私隱政策聲明

• Shiseido Group、Shiseido Co., Ltd. 及SHISEIDO Hong Kong Limited (資生堂集團，資生堂有限公司及資生堂香港有限公司) (統稱「資生堂」、「我們」、「我們的」或「本公司」) 於收集、持有、儲存、使用、傳送、或以其他形式處理個人資料時將尊重閣下的法定私隱權利，而本私隱政策聲明將說明我們的私隱實務。我們承諾會遵守香港法例第486章《個人資料（私隱）條例》的規定。本通知不會限制閣下作為資料當事人在《個人資料（私隱）條例》下所享有的權利。
• 請細閲以下內容，以了解我們如何處理閣下的個人資料的政策和實務。本政策可能不時予以修訂。如本私隱政策聲明的英文及中文版本有任何抵觸，概以英文版本為準。
• 本私隱政策聲明內「個人資料」一詞含有《個人資料（私隱）條例》所解釋的意義。

• 閣下或須不時提供閣下的個人資料，包括但不限於閣下的姓名、性別、年齡、護照或身分證明文件號碼、出生日期、電話號碼、傳真號碼、住址、電郵地址、信用卡資料、教育程度、職業、家庭收入、興趣及喜好活動等。如閣下拒絕提供有關資料及/或提供不完整或不正確資料，可能令本公司無法為閣下提供某些服務。
• 如閣下未滿十八歲，必須先得到家長或監護人的同意，方可向本公司提供任何個人資料。我們不會在未經其同意的情況下收集閣下的個人資料。

• 於閣下購物、參與相關推廣活動或申請成為我們不時營運的任何一個香水、化妝品、美容護理及相關產品品牌包括但不限於「Anessa、Clé de Peau Beauté、d program、Drunk Elephant、ELIXIR、Ettusais、Ipsa、Issey Miyake Parfums、Narciso Rodriguez Parfums、Nars、Serge Lutens、SHISEIDO及Tory Burch」的會員時，我們可能會收集閣下的個人資料。
• 如閣下希望得到我們提供的某些服務，某些個人資料是必須提供的，此等資料將會在會員申請表格內被註明為「必須提供資料」。如閣下希望我們向閣下提供所申請的服務，閣下必須向我們提供這些個人資料。如某些個人資料只為可自願性提供的，該等資料將不會被註明為「必須提供資料」，且閣下可決定是否向我們提供該等資料。
• 如閣下希望我們提供下列任何服務，閣下須向我們提供閣下的個人資料:
  1. 參加及維持閣下作為我們的會員的資;
  2. 累積作為我們的會員的優惠積分;
  3. 向閣下發出關於作為我們的會員可享有的福利和優惠的通知;
  4. 享有作為會員的優惠;
  5. 通知有關會員計劃的任何修訂;
  6. 數據清洗及客戶資料更新; 及
  7. 其他直接有關會員的持續性客戶支援服務。
• 我們可能會使用由閣下提供的任何個人資料(無論是必須性提供的和/或自願性提供的)，使我們能夠為閣下提供以下附加服務和/或進行以下活動:
  1. 讓我們更清楚了解我們客戶的統計資料;
  2. 作內部研究及分析，以讓我們能妥善提供切合閣下特定需求的獎賞、服務及產品信息或禮物;
  3. 市場研究;
  4. 讓我們的美容顧問進行跟進服務;
  5. 分派客戶滿意調查; 及
  6. 寄出尊貴客戶通訊及尊貴客戶活動最新資料。

