Privacy Policy

Last updated: June 20, 2026

Yupoo (hereinafter referred to as "Yupoo", "we" or "this platform") respects and values your privacy and is committed to protecting the personal data and information you provide when you visit and use our website, online shopping services, products and related services.

This Privacy Policy is intended to explain how we collect, use, disclose, store and protect your personal information when you visit or use the Yupoo website, register an account, purchase goods, contact us or otherwise use our services.

This Privacy Policy applies to our services operated in or related to Hong Kong and is formulated with reference to the currently applicable Personal Data (Privacy) Ordinance (Chapter 486 of the Laws of Hong Kong) in Hong Kong (hereinafter referred to as the "Privacy Ordinance").

By using our official website or related services, you indicate that you have read and understood this privacy policy.

1. Information we collect

Depending on how you use our website and services, we may collect the following types of information.

1.1 Personal and contact information

May include:

name
Email address
Phone number or mobile number
billing address
Shipping address
Country or region
Account information
Information you provide to customer service

1.2 Order and transaction information

When you place an order on Yupoo, we may collect order-related information, including:

Items ordered
order number
Order date
Shipping information
Transaction related information
Refund or return information
Records of customer service communications related to the order

If your payment is processed by a third-party payment service provider, bank card, credit card or other financial payment information may be collected and processed directly by that third-party payment service provider.

In this case, we may only receive limited transaction information necessary to process the order, such as payment status and transaction reference information.

1.3 Account information

If you create a Yupoo account, we may collect:

1.4 Technical and usage information

When you visit our website, the system may automatically collect some technical and usage information, including:

IP address
Browser type and version
Device type
operating system
Browser language settings
time zone
Visit page
Source website
Approximate location
Visit date and time
Website usage and interaction information

This information is mainly used for website operation, security management, data analysis and improving user experience.

1.5 Information you actively provide

We may collect information you actively provide when you perform the following operations:

Contact us
Submit inquiry
Contact customer service
Subscribe to relevant notifications
Participate in promotions
Submit product or service feedback
Communicate with us through online channels

2. How we use personal data

We may use your personal data for the following purposes:

Process and fulfill your order;
Arrange product delivery;
Provide customer service;
Process returns, refunds and exchange requests;
Manage your account;
Send you orders and service-related notifications;
To authenticate transactions and protect against fraud or unauthorized activity;
Maintain, operate and improve our website and services;
Maintain the security of the Site and prevent abuse;
Analyze website usage and improve user experience;
Comply with applicable legal and regulatory requirements;
To respond to requests from courts, government agencies, law enforcement agencies or other lawful authorities;
Provide you with information about goods, services, promotions or other marketing where permitted by law and applicable requirements have been met.

We will not collect personal data that is clearly disproportionate or excessive for the above purposes.

3. Provide personal data

Some of your personal data may be information necessary for us to process your order or provide you with certain services.

We will explain the necessary information through website pages, forms or other appropriate means.

If you refuse to provide information necessary to process your order or provide related services, we may not be able to:

Process your order;
Arrange product delivery;
Complete a refund or return;
Respond to certain customer service requests;
or provide some of the services you have requested.

Other non-essential information may be provided at your discretion.

4. Disclosure and transfer of personal data

Where reasonably necessary to achieve the purposes stated in this Privacy Policy, we may disclose or transfer relevant personal data to the following categories of service providers or partners:

payment service provider;
Logistics and distribution companies;
Warehousing and order fulfillment service providers;
Information technology and website hosting service providers;
Website analysis and security service providers;
customer service provider;
professional consultant;
Partners participating in business cooperation to provide related services;
government agencies;
law enforcement agencies;
courts and regulatory agencies;
Other institutions or individuals who are required or permitted to receive relevant materials under applicable law.

We will take reasonable measures based on the actual situation, require relevant service providers to handle personal data in an appropriate manner, and take reasonable measures to prevent personal data from unauthorized access, use, disclosure, alteration or loss.

5. Cross-border and international data transfer

As some of our payment service providers, logistics partners, technology service providers, website hosting service providers or other business partners may be located outside Hong Kong, your personal data may be transferred, stored or processed in jurisdictions outside Hong Kong.

When personal data needs to be transferred across borders, we will take reasonable and feasible measures in accordance with applicable laws and, where appropriate, adopt contractual, technical and organizational measures to protect relevant personal data.

6. Cookies and similar technologies

Our website may use cookies and similar technologies to:

Ensure the website is functioning properly;
Save user preferences;
Improve website performance;
Analyze website access and usage;
Maintain website security;
Analyze interactions between users and the website;
Support advertising and marketing campaigns where applicable.

You can refuse or restrict some cookies through your browser settings.

