This page explains what we do with your personal data. It follows the Hong Kong Personal Data (Privacy) Ordinance (Cap. 486), which is the law that covers us.
The short version: we ask for as little as possible, we keep it to ourselves, and we get rid of it when it stops being useful.
When you message us about a booking
Enquiries reach us on WhatsApp or Telegram, so we end up holding your phone number or username and whatever you write to us. That is usually all we have about you. We don’t ask for your real name, we don’t want your ID, and we don’t keep notes about you beyond what a booking needs.
Those conversations live in our WhatsApp and Telegram accounts, which means Meta and Telegram carry the messages under their own privacy terms. We can’t change that, and it’s worth knowing before you write.
Other things the site collects
- The contact form. Whatever you type into it, typically a name, an email address and a message.
- Accounts. If you register, the username and email you sign up with.
- Comments. The comment itself and the details submitted with it.
- Analytics. Google Analytics counts visits and shows us which pages get read, roughly where visitors come from and what device they use. It’s aggregate. We can’t pick you out of it by name.
- Server logs. IP addresses, timestamps and requested URLs, the way every web server on the internet keeps them. They exist for security and for working out what broke.
Cookies
Some are essential and keep the site working: staying logged in, remembering that you confirmed your age. The rest belong to Google Analytics and count visits. Your browser can block or delete any of them, though blocking the essential ones will break things.
Who else sees any of it
- Google for Analytics and Search Console.
- Cloudflare, which sits in front of the site and keeps attacks off it.
- Meta and Telegram, if you message us on WhatsApp or Telegram.
- Our hosting provider, which stores the site and its logs.
That’s the whole list. We don’t sell your data, we don’t rent it out, and we don’t pass it to anyone for marketing.
What we never hold
No identity documents. No card numbers. No record of what you booked once it’s over and settled. If you’d rather we delete a conversation sooner than that, ask and we will.
How long we keep things
Booking conversations stay while the booking is live and for a short period afterwards, in case something needs sorting out. Contact-form messages last as long as your enquiry does. Accounts and comments stay until you ask us to remove them. Logs and analytics roll over and get discarded.
What you can ask for
Under the PDPO you can ask whether we hold data about you, ask for a copy, and ask us to correct it if it’s wrong. You can also just ask us to delete it. Message us and we’ll deal with it inside the time the Ordinance allows.
Security
The site runs over HTTPS and sits behind a protective layer, and we hold as little as we can get away with. No website can promise perfect security, and we’re not going to pretend otherwise.
Age
This site is for adults of 18 or over. We don’t knowingly hold data from anyone younger. If you think a minor has sent us something, tell us and it goes straight in the bin.
Changes
If this policy changes, the new version appears here with a fresh date at the bottom.
Getting hold of us
Anything about privacy or your data: the contact page, WhatsApp or Telegram.
Last updated: 20 July 2026