Privacy Policy
Last updated: 7/10/2026
1. Introduction
Chiya ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at drinkchiya.com or purchase our products, in compliance with the Personal Data (Privacy) Ordinance (Cap. 486) ("PDPO") of the Hong Kong Special Administrative Region.
2. Personal Data We Collect
We collect personal data that is adequate, relevant, and not excessive for the purposes for which it is used. The types of personal data we may collect include:
- Contact information: name, email address, phone number, and delivery address when you place an order or contact us.
- Age verification data: information confirming you are of legal drinking age (18+ in Hong Kong).
- Payment data: billing information processed by our third-party payment providers. We do not store full payment card details on our servers.
- Technical data: IP address, browser type, device information, and cookies (see Section 7).
- Usage data: information about how you interact with our website.
3. How We Use Your Personal Data
We use your personal data for the following purposes:
- To process and fulfill your orders, including delivery and payment processing.
- To verify your age as required by Hong Kong law for the sale of intoxicating liquor.
- To respond to your enquiries, feedback, or customer service requests.
- To send you marketing communications where you have given your consent (see Section 5).
- To improve our website, products, and services.
- To comply with legal and regulatory obligations.
4. Legal Basis for Processing
Under the PDPO, we process your personal data based on:
- Your consent, where you have provided it (e.g., for marketing).
- Necessity for the performance of a contract (e.g., fulfilling your order).
- Compliance with legal obligations (e.g., age verification for alcohol sales).
- Our legitimate business interests, provided these do not override your rights.
5. Direct Marketing
We will not use your personal data for direct marketing purposes without your consent. Where you have opted in, you may withdraw your consent at any time by contacting us at contact@drinkchiya.com or by using the unsubscribe link in our emails.
6. Disclosure of Personal Data
We may disclose your personal data to:
- Service providers: delivery partners, payment processors, and IT service providers who assist us in operating our business.
- Legal authorities: where required by law, regulation, or legal process.
- Business transfers: in connection with a merger, acquisition, or sale of assets.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law.
7. Cookies
Our website uses cookies and similar technologies to enhance your browsing experience, analyze site traffic, and support our marketing efforts. For full details, please see our Cookie Policy.
8. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, access controls, and secure server infrastructure.
9. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including any legal, accounting, or reporting requirements. When data is no longer needed, we securely delete or anonymize it.
10. Your Rights
Under the PDPO, you have the right to:
- Request access to the personal data we hold about you.
- Request correction of any inaccurate personal data.
- Withdraw your consent at any time where processing is based on consent.
- Request that we stop using your personal data for direct marketing.
To exercise these rights, please contact our Data Protection Officer at contact@drinkchiya.com. We will respond to your request within 40 days as required by law.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.
12. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at:
Chiya
Email: contact@drinkchiya.com
Hong Kong