residents may have the right to:

request disclosure of the categories and specific pieces of personal information collected;

request correction or deletion of personal information;

opt out of the sale or sharing of personal information for cross-context behavioural advertising;

not be discriminated against for exercising privacy rights.

You may opt out of applicable cookie-based selling or sharing through our cookie settings (where available) or by using recognised browser-based opt-out signals such as Global Privacy Control.

Requests can be submitted using the contact details below. We may need to verify your identity before responding.

SECURITY

We implement reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. However, no system can be guaranteed to be completely secure.

CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last updated” date. Where required by law, we will notify you of material changes.

If you have any questions, requests, or concerns regarding this Privacy Policy or the processing of your personal data, please contact:

OX Oceanix Watches LTD (海洋时计有限公司)
TUNG LEE INDUSTRIAL BLDG, ROOM 19C, 12/F
9 LAI YIP STREET, Kwun Tong, HONG KONG

Phone: +852 4609 8549
Email: ox@oceanixwatches.com

COOKIES & PIXELS

SALES CONDITIONS