Privacy Policy
Navigation
JOYKO – Privacy Policy
Last Updated: April 13, 2026
Operator: HONG KONG JOYKO MEDIA VENTURES LIMITED
Registered Address: 16E METRO PLAZA NO.223 HING FONG ROAD KWAI CHUNG, NT
Contact Email: [email protected]
1. Data Controller and Introduction
We, HONG KONG JOYKO MEDIA VENTURES LIMITED ("we," "our," or "us"), operate the JOYKO Platform ("Platform") and are the data controller responsible for processing your personal data. This Privacy Policy explains how we collect, use, store, share, and protect your personal data in compliance with international data protection standards, including the Hong Kong Personal Data (Privacy) Ordinance (PDPO), EU General Data Protection Regulation (GDPR), UK Data Protection Act (DPA), and California Consumer Privacy Act (CCPA).
By accessing or using the Platform, you acknowledge that you have read, understood, and agree to the practices described herein.
2. Categories of Personal Data Collected
We collect personal data based on your interaction with the Platform (visitor, subscriber, or merchant partner):
2.1 Visitors (Unregistered Users)
- Technical and Security Data: IP address, access logs, browser type, operating system, device identifier.
- Cookie Data: Information collected via cookies and similar technologies (e.g., analytics cookies, functional cookies).
2.2 Subscribers (Registered End-Users)
- Identification and Contact Data: Full name, email address, phone number, billing address.
- Third-Party Login Data: Name and limited profile details from OAuth providers (Google, Apple, etc.) if you sign up via external services.
- Payment and Transaction Data: Billing details, subscription history, and payment method identifiers (handled by PCI-DSS compliant processors; we do not store full payment card numbers).
- Technical and Usage Data: Device information, browsing behavior, content access logs, and interaction with the Platform.
- Support Data: Communication logs, inquiry details, and support ticket records when you contact our team.
2.3 Merchant Partners (Business Accounts)
- KYC and Identification Data: Tax ID, company registration documents, passport/ID copy, proof of address.
- Financial Data: Bank account details (for commission payments, processed by licensed payment providers).
- Business Contact Data: Company name, contact person, email address, phone number, and physical address.
3. Methods of Data Collection
- Direct Collection: From you when you register an account, subscribe to services, make payments, or contact support.
- Automatic Collection: Via analytics tools, cookies, and server logs when you access or use the Platform.
- Third-Party Collection: From authorized third parties (payment processors, OAuth providers, fraud prevention services) to verify identity, process transactions, or enhance security.
4. Purposes and Legal Bases for Data Processing
We process your personal data for specific, lawful purposes with corresponding legal bases:
| Purpose of Processing | Legal Basis |
|---|---|
| Provide and maintain the Service, manage subscriptions | Performance of a contract |
| Process payments and transactions | Performance of a contract; compliance with legal obligations |
| Verify identity and prevent fraud (KYC checks for merchants) | Compliance with legal obligations; legitimate interests (security) |
| Respond to support inquiries and resolve issues | Performance of a contract; legitimate interests (customer service) |
| Improve Platform functionality, personalize user experience | Legitimate interests (service optimization) |
| Ensure data security and protect against unauthorized access | Legitimate interests (security); compliance with legal obligations |
| Conduct analytics and measure service performance | Legitimate interests (business improvement) |
5. Third-Party Data Sharing
We do not sell your personal data to third parties. We may share your data only in the following circumstances:
- Service Providers: Licensed payment processors, hosting providers, CDN services, and fraud prevention tools (bound by confidentiality obligations and data protection laws).
- Legal Authorities: Public institutions or regulatory bodies if required by law, court order, or legal obligation.
- Merchant Partners: For end-users, limited transaction data with merchants whose content you access (subject to their privacy policies).
- Corporate Transactions: In the event of a merger, acquisition, or reorganization, with the acquiring entity (under equivalent privacy protections).
6. International Data Transfers
Your personal data may be transferred to and stored on servers outside your jurisdiction (e.g., Hong Kong, EU, U.S.). We ensure transfers comply with applicable laws:
- For countries deemed "adequate" by data protection authorities (e.g., EU adequacy list), no additional safeguards are required.
- For non-adequate countries, we use Standard Contractual Clauses (SCCs) or other approved mechanisms to ensure equivalent data protection.
7. Data Retention Periods
We retain your personal data for:
- The duration of your contractual relationship, plus applicable statutory limitation periods (whichever is longer).
- The period necessary to fulfill legal obligations (e.g., tax, KYC, or security requirements).
Upon expiration of the retention period, we erase or irreversibly anonymize your data.
