This Privacy Policy explains how Lily Worldwide Company Limited collects, uses, stores, shares and protects personal information in the course of running its forcing house and cut-stem flower trade. The website you are reading is operated and maintained by LilyWorld, the development studio engaged to build and support the digital materials of the company. LilyWorld builds the pages, the enquiry forms and the technical plumbing behind them, while Lily Worldwide Company Limited remains the organisation responsible for the flower trade and for the personal information described in this document.
The registered and trading address of the company is Rm 1104 Island Beverly, 1 Great George St, Causeway Bay, Hong Kong - 999077, Hong Kong (HK). The contact email address for privacy questions is support@dingyueintl.buzz and the contact telephone number is +13863810509. This policy applies to information collected through this website, through enquiries sent by email or telephone, and through the ordinary commercial records that a flower trade keeps on its bench, in its cold store and at its packing counter.
In short: we collect only what a flower trade and its website need to operate, we keep it for as long as the record serves a commercial or legal purpose, we do not sell personal information, and we do not use tracking for advertising. The sections below explain this in full detail.
1. Who We Are and the Scope of This Policy
Lily Worldwide Company Limited is a company that runs a forcing house and a cut-stem flower trade. We take in greenhouse bulb lots, bring them through controlled cold storage and warmth, close parcels of cut stems on an auction rail, pack export crates on a packing bench and send those crates along a cold chain to buyers. This policy covers the personal information that accompanies that work, from a first email enquiry to the packing list that travels with a sealed crate.
The policy applies to all visitors to this website, to buyers and prospective buyers, to growers and suppliers who offer lots to the house, to transport handlers who carry our crates, and to any other person who contacts the desk at Rm 1104 Island Beverly, 1 Great George St, Causeway Bay, Hong Kong - 999077, Hong Kong (HK). It also covers the technical information that is created automatically when a browser loads a page from our server.
It does not cover information that a separate organisation collects on its own behalf. If you follow a link from this website to another site, or if you send information to a third party that is not acting for us, the privacy policy of that third party governs the information it receives. We describe this in more detail in the section on third party links.
Because our trade is international, this policy is written to reflect good practice across several legal systems rather than the strict requirements of a single country. Where a local law gives you a stronger right than the one described here, that local law takes precedence for you.
2. Terms Used in This Policy
To keep this document readable we use a small number of defined terms. The word company means Lily Worldwide Company Limited. The words we and us refer to the company. The word website means the pages served under the domain of the company, including the services page, the contact page and the legal pages. The word buyer means any person or organisation that purchases lots, parcels, crates or retail bundles from the company. The word supplier means any grower, broker or logistics provider that supplies lots, transport or related work. The word personal information means data that relates to an identified or reasonably identifiable individual. The word processing covers any operation performed on personal information, including collecting, recording, organising, storing, retrieving, using, disclosing, erasing and destroying it.
A reference to the forcing house means the controlled growing and storage environment in which bulb lots are brought to bloom week. A reference to the auction rail means the grading and closing station where stem parcels are tagged. A reference to the packing bench means the station where export crates are built, weighed and sealed. A reference to the cold chain means the sequence of temperature controlled handovers between the packing bench and the buyer dock. These terms describe the working stations of the business, and they appear in this policy only to explain why certain records exist.
3. Information We Collect
We collect two broad categories of information: information you give us directly, and information that is created automatically or through ordinary trade records. We try to keep both categories narrow and relevant. We do not ask for information that a flower trade does not need, and we do not collect sensitive categories of information such as health data, biometric data or information about political or religious beliefs.
Information you provide
- Identity and contact details such as your name, company name, email address, telephone number, postal address and delivery address.
- Enquiry content, including the delivery month, stem varieties and quantities you mention when you ask about a lot or a calendar.
- Order and commercial details including lot reservations, parcel references, crate sizes, invoice details and payment correspondence.
- Correspondence with the desk, including emails, telephone notes and messages sent through the enquiry form on the contact page.
- Visitor information provided for a bench visit, such as the names of attendees and a preferred visiting morning.
- Supplier information, including grower contact details, lot references and the documentation that accompanies a delivered lot.
Information created automatically
- Technical information from the web server such as the date and time of a page request, the pages requested and the response codes returned.
- Browser and device information of the general kind sent by any web browser, used to keep pages loading correctly on different screens.
- Records of form submissions handled by your own mail application, which reach our desk as ordinary email with the details you chose to include.
- Operational records such as parcel sheets, lot sheets, packing lists and run sheets, which may contain a buyer or handler name as part of the trade record.
