Last updated: 5 July 2026
Saankofi Limited, trading as Purring Lotus (“Purring Lotus,” “we,” “us,” or “our”) operates purringlotus.com, pause.purringlotus.com, and our related websites and services, including all related information, content, features, tools, products, and services (the “Services”). Our e-commerce Services are powered by Shopify. This Privacy Policy describes how we collect, use, disclose, and otherwise process your personal information when you visit, use, or make a purchase through the Services, or otherwise communicate with us.
If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.
By using any of the Services, you acknowledge that you have read and understood this Privacy Policy.
1. Who we are
Saankofi Limited (trading as Purring Lotus) is the data controller responsible for your personal information. You can contact us at:
- privacy@purringlotus.com
- Address
- 14/F Hill Lodge, 1 Lok Fung Path, Fo Tan, New Territories, Hong Kong
2. Personal information we collect
We collect the following categories of personal information, depending on how you interact with the Services:
Information you provide directly:
- Contact details: name, email address, phone number, shipping address, and billing address.
- Payment information: payment card details, financial account information, and transaction details. Payment processing is handled by our third-party payment processors (see Section 5); we do not store full payment card numbers.
- Account information: username, password, and account preferences.
- Communications: information you include when you contact us for support, leave a product review, or otherwise communicate with us.
- Customs information: if your order ships to South Korea, your Personal Customs Clearance Code (PCCC). We collect this solely to clear your parcel through Korean customs, share it only with our courier and the Korea Customs Service for that purpose.
Information collected automatically:
- Device and browser information: IP address, browser type and version, operating system, device identifiers, and screen resolution.
- Usage information: pages visited, products viewed, items added to cart or wishlist, referring URLs, click behavior, scroll depth, and session recordings (via Microsoft Clarity).
- Cookie and tracking data: information collected through cookies, pixels, and similar technologies (see Section 7).
- Transaction information: purchase history, order status, returns, and exchanges.
Information from third parties:
- Analytics and advertising platforms (Google, Meta) may provide us with aggregated or pseudonymized data about how you interact with our advertisements.
- Our review platform (Judge.me) may collect information you voluntarily provide when submitting a product review.
3. How we use your personal information
We use your personal information for the following purposes:
To provide and fulfill the Services. Processing orders and payments; arranging shipping and delivery; managing your account; processing returns and exchanges; and communicating with you about your orders. The legal basis for this processing is performance of our contract with you.
To improve and personalize the Services. Analyzing how you use the Services to improve functionality, user experience, and product offerings; recommending products based on your browsing and purchase history; and conducting session replay analysis to identify usability issues. The legal basis is our legitimate interest in improving our Services.
To communicate with you. Responding to your inquiries and providing customer support. The legal basis is performance of our contract with you or our legitimate interest in being responsive to you.
To send marketing communications. Sending promotional emails, product announcements, and other marketing content — only where you have given us your consent or where we have another lawful basis to do so (see Section 8 for jurisdiction-specific rules). You can opt out at any time using the unsubscribe link in any marketing email.
For advertising. Showing you targeted advertisements on third-party platforms (such as Meta, Google, and YouTube), where permitted by applicable law and subject to any required consent. We use tracking pixels and cookies to support this (see Section 7).
For security and fraud prevention. Detecting and preventing fraudulent transactions, unauthorized access, and other illegal activity. The legal basis is our legitimate interest in protecting our business and your account.
To comply with legal obligations. Responding to lawful requests from authorities, complying with tax and record-keeping requirements, and enforcing our terms and policies.
4. How long we retain your personal information
We retain personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.
- Order and transaction records: 7 years from the date of the transaction, as required under Hong Kong tax and commercial record-keeping obligations.
- Account information: For the duration of your account, plus 2 years after account closure or last activity, unless you request earlier deletion.
- Marketing subscriber data: Until you unsubscribe or withdraw consent, after which we retain only sufficient records to honor your opt-out preference.
- Analytics and cookie data: Retention periods vary by provider (see Section 7). Session recording data (Microsoft Clarity) is retained for up to 13 months.
- Customer support communications: 3 years from the date of the last communication, unless related to an open dispute or legal matter.
If litigation, regulatory proceedings, investigations, or legal claims are ongoing or reasonably anticipated, we may retain relevant personal information until those matters have been resolved.
