LOTY (HK) Limited (以下稱為「我們」) 致力保護您的私隱。我們透過此網站所收集你的資料用以幫助我們提供更多更適合您的產品和服務，確保您在本網內有個人化及愉快的購物服務。請繼續閱讀以下之私隱及有關個人資料的處理。

一般條款

我們對尊重及保護顧客的私隱及個人資料非常重視，並且全力執行及遵守保障資料原則，以及符合香港特別行政區的《個人資料(私隱)條例》(第486章) 的各項有關規定。我們會向使用本網站人士在收集個人資料前會以適當的形式及方法向他們提供《收集個人資料聲明》。本私隱政策將有助你了解我們在與你的互動過程中如何收集、使用及保障你的個人資料。

在本私隱政策中，「個人資料」一詞指直接或間接與你有關的任何資料，從該資料可切實可行地直接或間接地確定你的身分，該資料亦以可切實可行地查閲及處理的形式記錄。

當您在本網站進行登記或會員賬戶 (「賬戶」)及/或使用任何由本網站提供的服務 (「服務」)時，代表您同意我們按本網站所述的《私隱政策》，我們將根據本私隱政策收集、使用及處理你的個人資料。

你明白提供下述的個人資料屬自願性質。但如未能提供該等所需個人資料，你或不能登記賬戶及／或使用服務。

我們會定期檢討《私隱政策》，政策如果有任何更新或修改並不會個別通知，更新版本會上載到本網站的《私隱政策》頁面以供查閱。

《收集個人資料聲明》

收集的個人資料及用途

您向本網站所提供的個人資料完全是自願性質。

我們收集及保存的個人資料包括以下：

• 登入名稱
• 中/英文名字及姓氏
• 年齡
• 性別
• 職業
• 出生年日
• 聯絡資料包括流動電話號碼、地址、郵編、電郵等。

您的個人資料作以下用途：

• 完成您對我們的產品及服務、訂單處理、付款結算及通知訂單狀態的要求
• 賬戶或/及會員登記，提供優惠和獎賞
• 進行各類直接促銷活動 (請參閱下文推廣及直接促銷活動資訊)
• 發出與我們的產品及服務、活動、推廣及項目有關的資訊
• 進行與客戶、產品或服務有關的市場調查
• 回應及處理您的查詢及投訴
• 邀請您對我們的產品及服務質素作出評估
• 達到任何與以上所述有直接關連的目的

推廣及直接促銷活動資訊
我們會不定時舉辦一些推廣及直接促銷活動，需要您提供姓名、電郵地址、郵寄地址、電話號碼及購物取向等，讓我們能通知閣下推廣活動的結果、獎賞領取及將來再舉辦推廣活動的消息和分享過去活動的資訊。如您選擇拒絕接收或取消訂閱我們提供的直接促銷活動訊息，亦可電郵至cs@lotyhealth.com聯絡我們以拒絕接收相關訊息。

資料保護
我們致力保護您的個人資料。我們使用來自先進加密科技及安全的伺服器的網頁製作供應商和線上支付網關供應商，以保障閣下的個人資料安全（包括姓名、電郵地址、郵寄地址、電話號碼、付款資料及購買紀錄）。當您傳送您的訂購資料時，能避免您的資料在傳送時被第三者看到。此外，我們也不容許未經授權而讀取顧客的資料。當您登記帳戶時，我們或會聯絡您以證實使用者所提供的資料是真確的。但請明白，儘管我們已盡力保障您的個人資料，但我們仍然無法保證有關的措施在任何時間均絕對安全。

資料披露與共享
所有您向我們提供的個人資料會被保密及保護，並不會披露予任何第三方，惟在按照《個人資料（私隱）條例》容許的情況下除外。同時，我們亦可能會披露您的個人資料予下列的各方：

• 我們的關聯公司
• 任何代我們行事、代表我們或與我們共同行事的人士或公司
• 我們任何的服務供應商或承辦商 (包括與我們合作參與市場推廣計劃者，任何向我們提供行政、訂單處理、付款結算、會計審核、信用參考、法律咨詢、徵收欠款或其他對我們營運提供服務的第三方代理人、承辦商或服務提供者)
• 任何受與我們的保密協議所約束的人士或公司
• 為了確立及支援你所要求就任何產品及服務進行的付款，而有必要向其披露你個人資料的任何金融機構、支付卡或信用卡發卡公司、信貸資料服務機構或收集機構；
• 如根據法定責任或契約責任強制須作出披露，或按法例或法庭規定者作出披露，或為了保護（為法律所允許的）我們的利益而必須向其作出披露的任何其他第三方。

