Privacy Policy
Last updated: September 26, 2026
1. Introduction
Moka Medical Ltd. ("we", "us", or "our") is committed to protecting and respecting your personal privacy. This Privacy Policy outlines how we collect, use, store, process, and disclose your personal data when you visit, browse, register an account, or make a purchase through our consumer e-commerce storefront (the "Store"), hosted on the SHOPLINE platform.
This policy is formulated in strict compliance with the Hong Kong Personal Data (Privacy) Ordinance (Cap. 486) ("PDPO").
Please note: This policy applies specifically to our direct-to-consumer online retail store. For corporate distributor, clinic, or wholesale inquiries governed by separate B2B terms, please refer to our corporate distributor website.
2. What Data We Collect
To process your orders, deliver products, and provide customer support, we collect the following categories of personal data:
-
Identity & Contact Data: Your full name, residential/delivery address, billing address, contact telephone number, and email address.
-
Transaction & Order Data: Details of items purchased, order totals, purchase history, order status, and preferred delivery methods.
-
Payment Information: Financial transactions are handled directly through certified third-party payment gateways. We do not collect, store, or have direct access to your complete credit card numbers or banking credentials. We receive only transaction confirmation tokens, payment status, and the masked card type/last four digits for reconciliation purposes.
-
Account Data (Optional): If you create a customer account, we store your login credentials (username and encrypted password), purchase records, saved addresses, and communication preferences.
-
Technical & Usage Data: When you browse the Store, our hosting platform automatically records your IP address, browser type and version, time zone setting, operating system, pages viewed, device identifiers, and interaction data (such as items added to your cart).
-
Customer Support & Correspondence: Records of communications, questions, or product feedback submitted through our contact forms, email, or customer service channels.
3. How and Why We Use Your Data
We collect and process your personal data only for legitimate business purposes in accordance with the PDPO, including:
-
Order Fulfillment & Contract Execution: Processing your purchase, verifying payments, coordinating delivery with logistics couriers, and sending automated order and dispatch confirmations.
-
Customer Service: Responding to inquiries, processing product returns, managing warranty claims, and addressing complaints.
-
Store Operation & Optimization: Administering the Store, troubleshooting technical faults, conducting internal data analysis, and enhancing the browsing and shopping experience.
-
Security & Fraud Prevention: Detecting, preventing, and mitigating fraudulent transactions, unauthorized account access, or cyber security incidents.
-
Legal & Statutory Compliance: Complying with statutory accounting, tax, record-keeping, and regulatory requirements under the laws of Hong Kong.
4. Direct Marketing (PDPO Part VIA Compliance)
We strictly adhere to the direct marketing provisions of the PDPO.
-
We will only use your personal data (specifically your name, email address, or phone number) to send promotional communications, newsletters, special offers, or new product announcements if you have provided explicit opt-in consent (e.g., checking an un-ticked consent box during checkout or signing up via our newsletter form).
-
You are under no obligation to receive marketing communications to complete a purchase.
-
Right to Opt Out: You may withdraw your consent and opt out of receiving promotional materials at any time, free of charge, by clicking the "Unsubscribe" link at the bottom of any marketing email or by contacting us at support@mokamedical.com.
5. Third-Party Disclosures & Data Sharing
We do not sell, trade, or rent your personal data to third parties. We disclose your data strictly to trusted third-party service providers necessary to operate the Store and complete your transactions:
-
E-Commerce Platform Provider: Our retail store is hosted by SHOPLINE, which provides the software infrastructure, database hosting, and technical systems necessary to run our e-commerce operations.
-
Payment Processors: Authorized third-party payment gateways (including Stripe, PayPal, Apple Pay, Google Pay, and credit card merchant acquirers) to securely process your transactions in compliance with PCI-DSS standards.
-
Logistics & Couriers: Delivery and freight providers (such as SF Express or local courier services) who receive your name, delivery address, and contact number solely to deliver your purchased products.
-
Professional Advisers & Authorities: Legal counsel, accountants, auditors, or law enforcement agencies when disclosure is strictly required by Hong Kong law, a court order, or to protect our legal rights, property, and safety.
All third-party service providers are contractually bound to maintain the confidentiality and security of your personal data and are prohibited from using your data for any independent purposes.
6. Data Security
We employ industry-standard technical, administrative, and physical safeguards to protect your personal data against unauthorized access, alteration, disclosure, accidental loss, or destruction.
Online checkout interactions and data transmissions are encrypted using Secure Socket Layer (SSL) technology. However, please recognize that no method of transmission over the Internet or electronic storage is completely impenetrable, and we cannot guarantee absolute security.
