Privacy Policy Statement ("PPS")

1. Your Privacy Rights

Pet To Nature Ltd. (hereinafter referred to as "the Company", "we" or "our") respects the privacy rights granted to you by law when collecting, retaining, using and transmitting personal data. This "Privacy Policy" is intended to explain how we handle personal privacy. We must comply with the Personal Data (Privacy) Ordinance, Chapter 486 of the Laws of Hong Kong Special Administrative Region when collecting, retaining, using and transmitting personal data. We ensure that our employees strictly adhere to the relevant security and confidentiality standards.

The following will explain in detail our policies and methods for handling personal data. Please read and understand carefully. By providing us with your personal data, you agree to the content of this Privacy Policy and the manner in which your personal data is collected, used, transferred and stored as described in this Policy.

If you are under 18 years of age, you must obtain the consent of a parent or guardian before providing any personal data.

In the event of any discrepancy between the English and Chinese versions of this Privacy Policy, the English version shall prevail.

2. Collection of Personal Data

Depending on the products and/or services we provide to you, we may collect two types of basic data from you: "Personal Data" and "Non-Personal Data".

"Personal Data" refers to any personally identifiable information (including name, email and address, gender, telephone number, payment information) that we may collect from you when you request products and/or services from us, which can practicably directly or indirectly identify an individual.

"Non-Personal Data" includes aggregated and/or automated data collected through the use of products and/or services (including our website and/or mobile applications), or data about a type or group of users from which personally identifiable information has been removed. This Privacy Policy does not restrict or prevent us from collecting, using and providing Non-Personal Data.

3. Purpose of Using Your Personal Data

The purposes for which we may use your personal data will depend on the products and/or services you require from us. Such purposes will also be indicated in the Personal Data Collection Statement, registration form, terms and conditions, mobile application or webpage where you provide us with the relevant personal data. If you are unable to provide the required specified personal data, we may not be able to provide you with all the products and/or services.

4. Disclosure and Transfer of Personal Data

When collecting your personal data, we will:

• Inform you that we are collecting your personal data and the purpose of collection (by means of a "Personal Data Collection Statement" or a separate notice);
• Give you the opportunity to object to the use of personal data for specific purposes.

We will take all practicable steps to keep your personal data confidential. However, we may disclose, transfer and/or assign such data to the following persons:

• If Pet To Nature decides to sell, merge and/or reorganise any part of its business, any actual or proposed assignee, transferee or successor to the Company's rights over your personal data;
• Any agent, consultant, auditor, contractor or third-party service provider, and/or person who processes personal data for us, who provides administrative, telecommunications, computer, payment, fraud prevention, insurance, data processing and/or other services to the Company in connection with our business operations and/or the products and/or services you require from us; and
• Any person to whom we are obliged to disclose data or who is legally authorised to obtain data, pursuant to any law binding on the Company, or in order to comply with any guidelines or codes of practice issued by a regulatory or other body that the Company should comply with (including government departments, regulatory or administrative bodies or law enforcement agencies).

We may also disclose and/or transfer your personal data in the manner described in the Personal Data Collection Statement and/or terms and conditions relating to the products and/or services you require from us. Third parties to whom we disclose and/or transfer your personal data may be located outside Hong Kong in places that do not have data protection laws substantially similar to or serving the same purposes as the Personal Data (Privacy) Ordinance.

5. Links to Other Websites

If you use our website and/or mobile applications, they may contain advertisements or hyperlinks to other websites. If you click on any such advertisement or link, you will leave the Company's website or mobile application and enter another location. We are not responsible for protecting the privacy, personal data that may be disclosed, and possible interference/impact from "cookies" when you browse other websites. You should refer to the privacy policy of that location (if any).

Some of our websites and/or mobile applications may allow you to connect to third-party social networking sites. If you choose to connect to such third-party social networking sites, we may collect certain personal data about your social network profile provided to us by the social networking site. In such circumstances, we will only collect and use such personal data for the purpose of enabling you to connect to third-party social networking sites.

6. Cookies

Some of our websites use Google Analytics provided by Google, Inc. (hereinafter referred to as "Google"). Google Analytics uses "cookies" to help our website analyse how users use these websites. A cookie is a document stored on your device (such as your computer) whenever you visit or browse a webpage. Cookies can be used to identify computers or mobile devices, but are not used to collect personal data and will not identify you. That is, cookies do not have the function of identifying users of our website.

On our website, cookies will be used to track and monitor the use of our website and to improve, customise and enhance your browsing experience, for example:

• Strictly necessary cookies — used to confirm that you are using our website and to store the information you fill in on forms or the details you provide when processing payment. Without "strictly necessary cookies", the information you provide will disappear after you leave the website to another website.
• Performance cookies — used to collect anonymous data about visitors using our website, such as the pages you have visited. We will use this collective data to improve the quality of our website services.
• Functional cookies — used to record the items you have selected and to recommend other content on our website that is relevant to you and your interests.

On some web pages, we have installed "share" buttons or widgets that can connect to other social networking pages such as Facebook, Instagram and Twitter. These pages may have individually installed cookies to identify your personal identity when you log in to use their services. We do not monitor these cookies, so please ask the individual third-party webpage how they use your data and how to refuse to allow third parties to collect your data.

If you use or continue to use our website, we will assume that you are happy to accept our setting of cookies. You can choose to reject all or certain cookies at any time by changing the settings of the web browser on your device. Please visit www.allaboutcookies.org to learn how to manage cookies. However, please note that if you choose to delete or restrict the use of cookies, you may not be able to use certain features of our website.

7. Security and Storage

In addition to what is described in point 4 above, your personal data, regardless of how it is stored, will only be used by authorised employees or contractors of the Company. When you register on our website, your personal data will be encrypted and transmitted to a server dedicated to the Company, then stored electronically and will be encrypted and/or password protected. Personal data will also be transmitted over networks using SSL protocol for enhanced protection. Personal data is confidential to the Company and is only accessible to employees authorised by the Company or employees of contractors who have confidentiality obligations to the Company. These employees authorised by the Company or its relevant contractors must comply with this "Privacy Policy" when accessing such personal data.

8. Use of Personal Data in Legal Proceedings

You expressly agree that if we need to take any action against you for any reason, including for the recovery of amounts owed by you, we may identify you based on the personal data you have provided and take legal action against you.

9. Right to Access and Correct Personal Data

You may at any time request access to and correction of personal data relating to you in our records. You may also request us to remove your data from any operating mailing or distribution list. If you need to exercise any of your rights, you may write to us at the address below, marking the envelope "Confidential". When responding to your request, we may ask you to provide certain personal data to confirm that you are indeed the person whose data is being processed. After you make a request, we need to respond within 60 days. We may charge a reasonable fee for complying with your data access request.

Any request for (i) access to data or correction of data, (ii) general information about the Company's personal data policies and practices, and (iii) information about the types of personal data held by the Company, and/or general questions and complaints about this Privacy Policy, should be addressed to the following person and address:

10. Retention of Personal Data

We will retain your personal data for as long as necessary for the relevant purposes for which it was collected. When it is no longer necessary to use personal data for the relevant purposes, such personal data will be destroyed within a reasonable time, unless it is required to be retained by the Company to comply with legal, regulatory or accounting requirements or to protect the interests of the Company.

This Privacy Policy may be amended. Any changes will be published on this page. If you continue to use our website and/or mobile applications after such changes, it means you accept the relevant changes.

In the event of any discrepancy between the English and Chinese versions of this Privacy Policy, the English version shall prevail.