This website (“Website”) is operated by AFT Pharmaceuticals (HK) Limited and its affiliated parent company (referred to on the Website as “AFT”, “we”, “our” or “us”). AFT Pharmaceuticals (HK) Limited is a private limited company registered in Hong Kong under Business Registration Number 75466053 and we have our registered office at RM 2310 Dominion Ctr 43-59, Queen’s Rd East Wanchai, HONG KONG.
We have developed this privacy notice to inform you of the data we collect, what we do with your information, what we do to keep it secure as well as the rights and choices you have over your personal data.
AFT Pharmaceuticals (HK) Limited is part of the AFT Pharmaceuticals Limited group of companies which is comprised of different companies, details of which can be found at https://www.aftpharm.com/.
Throughout this policy, we refer to Data Protection Legislation which means the Personal Data (Privacy) Ordinance (Cap. 486) and any legislation implemented in connection with the aforementioned legislation. Where data is processed by a controller or processor established in the European Union or comprises the data of people in the European Union, it also includes the EU General Data Protection Regulation (EU GDPR). This includes any replacement legislation coming into effect from time to time.
Who is responsible for the Processing of Your Personal Data?
The AFT entity responsible for the processing of your personal data is AFT Pharmaceuticals. The relevant AFT entity is referred to as “AFT”, “our”, “we” or “us” in this privacy policy.
What Personal Data do we Collect and When?
The type of personal data that we will collect from you, and you voluntarily provide to us on this website may include some or all of the following depending on the type of user you are:
Website Users
Businesses and individuals that visit and interact with our website.
| Storage Type | What we Store |
|---|---|
| User-Generated Content/Data | Name, Email Address, Free Format Text (Subject and Message for “Contact us” submission) |
| Website Usage Data | IP Address, Browser Type and Version, Operating System, Device Information (e.g., device type, screen resolution), Date and Time of Website Visits, Pages Visited on the Website, Clickstream Data (User’s navigational path) |
| Cookies and Tracking Data | Cookies (e.g., session cookies, persistent cookies), User Tracking Information (for analytics and personalisation) |
Why and How We Use Your Personal Data
To Operate, Improve and Maintain our Business, Products, and Services
We use the personal data you provide to us to operate our business. For example, when you make a purchase, we use that information for accounting, audits, and other internal functions. We may use personal data about how you use our website to enhance your user experience and to help us diagnose technical and service problems and administer our platform.
To Protect Our or Others’ Rights, Property, or Safety
We may also use personal data about how you use our website and platform, to prevent, detect, or investigate fraud, abuse, illegal use, violations of our Terms of Use, and to comply with court orders, governmental requests, or applicable law.
Using Your Personal Data: The Lawful Basis and Purposes
To process your personal data, we rely on certain lawful bases, depending on how you interact with our website, platform, or services.
If we do process your personal data, we may use one or more of the following lawful bases for processing:
As Necessary for Our Own Legitimate Interests or Those of Other Persons and Organisations, Including:
- For market research, analysis, and developing statistics
- To ensure the security of our website
As Necessary to Comply with a Legal Obligation, Including:
- When you or any of your related persons exercise available rights under data protection law and make requests
- For compliance with legal and regulatory requirements and related disclosures
- For the establishment and defence of legal rights
Sharing of Your Personal Data
We do not sell your personal data.
We may share your personal data with other organisations in the following circumstances:
- We use data processors who are third parties who provide elements of services for us. We have Data Processing Agreements in place with our data processors. This means that they cannot do anything with your personal information unless we have instructed them to do it. They will not share your personal information with any organisation apart from us or further sub-processors who must comply with our Data Processing Agreement. They will hold your personal data securely and retain it for the period we instruct.
- AFT Pharmaceuticals Limited group entities for the purposes and under the conditions outlined above. This includes its subsidiaries, and affiliated companies.
Our website contains links to websites owned and operated by third parties. If you use these links, you leave our Website. These links are provided for your information and convenience only and are not an endorsement by AFT Pharmaceuticals (HK) Limited of the content of such linked websites or third parties. AFT Pharmaceuticals (HK) Limited has no control over the contents of any linked website and is not responsible for these websites or their content or availability.
Cookies
We use cookies, which are small text files stored on your device. Using cookies is a way for us to make sure that our website is continuously improved, meets your needs and can be used as a tool to optimise our marketing strategy. For us to do this, we place functional cookies to make the website function as well as marketing cookies which help us target the right people and show them advertisements. Some of these cookies track your use of our website and visits to other websites and allow us to show you advertisements when you browse other websites.
Please view our Cookie Policy for more information on our use of cookies.