When retention periods expire, we securely delete or anonymize the relevant personal information.
5. How we disclose personal information
We share your personal information with the following categories of third parties, solely as necessary for the purposes described in this Privacy Policy:
| Category | Providers | Purpose | Data shared |
|---|---|---|---|
| E-commerce platform | Shopify | Hosting, order management, checkout, analytics | All data collected through the Services |
| Payment processing | Shopify Payments, PayPal, Airwallex | Processing payments and refunds | Payment and transaction data, contact details |
| Shipping and logistics | Hong Kong Post, Easyship, Shipany | Fulfilling and tracking orders | Name, shipping address, phone number, order details |
| Email marketing | Klaviyo | Sending marketing and transactional emails | Name, email address, purchase history, browsing behavior |
| Analytics | Google Analytics, Microsoft Clarity, Kbite | Understanding usage and improving the Services | Device information, usage data, IP address (anonymized where possible) |
| Advertising | Meta (Facebook/Instagram), Google Ads, YouTube | Targeted advertising and conversion tracking | Hashed identifiers, browsing and purchase events |
| Reviews | Judge.me | Collecting and displaying product reviews | Name, email address, review content |
These providers process your data as our processors or sub-processors, subject to contractual obligations, except where they act as independent controllers (e.g., Shopify — see Section 6).
We may also disclose your personal information:
- When required by law, regulation, or legal process.
- To enforce our Terms of Service or protect our rights.
- In connection with a business transaction such as a merger, acquisition, or asset sale.
- Where you direct us to do so.
We do not sell your personal information in exchange for monetary consideration.
6. Shopify
The Services are hosted by Shopify, which collects and processes personal information about your use of the Services in order to provide and improve them. In addition, we use certain Shopify features that incorporate data from your interactions with our store and with other Shopify merchants. In these circumstances, Shopify acts as an independent controller and is responsible for responding to rights requests relating to that processing.
To learn more, visit the Shopify Consumer Privacy Policy. You may also exercise rights related to Shopify's processing via the Shopify Privacy Portal.
7. Cookies and tracking technologies
We use cookies, pixels, and similar technologies to operate the Services, analyze usage, and deliver targeted advertising. These include:
Essential cookies (Shopify): Required for the site to function — shopping cart, checkout, session management, and fraud prevention. These cannot be disabled.
Analytics cookies and tools:
- Google Analytics: Measures site traffic and user behavior. Data may be transferred to the United States. Google Privacy Policy.
- Microsoft Clarity: Records session replay and interaction data, with sensitive form fields masked, to help us understand how visitors use the Services and identify usability issues. Data is processed in the United States. Microsoft Privacy Statement.
- Kbite: Provides analytics on site performance and user engagement.
Advertising cookies and pixels:
- Meta Pixel (Facebook/Instagram): Tracks conversions and enables targeted advertising on Meta platforms. Meta Privacy Policy.
- Google Ads / YouTube: Tracks conversions and enables remarketing. Google Privacy Policy.
Where required by applicable law, we obtain your consent before placing non-essential cookies or similar technologies on your device. Essential cookies that are strictly necessary for the operation of the Services do not require consent.
How to manage cookies: Most browsers allow you to block or delete cookies through their settings. Blocking essential cookies may impair site functionality. You may also opt out of targeted advertising — see Section 10 for details.
8. Marketing communications
We send marketing emails only where we have a lawful basis to do so:
- With your consent. Where required by law (including in Macau and Australia), we obtain your explicit, opt-in consent before sending marketing communications. Consent is collected via a separate, unticked checkbox at account creation or checkout.
- Based on an existing customer relationship. In jurisdictions where permitted (such as Hong Kong and the UK/EEA "soft opt-in"), we may send marketing related to similar products you have previously purchased, provided you have not opted out.
You can withdraw consent or opt out of marketing emails at any time by clicking the "unsubscribe" link in any email, or by contacting us at privacy@purringlotus.com. We maintain an internal suppression list to ensure opt-out requests are honored.