目前，除上述所提及以外，我們不會出售、交易、交出或租售您的個人資料給第三者。將來，我們或會交給可信的第三者，但您也可以通知我們停止此做法。在這情況下，我們不會在未經您同意，出售或公開您的個人資料。

保留資料

我們所收集及持有的各類個人資料是有不同的保留時間。一般訪客購物的個人資料保留時間為最少一年，會員制度內的個人資料會因應會藉年期而有所不同。如你選擇刪除你的賬戶，我們會於收到您的相關通知後，在合理可行情況下盡快刪除上述個人資料。

如有任何個人資料因根據適用法例或與任何法律訴訟有關而被列明為必須保留，該等資料將被保留更長時間，但我們將採取所有切實可行的措施，確保該等資料的保留時間不會長於達到該等目的之所需時間。

查閱及更正資料
您可以向我們查詢是否有保存您的個人資料。您可以填妥香港個人資料私隱專員公署的查閱資料要求表格OPS003 (www.pcpd.org.hk)，然後透過電郵cs@lotyhealth.com向我們提出要求以查閱、更新、更正或索取我們所保存之個人資料副本。我們在處理查閱或改正資料要求時，會先查核提出要求者即是您本人的身份，以確保您在法律上有權作出這項要求。我們可以就查閱資料要求而收取合理的行政費用 (不多於港幣200元正)。在符合《個人資料(私隱)條例》之下我們會於60天內對您的要求作出回應。

其他查詢
如果有任何與上述《私隱政策》有關的問題，歡迎電郵至cs@lotyhealth.com聯絡我們。

本中文譯本僅供參考之用，倘若中文版本與英文版本有歧義，概以英文版本為準。

版本日期 July 2021

LOTY (HK) Limited (“we” or “our” or “us”) are committed to protecting your privacy. The information we collect from you through this website is used to help us provide more products and services that are more suitable for you, and to ensure that you have a personalized and enjoyable shopping service on this website. Please continue to read the following privacy and handling of personal data.

General

We respect personal data privacy and are committed to fully implementing and complying with the data protection principles and all relevant provisions under the Personal Data (Privacy) Ordinance (Cap. 486). When we collect personal data from individuals, we will provide them with a Personal Information Collection Statement ("PICS") on or before the collection in an appropriate format and manner. This Privacy Policy will help you understand how we collect, use and safeguard your personal data in our interactions with you.

Throughout this Privacy Policy, the term "personal data" means any data relating directly or indirectly to you, from which it is practicable for your identity to be directly or indirectly ascertained, and in a form in which access to or processing of the data is practicable.

When you register for an account or membership (“Account”) and/or use any services offered on this website (“Services”), we will collect, use and handle your personal data in accordance with this Privacy Policy.

You understand that it is voluntary for you to provide your personal data as described herein below. However, if you do not provide the personal data as required, you may not be able to register for the Account and/or use the Services.

We regularly review and update this Privacy Policy; you will not be notified individually if there are any updates. The most up-to-date version of this Privacy Policy will be shown on this website.

"Personal Information Collection Statement"

Collection and Use of Personal Data

You understand that it is voluntary for you to provide your personal data as described herein below.

We will collect and maintain the personal data including:

• Login identity
• First and last name in Chinese/ English
• Age
• Gender
• Occupation
• Month and year of birth
• Contact information including but not limit to mobile phone number, email address, mail address, post code.

The personal data that is strictly necessary for us to deliver the Services will be marked with an asterisk (*). If you do not provide such personal data, you will not be able to register for an Account or enjoy the Services we provide to our members.