Rights under Data Protection Law
The Right to be Informed about our Collection and Use of Personal Data
You have the right to be informed about the collection and use of your personal data. We ensure we do this with our internal data protection policies and through our external website privacy notice. These are regularly reviewed and updated to ensure these are accurate and reflect our data processing activities.
Right to Access Your Personal Information
You have the right to access the personal information that we hold about you in many circumstances, by making a request. This is sometimes termed ‘Subject Access Request’. If we agree that we are obliged to provide personal information to you (or someone else on your behalf), we will provide it to you or them free of charge and aim to do so within 1 month from when your identity has been confirmed. In any event, if such requests cannot be complied with within 40 days after receiving the request, we will notify you in writing and comply with the requests as soon as practicable.
The data provided pursuant to your request shall, as far as practicable, be intelligible, readily comprehensible, in the language in which the request is made unless otherwise specified and in the form, if any, specified in the request.
We may ask for proof of identity and sufficient information about your interactions with us that we can locate your personal information.
If you would like to exercise this right, please contact us as set out below.
Right to Correction Your Personal Information
If any of the personal information we hold about you is inaccurate, incomplete, or out of date, you may ask us to correct it. We will make the necessary correction to the data and supply you with a copy of the data as so corrected. If such requests cannot be complied with within 40 days after receiving the request, we will notify you in writing and comply with the requests as soon as practicable.
If you would like to exercise this right, please contact us as set out below.
For More Information About Your Data Protection Rights
The Office of the Privacy Commissioner for Personal Data regulates data protection matters in Hong Kong. You can make a complaint to the Office of the Privacy Commissioner for Personal Data about the way we use your information. However, we hope that you would consider raising any issue or complaint you have with us first. Your satisfaction is extremely important to us, and we will always do our very best to solve any problems you may have.
Third-Party Processors and Service Providers
Our carefully selected partners and service providers may process personal information about you on our behalf as described below:
| Service | Description |
|---|---|
| Security Vendors | These trusted experts employ advanced cybersecurity measures, such as intrusion detection, threat monitoring, and malware scanning, to protect your personal data from unauthorized access and cyber threats. |
| Customer Support Providers | We work with dedicated customer support providers. They assist in addressing your queries, resolving issues by securely managing and accessing relevant customer data. |
| Content Delivery Networks (CDNs) | To optimize the speed and reliability of our online services, we rely on Content Delivery Networks (CDNs). CDNs efficiently deliver web content to you by strategically distributing it across global servers. Your data is cached and served from the nearest server, reducing latency, and enhancing your overall experience. |
| Content Management Systems | To assist us in the creation, management, and design of our website. |
| Analytics and Advertising | To improve our products and provide you with relevant content and advertisements, we collaborate with analytics and advertising partners. They analyze user behavior, preferences, and demographics to personalize your experience and deliver targeted ads. |
| Hosting Services | Providing the facilities needed to create and maintain our website, as well as make it accessible through the internet. |
| Third Party | Service Provided | Description of Service |
|---|---|---|
| Podcom | IT infrastructure and development services | Podcom offers managed IT support and development services for AFT Group. |
| Fastly | Content Delivery Network and Web protection services | Fastly offers web efficiency and protection services for our platform. Fastly – Privacy Policy |
| P29 | Website Management and Administration | P29 offer website design and management services for our product. Platform29 – Privacy Policy |
| WordPress | Content Management | WordPress offers web content management systems. WordPress – Privacy Policy |
How Long We Keep Your Information
We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Where the same record has to be kept for more than one purpose and there is a different retention period for each of those purposes, the record is kept for the longer period.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
Security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. Platforms, systems, and facilities in which personal data are processed are protected by secure network architectures that contain firewalls and intrusion detection devices.
In addition, we limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know. They will only process your personal data on our instructions, and they are subject to a duty of confidentiality.
Where We Store Your Personal Information and International Data Transfers
The personal data that we hold about you will be stored in Australiaand other countries. Your data may also be shared with third-party service providers based outside Hong Kong and/or Australia. Some of the data recipients with whom AFT shares your personal data with may be located in countries other than the country in which your personal data originally was collected.
Please contact us if you want further information on the specific mechanism used by us when transferring your personal data out of Hong Kong .
Contact Us
If you would like to exercise one of your rights as set out above, or you have a question or a complaint about this policy, the way your personal information is processed, please contact us by one of the following means:
AFT Pharmaceuticals (HK) Limited, FAO Data Protection Officer (DPO)
RM 2310 Dominion Ctr 43-59, Queen’s Rd East Wanchai, HONG KONG
customer.service@aftpharm.com
Contact: +852 2521 0859