Privacy Policy

We collect information you provide directly: name, email address, and any details you share when you contact us or create an account.

We automatically collect certain technical information when you visit our site, including IP address, browser type, device type, pages visited, and referring URLs. This data is collected through cookies and similar technologies.

We do not collect or store biometric data, health records, or information about your skin condition beyond what you voluntarily share through our observation submission form.

We use your information to: process and fulfil orders, communicate about your purchases, improve our products and website experience, send marketing communications (only with your consent), and comply with legal obligations.

We never sell, rent, or trade your personal information to third parties for their marketing purposes.

We share your information only with service providers who help us operate our business: shipping carriers, email service providers, and website analytics tools. These providers are contractually obligated to protect your data.

We may disclose information if required by law, to protect our rights, or in connection with a merger or acquisition.

We use essential cookies to operate our website (shopping cart, authentication) and analytics cookies to understand how visitors use our site. We do not use advertising cookies or cross-site tracking.

You can control cookie settings through your browser preferences. Disabling essential cookies may affect site functionality.

We retain order and account information for as long as your account is active or as needed to provide services. Transaction records are kept for 7 years for tax and legal compliance.

You may request deletion of your account and personal data at any time by emailing [email protected]. We will process deletion requests within 30 days.

Depending on your jurisdiction, you may have the right to: access, correct, or delete your personal data; object to or restrict processing; data portability; and withdraw consent.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

We comply with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong (“PDPO”). Under the PDPO, you have the right to request access to your personal data held by us, and to request correction of any data that is inaccurate.

We will not use your personal data for direct marketing purposes unless we have received your explicit consent. You may opt out of direct marketing at any time by contacting us at [email protected] or using the unsubscribe link in any marketing communication.

Access and correction requests may be subject to a fee as permitted under the PDPO. We will respond to such requests within 40 days.

We use industry-standard security measures to protect your information, including TLS encryption for data in transit and encrypted storage for sensitive data at rest.

We may update this policy from time to time. Material changes will be communicated via email or a prominent notice on our website. Your continued use of our services after changes take effect constitutes acceptance of the updated policy.