PRIVACY POLICY

Last Updated: July 16, 2026

1. INTRODUCTION

Welcome to floraoflife.com (referred to as "this website", "we", "us", or "our"). We understand that your personal information is important to you, and your trust matters greatly to us. This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you visit this website, browse, or purchase products from our Qise Hualu (Seven‑Colour Floral Dew) product series.

This Privacy Policy applies to all visitors and users of this website. Please read this policy carefully before using this website. If you do not agree with any part of this policy, please stop using this website immediately.

2. WHAT INFORMATION WE COLLECT

We may collect the following categories of information:

(A) Information you directly provide to us

When you perform the following actions on this website, we collect information that you voluntarily submit:

• Registering an account: name, email address, phone number, login password.

• Placing an order: recipient name, shipping address (including country/region, state/province, city, detailed address), contact phone number, order notes.

• Payment processing: payment method, payment account information (such as Alipay account ID, last four digits of bank card, etc.). Please note: complete payment information is processed directly by our payment service providers; we do not store your full bank card number or payment password.

• Customer service: name, contact information, and inquiry content that you provide when contacting us via email, online chat, or social media.

• Marketing subscriptions: email address you provide when subscribing to our newsletters or promotional offers.

(B) Information we automatically collect

When you visit this website, we may automatically collect the following information:

• Device information: IP address, browser type and version, operating system, device type.

• Browsing information: access time, pages viewed, time spent on each page, click behavior, referring URL.

• Shopping cart information: products you have added to your cart and their quantities.

(C) Cookies and similar technologies

We use cookies and similar tracking technologies to improve your shopping experience, including:

• Essential cookies: to maintain cart functionality, user login status, and ensure basic website operation.

• Functional cookies: to remember your language preferences and regional settings.

• Analytical cookies: to analyse website traffic and usage through tools such as Google Analytics, helping us improve our website.

• Advertising cookies: to show you product recommendations that may be of interest.

You can manage or disable cookies through your browser settings. However, please note that disabling certain cookies may affect core functions such as shopping cart and checkout.

3. HOW WE USE YOUR INFORMATION

We use your information mainly for the following purposes:

• Processing orders, shipping, and after‑sales service. Information used: name, address, phone, order details. Legal basis (if GDPR applies): contract performance.

• Managing your account. Information used: registration info, login records. Legal basis: contract performance.

• Customer communication (order confirmation, shipping notifications, after‑sales follow‑up). Information used: name, email, phone, order details. Legal basis: contract performance.

• Improving website experience and product recommendations. Information used: browsing history, cart items, purchase history. Legal basis: legitimate interest.

• Sending marketing emails and promotional offers (only with your consent). Information used: name, email. Legal basis: your consent.

• Fraud prevention and transaction security. Information used: IP address, device info, payment info. Legal basis: legitimate interest / legal obligation.

• Complying with legal and regulatory obligations. Information used: relevant information as required by law. Legal basis: legal obligation.

If you no longer wish to receive our marketing emails, you can click the "unsubscribe" link at the bottom of any such email, or contact us using the details at the end of this policy.

4. DATA STORAGE AND RETENTION

Storage location: Your personal information will be stored on servers and cloud platforms used by this website. If cross‑border data transfer occurs (for example, using service providers located in other countries), we will ensure appropriate safeguards are in place and comply with applicable laws and regulations.

Retention periods: We retain your personal information only for as long as necessary to fulfil the purposes described in this policy:

• Order information: retained for 5 years after order completion, to meet tax and after‑sales inquiry requirements.

• Account information: deleted within 30 days after you close your account.

• Marketing information: use ceases immediately upon unsubscribe or objection; data deleted after 1 year.

• Analytical data such as browsing history: retained for no more than 26 months (based on Google Analytics standard retention).

After the retention period expires, we will delete or anonymise your personal information.

5. HOW WE SHARE YOUR INFORMATION

We do not sell your personal information to any third party. To enable normal operation of this website and your shopping experience, we may share your information with third parties under the following circumstances:

(A) Sharing to provide services

• Logistics carriers: we share name, shipping address, phone number for order delivery. Examples: SF Express, DHL, etc.

• Payment service providers: we share order amount, payment method, and necessary payment information to process your payment. Examples: Alipay, Stripe, PayPal, etc.

• Website technology platforms: we share account info, order data, browsing data for hosting and operation. Examples: Shopify, WooCommerce, etc.

• Analytics tools: we share IP address and browsing behaviour (anonymised) for traffic analysis and website optimisation. Example: Google Analytics.

• Email service providers: we share name and email to send order confirmations and marketing emails. Examples: Mailchimp, SendGrid, etc.