8. Technical and Organizational Security Measures
We implement reasonable security measures to protect your data from unauthorized access, disclosure, or modification:
- Encryption of data in transit (SSL/TLS) and at rest.
- Restricted access to personal data (limited to authorized personnel).
- Regular security audits, vulnerability assessments, and system monitoring.
- Compliance with industry standards (PCI-DSS for payment data, ISO 27001 for data security).
Despite these measures, no digital service is completely secure. You are responsible for protecting your account credentials.
9. Your Data Subject Rights
Depending on your jurisdiction, you may exercise the following rights by contacting [email protected]:
- Right to be informed about data processing activities.
- Right to access your personal data and request a copy.
- Right to rectify inaccurate or incomplete data.
- Right to erasure ("right to be forgotten"), where legally permitted.
- Right to restrict or object to processing.
- Right to data portability (receive data in a machine-readable format).
- Right to withdraw consent (where processing is based on consent).
- Right to lodge a complaint with a data protection authority.
We will verify your identity before responding to requests and aim to provide a response within 14-30 business days (depending on the jurisdiction).
10. Cookies and Similar Technologies
- Necessary Cookies: Required for Platform functionality (cannot be disabled).
- Functional Cookies: Enable personalized features (e.g., remembering login status) – you may disable these via browser settings.
- Analytics Cookies: Used to improve the Platform (e.g., tracking user behavior) – you may disable these via browser settings.
You can manage cookie preferences through your browser (e.g., Chrome, Safari, Firefox) or device settings. Disabling non-essential cookies may limit certain Platform functionalities.
11. Children's Privacy
We do not knowingly collect personal data from individuals under 13 years of age (COPPA compliance). If we discover we have collected data from a minor under 13, we will immediately delete the data and terminate the account. Parents or guardians may contact us to request data deletion.
12. Changes to This Privacy Policy
We may update this Privacy Policy periodically. We will notify you of material changes via email or in-Platform notification at least 30 days in advance. The updated policy will be posted on the Platform with a revised "Last Updated" date. Continued use of the Platform after the effective date constitutes acceptance of the revised policy.
13. Contact Information
For questions, requests, or complaints regarding this Privacy Policy or data processing:
- Company Name: HONG KONG JOYKO MEDIA VENTURES LIMITED
- Address: 16E METRO PLAZA NO.223 HING FONG ROAD KWAI CHUNG, NT
- Email: [email protected]
JOYKO – Privacy Policy
Last Updated: April 13, 2026
Operator: HONG KONG JOYKO MEDIA VENTURES LIMITED
Registered Address: 16E METRO PLAZA NO.223 HING FONG ROAD KWAI CHUNG, NT
Contact Email: [email protected]
1. Data Controller and Introduction
We, HONG KONG JOYKO MEDIA VENTURES LIMITED ("we," "our," or "us"), operate the JOYKO Platform ("Platform") and are the data controller responsible for processing your personal data. This Privacy Policy explains how we collect, use, store, share, and protect your personal data in compliance with international data protection standards, including the Hong Kong Personal Data (Privacy) Ordinance (PDPO), EU General Data Protection Regulation (GDPR), UK Data Protection Act (DPA), and California Consumer Privacy Act (CCPA).
By accessing or using the Platform, you acknowledge that you have read, understood, and agree to the practices described herein.
2. Categories of Personal Data Collected
We collect personal data based on your interaction with the Platform (visitor, subscriber, or merchant partner):
2.1 Visitors (Unregistered Users)
- Technical and Security Data: IP address, access logs, browser type, operating system, device identifier.
- Cookie Data: Information collected via cookies and similar technologies (e.g., analytics cookies, functional cookies).
2.2 Subscribers (Registered End-Users)
- Identification and Contact Data: Full name, email address, phone number, billing address.
- Third-Party Login Data: Name and limited profile details from OAuth providers (Google, Apple, etc.) if you sign up via external services.
- Payment and Transaction Data: Billing details, subscription history, and payment method identifiers (handled by PCI-DSS compliant processors; we do not store full payment card numbers).
- Technical and Usage Data: Device information, browsing behavior, content access logs, and interaction with the Platform.
- Support Data: Communication logs, inquiry details, and support ticket records when you contact our team.
2.3 Merchant Partners (Business Accounts)
- KYC and Identification Data: Tax ID, company registration documents, passport/ID copy, proof of address.
- Financial Data: Bank account details (for commission payments, processed by licensed payment providers).
- Business Contact Data: Company name, contact person, email address, phone number, and physical address.
3. Methods of Data Collection
- Direct Collection: From you when you register an account, subscribe to services, make payments, or contact support.
- Automatic Collection: Via analytics tools, cookies, and server logs when you access or use the Platform.
