1. Who we are
Counterlit is operated by DNA BRANDS (HK) LIMITED, a company in Hong Kong (“we”, “us”). For the Hong Kong Personal Data (Privacy) Ordinance (Cap. 486) we are the data user of the personal data described below, except where a shop remains the data user of its own clients and we only process that data for the shop.
Privacy requests: privacy@counterlit.com.
2. What this covers
This policy covers counterlit.com, the Counterlit till and the related company sites (such as yourshop.counterlit.com), signup, billing, and support. It does not cover third-party sites we link to.
3. Shops and their clients
When a shop uses Counterlit, the shop decides why its client, staff and sales records are kept. For that data the shop is the data user (and, where the GDPR or UK GDPR applies, the controller). We process it only to provide the till, bookings, inventory, receipts and support the shop asked for. The shop is responsible for telling its own clients and staff how it uses their data, and for having a lawful reason to put that data into Counterlit.
4. Information we collect
- Account and trial details: company name, shop address name, the owner’s email and mobile number, and the login we send.
- Billing: the plan, trial dates, invoices and payment status. Card numbers are collected by our payment provider, Stripe. We do not store the full card number.
- Shop records the customer chooses to enter: products, stock, bookings, staff, clients, sales, notes, receipts and photos uploaded to the product.
- Website visits: a visitor id, the country read from the IP address, pages and sections viewed, time on the page, language, and the site the visitor came from. We do not use this for advertising.
- Support: messages sent through the product or by email.
5. Why we use it
We use personal data to open and run the shop, take the trial and the subscription, keep the till in sync, answer support, secure the service, and understand which parts of the public website people use. We do not sell personal data, and we do not use it for third-party ads.
Where the GDPR or UK GDPR applies, our usual bases are: contract (to provide the subscription), legitimate interests (to keep the site secure and to see how the public pages are used, in a way that does not override your rights), and legal obligation (tax and accounting).
6. Cookies
- cl_vid — a first-party cookie that gives the browser a random id so we can count a visit, the country, and time on the page. It lasts up to one year.
- cl_geo — a short-lived cookie set at the network edge with the two-letter country of the IP, so the language suggestion can appear immediately. It lasts about ten minutes.
- We also keep the arrival source in the browser’s session storage for that visit only.
The public site does not set advertising cookies. You can refuse or delete cookies in the browser. The till may then be unable to remember a visit count, and the language suggestion may not match the country.
7. Who we share it with
We share personal data with service providers who process it for us and only on our instructions: Amazon Web Services (hosting, in the Hong Kong region where we store the product), Stripe (payments), and the email service we use to send login and support messages. We may also share data if the law requires it, or to protect the shop, our customers, or DNA BRANDS (HK) LIMITED from fraud or abuse.
A shop’s staff can see the records that shop has put into Counterlit, according to the permissions the shop sets.
8. Transfers
We keep the product data in Hong Kong. Some providers, including Stripe and email delivery, may process data in other countries. Where the GDPR or UK GDPR requires it, we use a lawful transfer tool such as the standard contractual clauses. Hong Kong does not treat every overseas transfer as prohibited, but we still limit transfers to what the service needs and we require providers to protect the data.
9. How long we keep it
- Website visit events: long enough to report the periods shown in our own analytics, then deleted or aggregated.
- A shop that cancels: the company and its product data are removed after cancellation, except records we must keep for tax, accounting, disputes or security.
- Invoices and payment records: kept for the period Hong Kong tax and companies law require.
10. Security
We use access controls, encryption in transit, and separate shop accounts. No online service can promise perfect security. Please use a unique password and keep the owner login private.
11. Hong Kong rights
Under the Personal Data (Privacy) Ordinance you may ask whether we hold your personal data, ask for a copy, and ask us to correct it if it is inaccurate. We may charge a fee that the Ordinance allows for a copy. We will answer access and correction requests within the time the Ordinance requires. Send the request to privacy@counterlit.com. You may also complain to the Office of the Privacy Commissioner for Personal Data, Hong Kong.
12. EEA, UK and similar rights
If the GDPR or UK GDPR applies to you, you may ask to access, correct, delete or restrict your personal data, to receive a portable copy, and to object to processing based on legitimate interests. You may lodge a complaint with your local supervisory authority or, in the UK, the Information Commissioner’s Office. We do not make solely automated decisions that produce legal effects about you.
13. United States
We do not sell or share personal information as those terms are used in the California Consumer Privacy Act. Residents of California and of other US states that give similar rights may ask us to know, delete or correct personal information we hold about them, and not to be discriminated against for asking. Use privacy@counterlit.com.
14. Children
Counterlit is a tool for shops, not for children. We do not knowingly collect personal data from anyone under 16 on the public site. If you believe we have, write to us and we will delete it.
15. Changes
We will post a new effective date on this page when the policy changes. If a change materially affects a paying shop, we will also give notice in the product or by email.
16. Contact
DNA BRANDS (HK) LIMITED
Privacy: privacy@counterlit.com
Product: Counterlit, at counterlit.com