Updated July 13, 2022
At Elephant Please, we respect your ability to know, access, correct, transfer, restrict the processing of, and delete your personal data. We have provided these rights to all our customers and if you choose to exercise these privacy rights, you have the right not to be treated in a discriminatory way nor to receive a lesser degree of service from Elephant Please. Elephant Please does not sell your data.
Under the Personal Data (Privacy) Ordinance, you are entitled to be informed by us whether we hold your personal data, to have access to such data and to correct such data if they are inaccurate.
Any such data access request has to be made in writing and be sent to our Data Protection Officer by e-mail to: email@example.com.
A reasonable fee might be charged for all data access or related requests.
There may be situations where we cannot grant your request – for example, if you ask us to delete your transaction data and Elephant Please is legally obligated to keep a record of that transaction to comply with law. We may also decline to grant a request where doing so would undermine our legitimate use of data for anti-fraud and security purposes, such as when you request deletion of an account that is being investigated for security concerns. Other reasons your privacy request may be denied are if it jeopardises the privacy of other, is frivolous or vexatious, or would be extremely impractical.
At Elephant Please, we believe that you can have great services with great privacy. This means that we strive to collect only the personal data we need. The personal data Elephant Please collects depends on how you interact with Elephant Please. When you create an account, rent an item, list an item, search for an item, leave reviews for the other party, connect to our services, contact us, participate in online questionnaires, or otherwise interact with Elephant Please, we may collect a variety of information, including:
You are not required to provide the personal data that we have requested. However, if you choose not to do so, in many cases we will not be able to provide you with our services or respond to requests you may have.
Elephant Please may receive personal data about you from other individuals, from businesses or third parties acting at your direction, from our partners who work with us to provide our services and assist us in security and fraud prevention, and from other lawful sources.
For research and development purposes, we may use datasets such as those that contain images, voices or other data that could be associated with an identifiable person. When acquiring such datasets, we do so in accordance with applicable law, including law in the jurisdiction in which the dataset is hosted. When using such datasets for research and development, we do not attempt to reidentify individuals who may appear therein.
Elephant Please uses personal data to power our services, to process your transactions, to communicate with you, for security and fraud prevention, and to comply with law. We may also use personal data for other purposes with your consent.
Elephant Please uses your personal data only when we have a valid legal basis to do so. Depending on the circumstances, Elephant Please may rely on your consent or the fact that the processing is necessary to fulfil a contract with you, protect your vital interests or those of other persons, or to comply with the law. We may also process your personal data where we believe it is in our or others’ legitimate interests, taking into consideration your interests, rights, and expectations.
Elephant Please does not use algorithms or profiling to make any decision that would significantly affect you without the opportunity for human review.
Elephant Please may share personal data with Elephant Please or its subsidiary, service providers who act on our behalf, our partners, developers, and publishers, or others at your direction. Further, Elephant Please does not share personal data with third parties for their own marketing purposes.
At Elephant Please, we believe that great privacy rests on great security. We use administrative, technical, and physical safeguards to protect your personal data, taking into account the nature of the personal data and the processing, and the threats posed. We are constantly working on these safeguards to help keep your personal data secure.
Elephant Please understands the importance of safeguarding the personal data of children, which we consider to be an individual under the age of 18 or the equivalent age as specified by law in your jurisdiction. That is why Elephant Please has implemented additional processes and protections to help keep children’s personal data safe.
To access certain Elephant Please services, a child must have an account. When a child applies for an account, permission should be sought from the parent. If a reasonable request to close an account is received from a legal guardian, with supporting documentation, the account will be closed by Elephant Please and services for the account will be suspended or terminated.
In addition, if we learn that a child’s personal data was collected without appropriate authorisation, it will be deleted as soon as possible.
Elephant Please’s websites, services and advertisements may use “cookies” and other technologies. These technologies help us to better understand user behaviour including for security and fraud prevention purposes, tell us which parts of our websites people have visited, and facilitate and measure the effectiveness of advertisements and web searches.
In addition to cookies, Elephant Please uses other technologies that help is achieve similar objectives.
In some email messages Elephant Please sends to you, we provide a “click-through URL” that links you to content on the Elephant Please website. When you click one of these URLs, they pass through a separate server before arriving at the destination page on our website. We track this click-through to help us determine interest in particular topics and measure whether we are communicating with you effectively. If you prefer not to be tracked in this way, you should not click graphic or text links in email messages.
To make sure your personal data is secure, we communicate our privacy and security guidelines to Elephant Please employees and strictly enforce privacy safeguards within the company.
Elephant Please takes your privacy questions seriously. A dedicated team reviews your inquiry to determine how best to respond to your question or concern, including those inquiries received in response to an access or download request. In most cases, all substantive contacts receive a response within seven days. In other cases, we may require additional information or let you know that we need more time to respond.
Where your complaint indicates an improvement could be made in our handling of privacy issues, we will take steps to make such an update at the next reasonable opportunity. In the event that a privacy issue has resulted in a negative impact on you or another person, we will take steps to address that with you or that other person.
If you are not satisfied with Elephant Please’s response, you may refer your complaint to the applicable regulator. If you ask us, we will endeavour to provide you with information about relevant complaint avenues which may be applicable to your circumstances.