Privacy Policy

Last updated: 2026-05-24

1. Who we are

This Privacy Policy describes how SBM Softwares Limited (trading as LabVial Pro; HK Company Registration 78808799; registered office Unit B, 11/F, 23 Thomson Road, Wan Chai, Hong Kong SAR China) collects, uses, and protects your personal information when you visit this website or place an order with us. We are the data controller for the personal information described below.

2. Compliance framework

We comply with the Hong Kong Personal Data (Privacy) Ordinance (PDPO) and, for customers in the European Union and United Kingdom, the General Data Protection Regulation (GDPR) and UK GDPR respectively.

3. Information we collect

Information you provide when placing an order:

• Name and organization
• Email address
• Shipping and billing address
• Phone number (optional, for delivery contact)
• Payment information (processed by Stripe — we never see or store your card number)

Information collected automatically when you visit our website:

• IP address and approximate location
• Device and browser type
• Pages viewed and time on site
• Referring URL and search terms (if from a search engine)

4. How we use your information

• To process and fulfill your orders
• To send you order confirmations, shipping updates, and customer support communications
• To respond to questions and quote requests you send us
• To prevent fraud and unauthorized access to our website and your account
• To comply with legal obligations (tax records, customs documentation, etc.)
• To improve our website, products, and customer service

We do not use your information for unrelated marketing without your explicit consent.

5. Cookies

We use a minimal set of essential cookies to maintain your session (e.g., cart contents) and remember your preferences. We do not use third-party advertising or behavioral tracking cookies. We do not sell or share your data with advertising networks.

6. Who we share your information with

We share your information only with the following categories of third parties, and only as necessary to operate our business:

• Payment processor (Stripe): to process your card payment securely. Stripe is PCI-DSS Level 1 compliant.
• Shipping carriers (DHL, FedEx, etc.): to deliver your order. We share name, address, phone, and email only.
• Email service provider: to send order confirmations and shipping updates.
• Legal and regulatory authorities: when required by Hong Kong law or applicable foreign law.

We do not sell your personal information to anyone, ever.

7. Data retention

We retain your order records for 7 years to comply with Hong Kong tax and accounting requirements. After that period, we anonymize or delete the records. You can request earlier deletion of your account at any time (subject to legal retention requirements).

8. Your rights (PDPO / GDPR)

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion (subject to legal retention requirements)
• Object to or restrict certain processing activities
• Data portability — receive your data in a machine-readable format
• Withdraw consent for non-essential processing (such as marketing) at any time
• Lodge a complaint with your local data protection authority

To exercise any of these rights, email support@labvialpro.com with the subject "Privacy request." We respond within 30 days.

9. International data transfers

As an HK-based business shipping worldwide, we transfer your personal information internationally. Where data is transferred to countries without adequacy decisions (e.g., the EU adequacy framework), we use Standard Contractual Clauses or other approved safeguards.

10. Security

We use HTTPS encryption across the entire website, store passwords as bcrypt hashes, and never see your card number (all payment data is handled by Stripe). Database access is restricted to authorized personnel only.

11. Children

Our website is not intended for children under 18 and we do not knowingly collect their information. If you believe we have collected a child's information, email support@labvialpro.com and we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision.

13. Contact

Privacy questions or requests: support@labvialpro.com.