Last Updated: January 28, 2026
This Privacy Policy (hereinafter referred to as the “Policy”) aims to clarify the operational rules regarding the collection, use, storage, protection, and disclosure of your personal information by Dioscury (hereinafter referred to as “we”) when you access our services, use our services, purchase goods through www.dioscury.com (hereinafter referred to as the “Website”), or communicate with us in other forms (collectively, the “Services”). “You” and “your” refer to all Service users, including but not limited to customers, website visitors, and other individuals whose information we collect in accordance with this Policy.
Please read the entire contents of this Policy carefully. By accessing or using any Service, you indicate that you fully understand and agree to our collection, use, and disclosure of your personal information in accordance with this Policy. If you do not agree to any terms of this Policy, please do not access or use any Service.
I. Scope of Application
This Policy applies to your personal information that we collect, use, store, and process through all service channels. Unless otherwise expressly stated, supplementary privacy terms for specific services will form part of this Policy and have the same legal effect as this Policy. In the event of any conflict between the supplementary terms and this policy, the supplementary terms shall prevail.
II. Scope of Personal Information Collection
We collect personal information only to the extent necessary to achieve the purpose of our services. The following are the categories of information we may collect and their specific descriptions:
(I) Technical Information
When you visit the website or use related services, we automatically collect certain technical information, including but not limited to your IP address, access date and time, browser type and version, operating system information, device model, screen resolution, page browsing history, dwell time, and click records. This information is used solely for service optimization and technical maintenance and is not directly linked to your personal identity.
(II) Information You Voluntarily Provide
In interactive scenarios such as registering an account, completing a purchase, participating in promotional activities, submitting inquiries or feedback, or applying for after-sales service, we may request you to provide the following information: your name, mobile phone number, email address, shipping address, postal code, username, password, and other identity and contact information; images, videos, text comments, etc., that you voluntarily upload; and demographic information such as your age, gender, language preferences, and shopping preferences that you voluntarily provide.
(III) Transaction-Related Information
We will collect transaction information related to your use of the services, including but not limited to order number, product name and specifications, quantity purchased, transaction amount, payment method, payment records, invoice information, logistics and delivery information, and after-sales service records.
(IV) Location Information
With your explicit authorization and consent, certain services may collect your location information. You can enable or disable this authorization at any time through device settings or the service’s permission management function. Disabling this authorization will stop us from collecting relevant location information, but may affect the use of some service functions that rely on location data.
(V) Other Legally Obtained Information
Subject to applicable laws, we may obtain your relevant information from publicly available and legal channels, such as compliant credit information obtained from credit rating agencies and address update information obtained from public databases. This information is only used to supplement and improve your account information to ensure the smooth provision of services.
III. Purpose of Use of Personal Information
We strictly adhere to the following legitimate purposes when using your personal information. Without your consent or legal authorization, we will not use it beyond the following scope:
• To provide, maintain, and optimize services, including but not limited to processing orders, delivering goods, providing after-sales service, answering inquiries, sending order status notifications, and providing technical support;
• To verify user identity, ensure account security, prevent fraud, and maintain service order;
• To optimize personalized services, recommending potentially interesting products, services, or content based on your browsing history, shopping preferences, and other information to enhance your user experience;
• To conduct market research and data analysis, track service usage trends, and improve product design, website functionality, and service quality;
• To send important notifications, including but not limited to necessary information such as terms changes, account security reminders, and system maintenance notifications;
• To organize and manage promotional activities, competitions, or lotteries, including eligibility verification and prize distribution;
• To fulfill contractual obligations, including but not limited to warranty service, order fulfillment, and refund processing;
• To collect user feedback, invite you to participate in product evaluations or surveys, and help us continuously improve our services;
• To protect our legal rights and property, respond to legal disputes, and cooperate with legitimate investigations by competent authorities;
• Other use cases that comply with laws, regulations, rules, or other legal requirements.
IV. Agreements Regarding Direct Marketing
We may use your personal information (such as name, contact information, shopping preferences, etc.) to send you promotional information, special offers, new product recommendations, and other marketing content related to our products or services. We will only conduct such direct marketing activities after obtaining your explicit consent.
You have the right to opt out of direct marketing at any time, and you can inform us through the contact information provided in this policy. After opting out, we will no longer send you marketing information, but may still send you necessary non-marketing information, such as order notifications and account security reminders.