We do not run advertising profiles, we do not build behavioural audience lists, and we do not embed social media pixels or third party conversion trackers on this website.
4. How We Collect Information
Most of the information we hold arrives because somebody at the desk wrote it down or because a buyer sent it to us. When you use the enquiry form on the contact page, the form hands the content to your own mail application and the message reaches us as an email. This design means the form does not store your message on a web server of its own; it simply prepares a message for you to send from the account you already control.
We also collect information during a telephone call, when a buyer asks for a parcel reference, a lot sheet or a change to a standing retail program. A short note is written on the relevant sheet so that the next person at the desk can understand what was agreed. We collect information from suppliers when a lot is delivered, because the lot sheet must show where the bulbs came from and when they entered cold store.
Finally, our web server records the general technical details of page requests. These logs are used to keep the site available, to diagnose errors and to guard against abusive traffic. They are not combined with trade records and they are not used to identify visitors for any commercial purpose.
5. Why We Use Personal Information
We use personal information to answer enquiries, to prepare and confirm lot reservations, to issue forcing schedule plans, to close auction parcels, to prepare packing lists for export crates, to arrange cold chain runs and to support standing retail bundle programs. These are the ordinary operations of a flower trade, and each of them requires the name and contact details of the person or organisation on the other side of the bench.
We also use information to keep accurate commercial records, to issue and reconcile invoices, to answer questions about a past consignment and to resolve a disagreement about a parcel or a crate. Trade records are the memory of the business; without them a buyer and a seller would each rely on recollection alone.
A smaller number of purposes relate to safety and compliance. We may use information to check that a cold chain handover was recorded, to investigate a temperature deviation, to protect the website from misuse or to respond to a lawful request from a public authority. Where we can achieve these purposes with less information, we do so.
We do not use personal information to make automated decisions that produce legal or similarly significant effects for you. We do not use your data to train large language models, to sell audience segments or to rank your name in any public directory.
6. Lawful Basis for Processing
Under the laws that apply to us, processing must rest on a recognised basis. We rely on four in practice. First, we process information that is necessary to enter into or perform a contract with you, for example when you reserve a lot or order a retail bundle. Second, we process information to serve our legitimate interests in running a flower trade, provided those interests do not override your own rights and freedoms. Third, we process information to comply with a legal obligation, such as keeping commercial records for a required period. Fourth, we process information on the basis of your consent where we ask for it, for example when you ask to receive the auction window announcements.
Where we rely on legitimate interests we carry out a balancing assessment. We ask whether the processing is genuinely necessary for the purpose, whether a less intrusive route exists, and whether you would reasonably expect it. When the answer to the last question is no, we do not proceed on that basis.
You may object to processing that rests on legitimate interests. We will stop unless we can demonstrate compelling grounds that override your objection, or unless the processing is needed for the establishment, exercise or defence of a legal claim.
8. Auction, Lot and Packing Records
A flower trade depends on paper that matches the bench. A lot sheet records the variety, calibre band, supplier reference and date of entry into cold store. A parcel sheet records the stems closed on the auction rail, the grade band, the closing time and the buyer. A packing list mirrors the sap tags on sealed crates. A run sheet records the cold chain handovers from bench to gate.
These documents may contain a personal name, a signature, a telephone number or an email address. We treat them as commercial records rather than as a marketing database, and we limit access to the staff who need them to do the work. Where a record can be kept with a company name instead of an individual name, we prefer the company name.
Buyers sometimes ask us to replace a personal name on a parcel sheet with a trading name. We can usually do this for future sheets, provided the change does not undermine the accuracy of the record or conflict with a legal obligation to identify the actual counterparty. Past sheets are retained as they were closed, because changing a closed record would undermine the reliability of the whole set.
10. International Transfers
Our desk is in Hong Kong and many of our buyers, suppliers and handlers are elsewhere. A single export crate can involve a grower in one country, a packing bench in Hong Kong, a transport handler in a second country and a buyer in a third. Personal information therefore crosses borders as an ordinary part of the trade.
When we transfer personal information to another country, we take reasonable steps to ensure that the recipient is bound to protect it in a manner consistent with this policy. These steps include written service terms, confidentiality commitments and a check that the recipient has a legitimate need for the specific information being sent. We do not transfer a full buyer list to a recipient who needs only one delivery address.
If you are located in a jurisdiction that restricts transfers of personal information to countries without an adequate level of protection, and you believe that a transfer concerning you has taken place without a proper safeguard, please write to support@dingyueintl.buzz. We will review the transfer and, where necessary, put an appropriate safeguard in place or stop the transfer.
