Privacy Policy

This Privacy Policy applies to 鮮到, operated by [COMPANY NAME] (“we”, “us”). We handle personal data in accordance with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong. This page is a template and should be reviewed against the final operating arrangements before launch.

1. Who we are

[COMPANY NAME]
[COMPANY ADDRESS], Hong Kong
Business Registration Number: [BUSINESS REGISTRATION NUMBER]
Email: [EMAIL ADDRESS]
Phone: [+852 XXXX XXXX]

2. Personal data we collect

• Order and contact data: name, delivery address, phone number, email address, delivery instructions and order history.
• Payment data: transaction amount, payment status, card brand and the last four digits of your card. Full card details are handled by our payment processor, Stripe, and are not stored on our servers.
• Technical data: IP address, browser type, device information, pages visited and referral source.
• Marketing preferences: whether you have opted in to news and offers.
• Communications: messages you send to us by email, WhatsApp, contact form or social media.

3. How we use your data

• To prepare, fulfil and deliver your order, including contacting you about delivery.
• To process payments and handle refunds or claims.
• To respond to enquiries and provide customer support.
• To keep accounting and business records as required by law.
• To improve the website, catalogue and delivery service.
• To send marketing communications where you have opted in, or where permitted by law. You can opt out at any time.
• To measure advertising performance and show relevant ads on Google and other platforms, subject to your cookie choices.

4. Legal basis and consent

We process data to perform our contract with you, to comply with legal obligations, for our legitimate business interests and, where required, on the basis of your consent. Where you provide consent for cookies or marketing, you may withdraw it at any time.

5. Sharing your data

We share the minimum data necessary with:

• Payment processors (Stripe) to take payment and issue refunds.
• Delivery drivers and logistics partners to fulfil your order.
• Hosting, email and IT service providers acting on our instructions.
• Analytics and advertising providers such as Google, where cookies are permitted.
• Professional advisers, insurers and authorities where required by law.

We do not sell your personal data.

6. Cookies and advertising

We use essential cookies to run the basket and checkout, and optional analytics and advertising cookies to understand how the site is used. Google Analytics 4 and Google Ads may set cookies when configured and consented to. See our Cookie Policy for details and controls.

7. Retention

Order and transaction records are kept for up to seven years for accounting and legal purposes. Marketing preferences are kept until you opt out. Contact messages are kept for up to 24 months unless a longer period is needed to resolve a matter. Data no longer needed is securely deleted.

8. Your rights

You may request access to, correction of, or deletion of your personal data, object to certain processing, or withdraw consent. To make a request, email [EMAIL ADDRESS]. We may need to verify your identity before responding. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner for Personal Data, Hong Kong.

9. Security

We use encrypted connections, access controls and reputable processors to protect personal data. No method of transmission over the internet is completely secure, but we take reasonable steps to protect your information.

10. Changes

We may update this policy from time to time. The effective date shown at the top of this page will change when we do. Please review it periodically.

11. Contact

Questions about privacy can be sent to [EMAIL ADDRESS] or by post to [COMPANY ADDRESS], Hong Kong.