• 如我們向閣下收集個人資料，我們將:
  1. 告知閣下(以本私隱政策聲明或透過另行發出的通知)我們正在收集閣下的資料及我們所收集的該等個人資料的用途;
  2. 在相關情況下，給予閣下機會選擇退出及拒絕將閣下的個人資料作某種用途(包括但不限於下文第5段所述的情況); 及
  3. 告知閣下我們將如何儲存閣下的個人資料及閣下如何可以查閱，更改及刪除我們所保存的該等個人資料。
• 我們收集及持有關於閣下的個人資料均會被保密處理，但我們可能會向以下人士(不論是在香港境內或境外)披露該等資料作上文第3段所列收集該等資料之有關用途:
  1. 任何旗下公司、附屬公司、控股公司、關聯公司或由資生堂同屬一家控制公司的公司或聯營公司;
  2. 就處理及儲存閣下的資料向我們提供行政、電訊、電腦及其他服務的任何代理、承包商或第三方服務供應商(統稱「第三方供應商」);
  3. 資生堂的任何實際或建議的全部或任何部分資產，股份或服務受讓人、承讓人或全部或任何部分的業務繼承人; 及
  4. 由香港境內或境外適用法律規定或授權的政府和監管機關、執法機構和其他組織;
• 第三方供應商負有保密責任及受合約條款之約束保護閣下的個人資料私隱並只能使用閣下的個人資料作上文第3段所列的用途，而非第三方供應商之目的（包括直接促銷）。

• 我們亦可能會使用閣下的個人資料包括姓名、電話號碼、住址及電郵地址作直接市場推廣用途。根據法律規定，除非我們已獲得閣下的同意(包括不反對的表示)，我們不會使用閣下的個人資料作直接促銷。
• 若閣下同意，閣下的個人資料有可能被用作以下用途:
  1. 通知閣下有關新產品推出及其他推廣優惠，包括(如適用)護膚產品、化妝品、彩妝產品、身體護理產品、彩妝服務、身體護理服務及美容服務;
  2. 通知閣下有關我們的推廣活動，包括(如適用)彩妝班及/或示範、皮膚護理講座、其他美容課堂、公關活動、尊貴客戶聚會、產品套装、店舗開幕活動、商店公告活動、展覽及最新消息;
  3. 通知閣下有關皮膚護理、彩妝或身體護理的專櫃或專櫃以外服務及活動，以作推廣及獎賞用途;
  4. 市場推廣獎賞計劃、生日優惠、免費試用產品、數碼活動、路演/街頭推廣活動，店內推廣的最新消息;
  5. 通知閣下有關與購物商場、百貨公司、信用咭、銀行、行業、名人雜誌、電視、網站、文化、藝術或音樂團體/組織、慈善團體或非謀利組織的聯合推廣或活動及
  6. 與資生堂旗下品牌進行跨品牌合作推廣及/或活動。
• 如於任何時候閣下不希望我們使用閣下的個人資料於上文所述的直接市場推廣用途，閣下可透過下文第7段所列的渠道聯絡我們，以行使閣下的退出權利。請注意在行使退出權利時，我們或需要您提供個人相關資料作身份確定使閣下用戶資料得到充分安全保障。

• 閣下向本公司提供的個人資料將妥為存置於本公司的客戶服務系統內，只有已接受我們私隱政策培訓的授權人士方可查閱。

• Cookies （"儲存在用户本地終端上的數據"）是指把閣下瀏覽本網站的紀錄以壓縮及加密的文字檔案形式，儲存於閣下的電腦或流動裝置的一項功能。本網站所用的Cookies並沒有識別個別用戶的功能，而經Cookies所收集的信息並不會包括閣下的電子郵件地址、姓名或其它個人資料。資生堂在以下情況有可能於此本網站取用Cookies：
  1. 當用戶瀏覽本網站並需要切換到本網站的不同頁面，所需的資料會被暫存以便用戶能夠更方便地瀏覽本網站。
  2. 當資生堂或資生堂所委託的公司於本網站進行用戶調查或需要分析本網站的瀏覽情況，以便日後於本網站提供更好的服務。
  