However, if you disable certain cookies, some functionality of the website may be affected.

For non-essential cookies or tracking technologies, where applicable, we may provide corresponding information and management options through the website.

7. Direct marketing

Where permitted by applicable law, we may use your personal data to send you information about:

merchandise;
service;
special offers;
promotions;
new products;
Other Marketing Information.

If your consent is required under applicable law before using your personal data for direct marketing, we will obtain the consent as required by law.

You can choose not to receive direct marketing information, and providing or refusing to provide direct marketing consent will not affect your normal purchase of goods or use of basic services.

You can cancel marketing messages at any time by:

Click "unsubscribe" or similar functionality in marketing emails;
Contact our customer service team;
Contact our privacy contact.

We will process your request to unsubscribe or opt-out of marketing within a reasonable time.

8. Personal data security

We will take reasonable and practicable steps to protect your personal data to prevent:

Unauthorized access;
Unauthorized processing;
accidental loss;
destroy;
modification;
Unauthorized Disclosure.

Depending on the nature of the personal data and related risks, we may take security measures including the following:

access control;
identity verification;
encryption technology;
Secure servers and website hosting;
security monitoring;
internal management and security procedures;
Other reasonable technical and organizational measures.

However, please be aware that no transmission over the Internet or electronic storage system can be guaranteed to be absolutely secure.

9. Personal data retention period

We will only retain your personal data for as long as reasonably necessary to fulfill the purposes for which it was collected.

We may need to continue to save relevant information under the following circumstances:

Process and manage orders;
Provide customer service;
Meet accounting and business requirements;
handle or resolve disputes;
protect against fraud or abuse;
comply with legal and regulatory requirements;
To establish, exercise or defend our legal rights.

When the relevant personal data is no longer reasonably necessary to be preserved, we will take reasonable measures to delete, destroy or anonymize the relevant data in accordance with applicable laws and actual circumstances.

10. Your rights regarding personal data

To the extent permitted by the Personal Data (Privacy) Ordinance and other applicable laws, you may have the following rights:

request access to the personal data we hold about you;
Request correction of inaccurate personal data;
Make inquiries about the way we process personal data;
Withdraw consent for direct marketing where applicable.

When processing certain personal data access, correction or deletion requests, we may need to take reasonable measures to confirm your identity to protect the security of your account and personal data.

We will handle requests in accordance with applicable law.

11. Account deletion

If you have registered a Yupoo account and wish to delete your account, you can contact us in the following ways:

Customer Service Team/Privacy Contact

We may continue to retain some information as necessary for legal, dispute resolution, fraud prevention, outstanding transactions or other legitimate business purposes.

After the relevant retention period has expired, we will delete, destroy or anonymize the relevant information in accordance with applicable laws and actual circumstances.

12. Third-party websites and services

Our official website may contain links to third-party websites, applications, payment services, social media platforms or other external services.

These third parties may have their own privacy policies and personal data handling practices.

We are not responsible for the privacy policies, content, security measures, or handling of personal data of third-party websites and services that are not operated or controlled by Yupoo.

We recommend that you carefully read the privacy policy of the relevant third party before providing your personal data to the third party.

13. Children’s Privacy

Our services are not intended specifically for children.

We do not knowingly collect personal data from children where prohibited by applicable law.

If you believe that a child has provided us with personal data without appropriate authorization, please contact us using the contact details set out in this policy and we will process it in accordance with applicable law.

14. Modifications to this Privacy Policy

We may update this privacy policy from time to time to reflect:

Service changes;
changes in business operations;
technological changes;
changes in legal or regulatory requirements;
Changes in the way personal data is processed.

If we make material changes to this Privacy Policy, we may provide notice to you via website announcement, email, or other appropriate means.

The updated Privacy Policy will be effective upon posting to the Site, unless otherwise stated.

We recommend that you check this page regularly to learn about the latest privacy policy content.

15. Personal Data Collection Statement

When Yupoo collects personal data directly from you, we will explain to you where appropriate:

The purpose for collecting personal data;
What information is necessary;
What information is voluntarily provided;
The categories of persons or institutions to which the relevant personal data may be transferred;
Your right to access and correct personal data;
Contact information of the department or person responsible for handling personal data and privacy matters.

This Personal Data Collection Statement applies together with this Privacy Policy.

16. Contact us

If you have any questions about this privacy policy, the handling of personal data, or requests for personal data access and correction, you can contact us through the following methods:

Yupoo

Privacy Officer/Department:
Yupoo Data Protection & Privacy Department

Official email:
privacy.hk@yupoo.com

Region:
Hong Kong

We will handle your privacy inquiries, personal data access and correction requests in accordance with applicable laws and relevant regulatory requirements.