9. International data transfers
Your personal information may be transferred to, stored in, and processed in countries other than the one in which it was collected. Our service providers operate primarily in:
- Hong Kong SAR (Purring Lotus operations, Airwallex, Hong Kong Post, Singapore buyers' data processed in Hong Kong)
- United States (Shopify, Google, Meta, Microsoft, Klaviyo, Judge.me, PayPal)
- Canada (Shopify)
- Other countries where our shipping and logistics providers operate
These countries may not provide the same level of data protection as your home jurisdiction. We implement appropriate safeguards for international transfers where required by applicable law, including entering into the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum or other approved UK transfer mechanisms, relying on adequacy decisions where available, or using other legally recognized safeguards. We also take reasonable steps to ensure overseas recipients protect your personal information in accordance with applicable law.
10. Your rights and choices
Depending on where you live, you may have some or all of the following rights in relation to your personal information. These rights are not absolute and may be subject to exceptions under applicable law.
- Access. Request a copy of the personal information we hold about you.
- Correction. Request correction of inaccurate or incomplete information.
- Deletion. Request deletion of your personal information, subject to our legal retention obligations.
- Portability. Request a copy of your data in a structured, commonly used format.
- Opt out of targeted advertising. Direct us not to share your information for targeted advertising purposes. You can exercise this right here. We honor the Global Privacy Control (GPC) signal as an opt-out request for the device and browser from which the signal is sent.
- Withdraw consent. Where processing is based on your consent, withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
To exercise any of these rights, contact us at privacy@purringlotus.com. We will verify your identity before processing your request and respond within the timeframe required by applicable law. We will not discriminate against you for exercising your rights.
You may also designate an authorized agent to submit requests on your behalf, provided the agent can demonstrate proper authorization.
11. Additional information for residents of certain jurisdictions
Australia
We comply with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles ("APPs").
Collection notice. We collect your personal information for the purposes described in Section 3. If you do not provide certain information (such as your name and shipping address), we may not be able to fulfill your order.
Overseas disclosure. Your personal information may be disclosed to recipients in the countries listed in Section 9, including the United States, Canada, and Hong Kong. We take reasonable steps to ensure overseas recipients handle your information consistently with the APPs.
Access and correction. You may request access to or correction of your personal information by contacting us at privacy@purringlotus.com. We will respond within 30 days.
Complaints. If you believe we have breached the APPs, please contact us at privacy@purringlotus.com. We will investigate and respond within 30 days. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.
Data breaches. In accordance with the Notifiable Data Breaches scheme, if we become aware of a data breach that is likely to cause serious harm, we will notify the OAIC and affected individuals as required by law.
Consumer guarantees. Our goods come with guarantees that cannot be excluded under the Australian Consumer Law. You are entitled to a replacement or refund for a major failure and compensation for any other reasonably foreseeable loss or damage. You are also entitled to have the goods repaired or replaced if the goods fail to be of acceptable quality and the failure does not amount to a major failure. See our Refund Policy for further details.
Canada
We comply with the Personal Information Protection and Electronic Documents Act ("PIPEDA") and, where applicable, the privacy legislation of individual provinces, including Quebec's Act respecting the protection of personal information in the private sector (as amended by "Law 25").
Collection notice. We collect your personal information for the purposes described in Section 3, with your knowledge and consent (express or implied), except where collection without consent is permitted or required by law. If you do not provide certain information (such as your name and shipping address), we may not be able to fulfill your order.
Marketing. We send commercial electronic messages in accordance with Canada's Anti-Spam Legislation ("CASL"). We will only send you marketing emails where you have given express consent, or where we have implied consent (such as an existing business relationship arising from a recent purchase). Every marketing message identifies us and includes a working unsubscribe mechanism. You may opt out at any time by clicking "unsubscribe" in any email or by contacting us at privacy@purringlotus.com, and we will give effect to your request within 10 business days and without charge.
Access and correction. You may request access to or correction of your personal information by contacting us at privacy@purringlotus.com. We will respond within 30 days and will tell you in advance if a minimal fee applies to processing your request.
Overseas disclosure. Your personal information is processed and stored outside Canada, including in Hong Kong and the United States, by us and by the service providers listed in Section 9. While it is outside Canada, it may be accessible to courts, law enforcement, and other authorities under the laws of those jurisdictions. We use contractual and other reasonable measures to ensure a comparable level of protection.
Data breaches. If we become aware of a breach of security safeguards involving your personal information that creates a real risk of significant harm, we will report it to the Office of the Privacy Commissioner of Canada and notify you as required by law, and we will keep records of security breaches as required.
