Privacy Policy

Last Updated: April 24th, 2026

Company Name: Hong Kong Happythings Technology Co., Ltd

Registered Address: Room1508,15/F, Grand Plaza Office Tower 2, 625 Nathan Road, Mong Kok, Kowloon, Hong Kong

Contact Email for Privacy Inquiries: hkhappythings@163.com

1. Introduction & Scope of Application

1.1 Purpose of This Policy

This Privacy Policy (the “Policy”) is designed to inform you (the “User”, “you” or “your”) about how 【Hong Kong Happythings Technology Co., Ltd 】 (hereinafter referred to as “we”, “us” or “our”) collects, uses, stores, processes, transfers, shares, and protects your personal information when you interact with our website, purchase our products (including fresh flowers, gifts, and related accessories), use our services, register an account, subscribe to our newsletters, contact our customer support, or engage with us through any other channels (including social media, email, phone, or in-person communications). Our core commitment is to protect your privacy and ensure compliance with all applicable privacy laws and regulations worldwide.

1.2 Scope of Application

This Policy applies to all Users, including but not limited to: visitors to our website, registered members, customers who place orders (including individual and corporate customers), subscribers to our marketing communications, and individuals who contact our customer support. It covers all personal information collected through: our official website http://florasay.store, mobile responsive version of the website, third-party platforms where we sell our products (e.g., marketplaces), email communications, phone calls, live chat, social media accounts (e.g., Facebook, Instagram, TikTok), and any other interactive channels operated by us.

This Policy does not apply to third-party websites, services, or applications that may be linked to our website (e.g., social media platforms, payment gateways, logistics providers), and we are not responsible for the privacy practices or content of such third parties. We recommend you review the privacy policies of any third-party services you use in connection with our website.

1.3 Consent

By accessing or using our website, purchasing our products, or providing us with your personal information, you acknowledge that you have read, understood, and agreed to the terms of this Policy, including the collection, use, and disclosure of your personal information as described herein. If you do not agree to this Policy, please do not use our website or provide us with any personal information.

1.4 Policy Updates

We reserve the right to update, revise, or modify this Policy at any time to reflect changes in our business practices, legal requirements, or technological developments. Any updates will be posted on this page with a new “Last Updated” date. The updated Policy will take effect immediately upon posting. We encourage you to review this Policy regularly to stay informed about how we protect your personal information. Your continued use of our website or services after the updated Policy is posted constitutes your acceptance of the revised terms.

2. Definitions

To ensure clarity, we define the following terms as used in this Policy:

Personal Information: Any information relating to an identified or identifiable natural person (data subject). This includes, but is not limited to, name, contact details, address, payment information, browsing history, device information, and any other data that can be used to identify you directly or indirectly.
Sensitive Personal Information: Personal information that requires enhanced protection under applicable laws, including but not limited to: financial information (e.g., credit card details, bank account information), health information (if applicable, e.g., if you request special delivery for medical reasons), racial or ethnic origin, religious beliefs, and biometric data (if collected).
Cookies: Small text files stored on your device (computer, smartphone, tablet) when you visit our website, which help us recognize your device and remember your preferences.
Tracking Technologies: Technologies such as web beacons, pixels, scripts, and local storage that collect information about your interaction with our website, including browsing behavior, click-through rates, and session duration.
Data Processing: Any operation or set of operations performed on personal information, including collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment, or combination, restriction, erasure, or destruction.
Third-Party Service Providers: External companies or individuals that we engage to provide services on our behalf, such as logistics providers, payment processors, cloud storage providers, email marketing platforms, and IT support services.

3. Information We Collect

We collect personal information from you in two main ways: (1) information you voluntarily provide to us (explicit collection), and (2) information we automatically collect when you interact with our website or services (implicit collection). We only collect personal information that is necessary for the purposes outlined in this Policy, and we do not collect more information than is required.

