Privacy Policy
Last Updated: August 2026
1. Introduction
ioops BBQ Manufacturing Ltd. ("we", "our", or "us") operates the website and administrative portal (the "Service"). We are committed to safeguarding the privacy of our website visitors, customers, and registered staff members. This Privacy Policy explains our practices regarding the collection, use, and disclosure of personal data in accordance with the Hong Kong Personal Data (Privacy) Ordinance (Cap. 486).
2. Information We Collect
- Google OAuth Authentication Data: When administrators or staff sign in using Google OAuth 2.0, we collect basic profile details including your Google email address, verified display name, and avatar image strictly for identity verification.
- Account Credentials: For username & password authentication, we store your email address and an encrypted cryptographic password hash (scrypt). Plaintext passwords are never stored.
- B2B Wholesale Inquiries: When submitting wholesale inquiry forms, we collect company name, contact person, telephone/WhatsApp number, delivery district, and weekly purchase estimates.
3. Google User Data & OAuth Policy
Our application accesses Google user data via Google OAuth 2.0. We strictly limit our requested scopes to email and profile:
- We do not request access to Google Drive, Gmail, Google Photos, contacts, or any unauthorized Google services.
- Google user data is used solely to authenticate authorized staff members into our content management system.
- We do not sell, rent, or transfer Google user data to any third-party advertising networks or data brokers.
4. Data Storage & Security
All personal data is encrypted in transit (TLS 1.3 / HTTPS) and stored in secured database environments with strict role-based access control. Password credentials are protected using salted scrypt cryptographic hashing.
5. Your Legal Rights (HK PDPO)
Under the Hong Kong Personal Data (Privacy) Ordinance, you have the right to request access to and correction of your personal data held by us. To submit a data access or deletion request, please contact our privacy representative at info@wingcheongbbq.com.