Quebec (Law 25). If you are a resident of Quebec, the following additional terms apply. We have designated a Privacy Officer responsible for the protection of personal information, who can be reached at privacy@purringlotus.com. We obtain your consent for the collection, use, and disclosure of your personal information, and we do not activate non-essential cookies or tracking technologies without your consent (see Section 7). In addition to the rights set out in Section 10, you have the right to data portability and to request that we cease disseminating your personal information or de-index a link in certain circumstances. Because your personal information is communicated outside Quebec (see Section 9), we have assessed that it benefits from adequate protection. If we become aware of a confidentiality incident presenting a risk of serious injury, we will notify the Commission d'accès à l'information du Québec (CAI) and affected individuals as required.
Complaints. If you are not satisfied with our handling of your personal information, you may lodge a complaint with the Office of the Privacy Commissioner of Canada at www.priv.gc.ca. Residents of Quebec may also complain to the Commission d'accès à l'information du Québec at www.cai.gouv.qc.ca.
Hong Kong SAR
We comply with the Personal Data (Privacy) Ordinance (Cap. 486) ("PDPO") and its six Data Protection Principles. In particular:
We collect personal information only for lawful purposes directly related to the operation of the Services, and only to the extent that is necessary and not excessive for those purposes.
We take practicable steps to ensure that your personal information is accurate and not kept longer than necessary.
You have the right to request access to and correction of your personal information under Sections 18 and 22 of the PDPO. We may charge a reasonable fee for processing a data access request.
We will not use your personal information for direct marketing unless we have your consent or a lawful basis, and we will honor any opt-out request without charge.
To make a data access or correction request, or to opt out of direct marketing, contact us at privacy@purringlotus.com. If you are not satisfied with our response, you may lodge a complaint with the Office of the Privacy Commissioner for Personal Data (PCPD) at www.pcpd.org.hk.
Japan
Where applicable, we comply with Japan's Act on the Protection of Personal Information ("APPI").
Cross-border transfers. Your personal information may be transferred outside Japan to the countries listed in Section 9 for the purposes described in this Privacy Policy. Where required by applicable law, we rely on your consent or another lawful transfer mechanism.
Your rights. You may request access to, correction of, deletion of, or other rights relating to your personal information by contacting us at privacy@purringlotus.com. We will respond in accordance with applicable law.
Korea (South Korea)
We comply with the Personal Information Protection Act ("PIPA"), overseen by the Personal Information Protection Commission ("PIPC").
Your rights. You may access your personal information, request its correction or deletion, request suspension of its processing, and withdraw any consent. Contact privacy@purringlotus.com.
Marketing. We send marketing only with your separate, explicit opt-in consent (unticked checkbox at checkout or account creation). Commercial emails are marked as advertising in the subject line, and we obtain separate consent before sending between 9:00 pm and 8:00 am. Opt out anytime via the unsubscribe link.
Customs clearance code. For Korea-bound orders we collect your PCCC and provide it to our courier and the Korea Customs Service solely for clearance (see Section 2).
Cross-border transfer. To fulfill your order, your information is transferred to and processed by our providers outside Korea, principally in the United States and Hong Kong. Details: (i) legal basis — necessary to perform our purchase contract with you, disclosed here; (ii) items — contact, order, payment, and account data per Section 2; (iii) destination/timing/method — the countries in Section 9, electronically, at and after your order; (iv) recipients — the processors in Section 5 (including Shopify, Klaviyo, payment processors); (v) their purpose and retention — per Sections 3 and 4; (vi) how to refuse — contact us, though we may then be unable to fulfil your order.
Children. Where a user is under 14, we process their information only with verifiable parental or guardian consent.
Data breaches. We will notify you and report to the PIPC without delay and, where required, within 72 hours.
Complaints. You may complain to the PIPC (pipc.go.kr) or KISA (privacy.kisa.or.kr).
Macau SAR
We comply with the Personal Data Protection Act (Law 8/2005) as regulated by the Office for Personal Data Protection (DSPDP, previously the GPDP).
Consent. Where required, we obtain your unambiguous consent before collecting and processing your personal data. At checkout and account creation, you will be presented with a clear, unticked consent checkbox for marketing communications, separate from any other consent.
Cross-border transfers. Your personal data will be transferred outside Macau to the jurisdictions listed in Section 9.
Your rights. You have the right to access, correct, and object to the processing of your personal data. To exercise these rights, contact us at privacy@purringlotus.com.
Minors. If you are under 18 years of age, we will process your personal information only to the extent necessary to fulfill your order. We will not use your information for marketing or other non-essential purposes without verifiable parental consent.
If you are not satisfied with our handling of your personal data, you may lodge a complaint with the DSPDP at www.gpdp.gov.mo.
New Zealand
We comply with the Privacy Act 2020 and its Information Privacy Principles ("IPPs").
Collection notice. We collect your personal information for the purposes described in Section 3. If you do not provide certain information (such as your name and shipping address), we may not be able to fulfill your order.
Overseas disclosure. Your personal information may be disclosed to recipients in the countries listed in Section 9, including the United States, Canada, and Hong Kong. We take reasonable steps to ensure overseas recipients handle your information consistently with the Privacy Act 2020, including through contractual arrangements requiring comparable standards of protection (IPP 12).
Access and correction. You may request access to or correction of your personal information by contacting us at privacy@purringlotus.com. We will respond within 20 working days.
Marketing. We may send you marketing communications related to products similar to those you have purchased, unless you opt out. You can opt out at any time by clicking "unsubscribe" in any email or contacting us at privacy@purringlotus.com.
Data breaches. If we become aware of a privacy breach that has caused or is likely to cause serious harm, we will notify the Office of the Privacy Commissioner and affected individuals as soon as practicable.
Complaints. If you are not satisfied with our handling of your personal information, please contact us at privacy@purringlotus.com. We will investigate and respond within 20 working days. If you are not satisfied with our response, you may lodge a complaint with the Office of the Privacy Commissioner at www.privacy.org.nz.
Saudi Arabia
We comply with the Personal Data Protection Law ("PDPL") as administered by the Saudi Data and Artificial Intelligence Authority ("SDAIA").
Collection notice. We collect your personal information for the purposes described in Section 3. If you do not provide certain information (such as your name and shipping address), we may not be able to fulfill your order.
Your rights. You have the right to access your personal information, request its correction, request its deletion, and object to certain processing. To exercise these rights, contact us at privacy@purringlotus.com. We will respond within 30 days.
Cross-border transfers. Your personal information may be transferred to and processed in the countries listed in Section 9. We take appropriate measures to ensure your information receives adequate protection in those jurisdictions.
Data breaches. If we become aware of a personal data breach that affects your information, we will notify SDAIA and, where required, you, in accordance with applicable law.
Complaints. If you are not satisfied with our handling of your personal information, you may lodge a complaint with SDAIA at sdaia.gov.sa.
Singapore
We comply with the Personal Data Protection Act 2012 ("PDPA") and its regulations.
Consent. We collect, use, and disclose your personal data only for the purposes described in Section 3, and only with your consent or where an exception under the PDPA applies (such as fulfilling a contract or complying with legal obligations). By placing an order, you consent to our collection and use of your personal data for order fulfillment and customer service.
Marketing. We will not send you marketing communications unless you have given us your explicit, opt-in consent via a separate, unticked checkbox at checkout or account creation. You may withdraw consent at any time by clicking "unsubscribe" in any email or contacting us at privacy@purringlotus.com. We will cease marketing communications within 10 business days of your request.
Access and correction. You may request access to or correction of your personal data by contacting us at privacy@purringlotus.com. We will respond within 30 days. We may charge a reasonable fee to cover the cost of responding to an access request.
Withdrawal of consent. You may withdraw consent for any purpose at any time by contacting us. We will inform you of the likely consequences of withdrawal (e.g., inability to fulfill an order) before processing your request.
Data Protection Officer. Our Data Protection Officer can be reached at privacy@purringlotus.com.
Do Not Call. If you have registered your Singapore phone number on the Do Not Call Registry, we will not send you marketing messages via phone or SMS unless you have given us clear and unambiguous consent.
Complaints. If you are not satisfied with our handling of your personal data, you may lodge a complaint with the Personal Data Protection Commission (PDPC) at www.pdpc.gov.sg.
Switzerland
We comply with the Swiss Federal Act on Data Protection (revDSG / nDSG) as administered by the Federal Data Protection and Information Commissioner (FDPIC).
