Privacy Policy

1. Compliance

We primarily comply with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong. For users in the EU, UK, and California, we also adhere to GDPR and CCPA/CPRA requirements.

2. Information We Collect

Provided by you

Name, email, phone number, shipping address

Payment information

Processed directly by a PCI-DSS Level 1 certified third-party payment processor; we never receive or store your full card details

Automatically collected

IP address, browser type, device information, cookies and similar technologies

3. How We Use Your Information

• To process and fulfill orders
• To provide customer support and send order updates
• For fraud prevention and website security
• To send marketing communications (only with your explicit consent; you may unsubscribe at any time)
• To comply with legal obligations

4. Data Sharing

We only share data with trusted parties such as:

• PCI-DSS Level 1 certified payment processors
• Shipping and logistics partners
• Cloud and IT service providers
• Legal authorities when required

We do not sell your personal information.

5. Payment Security

All payments are processed using tokenization and hosted payment fields by a PCI-DSS Level 1 compliant global payment processor. Your full card number never touches our servers.

6. Your Rights

You have the right to access, correct, delete, or restrict processing of your data, withdraw consent, object to processing, and data portability (where applicable). Contact us at info@originlifebio.com. We will respond within 30 days.

7. Data Retention

Order-related data is kept for 7 years (tax requirements). Marketing data is deleted immediately upon unsubscribing.

8. Cookies

We use essential, analytics, and (with consent) marketing cookies. You can manage preferences via your browser settings.

9. Children's Privacy

This website is not intended for children under 13. We do not knowingly collect data from children.

10. Contact Us

info@originlifebio.com