Privacy Policy

Privacy Policy

This Privacy Policy describes how Mystflow (hereinafter referred to as "the Website", "we" or "us") collects, uses and discloses your personal information when you visit, use our services, make purchases through mystflow.com (hereinafter referred to as the "Website") or communicate with us through other means (collectively, the "Services"). In this Policy, "you" refers to all users of the Services, including customers, website visitors or other individuals subject to this Policy.

Please read this Privacy Policy carefully.

Privacy Policy Updates

We may update this Policy from time to time based on operational, legal or regulatory requirements. The updated version will be posted on the website and marked with the "Last Updated Date" and follow other steps required by applicable law.

Collection and Use of Personal Information

To provide services, we collect and may have collected your personal information in the past 12 months through the following channels. The specific type of information depends on how you interact with us. In addition to the purposes described below, we may use information for communication, optimizing services, fulfilling legal obligations, enforcing terms of service, and safeguarding the rights and interests of all parties.

What personal information do we collect?

The types of information we collect depend on how you use the Site and Services. “Personal Information” is information that can identify, relate to, or describe you, and includes the following categories:

1. Information provided directly

  • Contact information : name, address, telephone number, email address.
  • Order information : name, billing address, shipping address, payment confirmation, email address, phone number.
  • Account information : user name, password, security verification questions and other account security information.
  • Customer Service Information : the content of communications you send through the Services.
    Note: Some service features require you to actively provide information. Refusing to provide information may result in the inability to use related features.

2. Usage Information (Automatically Collected)

We automatically collect usage data through Cookies (such as pixels, SDK and other technologies), including device information, browser type, network connection, IP address and records of your interaction with the service.

3. Information from third-party sources

  • Service support : such as Shopify and other platforms.
  • Payment processors : bank account, credit card information, and other payment information used for order fulfillment.
  • Online tracking technology : data such as email opening and advertising interaction collected through third-party tools.
    Third-party information is handled in accordance with this policy, see "Third-Party Websites and Links" below for details.

Use scenarios of personal information

  • Provision of goods and services : processing payments, order fulfillment, account management, logistics arrangements, and returns and exchanges.
  • Marketing and advertising : sending promotional information by email, SMS or post, and optimising advertising (legitimate interest for EU users based on Art. 6(1)(f) GDPR ).
  • Security and anti-fraud : detecting illegal activities and ensuring account security (legitimate interest for EU users based on Article 6(1)(f) GDPR ).
  • Communication and service optimization : providing customer support and improving the service (legitimate interest based on Article 6(1)(f) GDPR ).

Cookies

We use Cookies to improve website functionality, analyze user behavior and optimize advertising. You can manage Cookies through browser settings, but disabling them may affect your service experience.

  • Shopify-related Cookies : See the Shopify Cookies Policy for details.
  • Global Privacy Control (GPC) : If your browser sends a GPC signal, we will regard it as a request to opt out of targeted advertising (see the GPC official website for details).
    Note: We do not support Do Not Track signals other than GPC at this time.

Disclosure of Personal Information

We may disclose information to third parties in the following circumstances:

  1. Service providers : IT management, payment processing, data analysis and other partners.
  2. Business and marketing partners : use of information in accordance with their privacy policies.
  3. With your consent : such as logistics delivery or social media plug-in use.
  4. Affiliates : Based on legitimate interests in business operations.
  5. Legal compliance : responding to legal requirements, enforcing terms, or protecting rights.

Categories of information disclosed in the past 12 months :

Information Category Receiver Type
Basic contact information, order account information Suppliers, payment processors, logistics partners, etc.
Business records, customer support information Business and Marketing Partners
Usage Data, Geolocation Information Affiliates
We will not use or disclose sensitive information without consent.

Third Party Websites and Links

This site may contain links to non-operators, please refer to their privacy policies. We are not responsible for the privacy practices of third-party platforms, and your information on public platforms such as social media may be viewed by others.

Children’s Information

We do not provide services for children and do not intentionally collect their information. If you find that a child's information has been mistakenly collected, please request deletion through the contact information below. We currently do not "share" or "sell" information of users under the age of 16.

Security and Information Retention

We take reasonable security measures, but cannot guarantee absolute security. The length of time information is retained depends on account maintenance, legal obligations or dispute resolution needs.

Your rights

Depending on where you live, you may have some or all of the following rights:

  • Access, Deletion, Correction, Portability Rights : Request access, deletion, correction or transfer of information.
  • Opting out of targeted advertising or information sharing : Exercise through GPC signal or contact us.
  • Restrict processing, withdraw consent, and appeal : operate in the specified manner.
  • Email Unsubscription : Stop promotional messages through the unsubscribe option in emails.

Note: We will not discriminate against you for exercising your rights and may need to verify your identity before processing your request.

Complaints and Contact Information

For privacy-related questions, please contact:

  • Email : support@mystflow.com
  • Address : FLAT C, 9/F, WINNING HOUSE, NO.72-76, Wing Lok Street, Sheung Wan, Hong Kong

EU users may lodge a complaint with their local data protection authority ( list of supervisory authorities ).

International Users

Your information may be transferred across borders to other jurisdictions. When transferring EU user data abroad, we use EU Standard Contractual Clauses or UK equivalent mechanisms to ensure compliance.

Last updated : This document was last revised. Please check the latest version regularly.