V. Use of Cookies and Related Technologies
Cookies are small text files stored on your device when you visit a website, used to record relevant usage information. We use cookies for the following purposes:
1. To identify your account login status, avoid repeated logins, and improve access convenience;
2. To record your shopping cart information and ensure the continuity of the shopping process;
3. To analyze website usage and optimize page layout and functional design;
4. To provide personalized recommendations and advertising displays, improving marketing accuracy;
5. To enhance website security and prevent malicious access and fraudulent activities.
You can disable or delete cookies through your browser settings. However, please note that disabling cookies may cause some website functions (such as account login, shopping cart saving, etc.) to malfunction, and you may need to reconfigure these settings each time you visit the website.
We will not collect personal information beyond what is necessary through cookies, and the information in cookies will only be used for the purposes stipulated in this policy. Deleting or disabling cookies will not affect your personal information previously stored on our servers.
VI. Restrictions on Sharing and Disclosure of Personal Information
We highly value the security of your personal information and strictly limit its sharing and disclosure, which will only occur under the following legal circumstances:
• With your explicit consent or authorization;
• To comply with applicable laws, regulations, and rules, or to respond to legitimate requests from competent authorities (such as court subpoenas, investigation orders, etc.);
• To protect our legitimate rights, property, or safety, as well as the personal and property safety of users or the public from harm;
• Sharing with our affiliates and business partners, provided that such sharing is solely for service purposes and the recipient is required to comply with the privacy protection requirements of this policy and assume corresponding confidentiality obligations;
• To complete commercial transactions such as mergers, acquisitions, and asset transfers, we may disclose relevant personal information to counterparties or potential counterparties, subject to relevant legal provisions, and will take necessary confidentiality measures during the transaction process;
• For public interest or legitimate academic research purposes, we may disclose relevant information after de-identification processing to ensure that specific individuals cannot be identified;
• We will not sell or rent your personal information to any third party unless we have your explicit authorization or otherwise stipulated by law.
VII. Storage and Protection of Personal Information
(I) Storage Measures
1. We store your personal information on servers that meet security standards, and use encryption technology to protect sensitive information (such as passwords, payment information, etc.) to prevent unauthorized access;
2. The storage period for personal information strictly follows the principles of “minimum necessary” and “shortest time required to achieve the purpose,” unless otherwise stipulated by law or required to extend the storage period for fulfilling contractual obligations, resolving disputes, etc.;
3. The storage location is located in an area that meets the relevant data protection laws to ensure the compliance of the storage process.
(II) Protection Measures
1. Technical Protection: We employ firewalls, intrusion detection systems, data encryption, and access control to establish a multi-layered security protection system, preventing the leakage, alteration, or loss of personal information. For online transaction scenarios, we fully utilize Secure Sockets Layer (SSL) encryption technology to encrypt sensitive information such as personal information and payment data during real-time transmission, ensuring that data is not illegally stolen or altered during transmission.
2. Organizational Management: We have established and improved data security management systems, clearly defining the data security responsibilities of each position. Employees involved in data processing receive regular security training and assessments, and confidentiality agreements are signed.
3. Process Control: We strictly control the entire process of collecting, using, storing, and transmitting personal information, setting up access permission approval mechanisms so that only authorized personnel can access relevant information.
4. Emergency Response: We have developed emergency plans for data security incidents and conduct regular emergency drills. In the event of a security incident such as a leakage of personal information, we will take timely remedial measures and notify you and relevant regulatory authorities in accordance with the law.
Despite the security measures we have taken, please note that absolute security does not exist online, and we cannot guarantee 100% security during the transmission of personal information. You should safeguard your account passwords, verification codes, and other identity credentials, and avoid disclosing them to others. If you discover any abnormalities with your account, please contact us immediately.
VIII. Retention Period for Personal Information
We will retain your personal information only for the period necessary to achieve the purposes stipulated in this policy. The specific retention period will be determined according to the following principles:
1. For account information, transaction records, etc., we will retain them for a certain period after your account is cancelled (usually 1-3 years), or until the minimum retention period stipulated by law expires;
2. For information on participation in promotional activities, feedback records, etc., we will retain them until the activity ends or the purpose is achieved. If there is no further need for use, we will delete them promptly;
3. If laws and regulations have clear provisions on the retention period for personal information, we will follow those provisions;
4. If you request the deletion of your personal information or withdraw your consent, we will promptly delete or anonymize the relevant information, provided that it complies with legal provisions and does not affect other legitimate rights and interests, except for information that needs to be retained to fulfill legal obligations or resolve disputes.