11. How Long We Keep Information
We keep information for as long as it serves a commercial or legal purpose, and then we remove it. The period differs by record type because each record serves a different need. The table below describes our general practice. A specific legal requirement or an open dispute can extend a period, and we will explain why if you ask us about a particular record.
- General enquiries that do not lead to a trade: kept for up to twenty four months after the last contact.
- Lot sheets, parcel sheets, packing lists and run sheets: kept for seven years after the close of the trading year to which they belong.
- Invoices and payment records: kept for the period required by applicable tax and company law.
- Supplier records: kept while the trading relationship is active and for seven years afterwards.
- Website technical logs: kept for a short operational window, normally no more than ninety days.
- Records connected to an active dispute: kept until the dispute is finally resolved and any appeal window has closed.
When a retention period ends we delete the record or, where deletion is not practical because the information is interwoven with a larger archive, we anonymise it so that it no longer relates to an identifiable person.
12. How We Protect Information
We protect personal information with a combination of physical, technical and organisational measures. The desk at Rm 1104 Island Beverly is a controlled office, and trade records are kept in a manner that limits casual access. Electronic records are held in accounts protected by strong passwords, with access limited to staff whose work requires the specific record.
Electronic communication over the public internet is never perfectly secure. We therefore ask buyers not to send sensitive payment details by ordinary email. If we need to collect card or bank details, we use a route that is designed for the purpose and we do not store more than the minimum needed to reconcile the payment.
If a security incident affects personal information and creates a risk to the rights of affected persons, we will investigate promptly, take steps to contain the incident and notify the affected persons and any competent authority where the law requires it. We will also review what happened and adjust our measures so that the same incident is less likely to recur.
No member of staff is permitted to disclose a buyer record to a caller who cannot verify the relevant reference. This rule can feel slow at the counter, but it protects the trade records that both sides rely on.
13. Your Rights and Choices
Subject to local law, you have a set of rights over the personal information we hold about you. You can ask for a copy of the information, ask us to correct anything that is wrong, ask us to delete information that we no longer need, and ask us to restrict or object to certain processing. You can also ask for a portable copy of the information you provided to us, in a commonly used machine readable format.
To exercise a right, write to support@dingyueintl.buzz with enough detail for us to identify the record. Please tell us the name, email address or company reference connected to the information, and the right you wish to exercise. We may ask for a reasonable proof of identity so that we do not disclose a record to the wrong person. We will respond within the period required by applicable law, and we will explain any lawful reason why we cannot fully comply with a request.
A request to delete a trade record can conflict with a legal obligation to keep it. Where that happens we will explain the conflict and, if possible, restrict the record so that it is used only for the purpose that the law requires. You also have the right to complain to a data protection authority in your jurisdiction. We would prefer the chance to resolve the matter with you first, so please contact the desk before making a formal complaint.
You can withdraw a consent at any time where consent is the basis for processing. Withdrawal does not affect the lawfulness of processing that took place before the withdrawal, and it does not affect processing that rests on a different basis.
14. Privacy for Children
This website and the services described on it are intended for businesses and for adults acting in a commercial capacity. We do not knowingly collect personal information from children. If you believe that a child has sent personal information to the desk, please write to support@dingyueintl.buzz and we will remove the information promptly, unless a legal obligation requires us to retain it.
Retail bundle programs are supplied to shops and event organisers rather than to individual consumers, and the ordering process therefore does not contemplate a young customer. If a retail partner tells us that a member of its staff is a minor, we will adjust the contact route so that correspondence goes to an adult supervisor.
15. Marketing Communications
We send auction window announcements, forcing calendar summaries and seasonal notes to buyers who have asked for them. We do not add a buyer to that list because of a single parcel transaction unless the buyer has clearly requested the announcements. Every announcement includes a simple way to stop receiving future messages, and a request to stop is acted on promptly.
This website does not carry advertising and does not include a newsletter signup form. If you receive a message that appears to come from us but that you did not expect, please contact the desk at +13863810509 before responding to it, because forged messages are occasionally used to target trade contacts.
16. Third Party Links and Services
Pages on this website may link to the website of a transport provider, a customs broker or another organisation that supports the flower trade. We choose those links with care, but we do not control the privacy practices of a third party site. When you follow such a link, the privacy policy of the destination site applies to the information that site receives.
