隐私政策

1. 我们的承诺

我们感谢您对我们的信任。我们承诺致力保护您的私隐，采取所有合理的预防措施，及遵从所有适用有关保障个人资料的法例及规定来保护您的个人资料的安全及不被滥用。这私隐政策的目的是帮助您了解我们收集您的个人资料的种类，如何使用及保护您的个人资料及您的权利及选择。

2. 我们收集个人资料的类别

我们收集个人资料类别，包括但不限于：
      a. your title, name, gender, telephone number, email address, home, mailing, billing, delivery address or other contact information, your day and month of birth, your payment information, username and password, and other personal data you voluntarily provide to us; and
      b. IP address, real-time geographic location data, browser settings, browsing records, referring websites, and other internet log on information of your computer, mobile, or other electronic/communication devices.

3. 收集您的个人资料

我们可能通过不同方式获取有关您的个人资料，例如：
      a. when you shop at our online or physical store;
      b. when you participate in our events or promotions;
      c. when you apply for our loyalty or promotion programs;
      d. when you register an account with us;
      e. when you participate in any surveys or marketing campaigns;
      f. when you login to visit our websites, use our mobile applications or view any of our social media pages;
      g. when you contact us whether in person, by phone, by email or via any social media platforms, to make enquires or provide information;
      h. when verifying your identity;
      i.  when you subscribe to our marketing or promotional materials.

您可选择不向我们提供所要求的个人资料，但若您选择不提供，我们可能无法为您提供我们的产品、服务或优惠，或您或未能登入我们的平台或使用某些功能。

您有权要求我们提供有关您的个人资料及改正、更新或删除该等资料。若您在欧盟居住，您就您的个人资料享有额外的权利，请参阅第11项「资料当事人的权利」。

4. 收集个人资料的目的

您的个人资料可能会用作以下一个或多个用途（「目的」）：
      a. communicating with you;
      b. verifying your identity and any accounts you have with us;
      c. administering any loyalty or other marketing, promotional or corporate programs that we are involved in, including providing you with the benefits that you are entitled;
      d. processing your orders for products and services you place with us (such as maintaining your shopping cart, attending to billing, payments, refunds and delivery arrangements);
      e. handling and responding to your inquiries, suggestions or complaints;
      f. conducting customer surveys or organizing events for customers;
      g. providing you with customer service;
      h. conducting analysis to help us better understand our customers and to improve our services and products;
      i. customising the information displayed on our shopping websites/apps and social networking/media platforms to create better customers experience;
      j. designing targeted promotional offers;
      k. conducting advertising activities, including targeted advertising;
      l. conducting direct marketing activities;
      m. fulfilling our obligation to maintain records of processing activities;
      n. meeting legal, regulatory or compliance requirements, dealing with enquires from law enforcement or regulatory bodies or for the purpose of obtaining legal advice; and
      o. any other purposes directly related to any of the above purposes.

我们只会收集为达到指定目的所需要或与该目的有直接关系的个人资料。若我们打算将个人资料用于其他不在上述的目的，我们会在使用您的个人资料前先取得您的同意。

5. 直接促销

We intend to use your personal information for direct marketing which will include the marketing and promotion of all products and services offered by the LMCHING Group Limited (comprising all companies wholly-owned by LMCHING Group Limited which are engaged in the sale of cosmetic and beauty-related products/services). We will not provide your personal information to third parties for use in their direct marketing activities.

如您希望取消收取与直销活动有关的讯息，您可参照下文「联络我们」列出的方法与我们的客户服务主任联络，以表明您的选择或要求我们更改您的选择（不另收费）。如以电邮形式收取直销活动有关的讯息，请按照提供的取消订阅连结取消接收讯息。

欧盟的顾客，除非您反对直接促销收取讯息，我们依赖合法利益作为使用您的个人资料向您直接促销的法律基础。您有权在任何时间取消收取与直销活动有关的讯息。您可(a)参照「联络我们」的方法与我们的客户服务主任联络或(b)如以电邮形式收取讯息，按下提供的取消订阅连结。我们会将您的决定妥善存档，而您取消收取与直销活动有关讯息的决定不会影响我们之前处理个人资料的合法性。

