INTRODUCTION

This Privacy Policy explains how Victoria Dispensary (referred to in this policy as “Protein World”, “we”, “us” or “our”) collects, uses, stores and protects your personal data when you use our website, purchase our products, or otherwise interact with us.

We are committed to protecting your personal data and respecting your privacy. We will only use your personal data for the purposes for which it was collected and in accordance with applicable data protection laws in Hong Kong, including the Personal Data (Privacy) Ordinance (Cap. 486) (“PDPO”).

IMPORTANT INFORMATION AND WHO WE ARE

Data Controller

Watsons Pharmacy Ltd is the data controller responsible for the personal data collected through our website and in connection with the provision of our products and services.

Registered Address:
Registered at G/F, Shop 2, 60 Stanley Street, Central, Hong Kong

Contact Email:
delivery@proteinworld.com

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us using the details above.

CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, legal or regulatory requirements, or operational needs. Any updates will be posted on this page and will take effect immediately for data collected after the updated policy is published. We encourage you to review this Privacy Policy periodically.

THIRD-PARTY LINKS

Our website may contain links to third-party websites, plug-ins or applications. Once you leave our website or are redirected to a third-party site, we are not responsible for how those third parties collect, use or protect your personal data. We encourage you to read their privacy policies before providing any personal data.

WHAT PERSONAL DATA WE COLLECT

Personal data means any information that can identify you directly or indirectly.

We may collect, use, store and transfer the following categories of personal data:

• Identity Data – first name and last name

• Contact Data – billing address, delivery address, email address and telephone number

• Financial Data – limited payment information (we do not store full card details)

• Transaction Data – details of purchases, payments and order history

• Technical Data – IP address, browser type and version, device information, operating system and platform

• Profile Data – account details, purchase history, preferences, feedback and survey responses

• Usage Data – information about how you use our website and services

• Marketing and Communications Data – your preferences in receiving marketing communications

We may also use aggregated data (such as statistical or demographic data). Aggregated data does not identify you and is not considered personal data under the PDPO.

We do not intentionally collect sensitive personal data (such as health data, biometric data, religious beliefs or political opinions).

Our website is not intended for individuals under the age of 18, and we do not knowingly collect personal data from children.

HOW WE COLLECT YOUR PERSONAL DATA

We collect personal data through:

Direct interactions

When you:

• Create an account

• Place an order

• Contact us by email, phone, live chat or post

• Subscribe to marketing communications

• Enter promotions, competitions or surveys

• Request a refund or return

Automated technologies

When you interact with our website, we may automatically collect Technical Data and Usage Data using cookies, log files, pixels and similar technologies.

Third parties

We may receive personal data from:

• Payment providers

• Delivery and logistics partners

• Analytics providers (such as Google Analytics)

• E-commerce platforms and service providers

USE OF YOUR PERSONAL DATA

We use your personal data only where permitted under applicable Hong Kong law. Common purposes include:

• Processing and fulfilling orders

• Managing payments, refunds and returns

• Delivering products

• Managing your account and customer support

• Communicating with you about orders or services

• Sending marketing communications (where you have consented)

• Improving our website, products and services

• Preventing fraud and ensuring website security

• Complying with legal and regulatory obligations

Where required, we will obtain your consent before using your personal data for marketing purposes. You may withdraw your consent at any time.

MARKETING COMMUNICATIONS

You may choose to receive marketing communications from us. You can opt out at any time by:

• Clicking the “unsubscribe” link in our emails, or

• Contacting us at delivery@proteinworld.com

Opting out of marketing communications will not affect essential service-related communications (such as order confirmations or delivery updates).

DISCLOSURE OF PERSONAL DATA

We do not sell your personal data.

We may share your personal data with trusted third parties where necessary to provide our services, including:

• Payment processors

• Website hosting and IT service providers

• Order fulfilment and delivery partners

• Customer support platforms

• Professional advisors (legal, accounting, compliance)

All third parties are required to handle your personal data securely and only in accordance with our instructions and applicable law.

We may also disclose personal data where required by law, regulation, court order, or to protect our legal rights.

TRANSFER OF PERSONAL DATA OUTSIDE HONG KONG

Some of our service providers may be located outside Hong Kong. Where personal data is transferred outside Hong Kong, we take reasonable steps to ensure that the data is protected to a standard comparable to that required under the PDPO, including contractual safeguards and security measures.

DATA SECURITY

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, misuse, alteration or disclosure.

Access to personal data is limited to employees, contractors and service providers who have a legitimate business need to know.

DATA RETENTION

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting and reporting requirements.

Typically:

• Account data is retained while your account remains active

• Order data may be retained for several years to comply with legal and tax obligations

When personal data is no longer required, it is securely deleted or anonymised.

YOUR RIGHTS UNDER HONG KONG LAW

Under the PDPO, you have the right to:

• Request access to your personal data

• Request correction of inaccurate or incomplete personal data

Requests should be made in writing using the contact details above. We may need to verify your identity before responding.

COOKIES

We use cookies and similar technologies to improve website functionality, analyse usage and support marketing activities.

You can control cookies through your browser settings. Please note that disabling cookies may affect website functionality.

CONTACT US

If you have any questions, concerns or requests regarding this Privacy Policy or your personal data, please contact:

Email: delivery@proteinworld.com