Last updated: 7/12/2025
Hong Kong Garden ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you visit our website or use our services.
Information We Collect
Information You Provide
- Contact information when you call to place orders (name, phone number, address)
- Delivery address and payment preferences
- Any special dietary requirements or preferences you share with us
Information Automatically Collected
- Website usage data through Google Analytics (when you consent)
- Device information, browser type, and IP address
- Pages visited and time spent on our website
Analytics and Cookies
Google Analytics
We use Google Analytics to understand how visitors use our website. This service:
- Collects data about page views, session duration, and user behavior
- Uses cookies to track users across sessions with a persistent Client ID
- Helps us improve our website and services
- Legal Basis: Your explicit consent
- Data Processor: Google LLC
- Data Retention: 14 months (configurable in our Google Analytics settings)
- Data Transfers: Data may be processed by Google in the United States under Standard Contractual Clauses
You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.
Cookie Categories
Necessary Cookies
Required for basic website functionality. Always active.
Analytics Cookies (Google Analytics)
Help us understand website usage. Requires your consent.
How We Use Your Information
- Process and fulfill your food orders
- Arrange delivery to your specified address
- Communicate with you about your orders
- Improve our website and services (with analytics consent)
- Comply with legal obligations
Your Rights Under GDPR
As a data subject, you have the following rights:
- Right to Access: Request a copy of your personal data
- Right to Rectification: Correct inaccurate personal data
- Right to Erasure: Request deletion of your personal data
- Right to Restrict Processing: Limit how we use your data
- Right to Data Portability: Receive your data in a structured format
- Right to Object: Object to processing based on legitimate interests
- Right to Withdraw Consent: Withdraw consent for analytics tracking
How to Exercise Your Rights
To exercise your data protection rights, please:
For Google Analytics data requests, you may need to provide your Google Analytics Client ID found in your browser's developer tools under Application → Cookies → _ga.
Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no internet transmission is completely secure.
Data Retention
- Order information: Retained for accounting and tax purposes (7 years)
- Google Analytics data: 14 months from collection
- Marketing consent records: Until consent is withdrawn plus 3 years
Third-Party Services
We work with the following data processors:
- Google LLC: Analytics services with appropriate Data Processing Agreement
- Cloudflare Inc: Website hosting and security services
Children's Privacy
Our services are not directed to children under 16. We do not knowingly collect personal information from children under 16. If we learn we have collected such information, we will delete it promptly.
Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of significant changes by updating the "Last updated" date and, where appropriate, provide notice on our website.
Supervisory Authority
If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.