3.1 Information You Voluntarily Provide

This is information you actively choose to share with us when using our website or services. The type of information collected depends on your interaction with us:

3.1.1 Account Registration Information

When you register an account on our website, we collect the following information:

Full name (first name and last name)
Email address (used for account login, order notifications, and communications)
Password (encrypted and stored securely)
Phone number (optional, but recommended for order updates and delivery notifications)
Member profile information (e.g., preferred payment method, delivery preferences, favorite products, birthday (if you wish to receive birthday promotions))

3.1.2 Order and Transaction Information

When you place an order for our products (fresh flowers, gifts, etc.), we collect the following information to process your order and complete delivery:

Billing information: Full name, billing address, phone number, email address
Shipping information: Recipient’s full name, shipping address (including street, city, postal code, country/region), recipient’s phone number (required for delivery confirmation), delivery notes (e.g., “leave at the door”, “deliver after 5 PM”)
Payment information: Credit card details (card number, expiration date, CVV), PayPal/Stripe account information, or other payment method details (note: we do not store full credit card details; this information is processed directly by our third-party payment processors, which are PCI DSS compliant)
Order details: Product type, quantity, price, delivery date, gift message (if applicable), order number, transaction date, and payment status
Invoice information: Billing address, tax identification number (if applicable for corporate customers), invoice number, and invoice date

3.1.3 Communications and Support Information

When you contact our customer support (via email, phone, live chat, or social media), we collect the following information:

Your name, email address, and phone number (to identify you and respond to your inquiry)
The content of your communication (e.g., questions about orders, product inquiries, complaints, feedback)
Any supporting documents you provide (e.g., order screenshots, photos of damaged products)
Communication history (date, time, and nature of the interaction) to ensure consistent and quality customer service

3.1.4 Marketing Subscription Information

If you choose to subscribe to our marketing communications (e.g., newsletters, promotional emails, SMS alerts about discounts, new products, or seasonal offers), we collect:

Your email address (for email newsletters)
Your phone number (if you subscribe to SMS alerts, optional)
Your preferences (e.g., types of promotions you are interested in, frequency of communications)
Your consent to receive marketing communications (we only send marketing messages to users who have explicitly opted in)

3.1.5 Other Voluntary Information

From time to time, we may collect additional personal information if you choose to participate in surveys, contests, giveaways, or other promotional activities. This may include: (1) Survey responses (e.g., feedback on our products or services), (2) Contest/giveaway entries (e.g., name, email address, social media handle), (3) Photos or testimonials (if you agree to share them for marketing purposes).

3.2 Automatically Collected Information

When you visit our website or use our services, we automatically collect certain information about your device and browsing behavior using cookies and other tracking technologies. This information is collected to improve our website performance, enhance user experience, and analyze user behavior. The information we automatically collect includes:

3.2.1 Device and Connection Information

IP address (to determine your general geographic location, e.g., country/region, for compliance and delivery purposes)
Device type (e.g., computer, smartphone, tablet)
Operating system (e.g., Windows, macOS, iOS, Android)
Browser type and version (e.g., Chrome, Safari, Firefox)
Browser settings (e.g., language preferences, cookie settings)
Internet service provider (ISP)
Connection type (e.g., Wi-Fi, mobile data)
Unique device identifiers (e.g., IMEI, MAC address, UUID)

3.2.2 Browsing and Usage Behavior

Pages you visit on our website (e.g., product pages, category pages, checkout page)
Time spent on each page
Click-through rates (e.g., links you click on our website)
Search queries (keywords you search for on our website)
Visit frequency (how often you visit our website)
Referral source (how you found our website, e.g., search engine, social media, third-party link)
Session duration (how long you stay on our website during a single visit)
Actions taken on our website (e.g., adding products to cart, abandoning cart, completing a purchase)

3.2.3 Cookies and Tracking Technologies

We use cookies and other tracking technologies to collect the information outlined above. For detailed information about the types of cookies we use, their purposes, and how you can manage them, please refer to Section 6 of this Policy.