6. 使用您的个人资料

我们会依照相关的法律及规条处理(包括但不限于收集，储存，保存，使用，转让及披露)您所提供的资料。我们会确保您的资料安全，准确及更新，并不会储存长于需要的时间。

7. 处理欧盟顾客个人资料的法理基础

我们在维护我们的利益下可以使用您的个人资料，但这些利益将不会凌架在对您的潜在损害之上。

我们相信我们有一定的法理基础使用您的个人资料，包括但不限于：
      ▪ conducting business by providing services to you, including verifying your identity and any accounts you have with us; administering any loyalty or other marketing activities, processing your orders for products and maintaining your shopping cart, attending to billing, payments, refunds and delivery arrangements; handling and responding to your inquiries, suggestions or complaints; conducting analysis and for other Purposes, providing you with direct marketing communication as you can reasonably expect at the time and in the context of collection of your personal information that processing for direct marketing purpose may take place;
      ▪ to help us satisfy our legal obligations (for example, in relation to prevention of money laundering and anti-terrorism);
      ▪ to help us understand our customers better and provide better, more relevant services to them;
      ▪ to ensure that our service runs smoothly;
      ▪ to help us keep our systems secure and prevent unauthorised access or cyber-attacks; and
      ▪ to drive commercial value for the benefit of our shareholders.

我們在您的同意下可以使用您的個人資料。您的同意在符合以下條件下方為有效：
      ▪ It has to be given freely, without us putting you under any type of pressure;
      ▪ You have to know what you are consenting to – so we will make sure we give you enough information;
      ▪ You should only be asked to consent to one thing at a time – we therefore avoid "bundling" consents together so that you do not know exactly what you are agreeing to; and
      ▪ You need to take positive and affirmative action in giving us your consent – we are likely to provide a tick box for you to check so that this requirement is met in a clear and unambiguous fashion.

您有权在任何时候撤回同意，我们在下面「联络我们」一项提供了详细的方法。

履行我们的合约责任: 我们为了履行与您的合约是可以使用您的个人资料的，例如我们需要取得您的信用咭及银行户口资料去处理您的付款。

履行我们的法律责任: 除为了履行与您的合约外，我们亦可以为了遵守及履行我们的法律责任使用您的个人资料。

8. 透过自动方式收集的资料

曲奇(Cookies)是当您浏览网站时，浏览器储存于电脑或其他互联网相关设备内的资料。我们会使用Cookies作不同用途:

      a. Strictly Necessary Cookies. These cookies are essential, as they enable you to browse our website and use its features, such as accessing log-in or secured areas. These cookies cannot be switched off or otherwise the website would not work properly. However, these cookies do not store any personal data.
      b. Functionality Cookies. These cookies are used to enhance your shopping experience. For example, they allow us to remember what your preferred country is and what items you have added to your shopping cart when you visit our website again. The information these cookies collect may be anonymous, and they are not used to track your browsing activity on other sites. They are optional to users.
      c. Targeting Cookies. Many of these are provided by third parties. These cookies can remember that your device has visited a site, and may also be able to track your device’s browsing activity on other sites. Examples of what we are using are Google Analytics and Adobe Analytics. Such information may be shared with other advertising networks to deliver the advertising. Again, you can block these cookies.

若您在没有更改设定的情况下继续使用，您即同意我们在我们的网站使用这些Cookies.

如何控制及删除Cookies
您可以设定您的浏览器禁止所有或部份Cookies运作，请按以下的连结:
Chrome: https://support.google.com/chrome/answer/95647
Internet Explorer: https://support.microsoft.com/en-gb/help/17442/
Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
Safari: https://support.apple.com/kb/ph21411

请注意，若您更改您的浏览器禁止某种Cookies, 您可能不能进入我们部份的网站, 我们其他的服务亦可能不能正常运作。

除了使用Cookies，我们也会透过我们的流动应用程式或网上平台以自动方式收集您的资料，例如网络伺服器记录档(Web Server Logs)。网络伺服器记录档是您在使用流动装置或个人电脑浏览网站的活动记录。例如网络伺服器记录档可以记录您搜查过的关键字或到访过的网上连结，它亦可记录您的浏览器资料如IP地址及伺服器在浏览器所装置的Cookies。由自动方式收集的资料可被用作我们某部份的目的。

9. 闭路电视

我们店内为保安理由装置了闭路电视。从闭路电视所获得的资料只会在符合个人资料(私隐)条例的要求下使用及不会保留超过实际所需的时间。

10. 分享的资料及如何分享

We may disclose or transfer your personal data to companies within the LMCHING Group Limited or to any third party service providers or business partners, whether within or outside your jurisdiction, as necessary on a need-to-know basis to fulfil any of the Purposes. For transfer of personal data outside your jurisdiction, we will adopt contractual or other appropriate measures to safeguard your personal data, to provide a standard of protection at least comparable to that standard under the data protection laws in your jurisdiction, and to use them only to fulfil the above Purposes on our behalf or otherwise in accordance with any other cross-border data transfer mechanisms under the data protection laws of your jurisdiction.

