Privacy Policy

At Pirata Group, protecting our guests’ privacy is a top priority. This Privacy Policy outlines how Pirata Group Limited (“we”, “us”, “our”) collects, uses, shares, and protects your personal data in compliance with applicable data protection laws, including the Hong Kong Personal Data (Privacy) Ordinance (PDPO) and the General Data Protection Regulation (GDPR / EU 2016/679).

1. WHO WE ARE (DATA CONTROLLER)

Entity: Pirata Group Limited
Registered Office: 16C, Lee & Man Commercial Center, 169 Electric Road, North Point, Hong Kong
Email: [email protected]

2. INFORMATION WE COLLECT ABOUT YOU
   We collect personal information depending on how you interact with our restaurants, app, and websites:

Identity & Contact Data: Name, gender, date of birth, telephone number, email address, and mailing address.

Reservation & Guest Preferences: Dietary preferences, food allergies, language preferences, special occasion notes, table preferences, and visit history.

Transaction Data: Booking details, spend/redemption records, loyalty programme activity, order history, and survey or competition responses.

Payment Data: Credit/debit card details, corporate payment info, and transaction records processed securely via third-party payment gateways.

Corporate & Event Data: Company name, job title, passport or ID details (where required for private event contracts or international bookings).

Technical & Browsing Data: IP address, device type, cookie identifiers, and online interaction data.

3. HOW WE USE YOUR PERSONAL DATA & LEGAL BASIS
   We process guest personal data for specific purposes, each supported by a legal basis under applicable law:

Bookings & Table Management
Purpose: Managing reservations, pre-orders, deposits, and sending booking reminders.
Data Used: Identity, Contact, Reservation Preferences, Payment Data.
Legal Basis: Contractual Necessity.

Guest Services & Personalisation
Purpose: Managing perks across Pirata Group restaurants, the Pirata App, and our loyalty programmes to provide a tailored dining experience.
Data Used: Identity, Contact, Guest Preferences, Transaction Data.
Legal Basis: Legitimate Interest.

Direct Marketing & Promotions
Purpose: Sending news, special offers, event invites, and joint partner promotions.
Data Used: Identity, Contact Data.
Legal Basis: Explicit Consent (Opt-in required; opt-out anytime).

Customer Support & Enquiries
Purpose: Handling private dining requests, feedback, and general guest support.
Data Used: Identity, Contact, Enquiries Data.
Legal Basis: Legitimate Interest / Pre-contractual Steps.

Reviews & Marketing Features
Purpose: Publishing guest feedback on our channels (anonymised or pseudonymised upon request).
Data Used: Reviews, Identity (if permitted).
Legal Basis: Legitimate Interest / Consent.

Security & Fraud Prevention
Purpose: Securing payments, maintaining IT systems, and preventing fraudulent transactions or cyber incidents.
Data Used: Technical, Payment, Transaction Data.
Legal Basis: Legitimate Interest / Legal Obligation.

Legal & Regulatory Compliance
Purpose: Meeting tax, audit, statutory reporting, and marketing suppression list obligations.
Data Used: Identity, Contact, Transaction Data.
Legal Basis: Legal Obligation.

4. DIRECT MARKETING & UNSUBSCRIBING
   We may use your name and contact details to send you news, offers, and promotions regarding our food & beverage services, restaurant openings, loyalty programmes, space rentals, and gift cards.

Your Rights: We will only send direct marketing communications if you have opted in. You can withdraw your consent at any time, free of charge.

How to Opt-Out: Click the “Unsubscribe” link in any promotional email, or contact us at [email protected].

5. SHARING YOUR PERSONAL DATA
   We do not sell your personal data. We only share guest data with:

Pirata Group Restaurants: Authorised staff on a need-to-know basis across our restaurant portfolio.

Service Providers: Authorised IT platforms, reservation tools, payment processors, and marketing vendors bound by strict confidentiality obligations.

Corporate Restructuring: Potential buyers or partners in the event of a merger, acquisition, or asset sale.

Legal Authorities: Regulatory or law enforcement bodies when required by applicable law.

6. CHILDREN’S PRIVACY
   Our services are not aimed at children. We do not knowingly collect personal data from individuals under 18 without verifiable parental or guardian consent. If we discover such data has been provided without authorisation, it will be removed from our systems immediately.
   
   
7. DATA RETENTION & SECURITY
   Security: We enforce technical, organisational, and physical safeguards to protect guest data against unauthorised access, loss, or misuse. Account credentials should always be kept confidential.

Retention: We store your personal data only for as long as necessary to fulfil the purpose collected or as required by applicable tax, accounting, and legal obligations. Once no longer required, data is securely deleted or anonymised.

8. YOUR RIGHTS (HK PDPO & GDPR / EU GUESTS)
   Depending on your jurisdiction, you have the following rights regarding your personal data:

Access & Rectification: Ask us to update your information via [email protected]

Erasure (“Right to Deletion”): Request deletion of your personal data where retention is no longer legally required, via [email protected]

Restriction & Objection: Object to processing based on legitimate interests, or ask to restrict certain processing activities.

Data Portability: Receive your data in a structured, electronic format to transfer to another controller.

Withdraw Consent: Withdraw marketing or processing consent at any time without penalty.

Note: In accordance with the Hong Kong PDPO, we reserve the right to charge a reasonable administrative fee for processing formal Data Access Requests (DAR).

To exercise any of these rights, contact our team at [email protected].

9. POLICY UPDATES & LANGUAGE
   We reserve the right to update this policy periodically. In the event of any inconsistency between the English version and any translated version, the English version shall prevail.

Contact Us:

Pirata Group Limited
Email: [email protected]