Privacy Policy

🛡️ Official Privacy Policy

Privacy Policy

Last updated: April 9, 2026  |  https://whisky.bbhall.org/

1. Information We Collect From You

When you visit our site, create an account, or make a purchase, we may collect:

Identity & Contact Data: name, date of birth, billing address, delivery address, email address, and telephone number.

Financial Data: payment card details (processed securely via our payment gateway — we never store your full card number).

Transaction Data: order details, purchase history, and communications.

Technical Data: IP address, browser type, operating system, and browsing behaviour.

Automatic Collection: when you browse our site, we may automatically collect device identifiers and usage analytics via Google Analytics.

2. Purpose of Collection and Use of Personal Data

Personal data collected from you will be used for:

Order Processing & Fulfilment — to process and deliver your orders

Payment Processing — to process payments and handle refunds

Customer Support — to manage your account and respond to enquiries

Age Verification — to verify you are 18+ for alcohol sales compliance

Direct Marketing — to send updates on products and promotions (you may opt out at any time)

Fraud Prevention & Security — to detect and prevent fraudulent activity

Legal Compliance — to comply with Hong Kong tax and regulatory requirements

3. Legal Basis for Processing (PDPO)

Contractual Necessity — processing necessary to perform our contract with you (order fulfilment, payment, delivery)

Legitimate Interests — fraud prevention, security, website improvement, and non-intrusive direct marketing

Consent — for optional marketing communications, which you may withdraw at any time

Legal Obligation — to comply with applicable Hong Kong laws and regulations

4. Disclosure of Your Information

⚠️ We do not sell, rent, or trade your personal data to third parties for marketing purposes.

We may disclose your data to:

• Payment processing service providers (banks, credit card gateways)

• Logistics and delivery partners for order fulfilment

• IT service providers, data processors, and auditors

• Law enforcement or regulatory bodies where required by law

• In the event of a business sale or transfer of assets

5. Cookie Policy

Our website uses cookies to enhance your browsing experience. You may refuse cookies through your browser settings — however, some site features may not function properly if cookies are disabled.

Type Purpose Expiry
woocommerce_cart_hash Shopping cart functionality Session
wp_woocommerce_session_* User login status 2 days
_ga / _gid Google Analytics — site traffic analysis 2 years / 24 hours
wc_cart_created Remember browsing preferences Session

6. Data Retention

Data Type Retention Period
Order & Transaction Records 7 years (Hong Kong tax & legal compliance)
Customer Account Data Until account is deleted
Communication Records 3 years

7. Your Rights Under PDPO

Under the Personal Data (Privacy) Ordinance (Cap. 486, Laws of Hong Kong), you have the right to:

Access — request a copy of the personal data we hold about you

Correction — request correction of inaccurate personal data

Withdraw Consent — opt out of direct marketing at any time

Deletion — request deletion of your account and associated data

Data Portability — request your data in a commonly used format

📧 To exercise any of these rights, please contact us. We will respond within 40 days. Proof of identity may be required.

8. Data Security

✓ SSL/TLS encryption (HTTPS) on all pages

✓ Regular updates to system and plugins

✓ Restricted employee access to personal data

✓ Strong passwords and two-factor authentication (2FA) for admin access

✓ Payment data handled by PCI-DSS certified payment processors

✓ In the event of a data breach, we will notify the relevant authority and affected users within 72 hours

9. International Data Transfers

If personal data is transferred to locations outside Hong Kong, we will ensure that the receiving party provides an adequate level of data protection in accordance with the PDPO.

10. Third-Party Links

Our website may contain links to third-party websites, plugins, or applications. We do not control these websites and are not responsible for their privacy practices. Please review the privacy policies of any third-party sites you visit.

11. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors.

12. Policy Updates

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised "Last updated" date. We encourage you to review this page periodically.

13. Age Restriction

🍷 Our website sells alcohol products. You must be at least 18 years of age to place an order. By placing an order, you confirm that you are 18 or older. We reserve the right to verify your age and to refuse service to anyone who cannot provide satisfactory proof of age.

14. Contact Us

📧 Email: infinita4enquiry@gmail.com

📍 Address: Unit 502, Rise Commercial Building, 5-11 Granville Circuit, Tsim Sha Tsui, Kowloon, Hong Kong

📞 Phone: +852 66531118

🏢 Data Controller: INFINITA LIMITED (registered in Hong Kong)

⚠️ This policy is for reference only and does not constitute legal advice. For legal concerns, please consult a qualified legal professional.