Privacy Policy

Aware Flow HK ("we", "us", or "our") respects and values your privacy. We are committed to complying with the Personal Data (Privacy) Ordinance (Cap. 486) of the Laws of Hong Kong (the "PDPO") and relevant regulatory guidelines. This Privacy Policy explains how we collect, use, disclose, store, and protect your personal data when you use our website, online store, social media channels, and related services.

By using or browsing our website, placing an order with us, or otherwise providing your personal data to us, you acknowledge that you have read, understood, and agreed to this Privacy Policy.

1. Types of Personal Data We Collect

Depending on how you interact with us, we may collect and process the following types of personal

  • Basic contact information: such as your name, email address, contact number, and correspondence/shipping address.
  • Account and transaction information: such as your username, login details (stored in encrypted form by the platform), order history, and payment records (processed by third-party payment service providers).
  • Payment and billing information: such as credit card or other payment details processed and stored by regulated third-party payment providers (for example, Shopify Payments, PayPal, or other providers). We generally do not store your full credit card number or security code.
  • Technical and usage such as IP address, browser type and settings, device type, pages visited, time spent on pages, referring URLs, cookies, and other tracking technologies used for site operation and analytics.
  • Marketing and communication preferences: such as your subscription status to our newsletters, messaging lists (for example, WhatsApp/Telegram), and other communication channels, as well as your preferences regarding direct marketing.

You may choose whether to provide personal data to us. However, if certain required information is not provided, we may not be able to provide part or all of our services to you (for example, processing your order or arranging delivery).

2. Purposes and Use of Personal Data

We only collect personal data in a fair and lawful manner and use it only to the extent reasonably necessary for the following purposes:

  • Order processing and fulfilment: including payment processing, inventory management, delivery arrangements, returns, and refunds.
  • Customer service: responding to your inquiries, handling complaints, providing technical support, and after-sales service.
  • Account creation and management: including account registration, login verification, security management, and preference settings.
  • Improvement of products and services: conducting data analysis, research, and statistics to improve our website functions, product design, user experience, and operational efficiency. Where practicable, we use anonymised or de-identified information.
  • Marketing and communications (subject to direct marketing rules): sending you information about our new products, offers, events, workshops, festivals, and brand updates, where we have obtained your consent or you have not objected and such communications are permitted by law.
  • Legal and regulatory compliance: complying with applicable laws, regulations, court orders, or requests from government authorities and regulators, as well as fulfilling accounting, tax, or compliance obligations.

Unless we have obtained your express consent or an exemption applies under the PDPO, we will not use your personal data for purposes that are not related to or compatible with the purposes described above.

3. Disclosure and Transfer of Personal Data

To achieve the purposes described above, we may disclose or transfer your personal data to the following parties on a need-to-know basis only:

  • Our staff and representatives who need the data to perform their duties.
  • Third-party service providers who provide services on our behalf, including:
    • e-commerce platforms and cloud service providers (for example, Shopify);
    • payment processors and financial institutions;
    • logistics and courier companies for delivery and returns;
    • website analytics, advertising, and marketing service providers (which may use cookies or similar technologies);
    • IT support, security, and data backup providers.
  • Professional advisers, such as accountants, lawyers, and compliance consultants, who are subject to confidentiality obligations.
  • Government authorities, law enforcement agencies, regulators, or courts where disclosure is required by applicable law, regulation, or court order, or is necessary to establish, exercise, or defend our legal rights.

Where it is necessary to transfer your personal data outside Hong Kong, we will take reasonable steps to ensure that the recipient provides a level of data protection comparable to that required under Hong Kong law, including by using contractual safeguards where appropriate.

4. Data Security and Retention

We take reasonable and practicable technical and organisational measures to safeguard personal data against unauthorised or accidental access, processing, erasure, loss, or use. Such measures may include access controls, encrypted transmission, and regular security reviews.

We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable laws and regulations. Retention periods may vary depending on the type and purpose of the data (for example, transactional and accounting records may need to be kept for a certain number of years under legal or regulatory requirements).

5. Cookies and Other Tracking Technologies

To provide you with a better browsing and shopping experience, we may use cookies, pixels, and similar technologies on our website. These technologies help us to:

  • remember the items in your shopping cart and your login status;
  • store your language, region, or display preferences;
  • analyse traffic and performance on our site;
  • show you more relevant advertisements and promotional content (including remarketing ads).

You can configure your browser to refuse or delete cookies. However, if you block cookies, some features of the website or checkout process may not function properly.

6. Direct Marketing and Your Choices

Where permitted by law and with your consent (or where you have not objected, as allowed under the PDPO), we may use your name, contact details, purchase history, and preferences for direct marketing purposes, such as to send you information about:

  • flow arts, Flowstar, dapo and related products and accessories;
  • workshops, performances, festivals, and other events;
  • special offers, discounts, membership programmes, and promotional campaigns;
  • news and updates about aware flow HK and our partners.

You are free to withdraw your consent or object to the use of your personal data for direct marketing at any time and at no cost. You can do this by:

  • clicking the "unsubscribe" link in our emails or messages, where available;
  • replying to our message indicating "unsubscribe" or a similar request; or
  • contacting us using the details provided in the "Contact Us" section below.

Once we receive your request, we will update our records as soon as reasonably practicable and stop using your personal data for direct marketing.

7. Children’s Privacy

Our products and services are primarily intended for adults and are not specifically directed at children. If you are under 18 years old, you should use our website and services only with the consent and guidance of your parent or legal guardian, and you should obtain their consent before providing any personal data to us.

If we become aware that we have inadvertently collected personal data from a child without the appropriate consent, we will take reasonable steps to delete such data or otherwise handle it appropriately.

8. Your Rights to Access and Correct Personal Data

Under the PDPO, you have the right to:

  • ask whether we hold personal data about you and, if so, request access to such data;
  • request the correction of any inaccurate or incomplete personal data we hold about you;
  • request information about our personal data policies and practices; and
  • request deletion or restriction of the processing of your personal data, subject to applicable legal requirements and practical limitations (this may affect our ability to provide services to you).

If you wish to exercise any of these rights, please send us a written request (for example, by email) and provide sufficient information for us to verify your identity and handle your request. We may charge a reasonable fee for processing data access requests in accordance with the PDPO.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, technology, or our business operations. The updated version will be posted on our website with the "last updated" date. Your continued use of our website or services after any changes have been made will constitute your acceptance of the updated Privacy Policy.

We encourage you to review this page periodically to stay informed about our current privacy practices.

10. Contact Us

If you have any questions, requests, or complaints regarding this Privacy Policy or our handling of your personal data, please contact our data protection contact person at:

We will respond to your inquiry and handle your request within a reasonable time.