Privacy Policy

1. Our Commitment

We appreciate your trust in us. We are committed to protecting your privacy, taking all reasonable precautions, and complying with all applicable laws and regulations regarding the protection of personal data to keep your personal data secure and prevent misuse. This Privacy Policy is designed to help you understand: what type of personal data we collect, how we use and protect it, and your rights and choices.

2. Types of Personal Data We Collect

The types of personal data we collect include, but are not limited to:

  1. Your title, name, gender, phone number, email address, residential address, mailing address, billing address, shipping address or other contact information, birth month and date, payment or credit card information, username and password, and any personal data you voluntarily provide to us;
  2. The IP address of your computer, mobile phone or other electronic/communication device, real-time location data, browser settings, browsing history, referral websites that led you to our platform, and other internet record data.

3. Collecting Your Personal Data

We may obtain your personal data through various methods, including:

  1. When you shop at our online store or physical stores;
  2. When you participate in our events or promotions;
  3. When you apply for or use our membership card, or participate in any membership or promotional programs;
  4. When you register an account on this platform;
  5. When you participate in any surveys or marketing activities;
  6. When you browse our website, use our mobile application, or visit our social media pages;
  7. When you use Wi-Fi services at our stores or event venues;
  8. When you contact us in person, by phone, email, or social media platforms for inquiries or to provide information;
  9. When your identity needs to be verified;
  10. When you subscribe to our marketing or promotional information.

You may choose not to provide us with the requested personal data. However, if you choose not to provide the relevant data, we may not be able to provide you with products, services, or offers, and you may not be able to log in to this platform or use some features.

4. Purposes of Collecting Personal Data

Your personal data may be used for one or more of the following purposes:

  1. To communicate with you;
  2. To verify your identity and the account you created on this platform;
  3. To manage membership programs, marketing activities, and promotional offers, including providing you with applicable offers;
  4. To process product and service orders (including retaining shopping cart contents, arranging billing, payment, refunds, and delivery);
  5. To process and respond to your inquiries, suggestions, or complaints;
  6. To conduct customer satisfaction surveys or organize customer events;
  7. To provide customer service;
  8. For data analysis, to help us understand customer needs and improve product and service quality;
  9. To personalize website, mobile application, and social platform content to enhance customer experience;
  10. To design exclusive promotional offers;
  11. To implement advertising campaigns, including targeted advertising;
  12. To conduct direct marketing activities;
  13. To fulfill the responsibility of keeping activity records;
  14. To comply with laws, regulations, and compliance requirements, respond to inquiries from law enforcement agencies, regulatory bodies, or seek legal advice;
  15. Any matters directly related to the above purposes.

We will only collect personal data that is necessary to achieve the specified purposes or is directly related to those purposes. If we plan to use personal data for other purposes not listed above, we will obtain your consent before using it.

5. Direct Marketing

We may use your personal data for direct marketing, product, and service promotions. We will not transfer your personal data to third parties for direct marketing purposes. If you wish to unsubscribe from direct marketing messages, you may contact customer service through the methods listed in the "Contact Us" section below to request cancellation, free of charge. If you receive promotional information via email, you can also directly click the unsubscribe link in the email. We will not use your personal data for direct marketing without your consent. With your consent, we may use your name, mobile number, email address, and/or residential address to send you the latest product information and marketing activities.

6. Use of Your Personal Data

We will process your data in accordance with applicable laws and regulations, including collection, storage, retention, use, transfer, and disclosure. We will ensure your data is secure, accurate, and up-to-date, and we will not store personal data for unnecessarily long periods.

7. Legal Basis for Processing Personal Data of EU Customers

We process the personal data of customers in the European Union based on the following legal grounds:

(1) Fulfillment of Our Legitimate Interests

We may use your personal data based on legitimate interests, provided that such interests do not override any potential harm to you. Relevant legitimate interests include:

  • Providing services to you: verifying identity, managing accounts, processing membership programs, processing orders, managing shopping carts, arranging payments and deliveries, responding to inquiries and complaints, data analysis, and conducting direct marketing within your reasonable expectations;
  • Fulfilling legal obligations (e.g., anti-money laundering, anti-terrorism-related requirements);
  • Analyzing customer needs and continuously improving services;
  • Maintaining the normal operation of platform services;
  • Protecting system security and preventing unauthorized access and cyberattacks;
  • Safeguarding legitimate business interests of the enterprise.

(2) Your Consent

If data processing is based on your consent, such consent must meet the following conditions to be valid:

  • Voluntarily given, without any coercion;
  • You are fully informed of what you are consenting to;
  • Consent is obtained item by item, not through bundled consent;
  • Actively confirmed by you through clear and explicit means (e.g., ticking a box).

You may withdraw your consent at any time. For detailed instructions, please refer to the "Contact Us" section below.

(3) Fulfillment of Contractual Obligations

To fulfill a contract with you, we may use your personal data, for example, collecting credit card and bank account information to process payments.