  *即使資生堂在此網站有使用Cookies，閣下仍可以自行更改瀏覽器軟件的設定以選擇是否使用Cookies。 閣下亦可以於電腦及流動裝置上刪除已儲存的Cookies。
  (詳情請參閱閣下所使用的瀏覽器軟件說明) 另外，請注意如閣下拒絕於本網站使用Cookies功能，有可能會導致此網站上的某些內容無法正常顯示或閣下未能使用本網站

• 我們通常會將閣下的個人資料儲存在我們於[香港]的伺服器內，但為了將閣下的個人資料轉移或加添至我們的全球客戶資料庫或上文第4段規定的任何人士，我們可能會將這些個人資料轉移至我們於香港以外的辦事處。我們承諾會採取一切合理必要的步驟及盡一切應盡的努力確保所有在我們於香港以外的辦事處收集、持有、儲存、使用、或以其他形式處理的個人資料會得到安全處理，並符合本私隱政策聲明及《個人資料（私隱）條例》的規定。

• 根據《個人資料（私隱）條例》，閣下有權查核我們是否持有有關閣下的個人資料，並要求查閱、更正及刪除任何閣下於我們的記錄中的個人資料。如於任何時候閣下希望行使任何上述權利，請向我們提出書面要求並如下文第10段所述發送電郵至我們的個人資料私隱主任。
• 閣下亦可要求我們從任何運作中的郵遞或分派名單中刪除閣下或閣下的個人資料。如閣下不希望收到我們的宣傳和直接促銷資料，請如下文第10段所述電郵聯絡我們的個人資料私隱主任，並在閣下的通訊中註明「保密」。在回應閣下的要求時，我們可能會要求閣下提供若干關於閣下的資料，以核實存取要求的真確性及有效性。

• (1)如閣下要求 (i)查閱或更正資料; (ii)提供關於我們在個人資料方面的政策及實務的一般資料; 或 (iii)提供關於我們持有的個人資料的種類; 及(2)一般查詢及投訴的人士，應聯絡:
  
  個人資料私隱主任
  地址:香港九龍宏遠街一號壹號九龍十七樓
  電郵地址: info@elixir.com.hk (ELIXIR)
  
  *請註明閣下之姓名及會員編號或聯絡電話，以便進行跟進。

• 我們將只會為履行正在或將要使用的個人資料的目的所需(包括任何直接相關的目的)而保存閣下的個人資料。閣下與本公司進行業務往來之時，本公司將保存閣下所有交易紀錄以作審核之用。本公司的內部政策是將有關資料保存一段合理時間，並會將已不再需要用於收集時的目的之個人資料刪除。如上文第8段所述，您亦有權要求刪除我們所持有的閣下的個人資料。
• 如本聲明的中文與英文版本有任何分歧，概以英文版本為準。

SHK Privacy Policy Statement

• Shiseido Group, Shiseido Co., Ltd. and Shiseido Hong Kong Limited (referred to collectively as “Shiseido”, “we”, “our” or “us”) respect your legal rights of privacy when collecting, holding, storing, using, processing, transmitting or otherwise handling personal data and this Privacy Policy Statement explains our privacy practices. We are committed to comply with the requirements under the Personal Data (Privacy) Ordinance, Chapter 486 of the Laws of the Hong Kong Special Administrative Region. Nothing in this Privacy Policy Statement shall limit or restrict your rights as a data subject under the Personal Data (Privacy) Ordinance.
• Please read the following carefully to understand our policy and practices regarding how your personal data will be treated. This policy may from time to time be revised. If there is any inconsistency between the English and Chinese version of this Privacy Policy Statement, the English version shall prevail.
• Throughout this Privacy Policy Statement, the term “personal data” shall have the meaning ascribed to it in the Personal Data (Privacy) Ordinance.

• You may need to provide certain personal data in using our services, including but not limited to your name, gender, age, passport or identity card number, date of birth, phone number, facsimile number, address, email address, credit card details, education level, occupation, household income, hobbies or preferred activities. Failure to provide such data and/or provision of incomplete or inaccurate data may prevent us from providing certain services to you.
• If you are under the age of 18, you must obtain the consent from parents or guardians before disclosing any of your personal data to us, and we shall not collect your personal data without such prior consent.

