Privacy policy
PRIVACY POLICY
LiveAway — Operated by Geko Trading Limited
Effective Date: March 10, 2026
Last Updated: March 10, 2026
INTRODUCTION AND SCOPE
Geko Trading Limited, a company registered under the laws of the Hong Kong Special Administrative Region of the People's Republic of China (Company/Trade/VAT Registration Number: 74906915), operating the e-commerce storefront LiveAway at www.liveaway.store (hereinafter "Company," "we," "us," or "our"), is committed to protecting the privacy and personal information of all individuals who access or interact with our Website.
This Privacy Policy (hereinafter "Policy") describes in comprehensive detail: (a) the categories of personal information we collect; (b) the methods by which we collect such information; (c) the purposes for which we process it; (d) the parties with whom we may share it; (e) the retention periods applicable to different categories of data; (f) the rights available to you with respect to your personal information; and (g) the security measures we employ to safeguard your data.
This Policy applies to all personal information collected through www.liveaway.store and any associated subdomains, as well as personal information provided to us through email, telephone, postal mail, or any other means of communication in connection with your use of the Website or purchase of our Products.
This Policy is incorporated by reference into, and forms an integral part of, our Terms of Service. Capitalized terms not defined in this Policy have the meanings ascribed to them in the Terms of Service.
SECTION 1 — REGULATORY FRAMEWORK AND APPLICABLE LAW
1.1 Hong Kong Personal Data (Privacy) Ordinance. The collection, holding, processing, and use of personal data in Hong Kong is governed by the Personal Data (Privacy) Ordinance (Cap. 486) ("PDPO") and the data protection principles set out therein. The Company, as a data user, complies with the obligations imposed by the PDPO.
1.2 California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA). To the extent that personal information is collected from residents of the State of California, United States, the Company complies with the California Consumer Privacy Act of 2018 (Cal. Civ. Code § 1798.100 et seq.) as amended by the California Privacy Rights Act of 2020. California residents are afforded specific rights described in Section 9 of this Policy.
1.3 Children's Online Privacy Protection Act (COPPA). The Website is not directed to children under the age of thirteen (13). The Company does not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at juan@gekotrade.com so that we may delete the relevant data.
1.4 CAN-SPAM Act. The Company's email marketing communications comply with the requirements of the Controlling the Assault of Non-Solicited Pornography and Marketing Act of 2003 (15 U.S.C. § 7701 et seq.).
1.5 FTC Act. The Company's data practices are subject to enforcement by the United States Federal Trade Commission under Section 5 of the FTC Act (15 U.S.C. § 45) prohibiting unfair or deceptive acts or practices.
SECTION 2 — INFORMATION WE COLLECT
We collect personal information through multiple channels and across different stages of your interaction with the Website. The categories of personal information we collect include, but are not limited to, the following:
2.1 Information You Provide Directly
(a) Account Registration Information: When you create an account on the Website, we collect your full name, email address, and a password of your choosing (stored in encrypted form). You may optionally provide additional profile information.
(b) Purchase and Transaction Information: When you place an Order, we collect your billing name, billing address, shipping name, shipping address, email address, telephone number, and payment method details. Payment card information (card number, CVV, expiry date) is collected and processed exclusively by our third-party payment processor (Shopify Payments and affiliated processors) and is not stored on our servers. We retain only a tokenized reference and the last four digits of your card for order management purposes.
(c) Communications: When you contact us via email, telephone, or through any contact form on the Website, we collect and retain records of such communications, including your name, contact details, and the content of your message.
(d) Newsletter and Marketing Sign-Ups: If you subscribe to our email newsletter, we collect your email address and, where voluntarily provided, your name. You may unsubscribe at any time using the opt-out link included in every marketing communication.
2.2 Information Collected Automatically
When you access or use the Website, we automatically collect certain technical and behavioral information through cookies, web beacons, pixel tags, and similar tracking technologies:
(a) Device and Browser Information: Device type, operating system and version, browser type and version, screen resolution, language settings, time zone, and device identifiers.