If a third party service is embedded in one of our pages in the future, we will describe it in this policy before the embedding goes live, and we will treat any non-essential tracking that it introduces in the same way as a cookie that requires consent.
17. Changes to This Policy
We review this policy from time to time. When we make a material change, we will update the date at the top of the page and, where the change affects how we use information that we already hold, we will take reasonable steps to inform the persons affected. Minor clarifications that do not change our practice may be made without a separate notice, but the date will still be updated.
The version published on this page is the current version. If you have saved an earlier copy, please check this page before relying on it for a decision about your information.
18. How to Contact Us
You can reach the company about any matter in this policy by email at support@dingyueintl.buzz or by telephone at +13863810509. Written correspondence can be sent to the desk at Rm 1104 Island Beverly, 1 Great George St, Causeway Bay, Hong Kong - 999077, Hong Kong (HK). Please mark privacy correspondence clearly so that it reaches the right person without delay.
If your question concerns the technical operation of this website, you can mention that the site was built by LilyWorld, the development studio engaged by the company, and the desk will forward the matter to the correct route.
Company details
Lily Worldwide Company Limited
Rm 1104 Island Beverly, 1 Great George St, Causeway Bay, Hong Kong - 999077, Hong Kong (HK)
Email: support@dingyueintl.buzz
Phone: +13863810509
Website: https://www.dingyueintl.buzz
19. Legal Frameworks and Your Local Law
The company operates from Hong Kong and deals with buyers and suppliers in many jurisdictions. We therefore read our obligations through more than one legal framework. Where a jurisdiction provides a right that is stronger than the equivalent right described in this policy, we apply the stronger right to the persons it protects. This approach means that a buyer in one market may receive a slightly different response to a request than a buyer in another market, but in no case will the response be weaker than the baseline set out here.
Some frameworks distinguish between a controller, who decides why and how personal information is processed, and a processor, who handles it on behalf of a controller. For the trade records described in this policy, the company acts as the controller. The development studio LilyWorld supports the website and may see technical information in the course of that support, but it does not decide how buyer records are used and it does not use them for any purpose of its own.
Other frameworks use a set of fair information principles rather than a list of statutory rights. Those principles include collection limitation, purpose specification, use limitation, data quality, security safeguards, openness, individual participation and accountability. We treat each of these principles as a practical checklist. Collection limitation means we ask for the minimum; purpose specification means we write down why a record exists; use limitation means we do not repurpose it; data quality means we correct errors when they are pointed out; security safeguards means the measures in the security section; openness means this policy; individual participation means the rights section; and accountability means that somebody at the company is answerable for each of the above.
If you believe that a local rule gives you an additional right, such as a right to object to direct marketing without any balancing test, a right to a human review of an automated decision or a specific period for responding to a request, please mention the rule in your message to the desk. We will apply it where it is available to you.
20. Accuracy and Data Quality
Trade records are only useful if they are accurate. A misspelled buyer name on a packing list can delay a gate release. A wrong telephone number on a run sheet can leave a handler waiting at a cold store door. We therefore ask buyers and suppliers to check the details on a confirmation before the work proceeds, and we correct errors as soon as they are reported.
If the information we hold about you is inaccurate, you can ask us to correct it. Where the correction affects a closed record such as a sealed packing list, we may add a correction note rather than overwrite the original, because the original reflects the state of the trade at the time it was closed. The correction note is kept with the record and is disclosed wherever the record is disclosed.
We review contact details for active buyers and suppliers from time to time and remove records for organisations that have ceased trading, subject to the retention periods described earlier in this policy.
21. Automated Tools and Human Oversight
The website uses a small script to manage the mobile navigation, the scroll reveal behaviour and the accordion on the contact page. These tools run in your browser and do not make decisions about you. The desk does not use automated systems to accept or reject a buyer, to set a price or to decide whether a parcel should be closed.
Planning tools may help staff compare a proposed forcing schedule against greenhouse capacity, but the decision to confirm a schedule remains with a member of staff. If we introduce a tool that makes a decision with a significant effect, we will describe it here and offer a route to request human review.
22. Complaints and Escalation
If you are unhappy with how we have handled your information, please tell us first. Write to support@dingyueintl.buzz with a short description of the matter and the outcome you are seeking. We will acknowledge the complaint, investigate the relevant records, and reply with our conclusion and any remedy we can offer.
If you remain dissatisfied, you can raise the matter with a data protection authority in your jurisdiction. We will cooperate with a regulator that has jurisdiction over the company or over the matter in question, and we will provide the records that the regulator lawfully requests.