Updated on: August, 2024
Creme Concepts (HK) Limited and its affiliates (hereinafter referred to as "ICC" or "we") understand the importance of personal data to you. In order to protect your personal data and privacy, this Privacy Policy (hereinafter referred to as "this Policy") is hereby developed. Please read this Policy carefully. The terms hereof that are (possibly) significantly related to your rights and interests have been bolded by ICC for your attention and reference. Please ensure that you have carefully read and fully understood all the terms hereof before using ICC's products or services. By choosing to use or continue to use any products or services of ICC, and submitting your data (including your personal data) for our use for the purpose stated at the time of collection, you consent to our use and processing of your data in accordance with laws, regulations and this Policy.
This Policy applies to all products and services of ICC, including but not limited to ICC website ("Website"), iOS application, Android application, WeChat mini program ("APP") and other terminals and programs. Should you have any objections to or questions about the Terms of Use or this Policy, please contact us at the contact details given in "VIII. Contact Us" herein.
We may revise this Policy from time to time in accordance with laws and regulations or business adjustments. In the event of any change to this Policy, we will display the content changed to you in the form of prominent reminders, push notifications, messages, etc. Please understand that we will collect, use, process and store your personal data in accordance with the changed policy only if you confirm and agree to the changed policy. You have the right to refuse the changed policy, but please be aware that once you refuse the changed policy, you may not be able to use or continue to fully use the relevant services and functions of ICC, or the services and functions will not achieve the intended effect. In case of any discrepancy between the Chinese and English versions of this Policy, the English version shall prevail.
Before using the products or services of ICC, please confirm that you are capable of agreeing to and complying with this Policy and are solely responsible for all your actions hereunder. If you do not possess the aforementioned capacity appropriate to your behavior, you may use the products or services of ICC only with the knowledge or consent of your legal guardian(s). If you are a minor, please read this Policy, especially the terms concerning minors, and determine whether you agree to it together with your legal guardian(s). The exercise and performance of the rights and obligations hereunder by a minor shall be deemed to have been approved by the legal guardian(s).
ICC collects and uses personal data that you voluntarily provide during the use of our products/services or that are produced by the needs of our products and/or services in accordance with laws and regulations as well as the principles of legitimacy, legality and necessity. If we intend to use your personal data for other purposes not specified herein in order to provide you with our products or services, or use the collected data for a specific purpose, we will inform you in a timely and reasonable manner, and seek your consent again before use.
There are two types of personal data we collect and use. One type is the data necessary for the core business functions of our products and/or services. Such data is necessary for the proper operation of the products and/or services, and you must authorize us to collect it. If you refuse to provide such data, you will not be able to use our products and/or services normally. The other type is the data that may be collected for additional business functions. Such data is necessary for non-core business functions, and you may choose whether to authorize us to collect it. If you refuse to provide such data, the additional business functions cannot be enabled or achieve the intended effect, but your normal use of the core business functions will not be affected.
If you place an order and choose self-pickup or takeaway service (if applicable) on ICC Website or APP, you need to provide us with your location data so that we can recommend and show you the menus (product lists) and the marketing materials of special offers of the stores near you. Precise location data can indicate that you know the distance from the stores to you. Once you enable the positioning function of the mobile device through system authorization, we will obtain your location data using such technologies as IP address, GPS, WLAN (such as Wi-Fi) access points, Bluetooth and base stations that can provide relevant data, as well as real-time
data containing your location provided by you or other users (we only collect your location at that time, and will not determine your whereabouts based on your location data at different time periods), such as your location data contained in the account data you provide. You can disable the positioning function in the system of your mobile device to stop our collection of your location data, but this may prevent you from using our location-based services or prevent the services from achieving the intended effect.
When you browse or use the search function of ICC Website or APP, we need to collect some data from you, including the following personal data: your device information, your log information (including the words or expressions you search), your browsing history and time, the time and number of you searches, and your location data (including the distance between the merchant and you). We collect such data in order to provide, improve and develop our products and services.
When you file a complaint, appeal or consultation with ICC, in order to protect your account and system security, you should provide account information first, which will be used to match with your previous personal data to verify your user identity. Meanwhile, in order to contact you or help you solve problems, you should also provide such personal data as name, mobile phone number, email address and other contact details (sensitive personal data). In addition, we will collect the communication information between you and us (including text/images/audio/video/call logs), and other necessary information related to your needs. We collect such information in order to investigate facts and help you solve problems. If you refuse to provide such information, we may not be able to provide you with timely feedback on the results of the complaint, appeal or consultation.
