Privacy Policy
Last updated: April 9, 2026 | https://whisky.bbhall.org/
1. Information We Collect From You
When you visit our site, create an account, or make a purchase, we may collect:
Identity & Contact Data: name, date of birth, billing address, delivery address, email address, and telephone number.
Financial Data: payment card details (processed securely via our payment gateway — we never store your full card number).
Transaction Data: order details, purchase history, and communications.
Technical Data: IP address, browser type, operating system, and browsing behaviour.
Automatic Collection: when you browse our site, we may automatically collect device identifiers and usage analytics via Google Analytics.
2. Purpose of Collection and Use of Personal Data
Personal data collected from you will be used for:
Order Processing & Fulfilment — to process and deliver your orders
Payment Processing — to process payments and handle refunds
Customer Support — to manage your account and respond to enquiries
Age Verification — to verify you are 18+ for alcohol sales compliance
Direct Marketing — to send updates on products and promotions (you may opt out at any time)
Fraud Prevention & Security — to detect and prevent fraudulent activity
Legal Compliance — to comply with Hong Kong tax and regulatory requirements
3. Legal Basis for Processing (PDPO)
Contractual Necessity — processing necessary to perform our contract with you (order fulfilment, payment, delivery)
Legitimate Interests — fraud prevention, security, website improvement, and non-intrusive direct marketing
Consent — for optional marketing communications, which you may withdraw at any time
Legal Obligation — to comply with applicable Hong Kong laws and regulations
4. Disclosure of Your Information
⚠️ We do not sell, rent, or trade your personal data to third parties for marketing purposes.
We may disclose your data to:
• Payment processing service providers (banks, credit card gateways)
• Logistics and delivery partners for order fulfilment
• IT service providers, data processors, and auditors
• Law enforcement or regulatory bodies where required by law
• In the event of a business sale or transfer of assets
5. Cookie Policy
Our website uses cookies to enhance your browsing experience. You may refuse cookies through your browser settings — however, some site features may not function properly if cookies are disabled.
| Type | Purpose | Expiry |
|---|---|---|
| woocommerce_cart_hash | Shopping cart functionality | Session |
| wp_woocommerce_session_* | User login status | 2 days |
| _ga / _gid | Google Analytics — site traffic analysis | 2 years / 24 hours |
| wc_cart_created | Remember browsing preferences | Session |
6. Data Retention
| Data Type | Retention Period |
|---|---|
| Order & Transaction Records | 7 years (Hong Kong tax & legal compliance) |
| Customer Account Data | Until account is deleted |
| Communication Records | 3 years |
7. Your Rights Under PDPO
Under the Personal Data (Privacy) Ordinance (Cap. 486, Laws of Hong Kong), you have the right to:
• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate personal data
• Withdraw Consent — opt out of direct marketing at any time
• Deletion — request deletion of your account and associated data
• Data Portability — request your data in a commonly used format
📧 To exercise any of these rights, please contact us. We will respond within 40 days. Proof of identity may be required.
8. Data Security
✓ SSL/TLS encryption (HTTPS) on all pages
✓ Regular updates to system and plugins
✓ Restricted employee access to personal data
✓ Strong passwords and two-factor authentication (2FA) for admin access
✓ Payment data handled by PCI-DSS certified payment processors
✓ In the event of a data breach, we will notify the relevant authority and affected users within 72 hours
9. International Data Transfers
If personal data is transferred to locations outside Hong Kong, we will ensure that the receiving party provides an adequate level of data protection in accordance with the PDPO.
10. Third-Party Links
Our website may contain links to third-party websites, plugins, or applications. We do not control these websites and are not responsible for their privacy practices. Please review the privacy policies of any third-party sites you visit.
11. Children's Privacy
Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors.
12. Policy Updates
We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised "Last updated" date. We encourage you to review this page periodically.
13. Age Restriction
🍷 Our website sells alcohol products. You must be at least 18 years of age to place an order. By placing an order, you confirm that you are 18 or older. We reserve the right to verify your age and to refuse service to anyone who cannot provide satisfactory proof of age.
14. Contact Us
📧 Email: infinita4enquiry@gmail.com
📍 Address: Unit 502, Rise Commercial Building, 5-11 Granville Circuit, Tsim Sha Tsui, Kowloon, Hong Kong
📞 Phone: +852 66531118
🏢 Data Controller: INFINITA LIMITED (registered in Hong Kong)
⚠️ This policy is for reference only and does not constitute legal advice. For legal concerns, please consult a qualified legal professional.