Privacy Policy
Effective date: 8 June 2026 Last updated: 8 June 2026 Data controller / Merchant of record: Medii Technology HK Address: Office 502, 5/F, Tower 1, South Seas Centre, 75 Mody Road, Tsim Sha Tsui East, Kowloon, Hong Kong Contact email: mediicosmetics@gmail.com
1. Who we are
This website, oxygenceuticals.hk ("the Store"), is operated by Medii Technology HK ("we", "us", "our"), the exclusive authorised distributor of OxygenCeuticals skincare products in Hong Kong. We are committed to protecting personal data in accordance with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong ("PDPO").
2. What personal data we collect
When you visit, browse, or place an order on the Store, we may collect the following categories of personal data:
a. Identity and contact data
- Full name
- Email address
- Phone number
- Billing and shipping address
b. Transaction data
- Products purchased, order amounts, and order history
- Payment method type (we do not store full card numbers: payment processing is handled by third-party processors; see Section 5)
c. Technical and usage data
- IP address
- Browser type and version
- Pages visited, time spent, referring URL
- Device type and operating system
- Cookies and similar tracking technologies (see Section 8)
d. Communications data
- Any messages you send to us via email, contact forms, or customer service channels
Providing personal data is voluntary. However, certain data (name, shipping address, email, payment details) is necessary to process and fulfil an order. If you do not provide this data, we cannot complete your purchase.
3. Purposes of collection and use
We collect and use your personal data for the following purposes:
| Purpose | Legal basis under PDPO |
|---|---|
| Processing and fulfilling orders (including shipping via SF Express) | Necessary for contract performance |
| Sending order confirmations, dispatch notifications, and after-sales communications | Necessary for contract performance |
| Customer service and handling enquiries, returns, or complaints | Legitimate interest / contract |
| Fraud prevention and security | Legitimate interest |
| Improving the Store (analytics, performance monitoring) | Legitimate interest |
| Direct marketing (see Section 4 below) | Separate consent only |
We will not use your personal data for any purpose incompatible with those listed above without your prior consent.
4. Direct marketing: your explicit consent is required
Under the PDPO, we are required to inform you of the following before using your personal data for direct marketing purposes, and to obtain your express consent.
4.1 What we intend to do
We would like to use the following categories of your personal data:
- Your name
- Your email address
- Your purchase history
for the purpose of sending you direct marketing communications about:
- OxygenCeuticals skincare products, new launches, and limited offers
- Promotions, events, and educational content relating to skincare
4.2 How we will contact you
Direct marketing communications may be sent by:
4.3 Your consent right
We will only use your data for direct marketing if you have given us express consent by ticking the opt-in checkbox at checkout or on our newsletter sign-up form. Providing consent is entirely optional and will not affect your ability to place an order.
4.4 Your opt-out right
You may withdraw your consent for direct marketing at any time, free of charge, by:
- Clicking the unsubscribe link in any marketing email we send; or
- Emailing us at mediicosmetics@gmail.com with the subject line "Opt-out of marketing"
Once you opt out, we will stop using your data for direct marketing purposes within 10 business days.
5. Who we share your data with
We do not sell your personal data. We may share it with the following categories of third parties, strictly for the purposes described in Section 3:
| Third party | Purpose | Location |
|---|---|---|
| Shopify Inc. | E-commerce platform, order management, payment processing | Canada / global |
| SF Express (Hong Kong) | Order fulfilment and delivery | Hong Kong |
| Payment processors (e.g. Stripe, AlipayHK, WeChat Pay HK, FPS operators) | Processing card and e-wallet payments | Hong Kong / global |
| COIZ Co. Ltd (OxygenCeuticals Korea) | Principal brand: limited sharing for warranty, product safety, or regulatory compliance purposes | Republic of Korea |
| Email marketing platform (e.g. Shopify Email, Klaviyo) | Sending transactional and (if consented) marketing emails | Global |
| Analytics providers (e.g. Google Analytics) | Aggregate traffic analysis | Global |
We require all third-party processors to maintain appropriate security standards and to use your data only for the specified purposes.
6. Data retention
We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy, or as required by applicable law. Indicative retention periods:
| Data type | Retention period |
|---|---|
| Order and transaction records | 7 years (aligned with HK tax/accounting obligations) |
| Customer service communications | 2 years from last interaction |
| Marketing consent records | For the duration of the relationship + 2 years after opt-out |
| Technical/log data | 12 months |
After the applicable retention period, data is securely deleted or anonymised.
7. Your rights under the PDPO
Under the PDPO, you have the right to:
a. Access your personal data You may submit a Data Access Request (DAR) to obtain a copy of the personal data we hold about you. We will respond within 40 days as required by the Ordinance. A fee may be charged in accordance with the PDPO.
b. Correct your personal data If any personal data we hold is inaccurate, you may request a correction. We will respond within 40 days.
c. Withdraw consent for direct marketing See Section 4.4 above.
To exercise any of these rights, contact us at: mediicosmetics@gmail.com
If you are not satisfied with our response, you may lodge a complaint with the Privacy Commissioner for Personal Data (PCPD):
- Website: www.pcpd.org.hk
- Hotline: +852 2827 2827
8. Cookies and tracking technologies
The Store uses cookies and similar technologies to:
- Enable essential shopping functions (cart, login session)
- Analyse traffic and usage patterns (analytics)
- Support retargeting and advertising (only if you have given consent via the cookie banner)
You may manage cookie preferences in your browser settings at any time. Disabling certain cookies may affect the functionality of the Store.
9. Security
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include encrypted data transmission (HTTPS/TLS), access controls on operational systems, and use of Shopify's PCI-DSS compliant infrastructure for payment data.
No method of transmission over the internet is 100% secure. In the event of a data breach that poses a risk to individuals, we will notify affected persons and the PCPD as appropriate.
10. Children
The Store is not directed at children under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us at mediicosmetics@gmail.com and we will delete it promptly.
11. Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Where changes are material, we will notify you by email or by a prominent notice on the Store.
12. Contact us
For all privacy-related enquiries, data access requests, or corrections:
Medii Technology HK Office 502, 5/F, Tower 1, South Seas Centre, 75 Mody Road, Tsim Sha Tsui East, Kowloon, Hong Kong Email: mediicosmetics@gmail.com