When you purchase goods or services on ICC Website or APP (if applicable), you should provide certain information associated with the completion of transactions, including information about the goods or services traded and consignee details (consignee name, delivery address and contact number) (sensitive personal data). In addition, we will collect some other order- related information, including transaction amount, order time, order number, order status, payment method, payment serial number, and payment status. We collect such information in order to help you complete transactions successfully, ensure your transaction security, query order information, and provide customer service.
When you enable a membership service, order goods, top up, etc. on ICC Website or APP, you need to use the payment function. During the payment process, we will collect your financial account data, such as credit card number, account name, bank card number, deposit bank, user ID of a third-party payment channel and other payment data. The above data is necessary for us to provide you with the goods and/or services you purchase, and we are unable to acquire your personal property information based solely on such data.
In order to ensure system stability and security when you use our products and/or services, prevent your personal data from being illegally acquired, more accurately prevent fraud, and protect account security, we need to collect your data to determine the risk of your account. Such data includes device information (including IP address, IDFA, device unique identifier (such as MEID/UDID/OPENUDID), MAC address, IMEI, OAID, SIM card data, WiFi data (such as BSSID/SSID/ICCID), network status, device model and status, GUID, network environment, software installation list, operating system type and software version), Internet access records, and log data. We will use such data to screen potential system risks, security risks, and data anomalies. If you do not provide such data, we are unable to protect your account security and account rights.
We may install CCTV systems and, where appropriate, record video and/or audio. In addition, we may maintain records as permitted by applicable laws. We collect such data in order to ensure the safety of our stores.
When you click on the link in the SMS sent by the Workstation, we need to collect some data from you, including your ID card number/passport number (for authentication), health status, contact details and other basic personal information (sensitive personal information). We collect such information in order to support personal management and protect personal income rights. Only by providing true and accurate information can you successfully use the above services. If you refuse to provide such information, we may not be able to protect your personal income rights in a timely manner.
In order to provide you with better services, you can choose our extended functions, and we will collect and use the following data according to law and your authorization. Such data will be collected in the specific functions and business scenarios you choose, and if you do not provide such data, your use of basic functions will not be affected.
To provide you with updates on our brands, products, services and promotions or other market information (such as discount coupons) or other marketing offers (including co-branded offers on food, beverage and catering services and discounts from affiliates and partners) for direct marketing purposes ("direct marketing"). To the extent permitted by applicable law, this service may be provided by notice, email, advertisement, SMS, phone call and post. We may conduct certain activities and promotions on third-party websites and/or social networks. Such use of your personal data is on a purely voluntary basis. You may object to the processing of your personal data for this purpose and unsubscribe according to our instructions. For example, you may unsubscribe from direct marketing SMS by replying "TD" by SMS according to the SMS prompt. For more about how to modify your preferences for marketing communications, please contact us at the contact details given in "VIII. Contact Us" herein. If you unsubscribe our direct marketing messages, we may also send you non-direct marketing messages, such as e-mails related to your account or our ongoing business relationship.
To use the upload function, you need to enable the camera permission. Please understand that even if you have agreed to enable the camera permission, we will only acquire relevant data through the camera when you click on the above function in the client. If you do not use the above function, you may reject the permission.
You can choose to enable the album permission of the system, and authorize us to access your album by uploading pictures and videos, so that you can publish content by uploading photos or videos. We will collect the above information you choose to upload and publish. You can disable this function in the system permission. Once you disable it, you may not be able to change your avatar by uploading pictures or videos, but your use of basic functions will not be affected.
In order to improve our products and/or services, provide you with information search and transaction services, or conduct direct marketing with you, we may send you information about transaction performance processes and business. If you do not want to receive push messages or SMS (if applicable) on information about transaction performance processes and business from us, you can disable relevant permission on your mobile phone, that is, you can change the status in "Mobile Settings-Privacy Management-Permission Management" (setting paths vary from manufacturers' models, and you can refer to the manufacturers' setting instructions) to disable push messages from ICC APP, or you can disable relevant permission on WeChat, that is, you can change the status in "Mini Program-Settings-Subscribe Message" to disable push messages from our mini program; or you can disable your permission according to our instructions, for example, you may or can edit and send an SMS reply according to the SMS prompt.