我们也会基于法律或规条的要求或在保护我们的利益而必需的情况(在法律容许下) 披露或转移您的个人资料到其他地方, 例如因可能出现的索偿向保险公司披露。我们亦会保留任何因合并，吞并或公司重组(在法律容许下)而转移您的个人资料的权利。

11. 资料当事人的权利

您有权向我们索取我们持有关于您的个人资料副本或修改我们持有关于您不正确或不完整的个人资料。我们不会无故拖延，并会在您所属司法管辖区内的个人资料法时限内处埋您的要求(视乎我们在法律容许的延长期限)。若我们拒绝您索取或修改个人资料的要求，我们会向您解释拒绝的原因。

欧盟的居民，您在我们管有或处埋您的个人资料的任何时间内根据「通用数据保障条例」可享有以下权利：
      i. Right to object
         ▪ You have the right to object to us processing your personal data for one of the following reasons: (i) where it is within our legitimate interest; (ii) to enable us to perform a task in the public interest or exercise official authority; (iii) to send you direct marketing materials; and/or (iv) for scientific, historical, research, or statistical purposes.
         ▪ The “legitimate interests” category above is the one most likely to apply in relation to our relationship, and if your objection relates to us processing your personal data because we deem it necessary for our legitimate interests, we will act on your objection by ceasing the activity in question unless we:
              · have compelling legitimate grounds for processing which overrides your interests; or
              · are processing your data for the establishment, exercise or defence of a legal claim.

      ii. Right to withdraw consent
         ▪ Where we have obtained your consent to process your personal data for certain activities (for example, for automatic profiling), you may withdraw this consent at any time and we will cease to carry out the particular activity that you previously consented to, unless we consider that there is an alternative legal basis to justify our continued processing of your data for this purpose, in which case we will inform you of the same.     

      iii. Right to submit a data subject access request (DSAR)
        ▪ You may ask us to confirm what information we hold about you at any time, and request us to modify, update or delete such information. We may ask you for more information about your request. We may refuse your request where we are legally permitted to do so, and we will inform you of the reasons for our refusal. If we provide you with access to the information we hold about you, we will charge you if your request is "manifestly unfounded or excessive". If you request further copies of this information from us, we may charge you a reasonable administrative cost where legally permissible.

      iv. Right to erasure
         ▪ You have the right to request that we "erase" your personal data in certain circumstances. Normally, the information must meet one of the following criteria:
               · the data is no longer necessary for the purpose for which we originally collected and/or processed them;
               · where previously given, you have withdrawn your consent to us processing your data, and there is no other valid reason for us to continue processing;
               · the data has been processed unlawfully (i.e. in a manner which does not comply with the GDPR);
               · it is necessary for the data to be erased in order for us to comply with our obligations as a data controller under EU or Member State law; or
               · if we process the data because we believe it necessary to do so for our legitimate interests, you object to the processing and we are unable to demonstrate overriding legitimate grounds for our continued processing.
         ▪ We would only be entitled to refuse to comply with your request for erasure for one of the following reasons:
               · to exercise the right of freedom of expression and information;
               · to comply with legal obligations or for the performance of a public interest task or exercise of official authority;
               · for public health reasons in the public interest;
               · for archival, research or statistical purposes; or
               · to exercise or defend a legal claim.
         ▪ When complying with a valid request for the erasure of data, we will take all reasonably practicable steps to delete the relevant data.

      v. Right to restrict processing
         ▪ You have the right to request that we restrict our processing of your personal data in certain circumstances.[1] Upon acceptance of your request, we can only continue to store your data and will not be able to carry out any further processing activities with it until either: (i) one of the circumstances (as listed in footnote 1) is resolved; (ii) you consent; or (iii) further processing is necessary for either the establishment, exercise or defence of legal claims, the protection of the rights of another individual, or reasons of important EU or Member State public interest.
         ▪ The circumstances in which you are entitled to request that we restrict the processing of your personal data are:
               · where you dispute the accuracy of the personal data that we are processing about you. In this case, our processing of your personal data will be restricted for the period during which the accuracy of the data is verified;
               · where you object to our processing of your personal data for our legitimate interests. Here, you can request that the data be restricted while we verify our grounds for processing your personal data;
               · where our processing of your data is unlawful, but you would prefer us to restrict our processing of it rather than erasing it; and
               · where we have no further need to process your personal data but you require the data to establish, exercise, or defend legal claims.
         ▪ If we have shared your personal data with third parties, we will notify them about the restricted processing unless this is impossible or involves disproportionate effort. We will notify you before lifting any restriction on processing your personal data.

