privacy

FloreoAetas Limited, trading as FloreoAetās, is the data user responsible for personal data collected through floreoaetas.com, our account and checkout flows, journal subscription, partner enquiries, and Hong Kong private care appointments.

This policy is written with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong in mind. Additional mandatory rights may apply according to where you live.

We collect information you provide, information produced by a transaction, and limited technical information needed to operate and protect the site.

• Name, email address, optional telephone number, Hong Kong delivery address, and account preferences.
• Order, currency, product, return, customer-service, and private care appointment details.
• Newsletter consent, partner enquiries, and messages you send us.
• Device, browser, approximate location, referral, page-view, security, and diagnostic information from hosting logs and site analytics.

We use personal data only for lawful purposes connected with operating FloreoAetās, fulfilling your requests, protecting the service, and meeting legal obligations.

• Create and secure accounts, confirm email addresses, and provide password recovery.
• Take payment, fulfil orders, arrange delivery, process returns, and maintain transaction records.
• Arrange eligible private care appointments and send service messages.
• Respond to enquiries, prevent fraud or misuse, troubleshoot, and improve performance.
• Send journal or marketing messages only where you have chosen to receive them.

Stripe processes checkout and card information. We receive the transaction reference, payment status, amount, currency, and details needed to fulfil the order, but we do not receive or store your full card number.

Supabase supports account authentication; Vercel hosts the website and provides analytics; database and email-delivery providers support order records and messages. Each provider processes data only for the services it provides to us and under its own security and privacy terms.

The site uses browser storage and essential cookies to remember your shopping bag, language, currency, account session, and security state. Clearing browser data may sign you out or remove local preferences and your bag.

We use Vercel Analytics to understand aggregated site use and performance. We do not intentionally use third-party advertising cookies or sell behavioural profiles.

We do not sell personal data. We share only what is reasonably necessary with payment, authentication, hosting, database, email, delivery, professional-adviser, fraud-prevention, and customer-service providers.

We may disclose information when required by law, to protect legal rights or safety, or as part of a genuine corporate reorganisation. Providers may process data outside Hong Kong; we use contractual and practical safeguards appropriate to the service and data involved.

We keep personal data only as long as needed for account operation, order fulfilment, support, fraud prevention, disputes, and legal, tax, or accounting requirements. Different records therefore have different retention periods.

We use practicable safeguards, including access controls and encrypted transport. No internet service can promise absolute security; use a unique password and contact us if you believe an account has been compromised.

You may ask whether we hold personal data about you and request access to or correction of that data, subject to applicable procedures and exceptions. We may verify identity before acting and charge only a permitted, non-excessive access fee.

You may unsubscribe from marketing through the link in a message or by contacting us. This does not stop operational messages about an account, order, return, security issue, or appointment.

The site is not directed to children under 16 and we do not knowingly create accounts for them. Contact us if you believe a child has provided personal data without appropriate permission.

We may update this policy when services, providers, or legal obligations change. The effective date above identifies the current version. Material changes will receive appropriate notice where required.