3.3 Information Collected from Third Parties

In some cases, we may collect personal information about you from third parties, but only with your consent or as permitted by law. The third parties we may collect information from include:

Payment Processors: PayPal, Stripe, or other credit card processors may provide us with transaction details (e.g., payment status, transaction ID) to confirm your payment and process your order. They do not share your full payment details (e.g., credit card number) with us.
Logistics Providers: Our delivery partners (e.g., DHL, FedEx, local courier services) may provide us with delivery status updates (e.g., “delivered”, “in transit”) and recipient confirmation information to ensure your order is delivered correctly.
Social Media Platforms: If you log in to our website using your social media account (e.g., Facebook, Google), the social media platform may share your basic profile information (e.g., name, email address) with us, as permitted by your social media privacy settings.
Marketing Partners: If you participate in a joint promotion or contest with one of our marketing partners, they may share your information with us (with your consent) to fulfill the promotion and send you relevant communications.

3.4 Sensitive Personal Information

We do not intentionally collect sensitive personal information unless it is necessary for the provision of our services and you have explicitly consented to its collection. For example, if you request a special delivery for a medical reason (e.g., sending flowers to a hospital patient), you may voluntarily provide health-related information, which we will treat as sensitive personal information and protect with enhanced security measures.

We will never collect racial or ethnic origin, religious beliefs, or biometric data without your explicit, written consent, and only if required by law or for a specific, legitimate purpose.

4. How We Use Your Personal Information

We use your personal information only for legitimate purposes that are necessary for our business operations, to provide you with our products and services, to comply with legal obligations, and to improve your user experience. We will not use your personal information for purposes that are incompatible with the ones outlined below, unless we obtain your explicit consent.

4.1 Core Business Purposes (Necessary for Providing Products/Services)

Process and Fulfill Orders: To process your order, confirm payment, arrange delivery (including coordinating with logistics providers), send order updates (e.g., “order confirmed”, “shipped”, “delivered”), and handle after-sales services (e.g., returns, refunds, replacements).
Account Management: To manage your registered account, verify your identity (to prevent fraud), allow you to log in to your account, update your profile information, and provide you with access to your order history and preferences.
Customer Support: To respond to your inquiries, resolve complaints, provide technical support, and address any issues related to our products or services. This includes using your communication history to ensure consistent and personalized support.
Payment Processing: To process your payments securely, verify payment details, prevent payment fraud, and comply with financial regulations (e.g., PCI DSS for credit card processing).

4.2 Improvement and Optimization Purposes

Website and Service Improvement: To analyze user behavior (e.g., browsing patterns, click-through rates) to identify areas for improvement, optimize website performance, enhance user experience, and develop new products or services that meet your needs.
Product Development: To gather feedback on our products (e.g., fresh flower quality, delivery speed) and use this feedback to improve our product offerings and service standards.
Error Detection and Troubleshooting: To identify and fix technical issues with our website, payment systems, or delivery processes, and to prevent downtime or service disruptions.

4.3 Marketing and Promotional Purposes (With Explicit Consent)

We only use your personal information for marketing purposes if you have explicitly opted in to receive such communications. This includes:

Sending you newsletters, promotional emails, or SMS alerts about our products, discounts, seasonal offers, new arrivals, and special events.
Personalizing marketing content based on your preferences (e.g., sending you information about flower arrangements you have previously viewed or purchased).
Conducting surveys, contests, or giveaways to gather feedback and engage with our customers.
Promoting our products and services on social media platforms (e.g., targeted ads based on your browsing behavior, with your consent).

You can opt out of receiving marketing communications at any time by clicking the “unsubscribe” link in our emails, replying “STOP” to our SMS alerts, or updating your account preferences on our website. Opting out will not affect your ability to receive service-related communications (e.g., order updates, customer support messages).

4.4 Security and Fraud Prevention Purposes

To detect and prevent fraud, unauthorized access, and illegal activities (e.g., identity theft, credit card fraud).
To monitor user activity on our website for suspicious behavior (e.g., multiple failed login attempts, unusual order patterns).
To protect our website, systems, and data from cyberattacks, data breaches, and other security threats.
To comply with anti-fraud regulations and industry standards (e.g., PCI DSS, GDPR).