(b) Log and Usage Data: IP address, referring URL, exit URL, pages viewed and in what order, time and date of each visit, duration of visit, links clicked, search queries entered on the Website, and error logs.
(c) Location Data: Approximate geographic location derived from your IP address (country, region, city). We do not collect precise GPS-level location data.
(d) Transaction Behavior: Items added to cart, items removed from cart, products viewed, products purchased, and purchase frequency.
2.3 Information from Third Parties
(a) Shopify Platform Data: The Website is hosted on and powered by Shopify Inc. Shopify's platform collects and processes certain data on our behalf, including fraud analysis signals, device fingerprinting for chargeback protection, and checkout completion data. Shopify's privacy practices are governed by Shopify's own Privacy Policy, available at www.shopify.com/legal/privacy.
(b) Meta Platforms (Facebook/Instagram). We use the Meta Pixel (also known as the Facebook Pixel) on our Website. The Meta Pixel collects data about your actions on our Website — including page views, items viewed, items added to cart, and purchases completed — and associates that data with your Meta account profile where you are logged in or identifiable. This data is used to measure the effectiveness of our advertising campaigns on Facebook and Instagram, to serve you relevant advertisements, and to build custom and lookalike audiences. Meta Platforms' data practices are governed by Meta's Data Policy, available at www.facebook.com/privacy/explanation. You may opt out of Meta's use of your data for advertising purposes at www.facebook.com/ads/preferences.
(c) Google Analytics 4 (GA4). We use Google Analytics 4, a web analytics service provided by Google LLC. GA4 uses cookies and similar technologies to collect and report statistical information about how visitors use the Website, including pages visited, time on site, traffic sources, and conversion events. The data collected by Google Analytics is anonymized and aggregated to the extent possible; however, certain data may be associated with your Google account if you are signed in. Google's privacy practices are governed by Google's Privacy Policy, available at policies.google.com/privacy. You may opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on available at tools.google.com/dlpage/gaoptout.
(d) Payment Processors. Your payment information is handled by Shopify Payments and affiliated financial institutions. These processors may collect additional fraud-prevention information in accordance with their own privacy policies and applicable financial regulations.
SECTION 3 — HOW WE USE YOUR INFORMATION
We process your personal information for the following specific purposes, each grounded in a legitimate legal basis:
3.1 Order Fulfillment and Customer Service. To process your Orders, arrange delivery, send order confirmation and tracking information, and provide post-sale customer support. (Legal basis: contractual necessity.)
3.2 Account Management. To create and maintain your account on the Website, authenticate your identity, and allow you to access your order history and saved preferences. (Legal basis: contractual necessity.)
3.3 Payment Processing and Fraud Prevention. To authorize and process payments, detect and prevent fraudulent transactions, verify payment information, and comply with financial crime prevention obligations. (Legal basis: contractual necessity; legitimate interest; legal compliance.)
3.4 Legal Compliance. To comply with applicable laws, regulations, court orders, subpoenas, and lawful requests from government and law enforcement authorities, including but not limited to tax reporting, customs documentation, consumer protection laws, and anti-money laundering regulations. (Legal basis: legal obligation.)
3.5 Marketing and Promotional Communications. To send you promotional emails, newsletters, and information about new products, offers, and events — but only if you have opted in to receive such communications. (Legal basis: consent. You may withdraw consent at any time.)
3.6 Website Improvement and Analytics. To analyze how visitors use the Website, identify trends, diagnose technical problems, measure the effectiveness of our marketing campaigns, and improve the overall user experience. (Legal basis: legitimate interest.)
3.7 Targeted Advertising. To serve you personalized advertisements on third-party platforms (including Facebook, Instagram, and Google Display Network) based on your browsing behavior and purchase history. (Legal basis: legitimate interest; consent where required by applicable law.)
