Privacy Policy

收到！已經為您將英文版中的公司名稱更正為 Lemonmallhk Limited，地址格式與專有名詞也一併進行了微調，確保英文 legal language 更加精準順暢。

以下是更正後的最終英文版純文字《私隱政策》：

Lemon Mall Privacy Policy

Last Updated: July 24, 2026

This website (https://www.lemonmallhk.com/) and the Lemon Mall mobile application (collectively, the "Platform"; "we", "us", "our", or "Lemon Mall") are operated by Lemonmallhk Limited. We attach great importance to your privacy and are committed to protecting your personal data in accordance with the Personal Data (Privacy) Ordinance (Cap. 486 of the Laws of Hong Kong) (the "PDPO") and the relevant guidelines issued by the Office of the Privacy Commissioner for Personal Data, Hong Kong.

Please read this Privacy Policy carefully before browsing this website, downloading and using the application, creating an account, or using any services of Lemon Mall.

Certain processing of personal data is necessary for the performance of our contract of service with you; for matters such as direct marketing or cross-border data transfers beyond what is strictly necessary for operations, we will seek your separate, voluntary, and explicit consent. Your continued use of the Platform's services indicates that you acknowledge and understand all terms of this Privacy Policy.

This Privacy Policy is prepared in both Chinese and English. In the event of any inconsistency or ambiguity between the Chinese and English versions, the Chinese version shall prevail.

1. Collection of Personal Data

We may collect your personal data when you register an account, browse the Platform, place an order, participate in promotional activities, make inquiries, or communicate with our customer service. We only collect personal data that is reasonably necessary to provide our services.

(1) Categories of Data Collected

1. Identity and Contact Information: Name, date of birth, gender, email address, contact number, delivery address, and billing address;

2. Account Information: Username, account password, account settings, and member preferences;

3. Transaction and Payment Information: Purchase history, return and exchange history, order records; payment-related information (including partial credit card numbers and third-party payment transaction details; complete sensitive payment data is processed by licensed and compliant payment gateways, and we do not store full payment card details);

4. Interaction Content: Product reviews, inquiries, survey responses, and customer service communication records;

5. Technical and Device Data: IP address, device identifiers (MAC address, Device ID), browser type, operating system, page browsing history, and clickstream data;

6. Customer Service Inquiries: We do not actively collect your personal medical history or health diagnosis data. Any health or medication conditions voluntarily mentioned during customer service inquiries are solely used for real-time product selection consultations, and we will not store them as an independent database of sensitive personal data.

(2) Voluntary and Mandatory Data ProvisionsData marked as mandatory is necessary for providing our services. If you fail to provide such data, we may be unable to open an account, process orders, or provide relevant services for you. Non-mandatory fields are entirely voluntary.

We do not knowingly collect personal data from persons under the age of 18. If you are a minor, please obtain consent from your parent or guardian before submitting any personal data to us. If we discover that we have collected personal data from a minor without parental consent, we will delete the relevant information as soon as practicable.

2. Purposes of Use of Personal Data

The personal data we collect and hold will only be used for the following lawful purposes:

1. Processing, confirming, arranging order deliveries, and handling returns, exchanges, and refunds;

2. Managing your membership account, including issuing, checking, and redeeming membership points;

3. Providing customer service, following up on inquiries, and handling complaints and disputes;

4. Conducting data statistics and market analysis to optimize platform features, products, and services;

5. Sending direct marketing communications subject to obtaining your explicit consent (see Section 6 for details);

6. Detecting and preventing fraud, unauthorized access, and securing accounts;

7. Complying with applicable Hong Kong laws, regulatory requirements, court orders, or statutory government requests;

8. Other purposes directly related to any of the above.

9. Confidentiality, Disclosure, and Information Security of Personal Data

We strictly abide by confidentiality obligations. We will not rent, sell, resell, or trade any of your personal data without your prior explicit written consent.

To achieve the purposes set out in Section 2 of this policy, we may disclose or transfer personal data under strict confidentiality obligations to the following third parties (whether located within or outside Hong Kong):

1. Service Providers and Contractors: Logistics and courier companies (e.g., SF Express), third-party payment providers, cloud hosting, server hosting, IT support, and data analytics agencies. We enter into data processing agreements with these third parties to restrict them to using data only for specified purposes and requiring them to uphold data security obligations;

2. Professional Advisors: Lawyers, accountants, auditors, and financial advisors engaged by us;

3. Enforcement and Regulatory Bodies: Disclosures will only be made upon receipt of valid court orders, statutory demands, or lawful written notices.

Data Security Measures:We adopt industry-standard security technology and administrative measures (including SSL encryption, secure servers, account login verification, and access control management) to protect personal data against unauthorized access, modification, disclosure, or deletion. However, data transmission over the Internet cannot be guaranteed to be 100% secure, and you transmit data at your own risk.