4.5 Legal and Compliance Purposes

To comply with applicable laws, regulations, and legal obligations (e.g., tax laws, customs regulations, data protection laws like GDPR, CCPA, and Hong Kong Personal Data (Privacy) Ordinance).
To respond to legal requests from law enforcement agencies, courts, or regulatory bodies (e.g., subpoenas, court orders).
To maintain accurate records for accounting, auditing, and tax purposes (e.g., retaining order and transaction records for the required legal period).
To resolve disputes, enforce our terms and conditions, and protect our legal rights and interests.

4.6 Other Legitimate Purposes

We may use your personal information for other legitimate purposes that are not explicitly listed above, provided that such purposes are compatible with the original purpose for which the information was collected, and do not violate your privacy rights. If we intend to use your personal information for a new purpose that is not compatible with the original purpose, we will obtain your explicit consent before doing so.

5. Information Sharing and Disclosure

We take your privacy seriously and will never sell, rent, or lease your personal information to third parties for commercial purposes. We only share your personal information with third parties in limited circumstances, as outlined below, and only if the third party agrees to protect your personal information in compliance with this Policy and applicable laws.

5.1 Third-Party Service Providers (Necessary for Business Operations)

We engage third-party service providers to help us operate our business, provide our products and services, and improve our user experience. We share your personal information with these providers only to the extent necessary for them to perform their services on our behalf. The types of third-party service providers we may share your information with include:

5.1.1 Payment Processors

We share your transaction information (e.g., order amount, billing address) with payment processors (e.g., PayPal, Stripe) to process your payments securely. These providers are PCI DSS compliant and do not share your full payment details (e.g., credit card number) with us. They only provide us with confirmation of payment status and transaction ID.

5.1.2 Logistics and Delivery Providers

We share your shipping information (e.g., recipient’s name, address, phone number) with logistics providers (e.g., DHL, FedEx, local couriers) to deliver your order. These providers use your information only to fulfill the delivery and provide us with delivery status updates. We require all logistics providers to comply with applicable privacy laws and protect your information.

5.1.3 Cloud Storage and IT Providers

We use cloud storage and IT service providers to store your personal information and maintain our website and systems. These providers use your information only to provide storage and IT support services, and they are contractually obligated to protect your data with industry-standard security measures.

5.1.4 Marketing and Analytics Providers

If you have opted in to receive marketing communications, we may share your email address or phone number with email marketing platforms (e.g., Mailchimp) to send you promotional messages. We also share browsing behavior data with analytics providers (e.g., Google Analytics) to analyze user activity and improve our website. These providers are contractually obligated to not use your information for any purpose other than providing services to us.

5.1.5 Customer Support Providers

We may engage third-party customer support providers to assist with responding to your inquiries and resolving issues. These providers have access to your communication history and order information only to the extent necessary to provide support.

5.2 Legal and Regulatory Disclosures

We may disclose your personal information if required by law, regulation, or legal process, including but not limited to:

In response to a subpoena, court order, or other legal request from a law enforcement agency, court, or regulatory body.
To comply with applicable laws and regulations (e.g., tax laws, customs regulations, data protection laws).
To protect our legal rights, interests, and property, or the rights, interests, and property of our users or third parties.
To prevent or investigate fraud, illegal activities, or security breaches.

5.3 Business Transfers

In the event of a merger, acquisition, sale of assets, or other business transfer (e.g., bankruptcy), we may transfer your personal information to the new owner or successor-in-interest. We will ensure that the new owner is contractually obligated to protect your personal information in accordance with this Policy and applicable laws, and we will notify you of any such transfer if required by law.

5.4 With Your Explicit Consent

We may share your personal information with third parties for any other purpose if we obtain your explicit, written consent. For example, if you agree to have your testimonial or photo shared on our website or social media, we will share that information with the relevant platforms.

5.5 Third-Party Links

Our website may contain links to third-party websites, services, or applications (e.g., social media platforms, payment gateways, partner websites). This Policy does not apply to these third parties, and we are not responsible for their privacy practices or content. We recommend you review the privacy policy of any third-party website you visit.

