PRIVACY POLICY
Last updated: 22 January 2026
This Privacy Policy explains how Liquorles Limited (“Liquorles”, “we”, “us”, “our”) collects, uses, shares and protects your personal data when you use our website, online store and related services (the “Services”). By using the Services, you agree to the practices set out in this Privacy Policy.
If anything is unclear, please contact [email protected].
1. Who we are
Liquorles Limited is a Hong Kong–incorporated company operating a specialty bottle shop and ecommerce store for alcoholic and non‑alcoholic beverages.
Our Services are primarily targeted at customers in Hong Kong.
2. Personal data we collect
2.1 Data you provide
Checkout (including guest checkout)
Name
Email address
Delivery address
Phone number
Contact form
Name
Email address
These fields are obligatory for the purposes stated below; if you do not provide them, we cannot process your order or respond to your enquiry.
2.2 Data from analytics tools
When you visit our website, Google Analytics may collect information such as:
Pages viewed and actions taken on the site
Approximate location derived from IP address
Device, browser and operating system information
We use this information in aggregated form for analytics and service improvement and do not combine it with your identity to profile you individually.
3. Purposes and legal bases
We use your personal data for the following purposes:
Order fulfilment and operations
Processing and delivering your orders
Sending order confirmations, invoices and delivery updates
Handling returns, refunds and related issues
Customer support
Responding to enquiries submitted through the contact form or email
Analytics and service improvement
Understanding how visitors use our website
Improving our product selection, layout and user experience
Direct marketing (with your consent)
Sending emails about new SKUs, workshops and seasonal offers
Creating social media custom audiences for campaigns
Events and loyalty (if applicable)
Managing event registrations and attendance
Operating any loyalty or membership programmes
Legal and compliance
Complying with accounting, taxation and other legal obligations
Exercising or defending legal rights
We rely on different lawful grounds under the Personal Data (Privacy) Ordinance (Cap.486), including performance of contract (fulfilling orders), compliance with legal obligations, and our legitimate interests (analytics, security), and we obtain prescribed consent where required for direct marketing.
4. Direct marketing
We may use your name and contact details (email address) for direct marketing only if you have given us your consent, for example by ticking an unticked opt‑in box at checkout or on our contact form.
Types of marketing:
New product launches and SKUs
Workshops, tastings and community events
Seasonal or limited‑time offers and curated boxes
Channels used:
Email newsletters and promotional emails
Social media custom audiences (e.g. showing Liquorles ads to existing customers)
You may withdraw your consent at any time without charge by:
Clicking the “unsubscribe” link in our marketing emails, or
Contacting us at [email protected].
We do not share your personal data with third parties for their own direct marketing purposes.
5. Personal Information Collection Statement (PICS)
At checkout and on our contact form, we provide a concise Personal Information Collection Statement in line with PDPO requirements. In summary:
The fields collected are obligatory for the relevant purpose (e.g. order fulfilment, responding to your enquiry).
If you do not provide the requested data, we may not be able to process your order or reply to you.
The main purposes and classes of transferees (such as payment processors, hosting providers and analytics services) are clearly stated.
You are informed of your rights of access and correction and how to contact us.
6. Cookies, Google Analytics and similar technologies
We do not currently use cookies for behavioural tracking or retargeting, but we use Google Analytics to help us understand how our website is used.
Google Analytics may collect information such as pages viewed, time spent on pages, and device and browser information.
This information is used only for analytics and service improvement and is not used by us to identify you personally or to make decisions about you individually.
You can control cookies and analytics by adjusting your browser settings (e.g. blocking or deleting cookies) or using Google’s opt‑out tools; some site functions may be less optimised if analytics cookies are disabled.
7. How we share personal data
We do not sell your personal data. We may share it with:
Payment processor (Stripe)
Hosting, CDN and IT service providers
Professional advisers and authorities
These service providers act under contractual and confidentiality obligations and may only use your data for the purposes described above.
8. International data transfers
Some of our service providers (such as Stripe, DigitalOcean and Cloudflare) may store or process your personal data on servers located outside Hong Kong (for example, in the United States, European Union or other jurisdictions).
We take reasonably practicable steps to ensure that any such transfers comply with the PDPO and that your data receives a level of protection comparable to that in Hong Kong, including through contractual safeguards, access controls and limited use commitments.
9. Data retention
We keep your personal data only for as long as necessary to fulfil the purposes described above or to meet legal, accounting or reporting requirements.
Indicatively:
Order and transaction records: retained for up to 7 years to meet tax, accounting and contract‑limitation requirements.
Marketing data: retained while you remain subscribed and for a limited period of inactivity (for example, up to 24 months), or until you withdraw consent.
Contact enquiries: retained as long as necessary to handle your request and for a reasonable period for follow‑up and record keeping.
When data is no longer required, we will erase it or irreversibly anonymise it in accordance with PCPD guidance.
10. Data security
We take all reasonably practicable steps to protect personal data against unauthorised or accidental access, processing, erasure, loss or use, including:
Use of HTTPS for data transmission and industry‑standard encryption.
Secure hosting and backups via reputable providers.
Restricted administrative access to backend systems to founders only and regular review of access.
Internal awareness of privacy obligations among founders.
No method of transmission or storage is completely secure, so you should also take care to protect your account credentials and devices.
11. Data breaches
If we become aware of a personal data breach that is likely to result in a real risk of significant harm, we will take prompt steps to contain and assess the incident and, where appropriate, notify affected individuals and/or the Office of the Privacy Commissioner for Personal Data in line with applicable guidance.
12. Children and minors
Our Services and products are intended for persons aged 18 or above. We use an age‑confirmation mechanism on our website and do not knowingly collect personal data from persons under 18.
If we learn that we have collected personal data from a minor, we will delete it as soon as reasonably practicable. Parents or guardians may contact [email protected] to request deletion.
13. Your rights
Subject to the PDPO, you may have the right to:
Request access to the personal data we hold about you.
Request correction of inaccurate or incomplete data.
Request deletion of data that is no longer necessary for the purposes for which it was collected.
Object to or withdraw consent for direct marketing at any time.
We aim to respond to data access or correction requests within the time limits set by the PDPO (normally within 40 days). Reasonable administrative fees may be charged for processing data access requests as permitted by law.
To exercise your rights, please contact [email protected] with your name, email address and phone number so we can verify your identity.
14. Contact us
If you have any questions or concerns about this Privacy Policy or our data‑handling practices, please contact:
Liquorles Limited
Email: [email protected]
15. Updates to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our Services, technologies or legal requirements. The “Last updated” date at the top indicates the latest version, and your continued use of the Services after any changes constitutes your acknowledgement of the updated policy.