Your privacy and food safety matter at every step.

When you place a meal plan order, request school or corporate food service, or contact us, we collect necessary details such as your name, contact phone number, email address, organisation or institution name, delivery location, and order preferences.

When managing meal subscriptions or dietary selections for students, we collect the student's name, school name, class/grade level, delivery schedule, and allergy/dietary requirement flags. This information is collected with the implicit or explicit consent of parents or legal guardians during the registration process to ensure safe and accurate meal delivery.

We automatically collect standard technical information, such as IP addresses, browser types, and page interaction data, to maintain platform security, manage session states, and enhance user experience.

We use your personal and organisation data to process orders, coordinate daily kitchen production, manage timely logistics and delivery, issue invoices, and provide customer support.

Dietary and allergy preferences are strictly used by our culinary team to prepare compliant, safe meals for students, staff, and corporate clients.

We may send essential order confirmations, menu updates, and service notifications relevant to your active meal plans. We do not share student dietary or allergy data with any external parties other than the designated school admin when required for safety audits.

In compliance with the direct marketing provisions of the Hong Kong Personal Data (Privacy) Ordinance, Kitchen Solutions will not use your personal data to send you promotional offers, newsletters, or marketing communications unless we have obtained your prior explicit consent.

You have the right to opt-out of receiving direct marketing materials at any time. You can execute this by clicking the 'unsubscribe' link in our emails, updating your account preferences, or contacting us at our support email.

All transactions are processed securely in Hong Kong Dollars (HKD) through PCI-DSS compliant third-party payment gateways (supporting cards, FPS, PayMe, and Octopus) or direct bank transfers. We do not store sensitive payment card credentials on our servers.

We maintain industry-standard physical, electronic, and administrative safeguards to protect your personal information against unauthorized access, disclosure, or loss, in accordance with Data Protection Principle 4 (DPP 4) under the PDPO.

We retain customer and order records only as long as necessary to fulfill service agreements and meet statutory obligations. Under Hong Kong law, transaction records and invoices are retained for 7 years to comply with tax and audit regulations. Other user account data is removed or anonymized after 2 years of prolonged inactivity.

We do not sell or rent your personal information to third parties. Information is only shared with verified delivery and logistics partners strictly required to fulfill your meal deliveries in Hong Kong.

Under Data Protection Principle 6 (DPP 6) of the PDPO, you have the right to request access to and correction of the personal data we hold about you or your child. You may also request that we delete your personal data once the service contract has concluded.

All data access and correction requests must be made in writing. Please submit your request to our Data Protection representative at our support email address. We will respond to your request within the statutory 40-day limit.

This Privacy Policy and all data handling practices are governed by the Personal Data (Privacy) Ordinance (PDPO) (Cap. 486) and the laws of the Hong Kong Special Administrative Region.