6. Cookies and Tracking Technologies

We use cookies and other tracking technologies to enhance your user experience, improve our website performance, and analyze user behavior. This section explains the types of cookies we use, their purposes, and how you can manage them.

6.1 Types of Cookies We Use

We use three main types of cookies on our website:

6.1.1 Necessary Cookies (Essential Cookies)

These cookies are essential for the operation of our website and cannot be disabled. They are required to enable basic functions such as: (1) Logging in to your account, (2) Processing your order, (3) Navigating the website, (4) Ensuring secure payment transactions. These cookies do not collect any personal information beyond what is necessary for these functions.

6.1.2 Functional Cookies

These cookies are not essential, but they enhance your user experience by remembering your preferences and settings. For example: (1) Remembering your login details (so you don’t have to log in every time you visit), (2) Saving your shopping cart items, (3) Remembering your delivery address and payment preferences, (4) Customizing the website language and currency. You can disable these cookies, but doing so may affect the functionality of the website.

6.1.3 Marketing Cookies

These cookies are used to collect information about your browsing behavior to personalize marketing content and measure the effectiveness of our marketing campaigns. For example: (1) Tracking which products you view or add to cart, (2) Sending you targeted ads on our website or social media platforms, (3) Measuring the success of promotional campaigns. These cookies are only used if you have explicitly opted in to receive marketing communications.

6.2 Other Tracking Technologies

In addition to cookies, we may use other tracking technologies, including:

Web Beacons/Pixels: Small, invisible images embedded in our website or emails that track whether you have opened an email or visited a specific page. They help us measure the effectiveness of our marketing emails and website content.
Local Storage: Storing information on your device (e.g., browser local storage, app storage) to remember your preferences and settings for future visits.
Scripts: Code snippets that collect information about your interaction with our website, such as click-through rates and session duration.

6.3 Managing Cookies

You can manage or disable cookies through your browser settings. Most browsers allow you to: (1) View the cookies stored on your device, (2) Delete individual cookies or all cookies, (3) Block all cookies, (4) Receive a notification when a cookie is being set. The process for managing cookies varies by browser; please refer to your browser’s help documentation for instructions (e.g., Chrome, Safari, Firefox, Edge).

Note: Disabling necessary cookies may prevent you from using certain features of our website, such as logging in, placing orders, or processing payments. Disabling marketing cookies will not affect your ability to use our website but will prevent us from sending you personalized marketing content.

6.4 Cookie Consent Banner

When you first visit our website, we display a cookie consent banner that explains the types of cookies we use and asks for your consent to use non-necessary cookies (functional and marketing cookies). By clicking “Accept All” or “Customize Cookies”, you agree to our use of cookies as outlined in this Policy. You can update your cookie preferences at any time by clicking the “Cookie Settings” link at the bottom of our website.

7. Data Storage and Security

We take the security of your personal information seriously and implement industry-standard security measures to protect your data from unauthorized access, loss, leakage, misuse, or alteration. This section explains how we store your data and the security measures we have in place.

7.1 Data Storage Duration

We store your personal information only for as long as necessary to fulfill the purposes outlined in this Policy, or as required by law. The storage duration varies depending on the type of information and the purpose for which it was collected:

Order and Transaction Information: We retain order and transaction records for the period required by tax and accounting laws (typically 5-7 years) and to handle any after-sales disputes or warranty claims. After this period, we will anonymize the data (remove all identifying information) or delete it.
Account Information: We retain your account information for as long as your account is active. If you delete your account, we will delete your personal information within a reasonable period (typically 30 days), except for information we are required to retain by law (e.g., order records).
Marketing Information: We retain your marketing subscription information for as long as you are subscribed to our marketing communications. If you opt out, we will delete your marketing information within a reasonable period, except for information required for compliance purposes.
Automatically Collected Information: We retain browsing behavior and device information for a period of 12-24 months, after which we anonymize the data for analytics purposes.