      vi. Right to rectification
         ▪ You also have the right to request that we rectify any inaccurate or incomplete personal data that we hold about you, including by means of providing a supplementary statement. If we have shared this personal data with third parties, we will notify them about the rectification unless this is impossible or involves disproportionate effort. You may also request details of the third parties that we have disclosed the inaccurate or incomplete personal data to. Where we think that it is reasonable for us not to comply with your request, we will explain our reasons for this decision.

      vii. Right of data portability
         ▪ The right of data portability applies to: (i) personal data that we process automatically (i.e. without any human intervention); (ii) personal data provided by you; and (iii) personal data that we process based on your consent or in order to fulfil a contract.
         ▪ You have the right to transfer your personal data between data controllers which means that you are able to transfer the details we hold on you to another employer or a third party. We will provide you with your data in a commonly used machine-readable format to allow you to effect such transfer. Alternatively, we may directly transfer the data for you.     

      viii. Right to lodge a complaint with a supervisory authority
         ▪ You also have the right to lodge a complaint with your local supervisory authority.

如您想行驶这些权利或取消您同意我们处理您的个人资料(当我们处理的法律基础是同意) ，这私隐政策下面「联络我们」的部份有详细列出如何联络我们。请留意，我们会保留与您的通讯以便处理您提出的问题。

Please note that we may keep a record of your communications to help us resolve any issues which you raise.If you consider that our processing of your personal information infringes data protection laws, you have a legal right to lodge a complaint with a supervisory authority responsible for data protection in your habitual residence or to our representative whose contact details may be found at the “Contact Us” section below.

12. 保留个人资料

我们会不时覆核我们管有的个人资料。我们保留您的个人资料的时间不会长于为完成目的所需的时间，除相关的法律及规定容许外，我们会在合理时间内尽快删除已完成目的的个人资料。

我们会在保存期限到期后永久删除您的个人资料，但您某部份的个人资料仍会储存在我们的系统，如等侯被覆盖的资料。为了我们的目的，这些资料不能再被使用，换言之，即使该资料存在于电子系统，也不能被我们的员工再索取或使用。

13. 资枓保护

为了保护并防止您的个人资料遭受意外、非法或未经授权的阅览，我们会维持适当的措施去保障我们收集及处理您的个人资料的保密性及安全性。

14. 第三方网站

本私隐政策仅适用于我们，而不适用于任何其他第三方（包括他们营运的网站）。当点击连结及/或广告标语把您连线到第三方的网站或与我们关联公司的网站，您将会受到他们的私隐政策约束。虽然我们支持互联网私隐的保护，我们将不会承担由我们网络以外第三方所采取的任何行动。

15. 儿童政策

我们的网站及流动应用程式不适用于16岁或以下的人士直接使用。假如您是16岁或以下，您应该在家长或监护人陪同下使用我们的网站及流动应用程式及不应逞交任何个人资料给我们。

16. 修改私隐政策

我们可能不时修改本私隐政策，并于我们的网站及流动平台公布。您可不时浏览本私隐政策，以确保您得悉最新版本。

17. 联络我们

如果您对本隐私政策有任何疑问或想行使您索取及更改您的个人资料的权利
      ▪ by telephone: +852 36195561;
      ▪ by e-mail: yourexpert@lmching.com; or
      ▪ by mail: LMCHING Group Limited: Unit A, 1/F, Hover Industrial Building, 38 Kwai Cheong Road, Kwai Chung, Hong Kong

本私隐政策有英文版本及中文版本。如英文版本及中文版本之间存在歧义，概以英文版本为准。

LMCHING Group Limited

[1] 您可要求我们限制处理您的个人资料的情况包括: (a) 当您争议我们处理有关您的资料的准确性。在此情况下，我们处理您的个人资料将会受到限制，直至该资料的准确性得到核实; (b) 当您反对我们有合法利益处理您的个人资料。这情况下您可限制我们处理您的个人资料，直至我们的合法利益得到核实; (c) 当我们不合法地处理您的个人资料，但您选择限制我们处理而非删除您的个人资料; (d)在我们已经不需要再处理您的个人资料的情况下您需要该资料建立，进行或抗辩法律索偿。