Privacy policy

Effective Date: August 6, 2026

This Privacy Policy explains how HUGYOO collects, uses, discloses and protects personal information when you visit hugyoohair.com, place an order, create an account, participate in HUGYOO Rewards, contact us, submit a review, apply to the HUGYOO Ambassador Program or otherwise interact with our services.

HUGYOO is operated by the company identified in the Contact section below. In this Policy, “HUGYOO,” “we,” “us” and “our” refer to that company. “You” refers to a visitor, customer, applicant or other individual whose personal information we process.

1. Personal Information We Collect

The information we collect depends on how you use the store.

Information You Provide

  • Identity and contact information: name, email address, telephone number, billing address, delivery address and account details.
  • Order information: products, selected variants, order history, discounts, returns, exchanges, delivery and customer-service records.
  • Payment information: payment method, billing status and transaction identifiers. Complete card details are processed by authorized payment providers and are not intended to be sent to or stored in ordinary HUGYOO emails or contact forms.
  • Account information: sign-in credentials or verification information, saved preferences and account activity, depending on the customer-account method enabled by Shopify.
  • Communications: emails, form submissions, chat messages, photographs, video and other information you send when asking for advice, support or a return.
  • Reviews and content: ratings, written reviews, photographs, video, social-media handle and related content you choose to submit.
  • Rewards information: points activity, rewards selected or redeemed, related account and order activity, and records used to prevent duplicate or abusive participation.
  • Ambassador information: legal or creator name, country or region, contact details, public channel links, audience and content information, application responses, assigned code, attributed sales, commission, PayPal contact and legally required tax or verification information.

Information Collected Automatically

When you use the store, we and our providers may collect device and activity information such as IP address, browser, operating system, device identifiers, approximate location, language, referring page, pages viewed, search terms, clicks, cart activity, checkout events, session information and cookie or similar-technology identifiers.

Information From Other Sources

We may receive information from Shopify, payment providers, fraud-prevention services, delivery carriers, review services, advertising or analytics partners, social platforms and other services you choose to connect with. We may also receive updated delivery or transaction status from the organizations handling an order.

2. How We Use Personal Information

We use personal information to:

  • Operate, maintain and improve the store
  • Process payment, accept or review orders and provide order confirmation
  • Fulfill, deliver, track, return, exchange and refund purchases
  • Create and manage customer accounts
  • Answer product, sizing, lace-tone, delivery and after-sales questions
  • Detect and prevent fraud, abuse, security incidents and unlawful activity
  • Personalize product discovery and remember store preferences
  • Request, publish and moderate genuine product reviews
  • Operate HUGYOO Rewards, calculate and adjust points, process rewards
  • Review Ambassador Program applications, attribute approved-code sales and administer commissions
  • Send service communications and, where permitted, marketing messages
  • Measure store performance, understand customer journeys and improve content
  • Comply with legal, tax, accounting, regulatory and dispute-resolution obligations
  • Protect our rights, customers, personnel and business

Where applicable law requires a legal basis, we process information as necessary to perform a contract with you, comply with legal obligations, pursue legitimate interests that are not overridden by your rights, protect vital interests, or act with your consent. You may withdraw consent where processing relies on consent, without affecting earlier lawful processing.

3. How We Disclose Personal Information

We disclose information only as reasonably necessary for the purposes described in this Policy, including to:

  • Shopify: the commerce platform hosting the store, checkout, customer accounts and related functions.
  • Payment providers: Shopify Payments, PayPal and other payment methods available at checkout, for payment, fraud review, refunds and disputes.
  • Delivery and fulfillment providers: including FedEx, DHL and UPS, as selected for an order.
  • Store service providers: providers supporting forms, customer chat, email, search, reviews, loyalty rewards, hosting, security, fraud prevention, analytics, advertising, technical support and data storage.
  • Professional advisers and authorities: accountants, auditors, insurers, lawyers, banks, regulators, courts, law enforcement and tax authorities where reasonably required or legally permitted.
  • Business transactions: a prospective or completed merger, financing, reorganization, sale, transfer or acquisition, subject to appropriate confidentiality and legal safeguards.
  • Other parties at your direction: when you ask us to share information or connect a service.

Where Google, Meta, TikTok or another analytics or advertising service is enabled, information may be disclosed to that provider according to your consent choices, store settings and the provider's own privacy terms.

We do not sell personal information for money. Some privacy laws may define certain analytics, advertising or cross-context disclosures as a “sale,” “sharing” or “targeted advertising” even when no money is exchanged. Where those laws apply, you can use the store's Cookie Banner or Data Sharing Opt-Out page, where available, or contact us to exercise the relevant choice.