(4) Fulfillment of Legal Obligations

In addition to fulfilling contracts, we may also process personal data to comply with legal obligations.

8. Cookies and Automated Data Collection

Cookies are small data files stored on your device by your browser when you visit a website. We use three types of cookies:

  1. Necessary Cookies
    Used for basic website operation, allowing you to log in to the website and access protected pages. Cannot be disabled; if removed, the website will not function properly. These cookies do not store personally identifiable data.
  2. Functional Cookies
    Enhance the shopping experience, such as recording your chosen region and browsing history. The collected data is anonymous and does not track your activity on other websites. You can choose to disable them.
  3. Targeting Cookies
    Mostly provided by third parties, record device visits to websites and track browsing behavior across sites; examples include Google Analytics, Adobe Analytics. Related data can be shared with advertising networks for advertising purposes. You can choose to disable them.

If you do not change your browser settings and continue to use this website, it means you agree to our use of the above cookies.

How to Control and Delete Cookies

You can block some or all cookies through your browser settings:

Please note: If you block certain categories of cookies, some website functions may not work properly. In addition to cookies, we also automatically collect information through web server logs, including search keywords, browsing links, IP addresses, device information, etc. This data may be used for the purposes listed in this policy.

9. CCTV

We have installed CCTV in our physical stores for security purposes. CCTV footage will only be used in accordance with the Personal Data (Privacy) Ordinance, and retention periods will not exceed actual needs.

10. Data Sharing and Transfer

To achieve the purposes listed in this policy, we may disclose and transfer your personal data to affiliated entities of Orchid Padaria, third-party service providers, or business partners, within or outside Hong Kong, under the principle of "limited disclosure." If personal data needs to be transferred outside of Hong Kong, we will ensure the security of your data through contracts or other appropriate measures, with protection standards no lower than the data protection laws of your jurisdiction, and handle it in accordance with local cross-border data transfer rules. We may also disclose data when required by law, or when legally permitted to protect our legitimate interests (e.g., disclosing data to insurance companies to handle potential claims).
We reserve the right to transfer personal data in the event of a company merger, acquisition, or restructuring (carried out in accordance with the law).

11. Data Subject Rights

You have the right to request a copy of the personal data we hold about you; you also have the right to request correction of inaccurate or incomplete personal data. We will not unduly delay and will process applications within the statutory time limits of the personal data protection law of your region (including legally permitted extensions). If an application is refused, we will explain the reason to you. To exercise the above rights, or to withdraw consent for data processing (applicable to processing based on "consent" as a legal basis), please refer to the "Contact Us" section below. We will retain relevant communication records to process your request. If you believe that our handling of personal data violates data protection law, you have the right to lodge a complaint with the data protection supervisory authority in your place of residence, or you may first contact our customer service representative for follow-up. Supplementary: You may request us to restrict the processing of your personal data in situations including:
(a) You dispute the accuracy of the data; we will suspend processing until the data's authenticity is verified.
(b) You object to our processing of data based on legitimate interests; we will suspend processing until legitimate grounds are verified.
(c) We unlawfully process data, but you choose to restrict processing instead of deleting data.
(d) We no longer need the data, but you need the data to establish, exercise, or defend legal claims.

12. Retention of Personal Data

We regularly review the personal data we hold. We will only retain personal data for the period necessary to fulfill the purposes for which it was collected. Unless otherwise permitted by law, when data is no longer needed, we will delete it within a reasonable time. After the retention period expires, we will permanently delete your personal data. Some data may temporarily remain in the system awaiting overwrite, but such data will no longer be accessible or used by employees.

13. Data Protection Measures

To prevent accidental, unlawful, or unauthorized access to your personal data, we implement appropriate technical and administrative measures to ensure the confidentiality and security of data during collection and processing.

14. Third-Party Websites

This Privacy Policy applies only to Orchid Padaria and does not apply to any third parties or their operating websites.
When you click a link or an advertisement and jump to a third-party website or an affiliated company's website, you will be subject to that platform's own privacy policy. While we support online privacy protection, we will not be responsible for the actions of third-party platforms.

15. Children's Policy

This website and mobile application are not intended for direct use by individuals aged 16 or younger. If you are 16 years old or younger, you should use the platform accompanied by a parent or guardian and should not submit any personal data to us.

16. Amendments to this Privacy Policy

We may amend this Privacy Policy from time to time. The latest version will be published on our official website and mobile platform. Please check regularly to be aware of the latest terms.

17. Contact Us

If you have any questions about this Privacy Policy, or wish to exercise your rights to access or correct personal data, please feel free to contact our customer service representative:

  • WhatsApp (text messages only): +852 5479 2617
  • Email: info@orchidpadaria.com.hk

This Privacy Policy is available in Chinese and English. In case of any discrepancy between the Chinese and English versions, the English version shall prevail.