7. Data Retention
We retain your personal data only for as long as necessary to fulfill the operational purposes for which it was collected, including:
-
Active customer accounts are retained until you request account deletion.
-
Transaction, billing, and order records are retained for a statutory minimum of 7 years to satisfy Hong Kong tax, audit, and commercial legal obligations.
-
Upon expiration of the necessary retention period, personal data will be permanently deleted, overwritten, or rendered anonymous.
8. Cookies and Tracking Technologies
Cookies are small data files placed on your device when you browse our Store. We use cookies and similar technologies to:
-
Essential Cookies: Enable core functionality, such as keeping items in your shopping cart during checkout and maintaining secure user sessions.
-
Performance & Analytics Cookies: Gather aggregated, non-personally identifiable metrics on page load times, site traffic, and user navigation to improve our website design.
You can modify your browser settings to refuse cookies or alert you when cookies are being sent. Note that disabling essential cookies may impact Store functionality, including the checkout process.
9. Your Rights (Data Access and Correction)
Under the Hong Kong Personal Data (Privacy) Ordinance, you possess statutory rights regarding your personal information:
-
Right of Access: You may request confirmation of whether we hold your personal data and request a copy of that data.
-
Right to Correction: You may request that any inaccurate, incomplete, or out-of-date personal data we hold about you be corrected.
-
Right to Cease Marketing: You may at any time instruct us to stop utilizing your data for direct marketing purposes.
In accordance with the PDPO, we reserve the right to charge a reasonable administrative fee for processing data access requests.
10. Third-Party Links
Our Store may contain links to external websites, including our corporate distributor portal and manufacturer partner sites (e.g., Pharcos, River Pharma). Once you navigate away from our Store via an external link, you are governed by the privacy practices of that respective platform. We are not responsible for the privacy standards or content of external sites.
11. Amendments to This Policy
We may periodically update this Privacy Policy to reflect modifications in operational practices, technology, or relevant statutory requirements. Any revisions will be published immediately on this page with an updated "Last updated" date at the top. We encourage you to review this policy periodically.
12. Contact Us
If you wish to submit a data access or correction request, withdraw marketing consent, or ask questions concerning our privacy practices, please contact our Data Protection representative:
Moka Medical Ltd.
Email: legal@mokamedical.com
Customer Support: support@mokamedical.com
Last updated: September 26, 2026
1. Introduction
Moka Medical Ltd. ("we", "us", or "our") is committed to protecting and respecting your personal privacy. This Privacy Policy outlines how we collect, use, store, process, and disclose your personal data when you visit, browse, register an account, or make a purchase through our consumer e-commerce storefront (the "Store"), hosted on the SHOPLINE platform.
This policy is formulated in strict compliance with the Hong Kong Personal Data (Privacy) Ordinance (Cap. 486) ("PDPO").
Please note: This policy applies specifically to our direct-to-consumer online retail store. For corporate distributor, clinic, or wholesale inquiries governed by separate B2B terms, please refer to our corporate distributor website.
2. What Data We Collect
To process your orders, deliver products, and provide customer support, we collect the following categories of personal data:
-
Identity & Contact Data: Your full name, residential/delivery address, billing address, contact telephone number, and email address.
-
Transaction & Order Data: Details of items purchased, order totals, purchase history, order status, and preferred delivery methods.
-
Payment Information: Financial transactions are handled directly through certified third-party payment gateways. We do not collect, store, or have direct access to your complete credit card numbers or banking credentials. We receive only transaction confirmation tokens, payment status, and the masked card type/last four digits for reconciliation purposes.
-
Account Data (Optional): If you create a customer account, we store your login credentials (username and encrypted password), purchase records, saved addresses, and communication preferences.
-
Technical & Usage Data: When you browse the Store, our hosting platform automatically records your IP address, browser type and version, time zone setting, operating system, pages viewed, device identifiers, and interaction data (such as items added to your cart).
-
Customer Support & Correspondence: Records of communications, questions, or product feedback submitted through our contact forms, email, or customer service channels.
3. How and Why We Use Your Data
We collect and process your personal data only for legitimate business purposes in accordance with the PDPO, including:
-
Order Fulfillment & Contract Execution: Processing your purchase, verifying payments, coordinating delivery with logistics couriers, and sending automated order and dispatch confirmations.
-
Customer Service: Responding to inquiries, processing product returns, managing warranty claims, and addressing complaints.
-
Store Operation & Optimization: Administering the Store, troubleshooting technical faults, conducting internal data analysis, and enhancing the browsing and shopping experience.
