Privacy policy
Last updated: 2026-10-24
CAP STUDIO ("we") respects your privacy and handles your personal data in line with Hong Kong's Personal Data (Privacy) Ordinance. This policy explains what data we collect, why, and how we handle it.
1. What we collect
- Order data: the name (if provided) and email you enter at payment, the plan you bought, and the time and amount of payment.
- Payment data: handled directly by Stripe. We never see or store your card number. We only receive whether payment succeeded and a transaction reference.
- eSIM data: the supplier's order number, QR code, activation details and ICCID.
- Support data: what you tell us through the website contact form or email, and the WhatsApp phone number if you choose to give one.
- Basic technical data: our web host may log IP addresses and browser details for security and abuse prevention.
2. How we use it
- To complete your order, including placing it with the supplier and emailing your eSIM.
- To handle refunds, enquiries and support, and to keep order records for later checks.
- To prevent fraud and abuse, handle payment disputes, and meet legal requirements.
We don't sell your personal data, we don't use it for third-party advertising, and we won't use your email for marketing unless you separately agree.
3. Who we share it with
- Stripe, to process payment.
- Our eSIM providers, who receive your order number, name (if provided) and email address so your eSIM can be created and delivered.
- Our cloud hosting and website infrastructure provider, which hosts this site, stores order status and support enquiry records, and handles forwarding of our support email.
- Our email delivery provider, which sends your eSIM and our support replies to your inbox and therefore receives your email address and the message content.
- A messaging tool for our support team, which we use to receive the content of your support enquiries (what you write, your reference number and the phone number if you choose to give one, but not your email address) so that our support staff can reply; our system then emails our reply to you. Messages inside that tool are handled under its provider's own privacy policy.
- WhatsApp, if you leave a phone number in the contact form and we contact you on our business WhatsApp account; your number and the conversation are then handled under WhatsApp's own policies.
- Authorities or payment providers, where the law requires it.
4. Transfers outside Hong Kong
These providers may process data outside Hong Kong, including in the US and Europe. We share data only with those needed to provide the service.
5. How long we keep it
Order and support records are kept in our systems for up to 400 days (a little longer than the longest eSIM validity, to handle refunds, disputes and enquiries) and are then deleted automatically. Our payment processor, email service and support messaging tool keep data under their own policies and legal requirements.
6. Data security
We take reasonable technical and organisational measures to protect your data. No method of transmission or storage online can be guaranteed to be completely secure.
7. Cookies and local storage
This site doesn't use advertising or tracking cookies. We may store simple settings such as your language choice in your browser. Stripe's checkout page may use essential cookies to keep payment secure.
8. Your rights
You can ask to see and correct the personal data we hold about you, and ask us to delete data we no longer need (subject to legal record-keeping requirements). Contact us using the details below; we may need to verify your identity first. If you are in the EU or UK you also have rights under local data protection law, such as objection and portability.
9. Children
This site isn't designed for people under 18 and we don't knowingly collect children's data.
10. Changes
We may update this policy. The updated version takes effect when posted on this page.
11. Contact
Contact: Contact us; email: support@farpocket.com