
Privacy Policy
This Privacy Policy explains how Supreme Well International Limited collects, uses, stores, shares, and protects personal data when customers use our mobile application, ordering services, delivery services, customer support, and related services.
For the purposes of this Privacy Policy, “we”, “us”, and “our” refer to:
Supreme Well International Limited
Flat 1, 7/F, AT Tower, 180 Electric Road, North Point, Hong Kong
Telephone: +852 26980666
Our mobile application allows customers to browse durian ice cream products, place orders, make or arrange payment, and receive delivery.
1. Personal Data We Collect
We collect personal data only as reasonably necessary to provide our ordering and delivery services, operate our App, communicate with customers, and comply with applicable legal requirements. Unless otherwise specified, the provision of personal data is voluntary. However, please note that if you do not provide personal data indicated as "mandatory," we may be unable to process your orders or provide the relevant delivery and customer services. By providing any personal data to us, you consent to our collection, use, disclosure and processing of such data for the purposes set out in this Privacy Policy.
We may collect the following types of personal data:
1.1 Account and Contact Information
When you register, place an order, contact us, or use our services, we may collect:
-
Name
-
Mobile phone number
-
Email address
-
Delivery address
-
Account login details
-
Customer service messages and enquiries
1.2 Order and Delivery Information
When you place an order through the App, we may collect:
-
Products ordered
-
Order date and time
-
Delivery location or delivery address
-
Delivery instructions
-
Order status
-
Refund, cancellation, and return information
-
Customer notes or special instructions
1.3 Payment Information
We may collect payment-related information necessary to complete or verify a transaction, such as:
-
Payment method type
-
Payment status
-
Transaction reference number
-
Billing or payment confirmation information
We do not store full payment card numbers, full bank account details, or card security codes. Payments may be processed by third-party payment service providers, banks, e-wallet providers, or payment gateways, which process payment data according to their own privacy and security practices.
1.4 Location Information
If you choose to use location-based features, the App may collect your device location to help identify your delivery address or support delivery services.
You may choose not to allow location access and may manually enter your delivery address instead. You can disable location permissions through your device settings.
1.5 Device, Technical, and Usage Information
When you use the App, we may automatically collect limited technical information, including:
-
IP address
-
Device type
-
Operating system
-
App version
-
Device identifiers
-
Browser or WebView information
-
App usage activity
-
Crash logs
-
Performance data
-
Diagnostic data
We use this information to operate, secure, maintain, and improve the App.
1.6 Marketing Preferences
If you agree to receive promotions, we may collect and store your marketing preferences, such as whether you have opted in or opted out of promotional messages, coupons, offers, or push notifications.
2. How We Use Personal Data
We use personal data for the following purposes:
-
To create and manage customer accounts
-
To process, confirm, prepare, and deliver orders
-
To process payments, refunds, and transaction records
-
To contact customers about orders, delivery, payment, cancellations, refunds, or customer service matters
-
To respond to enquiries, complaints, and support requests
-
To send order status updates and service-related notifications
-
To provide receipts, invoices, and records of purchases
-
To prevent fraud, abuse, unauthorized access, and security incidents
-
To maintain and improve the App, products, delivery services, and customer experience
-
To conduct internal analytics and service performance review
-
To send promotional offers, coupons, or marketing messages where you have consented or where permitted by law
-
To comply with legal, accounting, tax, regulatory, and record-keeping obligations
-
To establish, exercise, or defend legal rights
We do not use your personal data for purposes unrelated to our food ordering, delivery, customer service, business operations, or legal compliance unless we have your consent or are otherwise permitted by law.
3. Providing Personal Data
Some personal data is required for us to provide our services. For example, if you do not provide a name, phone number, delivery address, or order information, we may not be able to accept, prepare, confirm, or deliver your order.
Other information is optional. For example, location access and promotional marketing consent are optional. If you do not allow location access, you can manually enter your delivery address. If you do not consent to marketing, you can still use the App for ordering and delivery.
4. Sharing Personal Data
We may share personal data only where reasonably necessary for the purposes described in this Privacy Policy.
We may share personal data with the following parties:
4.1 Delivery and Fulfilment Personnel
We may share your name, phone number, delivery address, order details, and delivery instructions with our staff, delivery personnel, couriers, or fulfilment partners so that your order can be prepared and delivered.
4.2 Payment Service Providers
We may share transaction information with banks, card processors, e-wallet providers, payment gateways, fraud-prevention providers, or other payment service providers to process, verify, refund, or secure payments.
4.3 Technology and Service Providers
We may use trusted service providers to support our App and business operations, including:
-
Cloud hosting providers
-
App maintenance providers
-
Customer support tools
-
SMS, email, and push notification providers
-
Analytics and diagnostic service providers
-
Security and fraud-prevention providers
These providers may process personal data only as necessary to provide services to us and are expected to protect personal data appropriately.
4.4 Legal, Regulatory, and Safety Purposes
We may disclose personal data where required or permitted by law, regulation, court order, government request, law enforcement request, or where disclosure is necessary to protect our rights, customers, staff, property, or the safety of others.
4.5 Business Transfers
If our business is involved in a merger, acquisition, restructuring, sale of assets, investment, financing, or similar business transaction, personal data may be transferred as part of that transaction, subject to appropriate confidentiality and data protection measures.
5. No Sale of Personal Data and No Third-Party Advertising Tracking
We do not sell personal data.
We do not provide personal data to third parties for their own direct marketing without your consent.
We do not use the App to track users across third-party apps or websites for targeted advertising.