3.8 Security and Enforcement. To protect the security and integrity of the Website, investigate violations of our Terms of Service, and enforce our legal rights. (Legal basis: legitimate interest; legal compliance.)
3.9 Business Operations. For internal purposes such as accounting, auditing, record-keeping, and business analytics. (Legal basis: legitimate interest; legal obligation.)
SECTION 4 — SHARING AND DISCLOSURE OF PERSONAL INFORMATION
The Company does not sell, rent, or trade your personal information to third parties for their own marketing purposes. We may share your personal information with the following categories of recipients, strictly on a need-to-know basis:
4.1 Service Providers and Processors. We engage third-party companies and individuals to perform services on our behalf, including: Shopify Inc. (e-commerce platform and payment processing), ZenDrop (order fulfillment and logistics), shipping carriers (e.g., USPS, FedEx, UPS, DHL), email service providers, and customer support software providers. These service providers are contractually obligated to process your personal information only as instructed by us and in accordance with applicable data protection laws.
4.2 Advertising and Analytics Partners. We share certain behavioral and transactional data with Meta Platforms, Inc. and Google LLC for the purposes of advertising campaign measurement and audience targeting, as described in Section 2.3.
4.3 Legal and Regulatory Authorities. We may disclose your personal information to law enforcement agencies, regulatory bodies, courts, or other governmental authorities when required to do so by applicable law, legal process, or binding government order, or where we believe in good faith that such disclosure is necessary to: (a) comply with a legal obligation; (b) protect and defend the rights or property of the Company; (c) prevent or investigate possible wrongdoing in connection with the Website; or (d) protect the personal safety of users of the Website or the public.
4.4 Business Transfers. In the event of a merger, acquisition, reorganization, sale of assets, bankruptcy, or other change of control affecting the Company, your personal information may be transferred to the acquiring entity, subject to standard confidentiality protections. We will notify you via email and/or prominent Website notice before your personal information is transferred and becomes subject to a different privacy policy.
4.5 Professional Advisors. We may share your personal information with lawyers, accountants, auditors, and other professional advisors who are bound by duties of professional confidentiality.
4.6 With Your Consent. We may share your information with third parties for any other purpose with your explicit prior consent.
SECTION 5 — COOKIES AND TRACKING TECHNOLOGIES
A detailed description of the cookies and tracking technologies we use, the purposes they serve, and how to manage your preferences is set out in our Cookie Policy, available at www.liveaway.store/pages/cookie-policy. By using the Website, you consent to the use of cookies as described in that policy.
In summary, we use:
- Strictly Necessary Cookies — Required for the Website to function (session management, cart persistence, fraud prevention).
- Analytics Cookies — Shopify Analytics, Google Analytics 4 — to understand how visitors use the Website.
- Marketing / Advertising Cookies — Meta Pixel (Facebook/Instagram Pixel) — to measure advertising performance and serve personalized ads.
You may manage cookie preferences through your browser settings or the opt-out mechanisms described in the Cookie Policy.
SECTION 6 — DATA RETENTION
We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law.
| Category of Data | Retention Period |
|---|---|
| Account information | Duration of account + 3 years after closure |
| Transaction records | 7 years (tax and accounting compliance) |
| Communication records | 3 years from date of communication |
| Marketing preferences | Until opt-out + 1 year |
| Analytics and log data | 26 months (GA4 default) |
| Fraud prevention records | 5 years |
Upon expiry of the applicable retention period, personal information will be securely deleted or anonymized.
SECTION 7 — DATA SECURITY
The Company implements a range of technical, organizational, and administrative security measures designed to protect your personal information against unauthorized access, disclosure, alteration, or destruction. These measures include:
- Industry-standard Transport Layer Security (TLS/SSL) encryption for all data transmitted between your browser and our servers;
- PCI DSS-compliant payment processing (handled entirely by Shopify Payments);
- Access controls limiting personal data access to authorized personnel on a need-to-know basis;
- Regular security assessments and vulnerability monitoring;
- Shopify's platform-level security infrastructure, which includes SOC 2 Type II certification, DDoS protection, and regular third-party penetration testing.
