Privacy Policy
Privacy Policy
Your privacy is very important to us. Drawn up in accordance with the GDPR and the CCPA, this Privacy Policy explains what personal information we collect, how we use it, and how you can check and update any personal information we hold about you. For the purposes of this Privacy Policy, “we” refers to Potentiolab.
Last updated: 04/04/2025
Why do we collect your personal information?
- To deliver products and services relevant to you
- To improve our products and services and develop new ones
- To help us run and grow our business
Where and when do we get your information?
We collect information when you contact us, and when you use our products and services. Examples include when you:
- Contact us to ask something or request a quotation
- Make a purchase directly from us – via online checkout, purchase order, phone, or email
- Enter promotions, competitions, or prize draws that we carry out
- Visit our website – to browse product pages, use written support guides, or watch video guides
- Apply for a job with us
If necessary, we may also collect information from publicly available sources (e.g., university websites). For example, to ship your order, our carriers require a recipient phone number on the invoice. If you have not provided one with your PO, we may search online to avoid delays.
The type of information we have
Information is collected about you when an order is placed with us or an enquiry is made. Anonymous information on website usage is collected from visitors to our website. This includes:
- Identity and contact details
- Products purchased from us
- Shipping/billing address(es)
- Promotions/competitions/prize draws you have participated in
- Jobs you have applied for with us
How we use this information
Information gathered when an order is placed (or when steps have been taken to enter into a purchasing contract) is used to arrange delivery, process payments (if applicable) and for company record-keeping. If you make an enquiry, we use that information to respond and for record-keeping.
Each time you visit the website, anonymous analytics information is collected about site usage via Google Analytics. For further information, please see the Cookies section below.
Storage & processing of information
Disclosure of information to 3rd parties
We do not, and will never, sell any of your personal data to any third party – including your name, address, email address or credit card information.
However, we may share your data with the following categories of companies as an essential part of providing our services to you, in accordance with our legal basis for processing and storing data:
- Companies that get your purchases to you, such as payment service providers (for online checkout) and delivery companies
- Professional service providers who help us run our business, including our web hosting platform, CRM (e.g., Zoho), and—if you subscribe to our newsletter—our email marketing client (e.g., Mailchimp)
Social login via miniOrange
a. Terms used in this document
- Customer – Person who will log in to our site using social applications (Google, Facebook, Twitter, Amazon, etc.)
- miniOrange – Company owning the Social Login Plugin
- Social Profile Data – Data fetched from a social application when an end-user logs in (e.g., first name, last name, email)
- Website Administrator – Admin personnel of the website
b. Introduction
We protect your personal information using industry-standard safeguards. We may share your information only with your consent or as required by law as detailed in this policy, and we will always let you know when we make significant changes to this Privacy Policy. Maintaining your trust is our top priority, so we adhere to the following principles:
- We protect your personal information and will only provide it to third parties:
- with your consent;
- where necessary to carry out your instructions;
- as reasonably necessary to provide features and functionality to you;
- when required by law, subpoena, or other legal process;
- as necessary to enforce our User Agreement or protect the rights, property, or safety of miniOrange, its customers and end-users, and the public.
c. What information do we collect?
In the social login plugin, we may collect the following information from registered users (as provided by the social platform and your settings):
- First name, last name, username, email
- Application name, social profile URL, profile picture
- Age, gender, location, date of birth
- Company name, contact number, website
- Relationship status, education, university_name
- Description, placesLived, industry, headline
- Friend list (if provided by the platform and consented)
d. How we use personal information
- Right to be forgotten: Social profile data fetched from a social application may be stored in two places → the site’s WordPress database & miniOrange. The website administrator can delete a specific customer’s social profile data from both upon request.
- User consent: Customers are asked for consent to our privacy policy. If consent is denied, you will not be logged in and no data will be fetched.
- Encryption: Data in transit because of miniOrange is encrypted with a key unique to the customer registered in the Social Login plugin.
Recruitment
When you apply for a job with us, there are 3 stages:
- Stage 1 (Application) – Only HR will have access to your application information. If you do not progress, we won’t keep it on file unless we have your consent.
- Stage 2 (Phone Interview) – Only HR and internal recruitment personnel will have access to your contact number. If you do not progress, we won’t keep your CV & cover letter unless we have your consent.
- Stage 3 (Face-to-face Interview) – HR may keep interviewer notes for 1 year (legally recommended retention). If you do not progress, we won’t retain your CV & cover letter unless we have your consent.
Regardless of whether you’ve included reference contact details, we will always contact you first for confirmation before reaching out to your references.
Marketing
If you have said that we can, we will send you marketing emails to keep you aware of what we’re up to and to help you see and find our products (e.g., monthly newsletters, new support guides, company news). You can unsubscribe at any time via the “Unsubscribe” link at the bottom of each email.
If you purchase through our online checkout, you can opt in/out there. If you wish to opt out later, please contact us (see Contact us).
Your rights regarding your information
Under the GDPR and CCPA, you have the following rights regarding your personal information:
- The right to be informed about how your personal information is being used
- The right to access the personal information we hold about you
- The right to request correction of inaccurate personal information we hold about you
- The right to request that we delete your data, or stop processing/collecting it, in some circumstances
- The right to stop email marketing messages (via the “Unsubscribe” link or by emailing sales@potentiolab.com), and to withdraw consent for consent-based processing at any time
- The right to request that we transfer or port elements of your data to you or another service provider
- The right to complain to your data protection regulator
If you want to exercise your rights, have a complaint, or just have questions, please contact us.
Cookies
Like most websites, we use cookies for a variety of purposes. Cookies are text-only pieces of information a website transfers to a visitor’s device for record-keeping. We use cookies to make your use of the website more convenient (e.g., remember cart items, preferred currency), for analytics, and for marketing.
This website is built with WordPress. The platform provides our e-commerce capabilities and sets many of the cookies used on our site.
We also use Google Analytics to collect anonymous information on website traffic (e.g., location, pages visited). Data is aggregated so that individual users are not personally identifiable. You can opt out across all websites using Google Analytics by installing the browser add-on: http://tools.google.com/dlpage/gaoptout.
Additionally, we use Hotjar to better understand user experience (e.g., how much time is spent on pages, links clicked). Hotjar collects data such as anonymized IP, device information, browser, country-level location, and preferred language. Hotjar stores this in a pseudonymized profile. Neither Hotjar nor we will use this information to identify individual users. See Hotjar’s privacy policy on their website. You can opt out of Hotjar processing by using their opt-out link.
How to manage your cookie preferences
For more information on deleting, allowing/blocking cookies, or managing preferences, see:
Other websites
Please note that this Privacy Policy applies only to potentiolab.com. External websites that we link to have their own privacy policies, for which we are not responsible.
Changes to our privacy policy
This privacy policy is reviewed regularly. To monitor changes, please check back to this page.
Contact us
Operating hours: 9:00–18:00 Hong Kong time (GMT+8)