We will use the personal data you provide to us for the following purposes:

• Complete your request related to our products and services, order processing, payment settlement and notification of order status
• Account or/and Membership registration, offer discounts and rewards
• Conduct various direct marketing activities (please refer to “The use and/or provision of personal data for direct marketing” below)
• Send out information related to our products and services, events, promotions and projects
• Conduct market research related to customers, products or services
• Respond to and handle your inquiries and complaints
• Invite you to evaluate the quality of our products and services
• To achieve any purpose directly related to the above

However, if you do not provide the personal data as required, you may not be able to register for the Account and/or use the Services.

Third Parties’ Personal Data

We may feature embedded links on our websites or app(s) which enable you to connect to third party sites, including social media sites. These third party sites may set cookies which can identify you as an individual when you are logged in to their services. We do not control these cookies or how these sites collect and handle your personal data.

If the Services you use require payment of money, you will be redirected to a secure third-party website belonging to our payment gateway service provider to complete payment of any purchase. Payment-related personal data (including but not limited to the cardholder’s full name, card number prefix, cardholder’s billing address, card verification value (CVV) and card expiry date) will be collected by the payment gateway service provider for processing your order’s payment as well as other incidental purposes. We will not be able to provide the Services to you if you do not provide the data.

You should read the respective third-party sites’privacy policies before submitting any data to these sites.

Use and/or Provision of Personal Data for Direct Marketing

In order for us to carry out any promotional and direct marketing activities, we will collect your relevant personal data including, but not limit to, name, email address, mail address, telephone number and shopping practice. This information allows us to inform you of the results of promotional activities, the receipt of rewards and the news of future promotional activities, and to share information on past activities. You will be able to opt-out or unsubscribe from time to time from receiving further direct marketing communications from us by contacting us through email cs@lotyhealth.com.

Personal Data Protection

We are committed to protecting your personal information. We use web-page production providers and online payment gateway providers from advanced encryption technology and secure servers to protect your personal information (including name, email address, mailing address, phone number, payment information and purchase records). When you send your order information, you can prevent your information from being seen by a third party when you submit it. In addition, we do not allow unauthorized access to customer information. Please understand that despite our efforts, no data security measures can guarantee 100% security at all times.

Data Disclosure and Sharing

Your personal data will be kept confidential and will not be disclosed to any third party except for such disclosure as allowed under the Personal Data (Privacy) Ordinance or to such parties as provided below:

• Our related companies;
• Any person or company who is acting for, on behalf of or jointly with us; 
• Any of our service providers (Including those who cooperate with us to participate in the marketing plan, third party agents, sub-contractors or service providers who provide us with administration, order processing, payment settlement, accounting review, credit reference, legal advice, collection of arrears or other services for our operations)
• Any person or company subject to a nondisclosure agreement with us
• Any financial institutions, charge or credit card issuing companies, credit information or reference bureaus, or collection agencies where necessary to establish and support the payment of any products and Services being requested by you; and
• Any other third party where such disclosure is mandated by statutory or contractual obligations or as required by law or court of law, or where such disclosure is necessary to protect our interests (as permitted by law).

Data Retention

The retention time of various kinds of personal data that we collected and maintained are different. Personal data of the personal data of general visitors for shopping is kept for at least one year; different retention periods apply to the personal data collected for membership system. In the event that you choose to delete your account with us, we will delete such personal data as soon as reasonably practicable after we receive such notification from you.

Notwithstanding the aforesaid, if any personal data (including the aforesaid personal data which can be used to directly identify you) is required as specified under the applicable laws or in connection with any legal proceedings, the same will be retained for a longer period but we will take all practicable steps to ensure that such data will not be kept longer than is necessary for the fulfilment of such purposes.

Data Access and Correction

You should make your data access request by completing the Data Access Request Form (OPS003)(www.pcpd.org.hk) and sending the completed form directly to email at cs@lotyhealth.com. When handling a data access or correction request, we will check the identity of the requester to ensure that you are the person legally entitled to make the data access or correction request. A administration fee (not more than HK$200) is chargeable by us for complying with a data access request. Under the "Personal Data (Privacy) Ordinance", we will respond to your request within 60 days.

Other Inquiries

If you have any questions related to the above "Privacy Policy", please contact us through email cs@lotyhealth.com.

Where this privacy policy is available in Traditional Chinese, the English version is the governing version and shall prevail whenever there is a discrepancy among the versions.

Version Date: July 2021