At DrPOM, we are committed to protecting the privacy and confidentiality of our clients’ and employees’ personal and health-related information in compliance with the requirements of the Personal Data (Privacy) Ordinance (Chapter 486 of the Laws of Hong Kong). This Privacy Policy outlines how we collect, use, disclose, and safeguard your information when you access and use our website, mobile applications and other products and services (collectively our “Services”). By using our Services, you consent to the data practices described in this Privacy Policy.
1.Information we collect:
a. Personal information you provide:
DrPOM may collect personal information you provide to us directly such as when you create an account with us, make a purchase, contact us with inquiries or participate in promotions, surveys or activities. This information may include your name, age, gender, email address, mailing address, telephone number, payment information and health-related information and data.
b. Information we collect automatically:
When you log onto the website, DrPOM may collect certain information about your device and how you use our services such as your IP address, browser type, pages visited, links clicked and search terms entered. We may also collect information about your location. We may use cookies and similar tracking technology to collect this information.
2.Use of Information:
We use the collected information:
a. to provide and improve our Services to you b. to process transactions and fulfil orders c. to respond to your inquiries and requests d. to personalise your experience with our Services e. to send you updates, health tips and promotional materials, if you have opted in to receive them
3.Disclosure of Information:
a. We may use de-identified and aggregated data for research, statistical analysis, to improve our Services. This data is used in a manner that ensures the privacy and anonymity of individual client
b. We may share your information with designated healthcare professionals and medical care providers approved by you and who are involved in delivering care to you
c. We may share your information to business partners andthird-party service providers who assist us in operating and maintaining the Services, who have the need to know, and who are contractually or legally bound to the same confidentiality obligations and privacy restrictions
d. We may disclose information if required by law or in good faith belief that such action is necessary to comply with legal obligations, to protect the rights, property and safety of our DrPOM and its website, our users or others, or respond to a court order or governmental request
4.Data Security and Retention
a. We shall implement appropriate technical and organisational measures to protect your information against unauthorised access, disclosure, alteration or destruction
b. We shall restrict access to your information only to authorised personnel who are bound by strict confidentiality obligations
c. We shall retain your information for as long as necessary to fulfill the purposes outlined in this Privacy Policy unless a longer retention period is required or permitted by law
d. Account Deletion and Data Removal: Users may delete their data and/or their account at any time through the application software or via the account portal available at https://accounts.drpom.net/user.
e. Upon confirmation of account deletion, our system will automatically initiate the process of deleting the associated personal data. Deletion is carried out in secure batches and is typically completed within a few minutes, depending on system load and operational requirements.
f. Certain information may be retained for a longer period where required or permitted by applicable laws, regulations, contractual obligations, medical record-keeping requirements, dispute resolution purposes, security monitoring, fraud prevention, or legitimate business interests. Such retained data will be securely stored and restricted from further processing except as required for those purposes.
g. Where technically feasible and legally permissible, personal data will be permanently deleted or irreversibly anonymised following completion of the deletion process, including removal from active systems. Backup copies may be retained for a limited period in accordance with our backup and disaster recovery policies, after which they will be securely overwritten or deleted.
5.Your Rights:
a. You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. However, if you disable or refuse cookies, some parts of the Services may not function properly
b. You may withdraw your consent for the collection and processing of your information at any time, although this may affect your ability to access or use DrPOM Website and Services
c. Subject to applicable laws and regulations, you may request access to, correction of, or deletion of your personal information held by us. You may exercise these rights directly through your account within the Services or by contacting us using the contact details provided below. We may require reasonable verification of your identity before processing such requests.
6.Updates and Discrepancy:
a. We reserve the right to update or modify this Privacy Policy at any time without prior notice. Any changes will be effective upon posting the revised Privacy Policy on our website.
b. If you have any questions or concerns about our Privacy Policy or the handling of your information, please contact us using the provided contact details: info@drpom.net
c. If there is any inconsistency or ambiguity between the English version and the Chinese version, the English version shall prevail.