-
Security & Fraud Prevention: Detecting, preventing, and mitigating fraudulent transactions, unauthorized account access, or cyber security incidents.
-
Legal & Statutory Compliance: Complying with statutory accounting, tax, record-keeping, and regulatory requirements under the laws of Hong Kong.
4. Direct Marketing (PDPO Part VIA Compliance)
We strictly adhere to the direct marketing provisions of the PDPO.
-
We will only use your personal data (specifically your name, email address, or phone number) to send promotional communications, newsletters, special offers, or new product announcements if you have provided explicit opt-in consent (e.g., checking an un-ticked consent box during checkout or signing up via our newsletter form).
-
You are under no obligation to receive marketing communications to complete a purchase.
-
Right to Opt Out: You may withdraw your consent and opt out of receiving promotional materials at any time, free of charge, by clicking the "Unsubscribe" link at the bottom of any marketing email or by contacting us at support@mokamedical.com.
5. Third-Party Disclosures & Data Sharing
We do not sell, trade, or rent your personal data to third parties. We disclose your data strictly to trusted third-party service providers necessary to operate the Store and complete your transactions:
-
E-Commerce Platform Provider: Our retail store is hosted by SHOPLINE, which provides the software infrastructure, database hosting, and technical systems necessary to run our e-commerce operations.
-
Payment Processors: Authorized third-party payment gateways (including Stripe, PayPal, Apple Pay, Google Pay, and credit card merchant acquirers) to securely process your transactions in compliance with PCI-DSS standards.
-
Logistics & Couriers: Delivery and freight providers (such as SF Express or local courier services) who receive your name, delivery address, and contact number solely to deliver your purchased products.
-
Professional Advisers & Authorities: Legal counsel, accountants, auditors, or law enforcement agencies when disclosure is strictly required by Hong Kong law, a court order, or to protect our legal rights, property, and safety.
All third-party service providers are contractually bound to maintain the confidentiality and security of your personal data and are prohibited from using your data for any independent purposes.
6. Data Security
We employ industry-standard technical, administrative, and physical safeguards to protect your personal data against unauthorized access, alteration, disclosure, accidental loss, or destruction.
Online checkout interactions and data transmissions are encrypted using Secure Socket Layer (SSL) technology. However, please recognize that no method of transmission over the Internet or electronic storage is completely impenetrable, and we cannot guarantee absolute security.
7. Data Retention
We retain your personal data only for as long as necessary to fulfill the operational purposes for which it was collected, including:
-
Active customer accounts are retained until you request account deletion.
-
Transaction, billing, and order records are retained for a statutory minimum of 7 years to satisfy Hong Kong tax, audit, and commercial legal obligations.
-
Upon expiration of the necessary retention period, personal data will be permanently deleted, overwritten, or rendered anonymous.
8. Cookies and Tracking Technologies
Cookies are small data files placed on your device when you browse our Store. We use cookies and similar technologies to:
-
Essential Cookies: Enable core functionality, such as keeping items in your shopping cart during checkout and maintaining secure user sessions.
-
Performance & Analytics Cookies: Gather aggregated, non-personally identifiable metrics on page load times, site traffic, and user navigation to improve our website design.
You can modify your browser settings to refuse cookies or alert you when cookies are being sent. Note that disabling essential cookies may impact Store functionality, including the checkout process.
9. Your Rights (Data Access and Correction)
Under the Hong Kong Personal Data (Privacy) Ordinance, you possess statutory rights regarding your personal information:
-
Right of Access: You may request confirmation of whether we hold your personal data and request a copy of that data.
-
Right to Correction: You may request that any inaccurate, incomplete, or out-of-date personal data we hold about you be corrected.
-
Right to Cease Marketing: You may at any time instruct us to stop utilizing your data for direct marketing purposes.
In accordance with the PDPO, we reserve the right to charge a reasonable administrative fee for processing data access requests.
10. Third-Party Links
Our Store may contain links to external websites, including our corporate distributor portal and manufacturer partner sites (e.g., Pharcos, River Pharma). Once you navigate away from our Store via an external link, you are governed by the privacy practices of that respective platform. We are not responsible for the privacy standards or content of external sites.
11. Amendments to This Policy
We may periodically update this Privacy Policy to reflect modifications in operational practices, technology, or relevant statutory requirements. Any revisions will be published immediately on this page with an updated "Last updated" date at the top. We encourage you to review this policy periodically.
12. Contact Us
If you wish to submit a data access or correction request, withdraw marketing consent, or ask questions concerning our privacy practices, please contact our Data Protection representative:
Moka Medical Ltd.
Email: legal@mokamedical.com
Customer Support: support@mokamedical.com