In order to ensure that you continue to enjoy comfortable and caring services in the future, we may collect and store your specific requests. If you agree (and your consent is required), we will record your login account/email address or display name so that you can quickly log in the next time, or easily retrieve products previously placed in your shopping cart, or note down diet and other special requests. We will use relevant data to (i) analyze your preferences and habits,(ii) meet your needs based on the analysis of your personal data, and (iii) improve and personalize your website and APP experience, so as to ensure that the content available on our Website/APP is optimized for you and your computer or device. Such use of your personal data is voluntary, which means that you can object to the use of your personal data for this purpose and revoke your consent in accordance with corresponding instructions. You can also contact us at the contact details given in "VIII. Contact Us" herein.
You understand and agree that the above extended functions may require you to enable your location data (location), camera, and album (gallery) in your device to realize the collection and use of the data involved in these permissions. You can check the status of these permissions one by one in "Mini Program-Settings" and decide when to enable or disable these permissions. Please note that by enabling any permission, you authorize us to collect and use relevant personal data to provide you with corresponding services, and by disabling any permission, you cancel your authorization, and we will no longer collect and use relevant personal data based on the corresponding permission, and will not be able to provide you with the services corresponding to such permission. However, your decision to disable a permission will not affect the previous data collection and use based on your authorization.
You understand and agree that we may collect and use your personal data without your consent in the following circumstances:
We value the protection of your personal data. Your personal data is an important basis and component of the products and/or services we provide to you. We only collect and use your personal data for the purposes and within the scope specified herein or in accordance with laws and regulations, and strictly keep it confidential. In general, we will not share your personal data with any company, organization or individual, except in the following cases:
(1) Service providers that provide functional support for our products and/or services, such as payment institutions that provide payment services, and third-party companies that provide delivery services. We share data with them solely for the purpose of implementing the functions of our products and/or services;
2) Partners who entrust us with data promotion and advertising: You acknowledge that we have the right to share analytical/statistical data from our use, de-identification or anonymization of your relevant data with our partners who entrust us with data promotion and advertising to assist them in advertising or making decision recommendations. We undertake that we will not share personal data that can identify you without your consent.
We will not transfer your personal data to any company, organization or individual unless we obtain your express consent. In the event of a merger, acquisition or bankruptcy liquidation, which may involve the transfer of personal data, we will require the new company or organization that holds your personal data to continue to be bound by this Policy. If there is any change in the collection and processing of personal data as agreed herein, the company or organization will re-seek your authorization and consent.
the strictest personal data security protection measures and means to protect it during and after public disclosure.
Please understand that in accordance with the provisions of laws and regulations, your prior authorization and consent is not required for the sharing, transfer and public disclosure of your personal data in the following circumstances:
We understand your concerns about personal data, and will do our best to ensure that you have the right to access, correct, delete and revoke authorization to your personal data so that you have full ability to protect your privacy and security. You have the following rights:
You can check the following personal data you have provided to us according to the instructions (or settings) of our products and services:
As mentioned above, relevant permissions to use your device (including location, camera, microphone, and schedule, depending on the actual functions acquired by the products) are required to enable some functions of our products and services. You can revoke (or cease) the continued authorization of such permissions at any time after authorization. You can also permanently revoke all authorization for us to continue collecting your personal data by de- registering your account. Please understand that after you revoke your authorization, we will not be able to provide you with the specific features and/or services corresponding to the revoked authorization. However, your decision to revoke authorization will not affect the previous processing of personal data based on your authorization.
You can apply for account de-registration in "Me - Settings - Account and Security - De-register Account" or through customer service. Once you de-register your account, you will no longer be able to log in and use our products and services with that account; all rights and interests that have been produced but not used during the use of ICC and its other products and services as well as future overdue interests under the account will be cleared; and the content, data, records, etc. under the account will be deleted or anonymized, unless otherwise provided by laws and regulations. After the account is de-registered, it cannot be restored.
Should you have any questions about the disposal of your personal data, please contact us at the contact details given in "VIII. Contact Us" herein.
data of minors when permitted by laws and regulations, expressly agreed by guardians or necessary to protect your rights and interests.
1.3.Contact us by post at Ground Floor and Cockloft of No. 18 Gough Street, Hong Kong
respond to you as soon as possible within 15 working days after receiving your comments and suggestions and verifying your user identity. In addition, please understand and be aware that we will not be able to respond to your request in relation to your personal data in the following circumstances: