Privacy Policy
Last updated: 22 August 2026
We ask for as little as we can get away with, and we don't sell any of it. This page explains exactly what we collect, why, and what you can do about it.
1. Who is responsible
The Spoon Lab Limited ("we", "us") is the data user responsible for personal data collected through this website. We are registered in Hong Kong.
We handle personal data in accordance with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong.
Questions, requests or complaints: WhatsApp +852 9502 8023.
2. What we collect
When you register your interest, we collect only:
- Your name
- Your email address
- Your WhatsApp number
- The district you'd want delivery to
- The plan and quantity you selected
- A referral code, if you were given one
We deliberately do not ask for your full delivery address at this stage. We only collect that later, if and when you choose to place a paid order — because until then we have no reason to hold it.
If you only sign up for launch updates, we collect just your email address.
We may also collect basic technical data such as browser type and pages visited, if we enable analytics. This is not used to identify you personally.
We never collect or store payment card details. If and when you pay, that is handled entirely by our payment processor on their own systems.
3. Why we collect it
| Purpose | Data used |
|---|---|
| Contacting you about your registration | Name, email, WhatsApp number |
| Planning delivery coverage and capacity | District, quantity |
| Operating the referral scheme | Name, referral code |
| Sending production and launch updates | Name, email |
| Processing your order, if you choose to buy | All of the above, plus delivery address |
Providing this data is voluntary. But if you don't give us an email address and WhatsApp number, we can't contact you, and we won't be able to hold your price.
We will not use your data for any purpose materially different from those above without asking you first.
4. Direct marketing
We would like to email you occasional updates about BUFF — production progress, launch news, and tasting events.
Under the Ordinance we must obtain your consent before using your personal data for direct marketing, and you may withdraw that consent at any time, at no cost. Every email we send includes an unsubscribe link, or you can simply email WhatsApp +852 9502 8023 and we'll remove you.
Transactional messages — confirming your registration, telling you your delivery date, or answering a question you asked — are not marketing, and you'll receive those regardless.
We do not sell, rent or trade your personal data to any third party for their own marketing purposes. We never have and we don't intend to.
5. Who we share it with
Only the service providers who help us operate, and each receives only what they need:
- Our email and spreadsheet platform, to store registrations and send you email
- Our payment processor, at the point you choose to pay
- Our delivery partner, so they can bring you your order
We may also disclose personal data where we are required to by law, or to protect our legal rights.
Some of these providers may store data outside Hong Kong. Where that happens, we take reasonable steps to ensure your data receives a comparable level of protection.
6. How long we keep it
We keep this data until you ask us to delete it, or for 24 months after your last interaction with us, whichever comes first. After that we delete it.
If you become a customer, we may need to keep order and transaction records for longer to meet accounting and tax obligations.
7. Your rights
Under the Ordinance you have the right to:
- Ask whether we hold personal data about you
- Request a copy of that data
- Ask us to correct anything inaccurate
- Withdraw consent to direct marketing at any time
Email WhatsApp +852 9502 8023. We'll respond within 40 days, as the Ordinance requires. We may charge a reasonable fee for supplying a copy of your data.
If you're unhappy with how we've handled your data, you can complain to the Office of the Privacy Commissioner for Personal Data, Hong Kong — but we'd rather you told us first so we can put it right.
8. Security
We store personal data on access-controlled systems, and limit access to the people who need it to do their job. No system is perfectly secure, but we take this seriously and we hold as little data as possible, which is the most effective protection there is.
9. Cookies
This site does not currently set advertising or tracking cookies. We use your browser's local storage for one thing only: remembering whether you prefer English or Chinese. If we add analytics later, we'll update this page and tell you.
10. Changes to this policy
If we change this policy materially, we'll update the date above and email everyone on the interest list.
11. Language
This policy is provided in English and Traditional Chinese. If there is any inconsistency between the two versions, the English version prevails.
私隱政策
最後更新：2026年8月22日
我們只收集最低限度的資料，亦不會出售任何個人資料。本頁清楚說明我們收集甚麼、為甚麼收集，以及你可以怎樣處理。
1. 誰負責你的資料
The Spoon Lab Limited（「我們」）是透過本網站收集個人資料的資料使用者，於香港註冊成立。
我們按照香港《個人資料（私隱）條例》（第 486 章）處理個人資料。
如有查詢、要求或投訴，請電郵 WhatsApp +852 9502 8023。
2. 我們收集甚麼
當你登記興趣時，我們只收集：
- 你的姓名
- 你的電郵地址
- 你的 WhatsApp 號碼
- 你希望送貨的地區
- 你選擇的計劃及數量
- 推薦碼（如你有收到）
在此階段，我們刻意不會索取你的完整送貨地址。只有當你其後選擇落實付款訂單時，我們才會收集 — 因為在此之前，我們沒有理由持有這些資料。
如果你只是登記接收推出通知，我們只會收集你的電郵地址。
若我們啟用分析工具，亦可能收集瀏覽器類型、瀏覽頁面等基本技術資料。這些資料不會用於識別你的個人身分。
我們從不收集或儲存信用卡資料。若日後涉及付款，將完全由付款服務供應商在其系統上處理。
3. 我們為甚麼收集
| 用途 | 所用資料 |
|---|---|
| 就你的登記與你聯絡 | 姓名、電郵、WhatsApp 號碼 |
| 規劃送貨覆蓋範圍及產能 | 地區、數量 |
| 營運推薦計劃 | 姓名、推薦碼 |
| 發送生產進度及推出通知 | 姓名、電郵 |
| 處理你的訂單（如你選擇購買） | 以上全部，另加送貨地址 |
提供這些資料屬自願性質。但如果你不提供電郵地址及 WhatsApp 號碼，我們便無法與你聯絡，亦無法為你保留價格。
未經你同意，我們不會將你的資料用於與上述明顯不同的用途。
4. 直接促銷
我們希望不定期電郵你有關 BUFF 的消息 — 生產進度、推出資訊及試食活動。
根據條例，我們在將你的個人資料用於直接促銷前，必須取得你的同意，而你亦可隨時免費撤回該同意。我們發出的每封電郵都設有取消訂閱連結，你亦可直接電郵 WhatsApp +852 9502 8023，我們會即時將你移除。
交易相關訊息 — 例如確認你的登記、通知送貨日期、或回覆你的查詢 — 並不屬於促銷，你仍會收到。
我們不會將你的個人資料出售、出租或轉讓予任何第三方作其促銷用途。我們從來沒有這樣做，將來亦不打算。
5. 我們會與誰分享
只限協助我們營運的服務供應商，而每一方只會取得其所需的部分：
- 電郵及試算表平台，用作儲存登記紀錄及向你發送電郵
- 付款服務供應商，只在你選擇付款時
- 送貨合作夥伴，以便將訂單送到你手上
在法律要求下，或為保障我們的合法權益，我們亦可能披露個人資料。
部分服務供應商可能將資料儲存於香港以外地方。在此情況下，我們會採取合理措施，確保你的資料獲得相若程度的保障。
6. 我們保留多久
我們會保留這些資料，直至你要求刪除，或於你最後一次與我們互動後 24 個月，以較早者為準。其後我們會予以刪除。
若你成為客戶，我們可能需要就會計及稅務責任，將訂單及交易紀錄保留較長時間。
7. 你的權利
根據條例，你有權：
- 查詢我們是否持有你的個人資料
- 索取該等資料的副本
- 要求更正任何不準確的資料
- 隨時撤回直接促銷的同意
請電郵 WhatsApp +852 9502 8023。我們會按條例要求於 40 日內回覆。就提供資料副本，我們可能收取合理費用。
若你對我們處理資料的方式不滿，你可以向香港個人資料私隱專員公署投訴 — 但我們更希望你先告訴我們，讓我們有機會改正。
8. 資料保安
我們將個人資料儲存於設有存取權限控制的系統，並只讓有工作需要的人接觸。沒有系統是絕對安全的，但我們認真看待這件事，而且我們持有的資料本身就極少 — 這是最有效的保障。
9. Cookies
本網站目前不會設置廣告或追蹤 cookies。我們只使用瀏覽器的本機儲存空間做一件事：記住你偏好英文還是中文。若日後加入分析工具，我們會更新本頁並通知你。
10. 政策修改
若本政策有重大修改，我們會更新上方日期，並電郵通知興趣名單上的所有人。
11. 語言
本政策提供英文及繁體中文版本。如兩個版本有任何不一致之處，概以英文版本為準。