HK Privacy Policy

Platinum Health Supply — Hong Kong Privacy Policy

1. Application

1.1 This policy applies when you purchase anything ("Items") from Platinum Health Supply, including via our website www.platinumhealthsupply.com.au/en-hk ("Website"), a telephone order, a purchase order form or an email order, and to any of your dealings with us, whether via the Website or another medium, where you are located in Hong Kong.

1.2 This policy operates alongside our General Terms and Conditions, available on our Website.

1.3 References to "us", "we" or "our" mean Platinum Closing Pty Ltd ACN 640 026 115, trading as Platinum Health Supply Group, and references to "you" mean you.

1.4 This policy explains how we manage personal data under Hong Kong's Personal Data (Privacy) Ordinance, Cap. 486 ("PDPO"), and how to contact us if you have questions about how we do this.

1.5 This policy does not apply to how we handle personal data about our employees.

2. The personal data we collect

2.1 We may collect the following personal data:

your name;
contact details, including postal and email address and telephone number;
order and payment history relevant to your purchases from us; and
other personal data relevant to us providing our products and services to you.

2.2 Our outsourced service providers, including payment processors and platform providers such as Stripe, PayPal and Shopify, collect some of the above information directly, along with payment card data. We do not collect or store payment card data ourselves. Please refer to each provider's own privacy policy for how they handle this information.

3. How we collect and use personal data

3.1 We will only collect personal data by lawful and fair means, and only where it is necessary for a purpose directly related to our functions or activities.

3.2 At or before the time we collect personal data from you, we will inform you of the purpose for which it is being collected, the classes of persons to whom it may be transferred, and your rights to request access to and correction of the data.

3.3 We will not use your personal data for a purpose other than the one for which it was collected, or a directly related purpose, without your prescribed consent, except where the PDPO otherwise permits.

4. Direct marketing

4.1 If we wish to use your personal data for direct marketing, we will first inform you of the kind of data to be used, the classes of products or services to be marketed, and your right to opt out, and we will only proceed with your consent.

4.2 You may opt out of receiving direct marketing from us at any time, free of charge, by contacting us using the details in section 9 or by using the unsubscribe option in any marketing communication.

4.3 We will not provide your personal data to another party for that party's own direct marketing without your express consent.

5. Disclosure of personal data

5.1 We may disclose your personal data to:

outsourced service providers, including payment processors and platform providers;
our related bodies corporate;
our professional advisors, including legal and accounting advisors; and
government or regulatory authorities, where required or authorised by law.

6. Transfer of personal data outside Hong Kong

6.1 We are based in Australia, and your personal data will be transferred to, and processed in, Australia in order for us to provide our products and services to you.

6.2 While Hong Kong law does not currently impose statutory restrictions on transferring personal data outside Hong Kong, we take reasonable precautions to ensure your personal data receives protection comparable to the protection it would receive in Hong Kong, including through contractual arrangements with the recipients of your data.

7. Data accuracy, retention and security

7.1 We take reasonable steps to ensure the personal data we hold is accurate, and we do not keep personal data longer than necessary for the purpose for which it was collected.

7.2 We take appropriate security measures to protect the personal data we hold against unauthorised or accidental access, processing, erasure, loss or use.

8. Data breach notification

8.1 If we become aware of a data breach that is likely to result in a real risk of harm to affected individuals, we will notify the Privacy Commissioner for Personal Data and affected individuals as soon as practicable, in line with the Privacy Commissioner's published guidance.

9. Access and correction of your personal data

9.1 You may request access to the personal data we hold about you, or request that we correct it, by contacting us at customercare@phsgroup.com.au.

9.2 We will respond to your request within a reasonable time. We may charge a reasonable fee for complying with an access request, and will inform you of any fee before proceeding. In some circumstances, we may decline a request, in which case we will explain our reasons.