4. Cookies and Similar Technologies

We and our providers use cookies, pixels, local storage and similar technologies to:

  • Keep the store, cart, checkout, account and security features working
  • Remember language, region and other preferences
  • Understand traffic, errors and performance
  • Measure marketing and advertising where permitted
  • Reduce fraud and protect the store

Some technologies are necessary for the store to function. Others are used for analytics, personalization or advertising and may depend on your consent or opt-out rights. You can manage choices through the Cookie Banner or privacy controls shown on the store and through your browser settings. Blocking necessary cookies may prevent parts of the cart, account or checkout from working correctly.

Where supported, HUGYOO also respects legally required opt-out signals, such as Global Privacy Control, through Shopify's customer-privacy tools.

5. Marketing Communications

We send promotional email only where permitted by law, including where you have subscribed or another valid legal basis applies. You may unsubscribe through the link in a marketing email. Service messages about an order, account, security issue, return or program application are not marketing and may still be sent when necessary.

Unsubscribing from marketing does not automatically delete order records or other information we must retain for service, fraud prevention or legal purposes.

6. Reviews, Photographs and Public Content

Content you choose to publish as a product review may be visible publicly with the name or profile information selected during submission. Do not include private information you do not want displayed. We may moderate content for relevance, authenticity, safety and compliance with our rules, but do not require a positive review.

Where we wish to use a creator's content outside the review function or a platform's ordinary sharing tools, we will rely on the permission granted at submission or seek additional permission as appropriate.

7. International Processing

HUGYOO is operated from Hong Kong and uses providers and carriers that may process information in other countries. As a result, personal information may be transferred to or accessed from a jurisdiction different from the one where you live.

Where required, we use contractual or other legally recognized safeguards for international transfers. Privacy and government-access laws in another jurisdiction may differ from those in your country.

8. Retention

We keep personal information for as long as reasonably necessary to fulfill the purposes in this Policy, including providing service, maintaining transaction and tax records, administering returns and commissions, resolving disputes, preventing fraud and meeting legal obligations.

Retention periods vary by record type, transaction status, legal requirement and whether an account or relationship remains active. When information is no longer required, we delete, anonymize or securely isolate it, subject to technical and legal limitations.

9. Security

We use reasonable administrative, technical and organizational measures intended to protect personal information. No transmission or storage method is completely secure, and we cannot promise absolute security.

Use a unique account password or protect your one-time login codes, keep your devices secure and contact us promptly if you believe an account or order has been accessed without authorization. Never send complete card details, passwords or one-time security codes by email or contact form.

10. Your Privacy Rights

Depending on where you live, you may have the right to:

  • Request access to personal information we hold about you
  • Ask us to correct inaccurate or incomplete information
  • Request deletion, subject to legal exceptions
  • Receive a portable copy of certain information
  • Object to or restrict certain processing
  • Withdraw consent where processing depends on consent
  • Opt out of certain targeted advertising, sale or sharing as legally defined
  • Appeal a decision or complain to a local data-protection authority
  • Receive equal service and pricing without unlawful discrimination for exercising a privacy right

To make a request, email privacy@hugyoohair.com with the subject “Privacy Request.” Describe the right you wish to exercise and the email or order information connected with the request. We may need to verify your identity and authority before responding. Authorized agents may submit requests where local law permits, but we may require proof of authorization and direct identity confirmation.

These rights are not absolute. We may retain or withhold information where legally permitted—for example, to complete a transaction, maintain tax records, protect security, prevent fraud or establish legal claims. We will explain a material denial where required.

11. Children's Privacy

The store is not directed to children who are below the age at which they may lawfully provide their own consent in their jurisdiction, and we do not knowingly collect their personal information for independent use. If you believe a child has submitted personal information inappropriately, contact us so we can review and delete it where required.

12. Third-Party Links and Services

The store may link to carriers, payment providers, social networks and other third-party services. Their privacy practices are controlled by them, not by this Policy. Review their terms before providing information directly to them.

13. Changes to This Policy

We may update this Policy to reflect changes in the store, providers, technology or law. The revised version will be posted with a new effective date. Where required, we will provide additional notice or request consent.

14. Contact and Data Controller

For privacy questions or requests, contact:

Yoseen Hair Limited
HUGYOO Customer Care
Email: privacy@hugyoohair.com
FLAT 1506, 15/F, CHEUNG FUNG COMMERCIAL BLDG
21-25 CHEUNG SHA WAN ROAD
SHAM SHUI PO, KOWLOON
HONG KONG