Privacy policy

Privacy Policy

Last updated: July 16, 2026

STARBASKET SELECTION TRADING LIMITED ("we", "us", "our"), operating the I Can Want store and website (the "Store"), is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit our Store, create an account, place an order, contact us, or otherwise use our services (collectively, the "Services").

The Store is powered by Shopify. Shopify provides the e-commerce platform that enables us to offer the Services.

For the purposes of applicable data-protection law, including the EU General Data Protection Regulation ("GDPR") where it applies, STARBASKET SELECTION TRADING LIMITED is the controller of your personal information.

Contact Details

Legal entity: STARBASKET SELECTION TRADING LIMITED
Store name: I Can Want
Registered address: 香港新界葵涌大連排道 36-40 號貴盛工業大廈一期 2 樓 B53 室
Contact email: support@icanwant.com

Personal Information We Collect

Depending on how you use the Services, we may collect the following categories of personal information:

  • Contact and delivery details: name, billing address, shipping address, telephone number, and email address.

  • Account information: account username, password, account preferences, and account settings. Passwords are handled through Shopify’s account functionality and are not visible to us in plain text.

  • Order and transaction information: items viewed, added to a cart, purchased, returned, exchanged, or cancelled; order history; transaction amount; payment status; delivery and return information.

  • Payment information: payment method, payment status, transaction details, and limited payment-related identifiers. Payment-card information is processed by Shopify and/or the relevant payment provider. We do not store full payment-card numbers unless expressly stated otherwise.

  • Communications: the content of emails, customer-service requests, return requests, reviews, and other messages you send to us.

  • Device and usage information: IP address, browser type, device information, pages viewed, interactions with the Store, approximate location derived from IP address, and technical logs.

Sources of Personal Information

We collect personal information:

  • directly from you when you create an account, place an order, contact us, submit a return request, or otherwise provide information to us;

  • automatically when you use the Store, through strictly necessary cookies and similar technologies required for the Store, checkout, security, fraud prevention, and account functionality;

  • from Shopify, payment providers, delivery and fulfilment providers, and other service providers that process information for us; and

  • where applicable, from third parties you instruct or authorise to share information with us.

How We Use Personal Information

We use personal information for the following purposes:

To provide and manage the Services

We use information to create and manage customer accounts; process orders and payments; arrange fulfilment and delivery; provide order updates; manage returns, refunds, exchanges, and withdrawals; and provide customer support.

To operate, secure, and improve the Store

We use information to maintain the Store, protect accounts and payment transactions, detect and prevent fraud or abuse, troubleshoot technical issues, and improve the Store’s functionality and customer experience.

To communicate with you

We use information to respond to enquiries, provide customer support, send transactional messages about your account or order, and notify you of important changes to our Services or policies.

To comply with legal obligations and protect our rights

We may use and retain information to comply with tax, accounting, consumer-protection, anti-fraud, and other legal obligations; respond to lawful requests; resolve disputes; and establish, exercise, or defend legal claims.

Legal Bases for Processing

Where the GDPR applies, we process personal information on the following legal bases:

  • Performance of a contract: when processing is necessary to process your order, accept payment, deliver goods, manage your account, provide support, or handle returns, refunds, and other order-related requests.

  • Legitimate interests: when processing is necessary to operate, secure, improve, and protect the Store, prevent fraud, manage our business, and protect our rights, provided that these interests are not overridden by your rights and freedoms.

  • Legal obligation: when processing is necessary to comply with applicable legal, tax, accounting, consumer-protection, or regulatory obligations.

  • Consent: where consent is required by law. You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

Cookies and Similar Technologies

We use strictly necessary cookies and similar technologies that are required for the Store to function, including shopping-cart, checkout, account-login, security, fraud-prevention, and preference-related functions.

Based on our current Store configuration, we do not use non-essential advertising or analytics tools such as Meta Pixel, Google Analytics/Google Ads, TikTok Pixel, or third-party email-marketing tracking tools. If this changes, we will update this Privacy Policy and implement any consent mechanism required by applicable law before using non-essential cookies or similar technologies.

You may manage cookies through your browser settings. Please note that blocking strictly necessary cookies may prevent parts of the Store, checkout, or account functionality from working correctly.

