Privacy Policy

Privacy Policy

Last updated: [Editor's note: Fill in upload date, e.g., September 1, 2026]

1. About This Statement

Shang Yitong is operated by Cheung Yung Medical Co. Ltd. (hereinafter referred to as "the Company" or "we"), and is committed to complying with the Personal Data (Privacy) Ordinance, Cap. 486 of the Laws of Hong Kong (hereinafter referred to as "the Privacy Ordinance"). This statement describes the policies and practices we employ when handling personal data you provide through this website  www.sytwellness.com (hereinafter referred to as "this website"), WhatsApp, phone, email, or in person at our Wan Chai and Jordan clinics. Please read this statement carefully. Your use of this website or the Company's services constitutes your agreement to the Company's collection, use, and disclosure of your personal data in accordance with this statement.

2. Amendments to This Statement

The provisions contained in this statement may be updated, revised, changed, and modified from time to time as deemed necessary by the Company. The revised version will be published on this website and will take effect from the date of publication. Your continued use of this website or the Company's services after such revisions will be deemed as your acceptance of the amended statement. It is your responsibility to regularly review any modifications to this statement.

3. Personal Data We Collect

Depending on how you interact with the Company, we may collect the following categories of personal data:

• Identity and Contact Information: Name, gender, date of birth or age, phone number, email address, correspondence and delivery address.
• Appointment and Consultation Information: Appointment date and time, selected clinic and service, attendance and follow-up records.
• Health Information: Medical history, symptoms, constitution, past treatments, medication, and allergy records provided by you to our registered Chinese medicine practitioners or staff during appointments, inquiries, or consultations. Such data is considered sensitive personal data and will only be used by our registered Chinese medicine practitioners and authorized clinic staff within the scope of providing and following up on medical and healthcare services.
• Transaction Information: Order and purchase records, delivery details, and payment status. The Company will not store your full credit card information; online payments are processed by third-party payment service providers according to their own privacy policies.
• Technical Information: IP address, domain name server address, browser and device type, browsing history, and information recorded through cookies.

The provision of your personal data is voluntary. However, if you fail to provide necessary information, the Company may not be able to arrange appointments for you, provide consultation services, or process orders and deliveries.

4. Purpose of Data Use

The data and information collected by the Company will be used for the following purposes:

1. To provide the Company's various services, including arranging consultation appointments, processing online orders, and deliveries;
2. To provide Chinese medicine consultations, treatments, and follow-ups, and to maintain consultation records in accordance with professional requirements;
3. To process and follow up on service requests, inquiries, and complaints;
4. To contact you regarding notices and communications related to your use of this website and/or the Company's services;
5. To verify your identity;
6. To obtain website user statistics to analyze the usage of this website and assist in its further development;
7. Subject to paragraph 12 below, to send you promotional and marketing information; and
8. To comply with applicable laws, regulations, and the requirements of regulatory bodies (including the Chinese Medicine Council of Hong Kong).

5. Cookies and Tracking Technologies

When you access this website, the Company will record your domain name server address and/or email address, track the pages you browse, and store relevant information in "cookies." Generally, the Company uses cookies to estimate audience size, gauge the popularity of various parts of this website, track user movements, the number of participants in promotional activities, and measure user traffic patterns.

You can refuse, restrict, or delete cookies through your browser settings, but some functions of this website (such as shopping cart and member login) may not work properly as a result. Except for the circumstances stated in paragraphs 7 and 8 below, data and information collected by cookies will not be disclosed.

[Editor's note: Please confirm the actual third-party analytics and advertising tools currently used by this website (e.g., Google Analytics, Meta Pixel, Shopify built-in analytics). If used, the names and purposes of each tool should be listed here for complete disclosure.]

6. We Do Not Sell Your Personal Data

The Company will not sell, rent, or trade personal data obtained from you to third parties (whether in whole or in part) without your consent.

7. Disclosure and Transfer of Data

The Company agrees to take all practicable steps to keep your personal data confidential and/or not disclose it (unless prior consent is obtained from you), except that such data and information may be disclosed and/or transferred in the following circumstances:

1. When the Company needs to protect and defend its rights and property;
2. When the Company believes it is necessary to provide information to comply with applicable laws and regulations, or at the legitimate request of law enforcement agencies, courts, or regulatory bodies;
3. To provide relevant data and information to the Company's professional advisors for consultation (including market analysis), provided that such professional advisors must first undertake to keep the relevant data confidential;
4. To disclose to service providers who provide services on behalf of the Company, including payment processing, delivery and logistics, website hosting and maintenance, IT support, email and messaging platforms, and data analytics service providers. These service providers may only use the relevant data for specified purposes according to the Company's instructions; and
5. To transfer your personal data and information to a third party duly authorized by the Company for storage.