7.2 Data Storage Location

Your personal information may be stored on servers located in your country/region or in other countries/regions where we or our third-party service providers operate. We ensure that any cross-border data transfer complies with applicable privacy laws (e.g., GDPR’s cross-border data transfer rules, CCPA’s requirements). If we transfer your data to a country outside the European Economic Area (EEA), we will use one of the following mechanisms to ensure adequate protection:

Transfer to a country that has been deemed to provide an adequate level of data protection by the European Commission (e.g., Canada, Japan, New Zealand).
Use of Standard Contractual Clauses (SCCs) approved by the European Commission, which are contractual agreements between us and our third-party service providers that ensure your data is protected to the same standard as in the EEA.
Compliance with the Privacy Shield Framework (if applicable for transfers to the United States) or other recognized data transfer mechanisms.

7.3 Security Measures

We implement a range of technical, administrative, and physical security measures to protect your personal information, including:

Data Encryption: We use encryption (e.g., SSL/TLS) to protect data transmitted between your device and our website (e.g., payment information, login details). We also encrypt stored data (e.g., account information, order records) using industry-standard encryption algorithms.
Access Control: We restrict access to your personal information to authorized employees, contractors, and third-party service providers who need access to perform their job functions. Authorized personnel are required to use strong passwords and multi-factor authentication to access sensitive data.
Secure Servers: We store your data on secure, password-protected servers that are protected by firewalls and other network security measures to prevent unauthorized access.
Regular Security Audits: We conduct regular security audits and vulnerability assessments to identify and fix potential security risks. We also update our security measures regularly to keep up with new threats and technologies.
Employee Training: We provide regular training to our employees on data protection and privacy best practices, including how to handle personal information securely and comply with applicable laws.
Data Breach Response: We have a data breach response plan in place to quickly respond to and mitigate the impact of any data breach. If a data breach occurs that is likely to result in a high risk to your rights and freedoms, we will notify you and the relevant regulatory authorities (e.g., GDPR supervisory authority) within the required time frame (typically 72 hours).

7.4 Your Role in Protecting Your Data

You also have a role in protecting your personal information. We recommend that you: (1) Use a strong, unique password for your account, (2) Do not share your account password with others, (3) Log out of your account when using a public or shared device, (4) Keep your device and browser up to date with the latest security updates, (5) Be cautious when clicking links in emails or messages from unknown senders, (6) Notify us immediately if you suspect any unauthorized access to your account or a data breach.

8. Your Data Rights

Under applicable privacy laws (e.g., GDPR, CCPA, Hong Kong Personal Data (Privacy) Ordinance), you have certain rights regarding your personal information. We are committed to helping you exercise these rights in a timely and efficient manner. The specific rights available to you may vary depending on your country/region of residence.

8.1 Right to Access

You have the right to request a copy of the personal information we store about you. This includes: (1) The type of personal information we hold, (2) The purposes for which we use your information, (3) The third parties with whom we have shared your information, (4) The storage duration of your information, (5) Information about the source of your data (if collected from a third party).

8.2 Right to Rectification

If your personal information is inaccurate or incomplete, you have the right to request that we correct or update it. For example, if your address or phone number has changed, you can request that we update your account information.

8.3 Right to Erasure (Right to Be Forgotten)

You have the right to request that we delete your personal information if: (1) The information is no longer necessary for the purposes for which it was collected, (2) You have withdrawn your consent (and there is no other legal basis for processing), (3) You object to the processing and there is no overriding legitimate interest, (4) The information was processed unlawfully, (5) Deletion is required by law. Note: We may not be able to delete your information if we are required to retain it by law (e.g., order records for tax purposes).

8.4 Right to Restrict Processing

You have the right to request that we restrict the processing of your personal information if: (1) You dispute the accuracy of the information (while we verify its accuracy), (2) The processing is unlawful (but you do not want the information deleted), (3) We no longer need the information for processing, but you need it for legal claims, (4) You have objected to processing (while we assess whether our legitimate interests override your rights).

8.5 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, and machine-readable format, so that you can transfer it to another data controller (e.g., another online store). This right applies to personal information that you provided to us, and that we process based on your consent or for the performance of a contract.

