PRIVACY POLICY

Last updated: 21 October 2026

This Privacy Policy explains how ALLY (“we”, “us” or “our”) collects, uses and shares your personal information when you visit beyourally.com (the “Site”), make a purchase, use our services or communicate with us.
The Site is operated by Ally Redefined Limited, trading as ALLY. We handle personal data in accordance with Hong Kong’s Personal Data (Privacy) Ordinance, Cap. 486.

Information we collect: 

The information we collect depends on how you interact with us.

Information you provide

When you place an order, create an account, contact us, subscribe to updates or register for an event, we may collect:
Your name, email address and telephone number.
Billing and delivery addresses.
Account details and preferences.
Purchase history, payment confirmations and transaction records.
Information relating to deliveries, returns and refunds.
Messages, feedback and other information you choose to provide.
Marketing preferences and event registration details.
Required information will be identified when collected. Without it, we may be unable to fulfil your order or request. Other information is optional.

Information collected automatically

When you browse the Site, we and our service providers may collect information such as your IP address, browser and device details, pages viewed and interactions with the Site through cookies, server logs and similar technologies.

Information from service providers

We may receive information from providers supporting our services, such as payment confirmations and delivery updates.
Payments are processed by third-party payment providers, who collect and process the payment and billing information needed to complete your transaction.

How we use your information: 

We use your personal information to:
Process payments, fulfil orders and arrange deliveries.
Manage accounts, returns, exchanges and refunds.
Respond to enquiries and provide customer support.
Send necessary order, account and service updates.
Administer events and activities you register for.
Maintain and improve the Site and our services.
Detect fraud and protect against misuse.
Send marketing communications with the required consent.
Maintain business records and meet legal obligations.

We use your information for the purposes explained when it is collected, or directly related purposes permitted by law. Where consent is required for a new use, we will obtain it beforehand.

Sharing your information: 

We may share relevant personal information with service providers that help us operate our business, including providers of:
Ecommerce platforms, website hosting and technical support.
Payment processing and fraud prevention.
Warehousing, delivery and returns.
Customer support and communications.
Marketing and analytics.
Event booking and administration.

Providers processing information on our behalf receive access appropriate to their role. We use contractual or other safeguards to protect information they handle and prevent it from being retained longer than necessary. We may also share information with professional advisers or where required or permitted by law, including in response to lawful requests from public authorities. We will not provide your personal information to another organisation for its own direct marketing without the separate consent required by law.

Cookies and similar technologies:

Cookies are small files stored on your device. We and our service providers may use cookies and similar technologies to operate the Site, remember your preferences, understand website use and support relevant advertising. You can manage or disable cookies through your browser settings. Disabling certain cookies may affect features such as your shopping basket or checkout. Where consent is required for a particular technology or use of personal information, we will obtain it before that activity takes place.

Marketing communications: 

With your consent, we may use your name and contact details to send updates about ALLY products, collections, offers, styling content and ALLY CLUB events relating to community, well-being and personal growth. 

When you subscribe, we will explain the communication channels and information used, including any purchase history or preferences used to personalise marketing.Marketing subscriptions are optional. Making a purchase or registering for an event does not automatically subscribe you. You can withdraw your marketing consent at any time, free of charge, using the unsubscribe option in our messages or the email address below. We will act on your request promptly and within applicable legal requirements. You may still receive necessary communications about existing orders, accounts or event bookings.

International transfers: 

Our service providers may process or store your personal information outside Hong Kong. Where information is transferred overseas, we take reasonable steps to maintain appropriate protection, including contractual or other safeguards covering its use, security and retention.

Data retention: 

We retain personal information for as long as necessary to fulfil the purposes for which it was collected, meet legal and accounting requirements, and handle relevant disputes or claims.

We may retain a limited record of unsubscribe requests to ensure your marketing preferences are respected.
When information is no longer needed, we take reasonable steps to delete or anonymise it, including through arrangements with providers processing it on our behalf.

Security: 

We take reasonable technical and organisational measures to protect personal information against unauthorised or accidental access, processing, loss or use. Access is restricted according to business needs. No method of internet transmission or electronic storage is completely secure. Please keep your account credentials confidential.

Your rights: 

Under Hong Kong’s Personal Data (Privacy) Ordinance, you may request access to personal data we hold about you and ask us to correct inaccurate information. We may request information to verify your identity before handling your request. Requests will be processed within the applicable statutory time frame, subject to permitted exceptions. A reasonable fee may apply to a data access request where permitted by law, which we will explain in advance.
You may also request account closure or deletion of information we no longer need. Certain records may need to be retained for legal or other legitimate purposes.

Third-party websites: 

The Site may contain links to websites operated by other organisations. Their privacy practices are governed by their own policies. Please review those policies before providing personal information.

Changes to this policy:

We may update this policy to reflect changes in our services, practices or legal obligations. The latest version will be published on the Site with its revised date.
We will provide additional notice where required. Updating this policy does not replace any consent required for a new use of your information.