Privacy Policy

We collect information you provide directly: your name, email address, phone number and delivery address when you place an order, and any details you share when you contact us or sign up for our newsletter.

We automatically collect certain technical information when you visit our site, including IP address, browser type, device type, pages visited, and referring URLs. This data is collected through cookies and similar technologies.

We do not collect or store biometric data, health records, or information about your skin condition beyond what you voluntarily share through our observation submission form.

We use your information to: process and fulfil orders, communicate about your purchases, improve our products and website experience, send marketing communications (only with your consent), and comply with legal obligations.

We never sell, rent, or trade your personal information to third parties for their marketing purposes.

We share your information only with service providers who help us operate our business: shipping carriers, email service providers, website analytics tools, and our payment provider. These providers are contractually obligated to protect your data.

When you pay online, your name, email address, phone number, delivery address and IP address are sent to our payment provider, Payment Asia, to process that payment. Card and wallet details are entered on Payment Asia's own page and never reach us.

After payment is confirmed, we share the recipient’s name, phone number, delivery address and ordered items with D2, our fulfilment provider, to arrange delivery by SF Express.

We may disclose information if required by law, to protect our rights, or in connection with a merger or acquisition.

We use essential cookies to operate our website (such as your shopping cart) and analytics cookies to understand how visitors use our site. We do not use advertising cookies or cross-site tracking.

You can control cookie settings through your browser preferences. Disabling essential cookies may affect site functionality.

We retain order information for as long as needed to provide our services. Transaction records are kept for 7 years for tax and legal compliance.

You may request deletion of your personal data at any time by emailing info@oxoracare.com. We will process deletion requests within 30 days.

Depending on your jurisdiction, you may have the right to: access, correct, or delete your personal data; object to or restrict processing; data portability; and withdraw consent.

To exercise any of these rights, contact us at info@oxoracare.com. We will respond within 30 days.

We comply with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong (“PDPO”). Under the PDPO, you have the right to request access to your personal data held by us, and to request correction of any data that is inaccurate.

We will not use your personal data for direct marketing purposes unless we have received your explicit consent. You may opt out of direct marketing at any time by contacting us at info@oxoracare.com or using the unsubscribe link in any marketing communication.

Access and correction requests may be subject to a fee as permitted under the PDPO. We will respond to such requests within 40 days.

We use industry-standard security measures to protect your information, including TLS encryption for data in transit and encrypted storage for sensitive data at rest.

We may update this policy from time to time. Material changes will be communicated via email or a prominent notice on our website. Your continued use of our services after changes take effect constitutes acceptance of the updated policy.