• Your personal data may be collected when you make a purchase, participate in promotional activities or apply to be a member of any of the brands of fragrance, cosmetics, beauty care and related products operated by us from time to time, including but not limited to ANESSA, Clé de Peau Beauté, d program, Drunk Elephant, ELIXIR, ettusais, Ipsa, Issey Miyake Parfums, Narciso Rodriguez Parfums, Nars, Serge Lutens, SHISEIDO and Tory Burch.
• Certain personal data is required to be provided on an obligatory basis if you wish to receive certain services from us. These data will be marked as “mandatory” in the Member Record Form and you MUST provide your personal data to us if you want us to provide the service for which you are applying. If personal data is only required on a voluntary basis, it will not be marked “mandatory” and it is entirely up to you to decide whether you want to provide such information to us or not.
• Your supply of personal data is mandatory if you wish to receive one or more of the following services:
  1. Enrolment into and maintaining your membership as our member;
  2. Accumulating bonus points as our member;
  3. Communicating to you your entitlements and privileges as our member;
  4. Redemption of privileges as a member;
  5. Notification of any amendment to the membership program;
  6. Data cleansing and customers profile updates; and
  7. Other continuous customer support services directly in relation to your membership.
• We may use any personal data provided by you (whether on an obligatory and/or voluntary basis) to enable us to provide the following additional services to you and/or carry out the following activities:
  1. To enable us better to understand the demographics of our customers;
  2. For internal research and analysis to enable us to provide rewards, services and product information or offerings better tailored to your needs;
  3. Market research;
  4. To enable our beauty consultant/specialist to follow up;
  5. To distribute customer satisfaction survey; and
  6. To send our VIP newsletters and VIP program updates.

• In cases where we do collect personal data from you, we will:
  1. Inform you (by way of this Privacy Policy Statement or by a separate notification) that we are doing so and the purpose(s) for which we will use the personal data collected;
  2. Where relevant, give you the opportunity to opt-out and object to any of the purpose(s) for which we will use the personal data collected (including but not limited to the circumstances described in paragraph 5 below); and
  3. Tell you how we will store your personal data and how you can review, change and delete the personal data we have stored.
• All personal data collected and held by us will be kept confidential but we may provide and/or disclose such information to the following parties (whether within or outside Hong Kong) for the purposes set out in paragraph 3 above:
  1. Any member companies, subsidiaries, holding companies, associated companies, or affiliates of, or companies controlled by, or under common control with Shiseido;
  2. Any agent, contractor or third party service provider (“Third Party Service Providers”) who provides administrative, telecommunications, computer and other services to us in connection with the processing and storage of your data;
  3. Any actual or proposed assignee or transferee of all or any part of our assets, shares or services, or successor of Shiseido in carrying on all or any part of our business; and
  4. Government, judicial or regulatory authorities, law enforcement agencies or other organizations as required or authorized by applicable laws in or outside Hong Kong.
• Our Third Party Service Providers are under a duty of confidentiality and are contractually bound to protect your personal data privacy and to only use your personal data in connection with the purposes specified in paragraph 3 above and not for their own purposes (including direct marketing).

