Privacy Policy

Introduction

Beiyuan is the plant marketplace and green care platform developed and operated by the developer Dawnshine under the ownership of Dawnshine EverGreen Limited. This page explains, in plain and honest language, what personal information we gather, why we gather it, how long we keep it, and the choices that remain yours at every step. We have written this policy without legal jargon and without hidden surprises, because the same transparency we ask of a houseplant signals that should guide how your personal details are treated.

We ask that you read the whole policy once before you place an order, subscribe to a box, book a workshop or send us a care enquiry. When a term in this policy has a special legal meaning, we define it in the section where it first appears so that you never need to guess what we mean.

The company behind Beiyuan

Beiyuan is owned and operated by Dawnshine EverGreen Limited, a company based in Hong Kong (HK). Our registered business address appears in full on the footer of this site and is repeated here for clarity.

Throughout this policy the terms we, us and our refer to Dawnshine EverGreen Limited. The terms you and your refer to any person who visits, enquires through, or buys from the Beiyuan platform, including the nominated contact person for any office or corporate scheme.

Information we collect

We collect only the information that is genuinely needed to run the marketplace and to keep your plants thriving. The categories we hold are described below.

• Identity and contact details. Your full name, delivery address, billing address, email address, telephone number and company name where you order as a business.
• Order and subscription details. The plants, boxes, pots and services you choose, the size of any office or corporate scheme, your delivery schedule and your payment method reference, although we ourselves never store full card numbers.
• Care and support records. Photographs you share for plant doctor diagnostics, the messages you send through our enquiry form, the history of diagnosis and any care plans we prepare for your specimens.
• Marketing preferences. Your decision to receive or to decline our care bulletins and seasonal offers, and your choices in any email you open from us.
• Technical data. For any website visitor we may record an internet protocol address, the browser and device type, the pages you view, the time of your visit and the address of the page that brought you to us. This data is collected in an aggregated form wherever practical.

We never intentionally collect special categories of data such as health records, nor data about race, religion or political opinion, and we ask you not to share such details with us through the enquiry form.

How we collect information

Information reaches us through three ordinary routes.

• Directly from you. When you fill in our contact form, place an order over the phone or online, subscribe to a plant box, book a workshop or request a plant doctor visit, you give us the details needed to carry out that request.
• Automatically from your device. As you move around the site our analytics tooling records general usage patterns such as popular pages and average session length, using cookies where they are described below.
• From the people you name. If you organise greenery for a workplace, you may give us contact details for a colleague such as a facilities manager. We use those details only to arrange delivery access and we rely on you having told that person they are being named.

How we use your information

Every use of your information serves a clear purpose that stands up to a plain-reading test. We use your data to do the following.

• To create and manage your account, delivery schedule and subscription plan.
• To prepare, dispatch and deliver your orders and to notify you when a plant is on its way.
• To answer your care enquiries, run plant doctor diagnostics and produce recovery plans for your specimens.
• To survey offices and to design, deliver and maintain office greenery and corporate landscaping schemes.
• To charge you correctly, to issue receipts and to process any refunds or swaps.
• To send essential service messages such as delivery updates that we cannot lawfully make optional.
• To send our optional care bulletin and seasonal offers, only where you have agreed to receive them, with an easy way out in every message.
• To protect the security of the site, to prevent fraud and to recover debts where reasonably necessary.
• To study use in aggregate so that we can improve the platform, its layout and its performance.
• To meet our legal and accounting obligations and to respond to any lawful request from an authority.

Lawful grounds for processing

Data protection law sets the same questions wherever an order is placed a roof away or a mountain away, so these grounds hold whether you buy a single fern or a building of greenery. We document each purpose against a ground so that our decisions can be shown and defended, and we revisit them whenever our service range changes.

When we process personal data we rely on one or more lawful grounds recognised by data protection law. The grounds we use are set out honestly below.

• Performance of a contract. We need most order and contact data to supply the plants or services you have asked for.
• Our legitimate interests. We rely on this to improve the site, to protect against fraud, to keep delivery records and to understand which products suit which rooms. Wherever we rely on this ground we weigh it against your rights and never let our interest override your privacy.
• Consent. We rely on your agreement for optional marketing and for certain analytics cookies. Consent can be withdrawn at any time with future effect.
• Legal obligation. We keep some records simply because tax law and company law require us to do so.

Personal information of children

Beiyuan is a general marketplace and is not directed at children. We do not knowingly collect personal information from anyone below the age of consent in their place of residence, which in Hong Kong we treat as the age of eighteen. Workshops for young people are always booked by a responsible adult who we treat as the account holder.

If you believe we have unknowingly collected personal information from a child, please contact us immediately using the details in the final section. On confirmation we will delete the information promptly without condition, keeping only what the law obliges us to retain.

Cookies and similar technology

A cookie is a small text file that a website asks your browser to store. We use a small set of cookies and equivalent technology, and we explain them because you have a right to know what is being set on your machine.