8.6 Right to Object to Processing

You have the right to object to the processing of your personal information if we are processing it based on our legitimate interests (or those of a third party). We will stop processing your information unless we can demonstrate that we have a compelling legitimate interest that overrides your rights, or that the processing is necessary for legal claims.

You also have the right to object to the processing of your personal information for marketing purposes at any time. This is free of charge and will not affect your ability to use our services.

8.7 Right to Withdraw Consent

If we are processing your personal information based on your consent (e.g., marketing communications), you have the right to withdraw your consent at any time. Withdrawing consent will not affect the lawfulness of processing based on consent before it was withdrawn.

8.8 How to Exercise Your Rights

To exercise any of the above rights, please contact us via our dedicated privacy email address: hkhappythings@163.com. When making a request, please provide as much detail as possible (e.g., your name, email address, account number) to help us identify you and process your request efficiently.

We will respond to your request within the time frame required by applicable law (e.g., 30 days under GDPR, 45 days under CCPA). If we need more time to process your request (e.g., due to the complexity of the request), we will notify you and explain the reason for the delay.

We may charge a reasonable fee for repeated or excessive requests, or for requests that are manifestly unfounded or excessive. If we decide to charge a fee, we will notify you of the fee amount before processing your request.

9. Minors Protection

We do not knowingly collect, use, or disclose personal information from children under the age of 18 (or the age of majority in your country/region). Our website and services are not intended for use by minors.

If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at hkhappythings@163.com. We will investigate the matter and delete the child’s personal information as soon as possible, unless we are required to retain it by law.

10. Cross-Border Data Transfer

As a Cross-border E-commerce company, we may transfer your personal information to countries outside your resident country/region for the purposes outlined in this Policy (e.g., storage on cloud servers, processing by third-party service providers). We ensure that all cross-border data transfers comply with applicable privacy laws and provide adequate protection for your personal information.

For users in the EEA, we comply with GDPR’s cross-border data transfer rules by: (1) Transferring data to countries deemed adequate by the European Commission, (2) Using Standard Contractual Clauses (SCCs) for transfers to non-adequate countries, (3) Ensuring our third-party service providers comply with these requirements.

For users in California (USA), we comply with CCPA’s cross-border data transfer requirements, including ensuring that third-party service providers outside California protect your personal information in accordance with CCPA.

For users in Hong Kong, we comply with the Personal Data (Privacy) Ordinance’s requirements for cross-border data transfers, including not transferring personal data to a place outside Hong Kong unless the place has adequate data protection laws or we have taken reasonable steps to ensure the data is protected.

11. Contact Us

If you have any questions, concerns, or requests regarding this Policy, your personal information, or your data rights, please contact us using the following details:

Company Name: Hong Kong Happythings Technology Co., Ltd
Registered Address: Room1508, 15/F, Grand Plaza Office Tower 2, 625 Nathan Road, Mong Kok, Kowloon, Hong Kong
Privacy Contact Email: hkhappythings@163.com
Phone Number: +86 18603045196
Website: http://florasay.store

If you are not satisfied with our response to your inquiry or request, you have the right to lodge a complaint with the relevant data protection authority in your country/region (e.g., Information Commissioner’s Office (ICO) in the UK, CNIL in France, California Attorney General in the USA, Office of the Privacy Commissioner for Personal Data (PCPD) in Hong Kong).

12. Legal Applicability and Jurisdiction

This Policy is governed by and construed in accordance with the laws of Hong Kong SAR. Any disputes arising out of or in connection with this Policy shall be subject to the exclusive jurisdiction of the courts of Hong Kong SAR, unless otherwise required by applicable law.

We comply with all applicable privacy laws and regulations, including but not limited to: (1) European Union General Data Protection Regulation (GDPR), (2) California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), (3) Australia’s Privacy Act 1988 (OAIC), (4) Hong Kong Personal Data (Privacy) Ordinance, (5) Any other local data protection laws in the countries/regions where we operate or where our users reside.

—

*Happy shopping and May you be surrounded by blossoms all the way through life’s journey! ❤️