Your use of this website will be deemed as your consent, permission, and authorization for the Company to disclose and transfer your personal data in the above circumstances.

8. Cross-border Transfer and Storage of Data

This website and some of the Company's systems are provided and hosted by service providers located outside Hong Kong. Therefore, your personal data may be transferred to and stored or processed in places outside Hong Kong. The Company will take practicable steps to ensure that such data receives a similar level of protection as in Hong Kong.

9. Data Security

The Company will take practicable security measures, including access control, encrypted transmission, and staff confidentiality obligations, to prevent unauthorized access, processing, deletion, loss, or use of personal data. However, please note that data transmission over the Internet is not absolutely secure, and the Company cannot guarantee the absolute security of any data transmitted over the Internet.

10. Data Retention Period

The Company will not retain your personal data for longer than is necessary to fulfill the purpose for which it was collected, or for the period required by applicable laws and professional guidelines (whichever is longer), after which it will be deleted or anonymized. Consultation and medical records will be retained in accordance with the professional practice guidelines applicable to registered Chinese medicine practitioners.

[Editor's note: Please confirm the actual medical record retention period adopted by the clinic and specify it here in years (e.g., "no less than X years from the date of the last consultation"). This period should be consistent with the "Code of Practice for Registered Chinese Medicine Practitioners" issued by the Chinese Medicine Council of Hong Kong and the clinic's internal policies, and should not be inferred from this document.]

11. Links to Third-Party Websites

To provide you with more information, this website may provide links to other web pages, including but not limited to certain social media websites (e.g., Facebook and Instagram). When you browse these other web pages and use the services provided therein, your personal data may be collected. If you decide to click on advertisements and hyperlinks on this website that connect you to another web page, the protection of your personal data that you consider private and confidential may be revealed on those other web pages. To better protect your privacy rights, please refer to the privacy policies of those other web pages. The Company shall not be responsible or liable for your use of those other web pages.

12. Direct Marketing

The Company intends to use your name, phone number, email address, and correspondence address for direct marketing of the following categories of products and services:

• Chinese medicine consultations, acupuncture, bone setting, Tui Na, and other treatment services;
• The Company's Chinese herbal medicine, health supplements, and external application products; and
• Health and wellness information, offers, events, and promotional schemes.

The Company will not use your personal data for the above direct marketing purposes without your consent, nor will it provide your personal data to any third party for direct marketing purposes.

You may request the Company to cease using your personal data for direct marketing purposes at any time, free of charge. You can make such a request by any of the following methods: by clicking the unsubscribe link in promotional emails; by emailing  general@sytwellness.com; or by mailing to the address listed in paragraph 16 below. The Company will cease such use upon receipt of your request.

13. Right to Access and Correct Personal Data

In accordance with the Privacy Ordinance, you have the right to access and request correction of your personal data held by the Company. You can exercise these rights by emailing  general@sytwellness.com, or by mailing to the address listed in paragraph 16 below.

The Company will respond within  40 days of receiving an access or correction request. A fee, not exceeding what is appropriate, may be charged for data access requests; no fee will be charged for data correction requests. Upon receipt of such a request, the Company may ask you to provide personal details to verify your identity.

14. Minors

If you are under 18 years old, please provide personal data or use our services only with the consent and accompaniment of a parent or guardian.

15. Language Versions

In case of any discrepancy between the Chinese version and other language versions of this statement, the Chinese version shall prevail.

16. Inquiries and Complaints

For any inquiries, requests, or complaints regarding this statement or the Company's handling of personal data, please contact our Personal Data Officer:

Email: general@sytwellness.com
Wan Chai Clinic: 11/F, Yu Kong Building, 90 Jaffe Road, Wan Chai, Hong Kong | Tel 2736 7473
Jordan Clinic: 3/F, Kinning Building, 59 Parkes Street, Jordan, Kowloon | Tel 2736 7033

You may also lodge a complaint with the Privacy Commissioner for Personal Data, Hong Kong, regarding the Company's handling of personal data.