• Strictly necessary cookies. These keep basic functions working, such as remembering that you are signed in or that you have closed a notice. They cannot be switched off in our service.
• Performance and analytics cookies. These tell us how many people visit, which pages are busiest and whether a page takes too long to load. They are collected in an aggregated way and we request your consent before enabling them where the law does.
• Preference cookies. These remember choices you make, such as your language or the option to decline further cookies.

You can manage cookies in your own browser settings, where you may block or delete them. Please note that blocking strictly necessary cookies may stop parts of the ordering process from working smoothly.

Sharing your information

We never sell personal information, and we never trade it for advertising space or any other benefit. We share data only with parties who need it to deliver our service to you, and each of them is bound by a data protection agreement no weaker than this policy.

• Courier and delivery partners. They need your delivery address, a contact phone number and sometimes your name to place a parcel on your doorstep.
• Payment services. When you pay by card the transaction is handled by a certified payment provider. We retain only a masked reference and never the full card details, which never pass through our own systems.
• Plant care technicians. Where plant doctor visits or scheme maintenance require a technician on site, they receive your address and the minimal detail needed for the visit.
• Software and platform suppliers. We use trusted processors for email, analytics, ordering and cloud storage who may touch data only on our instructions.
• Authorities. We disclose data to regulators, police or courts only when the law compels us and, where practical, after considering your interest in being notified.

International data transfers

Dawnshine EverGreen Limited operates from Hong Kong, and the platform serves clients around the world. Our cloud processors may store data in data centres outside your country. Where your information is transferred to a place with different protection, we put in place contracts and safeguards, such as standard contractual clauses approved by the relevant authorities, to keep the level of protection promised here. We confirm that no transfer happens for its own sake, only where it genuinely supports your order or enquiry.

Data retention

We do not keep personal information longer than the purposes for which it was collected still require it. Our retention rules follow these practical lines.

• Account and order records are kept for as long as your account is active and for a reasonable period afterwards to support tax and warranty duties.
• Marketing consent records are kept while you remain subscribed and are removed soon after you unsubscribe, apart from a core record of your preference so that we do not write to you again by mistake.
• Diagnostic images and care records are kept for as long as they remain useful to a live care plan and are then deleted.
• Technical logs are kept in a form that can identify a particular browser for a limited period, usually no more than a few months.

When the time arrives we delete or anonymise the information so that it can no longer identify you.

How we protect your data

Where we work with a processor located outside Hong Kong we keep the same standard of care for the whole chain. Before we choose any software or storage partner our team reviews their published security posture, their data residency and the legal agreements we sign with them, so that every link in the delivery from our Mong Kok glasshouse to its destination holds data to the level promised on this page.

We treat the safety of your data with the same care as a young cutting. The safeguards we use include the following measures.

• Encryption in transit between your browser and our servers, using current secure protocols.
• Access control so that only staff who genuinely need your data for their work can view it.
• Password protection and, where available, multi factor authentication on the accounts that hold personal data.
• Stored data held within approved cloud services that themselves meet recognised security standards.
• Regular, careful review of who can reach what, and prompt removal of access when a staff member changes role.

No method of transmission over the internet is ever completely secure, so while we work hard to protect your information we cannot promise absolute safety. We will inform you and the relevant authority without undue delay if we ever find a breach that creates a risk to you.

Your privacy rights

Depending on where you live, the law gives you clear rights over your own data, and we honour them for every client regardless of location. In particular you may ask us to do the following.

• Access. Confirm what data we hold about you and receive a copy of it in a readable format.
• Rectify. Correct personal details that are incomplete or wrong, such as a changed email address.
• Erase. Ask us to delete your data where it is no longer needed or where you withdraw the consent that made it lawful.
• Restrict. Ask us to pause the way we process your data while a dispute is resolved.
• Object. Object to processing we do on a legitimate interests ground, including any direct marketing.
• Portability. Receive the data you gave us, where processing was automated, in a machine usable format.
• Withdraw consent. Step back from any optional consent we rely on, such as marketing, at any moment.

To exercise any of these rights simply write to help@beiyuan.lat. We will confirm that we have received your request within a few working days and we aim to answer fully within one month. No member of the plant doctor team will penalise you in any way for raising a privacy request.

Third party links and services

This site may link to pages, social media accounts or services operated by others, such as payment portals or workshop booking tools. We do not control those services and their own privacy policies govern any data you give them directly. We encourage you to read each service you use because a click can carry you beyond the part of the web where this policy holds.

Changes to this policy

We may revise this policy as our marketplace grows, as the law shifts or as our technology changes. When a change is more than a small correction we will draw it to your attention, for example by updating the date at the top of this page, by a notice on the homepage, or by email where we already hold your address. The most recent version always stands where this page is published, so we invite you to return here from time to time.

How to contact us

Questions, corrections and requests about your information are always welcome. The fastest route is email. For matters that need a signed letter you may write to the team at our full address, and for urgent account issues our phone line is open during greenhouse hours.

If you live in a region with a data protection authority, you also have the right to lodge a complaint with that authority at any time. We would value the chance to resolve your concern directly first, and we will always take your point seriously.