1. Scope
Dermatriz Limited (“we”, “us”) respects your privacy. This policy explains our handling of personal data in connection with
dermatriz.com, website enquiries and related business communications. We comply with our applicable obligations under Hong Kong’s Personal Data (Privacy) Ordinance (Cap. 486) and other applicable requirements. Separate stores, brands and third-party platforms have their own privacy arrangements; this policy does not automatically cover their independent processing.
2. Information we collect
- Information you provide: enquiry type, name and email address, together with any telephone number, subject, message, company, role, professional interests and correspondence you choose to provide.
- Technical and usage information: the website and service providers may process IP addresses, browser and device information, pages visited, request times, security records, cookie choices and language settings. Analytics use also depends on relevant settings and choices.
Forms identify required and optional fields. The current professional enquiry form requires an enquiry type, name, email and message; telephone and subject are optional. Without information needed to respond, we may be unable to handle your request. Do not send patient details, medical records, identity document numbers or other unnecessary sensitive information through a general enquiry form. Ensure you are entitled to provide anyone else’s data and limit it to what is necessary.
3. Purposes
We use information as reasonably needed to:
- answer enquiries and follow up product, quotation, training, distribution or cooperation requests you make;
- manage related business communications, product support and agreed services, and keep necessary records;
- maintain the website, resolve technical issues, prevent abuse and protect security;
- understand website use and improve content and services, subject to applicable settings and choices;
- meet legal obligations, handle complaints and establish or exercise lawful claims.
Where a proposed new use falls outside the original or a directly related purpose, we will obtain any consent required by applicable law.
4. Direct marketing
If we intend to use your name, business contact details and professional interests to promote skincare or aesthetic products, brands, training, events or offers, we will first provide the required notice and obtain the consent or indication of no objection required by law. Sending an enquiry or reading this policy does not itself constitute direct marketing consent.
You may ask us at any time, free of charge, to stop using your data for direct marketing by emailing us or using an unsubscribe method included in a message. We do not sell your contact information to third parties for their independent direct marketing.
5. Sharing and service providers
We share information only where needed and on an appropriate basis with authorised staff and providers supporting hosting, IT, email, forms or related business operations. Fulfilling a cooperation, transaction or product-support request may require necessary information to be shared with a relevant brand or business partner, with appropriate limits and safeguards for the circumstances. Legal and professional advisers, regulators or law-enforcement bodies may receive necessary information for legal obligations, claims or other lawful needs.
Some providers may process information outside Hong Kong. We consider applicable law and the relevant risks and use suitable contractual protections, purpose restrictions or other safeguards. This policy does not represent that all data is stored only in Hong Kong.
6. Cookies, Google tools and external platforms
The website uses CookieYes for cookie choices and Polylang for language functions, and has Google Tag Manager and Google Analytics configurations. Storage and measurement depend on consent settings and tool configurations. Please read our Cookies Policy.
WhatsApp, social media, brand links and embedded third-party content may involve processing by the relevant platform under its own policy, including content you actively send. Please review its privacy information before use.
7. Retention and security
We retain information only for as long as needed for the relevant purpose, service, legal requirements or reasonable claims, considering its nature and our business relationship. When no longer needed, we take reasonable steps to delete, anonymise or securely dispose of it. Backups may be removed over their retention cycle, with access restricted in the meantime.
We use reasonable technical and organisational measures proportionate to risk to protect against unauthorised access, loss, misuse and disclosure. Internet transmission and storage systems cannot be guaranteed completely secure.
8. Access, correction and choices
You may contact us to request access to or correction of personal data we hold about you. We may reasonably verify identity and clarify the scope of a request. We handle requests in accordance with applicable law. Access and correction requests under the applicable Ordinance should generally be dealt with within 40 days, subject to statutory exceptions and procedures. A lawful, non-excessive fee may apply to a data access request; direct marketing opt-outs are free.
You may also ask us to stop contacting you or delete information. We will consider applicable obligations and retention needs, so immediate deletion cannot be guaranteed in every case. Rights under other applicable laws are unaffected.
9. Updates and contact
Terms and Conditions | Cookies Policy