- Third-Party Collection: From authorized third parties (payment processors, OAuth providers, fraud prevention services) to verify identity, process transactions, or enhance security.
4. Purposes and Legal Bases for Data Processing
We process your personal data for specific, lawful purposes with corresponding legal bases:
| Purpose of Processing | Legal Basis |
|---|---|
| Provide and maintain the Service, manage subscriptions | Performance of a contract |
| Process payments and transactions | Performance of a contract; compliance with legal obligations |
| Verify identity and prevent fraud (KYC checks for merchants) | Compliance with legal obligations; legitimate interests (security) |
| Respond to support inquiries and resolve issues | Performance of a contract; legitimate interests (customer service) |
| Improve Platform functionality, personalize user experience | Legitimate interests (service optimization) |
| Ensure data security and protect against unauthorized access | Legitimate interests (security); compliance with legal obligations |
| Conduct analytics and measure service performance | Legitimate interests (business improvement) |
5. Third-Party Data Sharing
We do not sell your personal data to third parties. We may share your data only in the following circumstances:
- Service Providers: Licensed payment processors, hosting providers, CDN services, and fraud prevention tools (bound by confidentiality obligations and data protection laws).
- Legal Authorities: Public institutions or regulatory bodies if required by law, court order, or legal obligation.
- Merchant Partners: For end-users, limited transaction data with merchants whose content you access (subject to their privacy policies).
- Corporate Transactions: In the event of a merger, acquisition, or reorganization, with the acquiring entity (under equivalent privacy protections).
6. International Data Transfers
Your personal data may be transferred to and stored on servers outside your jurisdiction (e.g., Hong Kong, EU, U.S.). We ensure transfers comply with applicable laws:
- For countries deemed "adequate" by data protection authorities (e.g., EU adequacy list), no additional safeguards are required.
- For non-adequate countries, we use Standard Contractual Clauses (SCCs) or other approved mechanisms to ensure equivalent data protection.
7. Data Retention Periods
We retain your personal data for:
- The duration of your contractual relationship, plus applicable statutory limitation periods (whichever is longer).
- The period necessary to fulfill legal obligations (e.g., tax, KYC, or security requirements).
Upon expiration of the retention period, we erase or irreversibly anonymize your data.
8. Technical and Organizational Security Measures
We implement reasonable security measures to protect your data from unauthorized access, disclosure, or modification:
- Encryption of data in transit (SSL/TLS) and at rest.
- Restricted access to personal data (limited to authorized personnel).
- Regular security audits, vulnerability assessments, and system monitoring.
- Compliance with industry standards (PCI-DSS for payment data, ISO 27001 for data security).
Despite these measures, no digital service is completely secure. You are responsible for protecting your account credentials.
9. Your Data Subject Rights
Depending on your jurisdiction, you may exercise the following rights by contacting [email protected]:
- Right to be informed about data processing activities.
- Right to access your personal data and request a copy.
- Right to rectify inaccurate or incomplete data.
- Right to erasure ("right to be forgotten"), where legally permitted.
- Right to restrict or object to processing.
- Right to data portability (receive data in a machine-readable format).
- Right to withdraw consent (where processing is based on consent).
- Right to lodge a complaint with a data protection authority.
We will verify your identity before responding to requests and aim to provide a response within 14-30 business days (depending on the jurisdiction).
10. Cookies and Similar Technologies
- Necessary Cookies: Required for Platform functionality (cannot be disabled).
- Functional Cookies: Enable personalized features (e.g., remembering login status) – you may disable these via browser settings.
- Analytics Cookies: Used to improve the Platform (e.g., tracking user behavior) – you may disable these via browser settings.
You can manage cookie preferences through your browser (e.g., Chrome, Safari, Firefox) or device settings. Disabling non-essential cookies may limit certain Platform functionalities.
11. Children's Privacy
We do not knowingly collect personal data from individuals under 13 years of age (COPPA compliance). If we discover we have collected data from a minor under 13, we will immediately delete the data and terminate the account. Parents or guardians may contact us to request data deletion.
12. Changes to This Privacy Policy
We may update this Privacy Policy periodically. We will notify you of material changes via email or in-Platform notification at least 30 days in advance. The updated policy will be posted on the Platform with a revised "Last Updated" date. Continued use of the Platform after the effective date constitutes acceptance of the revised policy.
13. Contact Information
For questions, requests, or complaints regarding this Privacy Policy or data processing:
- Company Name: HONG KONG JOYKO MEDIA VENTURES LIMITED
- Address: 16E METRO PLAZA NO.223 HING FONG ROAD KWAI CHUNG, NT
- Email: [email protected]