• We may also use your personal data including name, telephone number, address and email for direct marketing. By law, we may not use your personal data for this purpose unless we have received your consent (including an indication of no objection).
• Upon your consent, your personal data may be used for:
  1. Communicating to you regarding new product launch and other promotional offers, including where applicable, skincare products, cosmetics products, make up products, body care products, make up services, body care services and facial services;
  2. Communicating to you regarding our promotional events including where applicable, makeup classes and/or demonstrations, skincare seminars, other beauty classes, PR events, VIP gatherings, value sets, shop opening events, store announcement/ events, exhibitions and news update;
  3. Communicating on-counter or out of counter services and events related to skincare, makeup or beauty services for promotion or rewarded purpose;
  4. Marketing reward programs, birthday celebration offers, free sampling, digital campaigns, roadshow/ outpost, in store promotion updates;
  5. Communicating joint promotion or events with shopping malls, department stores, credit cards, banks, trades, celebrities, magazines, television, websites, mileage programs, cultural, art or musical societies/ organizations, charities or nonprofit organizations; and
  6. Cross brand joint promotions and/ or events with brands within Shiseido (when applicable).
• If at any other point of time you do not wish us to use your personal data for use in direct marketing as described above, you may exercise your opt-out rights by notifying us through the communication channels as stated
• In paragraph 10 below. Please note that in order to opt-out from receiving direct marketing you may be required to provide your personal details for our processing and identity confirmation.

• All personal data provided by you will be properly stored in our customer service system and can only be accessed by authorized persons who have received training on our privacy policies.

• Cookies are small, often encrypted text files, located in browser directories which serve to keep a record in your computer or mobile device that you have visited this website. Cookies used on this website do not have the function of identifying an individual user and the information collected by a Cookie does not include your e-mail address, names or other personal data. Shiseido may use Cookies in this website for the following purposes:
  1. When there is a website crossing over several pages of this website and such necessary information is temporarily recorded in order for users to use this website conveniently.
  2. When Shiseido or a company consigned by Shiseido conducts survey analysis of the access trends of users on this website in order to provide better service through this website.
  
  * You may choose whether to use Cookies by modifying your browser settings, even if Shiseido uses Cookies in this website. You may also delete stored cookies from your computer or mobile device. Please see the help page of the browsing software you use for more details. However, please note that there may be some contents on this website which may not function properly or which cannot be used when use of Cookies is refused.

• Your personal data will generally be held on our servers hosted in Hong Kong. However, for the purpose of transferring or processing your personal data into our central database of global customer information or to any of the people specified in paragraph 4 above, we may transfer it to our office(s) outside Hong Kong. We are committed to take all reasonably necessary steps and exercise all due diligence to make sure all personal data collected, held, stored, used, or otherwise processed in our offices outside Hong Kong are treated securely, in accordance with this Privacy Policy Statement and in compliance with the Personal Data (Privacy) Ordinance.

• Under the Personal Data (Privacy) Ordinance, you have the right to check whether we hold personal data relating to you and request access, correction and deletion of any of your personal data in our records. If you at any other point of time wish to exercise any of such rights, please email our Personal Data Privacy Officer as specified in paragraph 10 below.
• You may also request us to delete you or your personal data from any active mailing or distribution list. If you no longer wish to receive any future promotional or direct marketing material from us, please email our Personal Data Privacy Officer as specified in paragraph 10 below, marking your communication “Confidential”. In response, we may ask you to provide certain details about yourself to ascertain the authenticity and validity of the request.

• The person to whom (1) requests (i) for access to data or correction of data, (ii) for general information regarding our policies and practices with respect to personal data and (iii) about the kinds of personal data that we hold and (2) general questions and complaints should be addressed is as follows:
  
  Personal Data Privacy Officer
  Address: 17/F., One Kowloon, 1 Wang Yuen Street, Kowloon Bay, Hong Kong
  Email: info@elixir.com.hk (ELIXIR)
  
  Please indicate your name, member ID or contact number for us to follow up your request.

• We will keep your personal data only for as long as necessary to fulfill the purpose(s) for which the data is or is to be used (including any directly related purpose(s)). Pursuant to our internal policy, we will keep a record of all transactions with you in our course of business for a reasonable period of time for review and verification purposes. Personal Data which is no longer necessary for the purposes for which the data was originally collected will be destroyed. You also have the right to request deletion of your personal data in our possession as stated in paragraph 8 above.
• If there is any discrepancy between the Chinese and English versions of this Statement, the English version shall prevail.