How We Share Personal Information

We disclose personal information only as necessary for the purposes described in this Privacy Policy, including with:

  • Shopify, which hosts and supports the Store and provides e-commerce functionality;

  • payment service providers, to process payments and help prevent payment fraud;

  • fulfilment, shipping, and logistics providers, to pack, ship, track, and, where applicable, process returns of your order;

  • IT, cloud-storage, security, and customer-support providers, where needed to operate and protect the Services;

  • professional advisers, authorities, and other recipients where necessary to comply with law, respond to valid legal requests, enforce our terms, resolve disputes, or protect our rights, property, customers, or others; and

  • a buyer, successor, or other relevant party in connection with a merger, restructuring, sale of assets, financing, insolvency, or similar business transaction, subject to applicable law.

We do not sell personal information for money. We do not share personal information for cross-context behavioural advertising under our current Store configuration.

Data Retention

We retain personal information only for as long as necessary for the purposes described in this Privacy Policy, unless a longer period is required or permitted by law.

  • Order, payment, invoice, and delivery records are retained for the period required by applicable tax, accounting, consumer-protection, and legal obligations.

  • Customer-service communications and return records are retained for as long as necessary to respond to the request, manage any return, refund, dispute, or legal claim, and meet applicable legal obligations.

  • Account information is retained while your account is active and for a reasonable period thereafter, unless deletion is required by law or you request deletion and no legal basis requires us to retain it.

  • Security and technical logs are retained for as long as reasonably necessary to maintain Store security, investigate fraud or misuse, and resolve technical issues.

When information is no longer needed, we will delete it or anonymise it, unless retention is required by applicable law.

International Transfers

We and our service providers may transfer, store, or process personal information outside the country where you live, including in Hong Kong and other countries where Shopify, payment providers, logistics providers, or other service providers operate.

Where the GDPR applies and personal information is transferred outside the European Economic Area ("EEA") or the United Kingdom, we will use an appropriate transfer mechanism required or recognised by applicable law, such as an adequacy decision, the European Commission’s Standard Contractual Clauses, or the UK International Data Transfer Addendum or equivalent safeguard, as applicable.

Your Privacy Rights

Depending on where you live and subject to applicable law, you may have the right to:

  • request access to the personal information we hold about you;

  • request correction of inaccurate or incomplete personal information;

  • request deletion of your personal information;

  • request restriction of processing in certain circumstances;

  • object to processing based on legitimate interests, including direct marketing where applicable;

  • withdraw consent where we rely on consent;

  • request a portable copy of certain personal information; and

  • lodge a complaint with a competent data-protection authority.

To exercise your rights, email xzhen0417@gmail.com with the subject line “Privacy Request.” Please describe your request and provide enough information for us to verify your identity and locate the relevant information. We may request reasonable additional information to verify your identity before responding.

Where the GDPR applies, we will respond without undue delay and normally within one month of receiving a verified request. If a request is complex or numerous, we may extend that period where permitted by law and will notify you of the extension.

If you are in the EEA or United Kingdom, you may lodge a complaint with the data-protection authority in the country of your habitual residence, place of work, or the place of the alleged infringement. Customers in Sweden may contact the Swedish Authority for Privacy Protection (IMY) at https://www.imy.se/.

Shopify

Our Store is hosted on Shopify. Shopify processes certain personal information to provide and support the Store and its services. To learn more about Shopify’s privacy practices, visit https://privacy.shopify.com/en.

Third-Party Websites

The Store may contain links to third-party websites. We are not responsible for the privacy, security, or content practices of third-party websites. Please review their privacy policies before providing personal information to them.

Children’s Data

The Services are not intended for children. We do not knowingly collect personal information from children under the age of majority in their jurisdiction. If you believe a child has provided us with personal information, please contact us at support@icanwant.com so that we can take appropriate steps.

Security

We use reasonable administrative, technical, and organisational safeguards designed to protect personal information. However, no method of transmission over the internet or method of storage is completely secure. Please do not send sensitive information to us through unsecured channels.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices, Store functionality, legal obligations, or other operational reasons. We will post the revised version on the Store and update the “Last updated” date. Where required by law, we will provide additional notice or obtain consent.

Contact

If you have questions about this Privacy Policy or our privacy practices, please contact:

STARBASKET SELECTION TRADING LIMITED
香港新界葵涌大連排道 36-40 號貴盛工業大廈一期 2 樓 B53 室
Email: support@icanwant.com

Important note for EU/EEA customers: STARBASKET SELECTION TRADING LIMITED is established in Hong Kong and does not currently list an EU representative in this policy. Because the Store offers goods to customers in the EEA, the company should obtain legal advice on whether it must appoint an EU representative under Article 27 GDPR and, if so, add that representative’s actual contact details to this policy before or promptly after launching EEA sales.