However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially reasonable means to protect your personal information, we cannot guarantee its absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected individuals and relevant authorities as required by applicable law.
SECTION 8 — INTERNATIONAL DATA TRANSFERS
The Company is based in Hong Kong SAR. If you are accessing the Website from the United States or any other jurisdiction, please be aware that your personal information may be transferred to, stored in, and processed in Hong Kong and in other countries where our service providers operate (including the United States, where Shopify, Meta, and Google are headquartered). These countries may have data protection laws that differ from those of your jurisdiction. By using the Website, you consent to such transfers. The Company takes reasonable steps to ensure that appropriate safeguards are in place when transferring personal data internationally.
SECTION 9 — YOUR RIGHTS AND CHOICES
Depending on your jurisdiction, you may have the following rights with respect to your personal information:
9.1 Right of Access. You may request a copy of the personal information we hold about you.
9.2 Right of Correction. You may request that we correct inaccurate or incomplete personal information.
9.3 Right of Deletion. You may request that we delete your personal information, subject to certain exceptions (e.g., where retention is required by law or for fraud prevention).
9.4 Right to Opt Out of Marketing. You may opt out of receiving marketing communications at any time by clicking the "Unsubscribe" link in any marketing email or by contacting us at juan@gekotrade.com.
9.5 Right to Opt Out of Sale of Personal Information (CCPA). The Company does not sell personal information as defined under the CCPA. We do share certain data with advertising partners (Meta, Google) for targeted advertising purposes, which may constitute "sharing" under the CPRA. California residents may opt out of such sharing by contacting us at juan@gekotrade.com with the subject line "CCPA Opt-Out Request."
9.6 Right to Non-Discrimination (CCPA). We will not discriminate against you for exercising any of your CCPA rights.
9.7 Right to Data Portability. Where technically feasible, you may request that we provide your personal information in a structured, machine-readable format.
9.8 Right to Lodge a Complaint. You have the right to lodge a complaint with the Office of the Privacy Commissioner for Personal Data (Hong Kong) or the relevant supervisory authority in your jurisdiction.
To exercise any of the above rights, please submit a written request to:
Email: juan@gekotrade.com
Subject line: "Privacy Rights Request – [Your Full Name]"
Response time: We will respond to all legitimate requests within thirty (30) calendar days. In complex cases, we may extend this period by a further thirty (30) days, with notice.
SECTION 10 — DO NOT TRACK
Some browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activity tracked. The Website does not currently respond to DNT signals. You may use the opt-out mechanisms described in Sections 2.3 and 5 to limit tracking.
SECTION 11 — THIRD-PARTY LINKS
The Website may contain links to third-party websites, social media platforms, and other services. This Policy applies solely to information collected through our Website. We are not responsible for the privacy practices of any third-party websites and encourage you to review their privacy policies before providing any personal information.
SECTION 12 — CHANGES TO THIS POLICY
We may update this Privacy Policy periodically to reflect changes in our data practices, legal requirements, or business operations. The updated Policy will be posted on the Website with a revised "Last Updated" date. Material changes will be communicated to registered account holders via email. Your continued use of the Website following any such update constitutes your acceptance of the revised Policy.
SECTION 13 — CONTACT US
For all privacy-related inquiries, requests, or complaints, please contact:
Geko Trading Limited (operating as LiveAway)
Attn: Privacy Officer
Flat/RM 511, 5/F Ming Sang Industrial Building
19-21 Hing Yip Street, Kwun Tong
Kowloon, Hong Kong SAR
Company/VAT/Trade Registration No.: 74906915
Email: juan@gekotrade.com
Phone: +1 (213) 774-5017
Website: www.liveaway.store
This Privacy Policy was last reviewed and updated on March 10, 2026.