In the event of a personal data breach or privacy incident, we will take remedial actions as quickly as possible, notify affected individuals where appropriate, and report to the Privacy Commissioner for Personal Data in accordance with statutory requirements.

4. Transfer of Personal Data Outside Hong Kong

For operational needs, such as using overseas cloud servers, international logistics, or cross-regional IT support, we may transfer your personal data to places outside Hong Kong.

1. If the cross-border transfer is necessary for processing your order or providing services, we will ensure that the overseas recipient implements data protection standards substantially similar to those under the PDPO;

2. If we intend to make a cross-border transfer beyond the scope required for providing services, we will obtain your separate and explicit consent beforehand;

3. All cross-border data transfers strictly comply with the provisions of the PDPO regarding the transfer of personal data outside Hong Kong.

4. Retention Period of Personal Data

Unless a longer retention period is required by law (such as tax or commercial statutory retention requirements), or necessary to prevent fraud or handle potential disputes, we will only retain your personal data for as long as necessary to fulfill the original purpose (or directly related purpose) for which the data was collected. When the data is no longer required, we will securely destroy or thoroughly anonymize it.

If you apply to cancel your account, we will erase your personal data in accordance with the above rules after all pending transactions, refunds, and dispute resolutions are completed.

6. Direct Marketing

Functional notifications related to orders (such as order confirmations, delivery tracking, post-sale follow-ups, and account security alerts) do not constitute direct marketing and do not require separate marketing consent. Messages regarding product promotions, discount information, member rewards, health products, and beauty/skincare advertisements constitute direct marketing.

1. Obtaining Consent (Opt-in): We will not use your name, phone number, mailing address, or email address for direct marketing purposes without obtaining your independent, explicit, and voluntary consent. We do not pre-check promotional consent boxes.

2. Unsubscribing from Marketing Communications (Opt-out): You may request to stop receiving direct marketing messages at any time free of charge by clicking the "Unsubscribe" link at the bottom of promotional emails, logging into your account settings to modify your communication preferences, or contacting us via email/WhatsApp. Upon receiving your request, we will update our system settings and cease sending promotional messages within a reasonable and practical timeframe (usually not exceeding 10 business days).

Commitment: We will not share or sell your contact information to other third-party companies for their independent marketing purposes.

7. Use of Cookies

Our website and mobile application use Cookies and similar tracking technologies to enhance your browsing and shopping experience:

1. Essential Cookies: Necessary to maintain the basic operations of the platform (such as login authentication and preserving shopping cart items). You cannot disable these Cookies; otherwise, certain features of the website may not function properly.

2. Non-Essential Cookies: Includes traffic analytics and advertising tracking Cookies, used to understand user habits and provide personalized content and promotions. You can adjust or decline the use of such Cookies at any time via the Cookie settings pop-up on our website or through your browser settings.

3. Third-Party Website Links

This Platform may provide links to third-party websites or social media platforms. This Privacy Policy applies only to Lemon Mall. Once you click a link to visit a third-party website, any information you provide to third parties is not covered by this policy. We do not control third-party data processing practices and assume no responsibility for their privacy arrangements. You should review the privacy policies of those respective websites.

9. Your Rights Under the PDPO

Under the PDPO, you have the right to:

1. Check whether we hold your personal data;

2. Access a copy of your personal data held by us;

3. Request correction of any inaccurate or incomplete personal data;

4. Request us to delete or cease processing your personal data, subject to applicable Hong Kong laws and except for transaction/tax records that we are legally required to retain;

5. Withdraw any consent previously given to us (withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal).

If you wish to exercise any of the rights above, please submit a written request via the contact details provided in Section 11. We will require you to provide proof of identity for verification purposes. In accordance with the PDPO, we reserve the right to charge a reasonable administrative fee for processing data access requests, subject to standards published by the Privacy Commissioner for Personal Data.

10. Amendments to the Privacy Policy

We may review and update this Privacy Policy from time to time:

1. Minor technical amendments will be posted directly on the Privacy Policy page of our website and take effect immediately;

2. If amendments significantly change how we collect, use, or transfer your personal data, we will notify members via email or prominent notices on the website, allowing a reasonable period for you to review the new version;

3. Your continued use of our Platform's services after amendments take effect constitutes your acceptance of the updated terms. We recommend reviewing this page periodically to stay informed of the latest version.

4. Contact Us

If you have any questions, comments, complaints regarding this Privacy Policy, or wish to exercise your rights regarding your personal data, please contact our Privacy Department:

Company Name: Lemonmallhk Limited 

Email: info@lemonmallhk.com 

Customer Service Hotline / WhatsApp: +852 92458205