Privacy Policy

1. Introduction

This Privacy Policy describes how drhong.com.hk (“we,” “us,” or “our”) collects, uses, stores, and shares your personal data when you use our website. By accessing or using our site, you acknowledge that you have read this policy and agree to the collection and use of information in accordance with its terms.

We are committed to protecting your privacy and ensuring that your personal data is handled in compliance with applicable data protection laws, including the Personal Data (Privacy) Ordinance (Cap. 486) of the Laws of Hong Kong.

2. Information We Collect

We collect information to provide and improve our services. This includes:

• Personal Data: Information you provide directly to us, such as your name, email address, and communication content when you submit inquiries via our contact forms.
• Transaction Data: When you make a purchase, payment information is collected. Please note that we do not store full credit card numbers or sensitive payment details on our servers; this is handled securely by our payment processor, Stripe.
• Usage Data: Technical information about how you access and interact with our site, including your IP address, browser type, regional preferences, and activity logs related to the access and download of purchased digital files.

3. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contractual Necessity: To process payments via Stripe and to validate and deliver your purchased digital content.
• Consent: When you voluntarily submit information through our contact forms.
• Legitimate Interests: To maintain website security, prevent fraud, and analyze the performance of our book links.

4. Cookie Usage and Third-Party Service Providers

We use essential cookies and similar technologies provided by trusted third-party service providers to ensure core website functionality.

A. Core Website Functionality (First-Party Cookies)

We use internal cookies essential for the proper functioning of the website, specifically for the delivery of digital goods. These cookies allow us to:

• Authenticate your session after a successful purchase.
• Validate your permission to access the download link.
• Manage the security of the file transfer to prevent unauthorized access.
• Duration: Session duration (deleted when the browser is closed or the download expires).

B. Stripe (Payment Processing)

When you make a direct purchase, Stripe sets cookies to:

• Process payments securely.
• Detect and prevent fraudulent transactions.
• Duration: Session duration for transactions; up to 90 days for fraud prevention.

C. FormSubmit (Form Processing)

When you use our contact forms, FormSubmit sets cookies to:

• Securely transmit your message.
• Prevent spam and abuse (e.g., CAPTCHA).
• Duration: Session duration (deleted when the browser is closed).

D. Booklinker (Link Management)

When you click our book availability links, Booklinker uses cookies to:

• Determine your geographic location.
• Redirect you to the correct regional Amazon storefront.
• Duration: Up to 12 months.

E. Amazon (Book Information)

When you are redirected to Amazon via our links, or if Amazon content is embedded, Amazon may set cookies to:

• Display real-time pricing and availability.
• Maintain your shopping session on their platform.
• Note: Once you leave our site for Amazon, your data is governed by Amazon’s Privacy Notice.
• Duration: Up to 365 days.

5. Managing Cookies

The cookies listed above are classified as “Strictly Necessary” for the operation of the site (e.g., completing a payment or sending a message). While you can configure your browser to block these cookies, doing so will prevent the website from functioning correctly (e.g., you will be unable to check out or contact us).

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

• Contact Form Data: Retained for the duration necessary to resolve your inquiry.
• Transaction Records: Retained as required by tax and accounting laws.

7. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties for marketing purposes. We share your personal data only with trusted third-party service providers (“Processors”) to facilitate our services, as detailed below:

A. Fulfilment of Physical Goods

To facilitate the processing and delivery of orders for physical books, we engage third-party fulfilment partners. If you purchase a physical item, we transfer necessary shipping details—specifically your name, shipping address, phone number, and email address—to these providers (including, but not limited to, Amazon Fulfilment Services).

This data is shared solely for the purpose of:

• Processing your order for physical books,
• Shipping the items to your designated address, and
• Providing shipment tracking updates.

Note: This data transfer does not apply to purchases of digital goods (such as eBooks or PDFs) where physical shipping is not required.

B. Essential Service Providers

We also share data with the following processors to maintain site functionality and business operations:

• Stripe: For secure payment processing and fraud prevention.
• FormSubmit: To facilitate the delivery of inquiries submitted via our contact forms.
• Booklinker/Amazon: To manage product redirection and affiliate attribution.

C. Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court order or government agency).

All third-party service providers are authorized to use your personal information only as necessary to provide these services to us and are contractually obligated to maintain the confidentiality and security of your information.

8. Your Data Rights

Depending on your jurisdiction, you have specific rights regarding your personal data, including:

• Right of Access: You have the right to request a copy of the personal data we hold about you.
• Right to Correction: You may request that we correct any inaccurate or incomplete data.
• Right to Erasure: You may request that we delete your personal data, subject to certain legal exceptions (e.g., tax records).
• Right to Withdraw Consent: Where we rely on your consent to process data, you may withdraw that consent at any time.

To exercise these rights, please contact us at: info@drhong.com.hk

9. Third-Party Links

Our website contains links to external sites (specifically Amazon). Please be aware that we are not responsible for the content or privacy practices of such other sites. We encourage our users to be aware when they leave our site and to read the privacy statements of any other site that collects personally identifiable information.

10. Governing Law

This Privacy Policy and any disputes related thereto shall be governed by and construed in accordance with the laws of the Hong Kong Special Administrative Region.

11. Updates to This Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last Updated” date at the top of this policy.