Privacy Policy

Last updated: January 30, 2026

1. Overview

This Privacy Policy explains how IWEIYI.com (“iweiyi.com”, “we”, “us”, or “our”) collects, uses, shares, and protects personal data when you visit iweiyi.com (the “Website”), create an account, contact us, or place an order for delivery of flowers and gifts (the “Services”).

This Policy applies to Customers and, where relevant, to Recipients whose details are provided to us for delivery. We handle personal data in accordance with applicable data protection laws, including the Personal Data (Privacy) Ordinance (Cap. 486) in Hong Kong and the PRC Personal Information Protection Law where applicable.

2. Who we are

The Website and Services are operated by IWEIYI.com, incorporated in Hong Kong Special Administrative Region of the People’s Republic of China.

3. Personal data we collect

We collect personal data that you provide directly, that we collect automatically, or that we receive from third parties (for example, payment processors or delivery partners) when necessary to provide the Services.

• Account data: name, email address, password (stored in encrypted/hashed form), preferred language, account settings.
• Order and delivery data: billing name and address, delivery address, Recipient name, Recipient phone number, delivery instructions, delivery date/time preferences, greeting card message, product selections, and order notes.
• Contact and support data: messages you send us by email, live chat, contact form, WeChat or other channels, and any information you provide in support requests or complaints (including photos you choose to provide).
• Payment data: payment status, payment method, transaction identifiers and limited payment-related information provided by our processors. We do not store full card numbers or card security codes.
• Device and usage data: IP address, browser type, device identifiers, operating system, pages viewed, referral URLs, and approximate location derived from IP address.
• Cookies and similar technologies: identifiers and preferences used to operate the Website, remember settings, and measure performance (see Section 9).

We generally do not require or request government ID numbers to place an Order. Please do not send unnecessary sensitive information to customer support unless we ask for it to resolve a specific issue.

4. Mandatory vs optional information

Certain information is required to provide the Services. For example, we need a delivery address and Recipient contact number to arrange delivery. If you do not provide required information, we may be unable to accept or fulfil your Order. Other information (such as optional notes or marketing preferences) is optional.

5. How we use personal data

We use personal data for the following purposes:

• To provide and manage the Services: process Orders, arrange fulfilment, coordinate delivery, send order and delivery updates, and provide customer support.
• To communicate with you: respond to inquiries, confirm details, and handle complaints, refunds or disputes.
• To improve and secure the Website: troubleshoot, prevent fraud, protect accounts, and maintain system security.
• To personalise your experience: remember preferences and display content in your preferred language and currency where available.
• To comply with legal obligations: record-keeping, tax/accounting requirements, and responding to lawful requests.
• Marketing (where permitted): send newsletters or promotions, subject to your choices (see Section 10).

6. Legal basis for processing

Depending on applicable law and context, we process personal data based on one or more of the following grounds:

• Contract: to perform our contract with you (e.g. processing and delivering your Order).
• Consent: where you have given consent (e.g. optional marketing communications or certain cookie preferences).
• Legitimate interests: to operate, improve and secure our Services, prevent fraud, and protect our customers, where those interests are not overridden by your rights.
• Legal obligations: to comply with applicable laws and regulatory requirements.

7. How we share personal data

We share personal data only as necessary for the purposes described in this Policy. Typical categories of recipients include:

• Delivery and fulfilment partners: local florists, bakeries, gift shops, couriers and logistics providers (to prepare and deliver your Products, typically using Recipient name, phone number, address, delivery instructions and order contents).
• Payment processors and fraud prevention partners: to process payments, authenticate transactions and reduce fraud risk.
• Technology providers: hosting, cloud storage, customer support tools, analytics, email delivery and security providers that help us operate the Website.
• Professional advisors: auditors, lawyers and accountants where necessary for business operations, compliance or legal claims.
• Authorities: where required by law, court order, or lawful request.

We require service providers to protect personal data and to use it only to perform services for us, consistent with applicable law.

8. Cross-border transfers

Because our business and service providers may operate in different jurisdictions, personal data may be transferred to or accessed from locations outside the place where it was collected. Where required, we take appropriate measures to protect personal data during transfers, such as contractual safeguards, access controls, and risk assessments where appropriate.

9. Cookies, analytics and advertising technologies

We use cookies and similar technologies to operate the Website, remember preferences, enable essential functions (such as cart and checkout), measure performance, and improve user experience. Depending on your settings and local legal requirements, we may also use analytics and advertising technologies (such as pixels) to understand campaign effectiveness and improve relevancy of communications.

You can manage cookie preferences through your browser settings and, where available, our cookie settings banner.

• Essential cookies: required for core Website functions such as account login and checkout.
• Preference cookies: remember settings such as language and currency.
• Analytics cookies: help us understand how the Website is used so we can improve it.
• Advertising/measurement cookies: help measure ads and optimise campaigns (where enabled).
• Security cookies: help protect accounts and prevent fraud.

10. Marketing choices

If you subscribe to our newsletter or otherwise consent to marketing (where required), we may send you updates, promotions or product news. You can opt out at any time by using the unsubscribe link in the email or by contacting us. We do not sell your personal data to third parties for their own marketing.

11. Data security

We use reasonable administrative, technical and organisational safeguards designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. Measures may include access controls, encryption in transit where supported, security monitoring, and staff/partner controls. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.

12. Data retention

We keep personal data only for as long as necessary for the purposes described in this Policy, including to fulfil Orders, provide customer support, maintain business records, and comply with legal obligations. Retention periods vary depending on data type and purpose. When data is no longer required, we delete, anonymise or securely archive it in accordance with applicable law.

13. Your rights

Subject to applicable law, you may have rights relating to your personal data, including to:

• request access to personal data we hold about you;
• request correction of inaccurate or incomplete data;
• request deletion, restriction, or explanation of our processing in certain circumstances;
• object to certain processing (such as marketing);
• withdraw consent where processing is based on consent (without affecting processing already carried out);
• request a copy of certain data in a portable format where applicable.

To exercise these rights, please contact us using the details in Section 17. We may need to verify your identity before responding.

14. Recipient data

If you provide Recipient information (name, address, phone number, and message content), you confirm that you have lawful authority to share that information with us for delivery purposes. We use Recipient data to fulfil delivery, coordinate redelivery where needed, provide delivery confirmation, and resolve service issues (such as complaints or refunds).

15. Children

The Website and Services are not directed to children, and we do not knowingly collect personal data from children. If you believe a child has provided personal data to us, please contact us so we can take appropriate steps.

16. Changes to this Privacy Policy

We may update this Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. We will update the “Last updated” date at the top of this page. Your continued use of the Website after changes take effect means you accept the updated Policy.

17. Contact us

If you have questions about this Policy or how we handle personal data, or if you wish to exercise your rights, please contact us:

• Contact form: via the “Contact Us” page on the Website