(B) Disclosure for legal compliance

We may disclose your personal information as required by law in the following situations:

• To comply with laws, regulations, or lawful requests from government authorities or courts.

• To protect the legal rights, property, or safety of this website, our users, or the public.

(C) Business transfer

If this website undergoes a merger, acquisition, asset sale, or similar business change, your personal information may be transferred as part of the assets. We will notify you in advance and require the receiving party to continue to comply with this Privacy Policy.

6. YOUR RIGHTS

Under applicable data protection laws (including but not limited to GDPR, CCPA, and China's Personal Information Protection Law), you have the following rights regarding your personal information:

(A) Right of access: You have the right to request access to the personal information we hold about you.

(B) Right to rectification: You have the right to request correction of inaccurate or incomplete personal information.

(C) Right to erasure ("right to be forgotten"): You have the right to request deletion of your personal information under certain circumstances, such as when the information is no longer necessary for the original purpose, when you withdraw consent, when you object and we have no overriding legitimate grounds, or when processing is unlawful.

(D) Right to withdraw consent: Where we process personal information based on your consent (e.g., marketing emails), you have the right to withdraw your consent at any time.

(E) Right to data portability: You have the right to receive a copy of your personal information in a structured, commonly used, and machine‑readable format.

(F) Right to object: You have the right to object to our processing of your personal information based on our legitimate interests.

(G) Right to opt‑out of sale/sharing (CCPA): Where applicable, you have the right to opt out of the sale or sharing of your personal information. We currently do not sell personal information.

How to exercise your rights

If you wish to exercise any of these rights, please contact us through the following methods:

• Email us at: [Your privacy‑dedicated email, e.g., privacy@floraoflife.com]

• Please include "Privacy Rights Request" in the subject line.

We will respond to your request within 30 days of receipt. To verify your identity, we may ask you to provide necessary identification information.

7. COOKIE POLICY

(A) What are cookies?
Cookies are small text files stored in your browser by websites. They are used to remember your preferences, login status, and cart contents, thereby enhancing your browsing experience.

(B) Types of cookies we use

• Essential cookies: used to maintain shopping cart, login status, and checkout functions. Are they required? Yes.

• Functional cookies: used to remember language preferences and regional settings. Required? No.

• Analytical cookies: used to count visits and analyse user behaviour. Required? No.

• Advertising/marketing cookies: used to display personalised product recommendations. Required? No.

(C) How to manage cookies
You can manage or disable cookies through your browser settings (e.g., in Chrome: Settings → Privacy and security → Cookies and other site data). You may also use our cookie consent management tool if available.

Please note: If you disable essential cookies, cart and checkout functions may not work properly.

8. DATA SECURITY

We take data security seriously and implement the following measures to protect your personal information:

• Encryption in transit: we use SSL/TLS encryption (HTTPS) across the entire website to ensure data security during transmission.

• Access control: only authorised personnel have access to your personal information, and access privileges are strictly limited.

• Regular audits: we review our data security measures regularly to identify and fix potential risks.

• Security training: we provide data protection and privacy training to our staff.

However, please understand that no method of transmission over the internet or electronic storage is 100% secure. We will continue to strive to protect your information and, in the event of a data breach, will notify you and relevant supervisory authorities in a timely manner as required by law.

9. CHILDREN'S PRIVACY

This website and the Qise Hualu product series are sold to adults aged 18 years and older. We do not knowingly collect personal information from children under 13 years of age (or under 16 in certain jurisdictions).

If you become aware that we have collected personal information from a child without parental consent, please contact us immediately, and we will delete that information as soon as possible.

10. THIRD‑PARTY LINKS

This website may contain links to third‑party websites (such as payment platforms, social media). These third‑party sites have their own privacy policies, and we assume no responsibility for their privacy practices. We recommend that you read their respective privacy policies when visiting those websites.

11. UPDATES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in laws, regulations, or our business practices.

• Each update will be indicated by a revised "Last Updated" date at the top of this policy.

• For material changes (such as fundamental changes to data processing), we will notify you in advance via website announcement or email.

• We encourage you to review this policy periodically to stay informed of the latest version.

12. CONTACT US

If you have any questions, comments, or complaints about this Privacy Policy, or if you wish to exercise your privacy rights, please contact us through our facebook page.

If you are not satisfied with our response, you have the right to lodge a complaint with the data protection supervisory authority in your jurisdiction.

13. GOVERNING LAW

This Privacy Policy is governed by the laws of Hong Kong. In the event of inconsistency between different language versions of this policy, the [Chinese/English] version shall prevail.

This Privacy Policy is for reference only and does not constitute legal advice. We recommend that you adjust the content according to your actual business circumstances and consult with a qualified lawyer before publication to ensure full compliance with all applicable laws and regulations.