Please read the following carefully to understand our policy and practices regarding how your personal data will be treated. This policy may from time to time be revised.
Types of Personal Data Collected
2. Types of Personal Data Collected
You may need to provide certain personal data in using our services, including but not limited to your name, phone number, address, email address,date of birth etc or credit card details. Failure to provide such data and/or provision of incomplete or inaccurate data may prevent us from providing certain services to you.
If you are under the age of 18, you must obtain the consent from parents or guardians before disclosing any of your personal data to us, and we shall not collect your personal data without such prior consent.
3. Purposes for which we will collect and use your Personal Data
Your personal data may be collected when you make a purchase, participate in promotional activities or apply to be a member of any of the brands of fragrance, cosmetics, beauty care and related products operated by us from time to time, including but not limited to BeCandle and R BeCandle.
Certain personal data is required to be provided on an obligatory basis if you wish to receive certain services from us. These data will be marked as “mandatory” in the Cart>Information and you MUST provide your personal data to us if you want us to provide the service for which you are applying. If personal data is only required on a voluntary basis, it will not be marked “mandatory” and it is entirely up to you to decide whether you want to provide such information to us or not.
Your supply of personal data is mandatory if you wish to receive one or more of the following services:
(a) Enrolment into and maintaining your membership as our member (b) Accumulating bonus points as our member (if applicable); (c) Communicating to you your entitlements and privileges as our member; (d) Redemption of privileges as a member; (e) Notification of any amendment to the membership program; (f) Data cleansing and customers profile updates; and (g) Other continuous customer support services directly in relation to your membership.
We may use any personal data provided by you (whether on an obligatory and/or voluntary basis) to enable us to provide the following additional services to you and/or carry out the following activities:
(a) To enable us better to understand the demographics of our customers; (b) For internal research and analysis to enable us to provide rewards, services and product information or offerings better tailored to your needs (c) Market research; (d) To enable our consultants/specialists to follow up; (e) To distribute customer satisfaction survey; and (f) To send our newsletters and program updates.
4. Disclosure of Personal Data
All personal data collected and held by us will be kept confidential but we may provide and/or disclose such information to the following parties (whether within or outside Hong Kong) for the purposes set out in paragraph 3 above: (a) Any member companies, or affiliates of, or companies controlled by, or under common control with us; (b) Any agent, contractor or third party service provider (“Third Party Service Providers”) who provides administrative, telecommunications, computer and other services to us in connection with the processing and storage of your data; (c) Any actual or proposed assignee or transferee of all or any part of our assets, shares or services, or successor of us in carrying on all or any part of our business; and (d) Government, judicial or regulatory authorities, law enforcement agencies or other organizations as required or authorized by applicable laws in or outside Hong Kong.
Our Third Party Service Providers are under a duty of confidentiality and are contractually bound to protect your personal data privacy and to only use your personal data in connection with the purposes specified in paragraph 3 above and not for their own purposes (including direct marketing).
5. Use of Data in Direct Marketing
We may also use your personal data including name, telephone number, address and email for direct marketing. By law, we may not use your personal data for this purpose unless we have received your consent (including an indication of no objection).
Upon your consent, your personal data may be used for: (a) Communicating to you regarding new product launch and other promotional offers, including where applicable, fragrance candle products, fragrance diffusers products, aroma oil and hand sanitizer products, candle refill services and candle making workshops; (b) Communicating to you regarding our promotional events including where applicable, candle making workshops and/or demonstrations, acadamy seminars, other fragrance candle classes, PR events, members gatherings, value sets, shop opening events, store announcement/ events, exhibitions and news update; (c) Communicating on-counter or out of counter services and events related to fragrance candle, candle refill services and candle making workshops for promotion or rewarded purpose; (d) Marketing reward programs, birthday celebration offers, free sampling, digital campaigns, roadshow/ outpost, in store promotion updates; (e) Communicating joint promotion or events with shopping malls, department stores, credit cards, banks, trades, celebrities, magazines, television, websites, mileage programs, cultural, art or musical societies/ organizations, charities or nonprofit organizations; and (f) Cross brand joint promotions and/ or events with brands within us (when applicable).
If at any other point of time you do not wish us to use your personal data for use in direct marketing as described above, you may exercise your opt-out rights by notifying us through the communication channels as stated.
In paragraph 9 below. Please note that in order to opt-out from receiving direct marketing you may be required to provide your personal details for our processing and identity confirmation.
All personal data provided by you will be properly stored in our customer service system and can only be accessed by authorized persons who have received training on our privacy policies.
(a) When there is a website crossing over several pages of this website and such necessary information is temporarily recorded in order for users to use this website conveniently. (b) When we or a company consigned by us conducts survey analysis of the access trends of users on this website in order to provide better service through this website.
8. Transfer and storage of Personal Data
Our store is hosted on Shopify Inc. They provide us with the online e-commerce platform that allows us to sell our products and services to you. Your data is stored through Shopify’s data storage, database and the general Shopify application. They store your data on a secure server behind a firewall.
Payment: If you choose a direct payment gateway to complete your purchase, then Shopify stores your credit card data. It is encrypted through Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is stored only as long as is necessary to complete your purchase transaction. After that is complete, your purchase transaction information is deleted.
All direct payment gateways adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, Mastercard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers. For more insight, you may also want to read Shopify’s Terms of Service (https://www.shopify.com/legal/terms) or Privacy Statement (https://www.shopify.com/legal/privacy).
9. Your Right to Access, Correction and Deletion
Under the Personal Data (Privacy) Ordinance, you have the right to check whether we hold personal data relating to you and request access, correction and deletion of any of your personal data in our records. If you at any other point of time wish to exercise any of such rights, please email our Personal Data Privacy Team as specified in paragraph 10 below.
You may also request us to delete you or your personal data from any active mailing or distribution list. If you no longer wish to receive any future promotional or direct marketing material from us, please email our Personal Data Privacy Team as specified in paragraph 10 below, marking your communication “Confidential”. In response, we may ask you to provide certain details about yourself to ascertain the authenticity and validity of the request.
10. Personal Data Privacy Team
The person to whom (1) requests (i) for access to data or correction of data, (ii) for general information regarding our policies and practices with respect to personal data and (iii) about the kinds of personal data that we hold and (2) general questions and complaints should be addressed is as follows:
AP Creative Limited Address: G, 102 Man Nin Street, Sai Kung, N.T., Hong Kong Email: email@example.com
Please indicate your name, member ID or contact number for us to follow up your request.
11. Retention of Data
We will keep your personal data only for as long as necessary to fulfill the purpose(s) for which the data is or is to be used (including any directly related purpose(s)). Pursuant to our internal policy, we will keep a record of all transactions with you in our course of business for a reasonable period of time for review and verification purposes. Personal Data which is no longer necessary for the purposes for which the data was originally collected will be destroyed. You also have the right to request deletion of your personal data in our possession as stated in paragraph 9 above.