Your rights. You have the right to access your personal information, request its correction or deletion, and object to certain processing. To exercise these rights, contact privacy@purringlotus.com. We will respond within 30 days.
Cross-border transfers. Your personal information may be transferred to the countries listed in Section 9. We take appropriate measures — including contractual safeguards — to ensure your information receives adequate protection in those jurisdictions.
Data breaches. If we become aware of a data breach likely to result in a high risk to your rights, we will notify the FDPIC and, where required, you, without undue delay.
Complaints. If you are not satisfied with our handling of your personal information, you may lodge a complaint with the FDPIC at edoeb.admin.ch.
Taiwan
We comply with the Personal Data Protection Act (個人資料保護法, "PDPA") and its amendments.
Collection notice. We collect your personal information for the purposes described in Section 3. At the point of collection, we provide notice of: the collecting entity (Saankofi Limited, trading as Purring Lotus), the purposes of collection, the categories of data collected, the period and territory of use, and your rights as a data subject. If you do not provide certain information (such as your name and shipping address), we may not be able to fulfill your order.
Marketing. We will not use your personal information for direct marketing unless we have obtained your consent. You may opt out of marketing communications at any time by clicking "unsubscribe" in any email or contacting us at privacy@purringlotus.com. We will cease marketing communications without charge.
Access, correction, and deletion. You may request access to, correction of, or deletion of your personal information by contacting us at privacy@purringlotus.com. We will respond within 30 days. We may charge a reasonable fee for processing a data access request.
Overseas disclosure. Your personal information may be transferred to the jurisdictions listed in Section 9.
Data breaches. Following the November 2025 amendments to the PDPA, if we become aware of a data breach affecting your personal information, we will notify you and, where required, the competent authority, as required by law.
Complaints. If you are not satisfied with our handling of your personal information, please contact us first so we can investigate and respond appropriately.
United Kingdom and European Economic Area
If you reside in the UK or EEA, you have the following additional rights under the UK GDPR and EU GDPR, respectively:
Right to object. You may object to our processing of your personal information where we rely on legitimate interests as our legal basis.
Right to restrict processing. You may request that we restrict the processing of your personal information in certain circumstances.
Withdrawal of consent. Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
We do not use automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you.
We will respond to your request within one month. This period may be extended by up to two further months for complex or numerous requests, in which case we will let you know.
If a personal data breach is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of it. Where the breach is likely to result in a high risk to you, we will also inform you without undue delay.
To exercise these rights, contact us at privacy@purringlotus.com. You also have the right to lodge a complaint with your local supervisory authority. For the EEA, a list of supervisory authorities is available here. For the UK, contact the Information Commissioner's Office (ICO) at ico.org.uk.
United States
Residents of certain U.S. states may have additional rights under applicable state privacy laws, including the right to request access to, correction of, deletion of, or a portable copy of their personal information, and the right to opt out of targeted advertising or certain profiling activities, where applicable.
We do not sell personal information in exchange for monetary consideration. We honor opt-out preference signals, such as the Global Privacy Control (GPC), where required by applicable law.
To exercise any applicable rights, contact us at privacy@purringlotus.com. We will verify your identity before responding to your request.
12. Children's data
The Services are not intended for children. We do not knowingly collect personal information from children under the age required by applicable law (including under 16 where required by the GDPR). If you are a parent or guardian and believe a child has provided us with personal information, please contact us at privacy@purringlotus.com and we will delete it where required by law.
In Macau, where a buyer is under 18, we process personal information only to the extent strictly necessary to fulfill the transaction and do not use it for marketing without verifiable parental consent.
13. Security
We implement reasonable technical and organizational measures to protect your personal information against unauthorized access, loss, misuse, or alteration. However, no method of transmission or storage is completely secure. We encourage you to use strong, unique passwords and not to share your account credentials.
14. Third-party links
The Services may contain links to third-party websites or platforms. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any third-party site you visit.
15. Changes to this privacy policy
We may update this Privacy Policy from time to time to reflect changes in our practices, the Services, or applicable law. We will post the updated version on this page and revise the "Last updated" date. Where required by law, we will provide notice of material changes.
16. Contact us
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:
- privacy@purringlotus.com
- Address
- 14/F Hill Lodge, 1 Lok Fung Path, Fo Tan, New Territories, Hong Kong