6. Direct Marketing
With your consent, or where otherwise permitted by applicable law, we may use your name, phone number, email address, order history, and marketing preferences to send you information about our durian ice cream products, promotions, coupons, discounts, new items, delivery offers, and related food and beverage offers.
You may opt out of direct marketing at any time by following the unsubscribe instructions in our messages, changing your App notification settings where available, or contacting us using the contact details in this Privacy Policy.
After you opt out, we will stop using your personal data for direct marketing as soon as reasonably practicable. We may still send you non-marketing messages, such as order confirmations, delivery updates, payment notices, refund notices, service announcements, and important account or security messages.
7. Push Notifications
The App may send push notifications for order confirmations, delivery updates, customer service messages, promotions, and service announcements.
You can control push notifications through your device settings. If you disable push notifications, you may still receive important order-related messages through other contact methods, such as SMS, phone call, or email, where necessary to complete your order or provide customer support.
8. Cookies, SDKs, and Similar Technologies
The App may use cookies, software development kits, analytics tools, or similar technologies to operate the App, remember preferences, improve performance, diagnose errors, prevent fraud, and understand general usage patterns.
We do not use these technologies to sell personal data or track you across third-party apps or websites for targeted advertising.
9. Data Retention
We keep personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including order fulfilment, customer service, account management, security, fraud prevention, legal compliance, accounting, tax, audit, dispute resolution, and business record purposes.
In general:
-
Account information is retained while your account remains active.
-
Order, payment, invoice, refund, and delivery records may be retained for up to 7 years after the relevant transaction, or longer if required by law, accounting, tax, audit, dispute, or legal purposes.
-
Customer service records are retained for as long as needed to handle enquiries, complaints, disputes, and quality improvement.
-
Marketing preference records are retained for as long as needed to respect your consent or opt-out choice.
-
Technical logs and diagnostic data are retained for a limited period unless longer retention is needed for security, fraud prevention, investigation, or legal reasons.
When personal data is no longer required, we will delete, anonymize, or securely dispose of it where reasonably practicable.
10. Account Deletion and Data Deletion Requests
You may request deletion of your account or personal data by contacting us using the contact details below or through any account deletion function provided in the App.
When we receive a valid deletion request, we will delete or anonymize personal data associated with your account, unless we need to retain certain information for legal, accounting, tax, fraud-prevention, dispute-resolution, security, or legitimate business record purposes.
For example, we may need to retain order and payment records for accounting, tax, audit, refund, fraud-prevention, or legal purposes even after your account is deleted.
Backup copies may remain for a limited period before being securely deleted or overwritten in the ordinary course of our backup processes.
11. Data Security
We take reasonable technical and organizational measures to protect personal data against unauthorized or accidental access, processing, erasure, loss, use, disclosure, or alteration.
These measures may include:
-
Encrypted transmission where appropriate
-
Access controls
-
Password protection
-
Staff access restrictions
-
Secure hosting arrangements
-
Security monitoring
-
Data minimization
-
Internal confidentiality controls
-
Contractual protections with service providers
No method of transmission or storage is completely secure. We therefore cannot guarantee absolute security, but we take reasonable steps to protect personal data.
We are committed to complying with the requirements of the Personal Data (Privacy) Ordinance. To fulfill this commitment, we will ensure that our staff strictly adhere to the highest standards of security and confidentiality.
12. International Data Transfers
We are based in Hong Kong. Personal data may be stored, processed, or accessed in Hong Kong or other locations where our service providers, technology providers, payment providers, or support providers operate.
Where personal data is transferred outside Hong Kong, we will take reasonably practicable steps to ensure that the data is protected in a manner consistent with this Privacy Policy and applicable legal requirements.
13. Your Rights and Choices
Subject to applicable law, you may have the right to:
-
Request access to personal data we hold about you
-
Request correction of inaccurate personal data
-
Request deletion of your account or personal data
-
Withdraw consent where processing is based on consent
-
Opt out of direct marketing
-
Disable push notifications through device settings
-
Disable location access through device settings
-
Ask questions about how we handle personal data
To exercise your rights, please contact us using the contact details below. We may need to verify your identity before processing certain requests.
We may refuse or limit a request where permitted by law, including where retention is required for legal, accounting, tax, fraud-prevention, dispute-resolution, or security purposes.
14. Children’s Privacy
The App is intended for customers who are able to place food orders and arrange delivery. It is not directed to children under the age of 13.
We do not knowingly collect personal data from children under 13 without appropriate consent. If we become aware that we have collected personal data from a child under 13 without appropriate consent, we will take reasonable steps to delete that data.
Users under 18 should use the App only with the involvement and consent of a parent or legal guardian.
15. Third-Party Links and Services
The App may contain links to third-party websites, payment pages, delivery tools, or services. Those third parties may have their own privacy policies and terms.
We are not responsible for the privacy practices of third parties. You should review their privacy policies before providing personal data to them.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our App, services, business operations, legal requirements, or privacy practices.
When we update this Privacy Policy, we will update the effective date. Where required by law or where the changes are material, we may notify you through the App, by message, or by other appropriate means.
Your continued use of the App after an updated Privacy Policy becomes effective means that you acknowledge the updated Privacy Policy.
17. Contact Us
For privacy questions, access requests, correction requests, deletion requests, consent withdrawal, marketing opt-out requests, or complaints, please contact:
Supreme Well International Limited
Flat 1, 7/F, AT Tower, 180 Electric Road, North Point, Hong Kong
Email: swiinfo.hk@gmail.com