IX. Protection of Minors’ Information
We fully understand the importance of protecting minors’ personal information and therefore clearly stipulate:
1. We do not proactively collect personal information from minors (under 18 years of age), nor do we provide minors with services that may involve the submission of personal information, such as purchasing goods or registering for services;
2. If a minor uses the service with the consent of their legal guardian, the legal guardian should carefully read this policy and bear corresponding responsibility for the minor’s information submission. The legal guardian can contact us through the contact information provided in this policy to request the correction or deletion of the minor’s personal information;
3. If we discover that we have collected a minor’s personal information without the consent of their legal guardian, we will immediately cease using the service and promptly delete the relevant information.
X. Your Rights Regarding Personal Information
In accordance with applicable laws, you have the following rights regarding your personal information, and we will provide necessary support for you to exercise these rights:
1. Right of Access: You have the right to request a copy of your personal information to understand the collection, use, and storage of your personal information;
2. Right of Correction: If you find that the personal information we store about you is inaccurate or incomplete, you have the right to request that we correct or supplement it;
3. Right of Deletion: Under circumstances stipulated by law (such as when the purpose of information collection has been achieved, or when you withdraw your consent), you have the right to request that we delete your personal information;
4. Right of Reproduction: You have the right to request us to provide a copy of your personal information in a commonly used, machine-readable format so that you can transfer it to other service providers;
5. Right to Restrict Processing: If you believe that your personal information is inaccurate, that the processing is illegal, or that the information is no longer necessary, you have the right to request us to restrict the processing of the relevant personal information;
6. Right to Object: You have the right to object to our use of your personal information for purposes such as direct marketing and user profiling;
7. Right to Withdraw Consent: If you have previously consented to our collection or use of your personal information, you have the right to withdraw that consent at any time, but this will not affect the legality of the information processing based on your consent before the withdrawal.
XI. How to Exercise Rights and Precautions
If you wish to exercise the above rights, you can contact us through the channels provided in the “Contact Us” section of this policy. To protect your information security, we may require you to provide identity verification information (such as name, registered mobile phone number, etc.) before processing your request. Please note:
1. We will respond to and process your request within the legally prescribed time limit upon receipt.
2. If your request may infringe upon the legitimate rights and interests of others, violate legal provisions, or is technically impossible to fulfill, we may refuse it in accordance with the law and explain the reasons to you.
3. We will not charge you any fees for exercising the above rights, unless otherwise stipulated by law.
XII. “Do Not Track” Explanation
Currently, different browsers have different implementation methods and standards for the “Do Not Track” function, and relevant industry standards have not yet been unified. Therefore, when your browser sends a “Do Not Track” signal, our website will not change its existing data collection and usage rules and will still process your information in accordance with the provisions of this policy.
XIII. Changes to the Privacy Policy
We may update this policy from time to time based on service optimization, legal revisions, etc.
The date of the policy change will be clearly marked at the top of the policy. If you continue to use the service after the policy change takes effect, it means that you agree to the changed policy; if you do not agree, you should immediately stop using the service and may contact us to cancel your account.
For significant changes (such as substantial adjustments to the scope of information collection or significant changes to the purpose of use), we will use more prominent notification methods and may require you to reconfirm your consent.
XIV. Complaints and Feedback
If you have any questions, complaints, or suggestions regarding our handling of your personal information, please contact us through the channels provided in the “Contact Us” section of this policy. We will promptly verify and process your feedback and respond to you within a reasonable timeframe.
If you are dissatisfied with our handling of your request, you may file a complaint with your local data protection regulatory agency in accordance with the laws of your location.
XV. Contact Us
If you have any questions about this policy, need to exercise your personal information rights, submit a complaint, or provide feedback, please contact us through the following methods:
Email: [email protected]
Address: FLAT/RM 27B, BLK C 9/F, GRADION PLAZA, 932 CHEUNG SHA WAN ROAD
KL,HONGKONG
COLOR TRADE LIMITED
