At Pirata Group, protecting our guests’ privacy is a top priority. This Privacy Notice explains the types of personal data we collect, how we use that information, who we share it with, and how we protect that data in accordance with the relevant Data Protection Laws, including the Personal Data (Privacy) Ordinance of Hong Kong Special Administrative Region of the People’s Republic of China (“Hong Kong”) and the General Data Protection Regulation (EU) (2016/679).
We are equally committed to ensuring that all our officers, management and members of staff shall at all times respect the confidentiality and security of your personal information.
Who we are
For the purposes of applicable data protection laws, the data controller is Pirata Group, 16C, Lee & Man Commercial Center, 169 Electric Road, North Point, Hong Kong.
In this Privacy Notice, “we”, “our”, “us”, “ours” means Pirata Group, and “you”, “your”, “yours” means you the individual.
Information we collect about you
Although the precise details of the personal information collected will vary according to the specific purpose for which we are collecting the information, we may typically collect the following types of personal data from you:
- Your name, gender, date of birth, and credit card information
- Contact information including telephone number, email address and mailing address
- Preference information related to your visit with us, including dietary preferences and restrictions, food allergies, languages preference, cuisine and / or restaurant preference, table / section preference and related information;
- Transaction information including but not limited to reservation details, visit history, order history, spend and redemption records; and information from responses to surveys and/or giveaways completed
- If you are an overseas guest dining for business and/or organising a private event or group booking in Hong Kong, information including company name, business title, corporate credit card, corporate bank account, passport, government ID and relevant identity and contact information
How we use your personal information
We may use your personal information to:
- Provide you with information about our products and services (provided you have consented to this)
- Create and manage your booking
- Provide you with perks across Pirata Group restaurants; Pirata App; and our in-house loyalty, rewards and guest retention programs; and maintain the accounts of these programme(s)
- Contact you to notify you of any prize won by you in our competitions
- Deal with your enquiries and requests
- Contact you with news and promotional material about Pirata Group restaurants and select partners from time to time
- Combine information we receive and collect (e.g. from your requests, preferences and booking history) to understand your interests and preferences and provide you with a more personalised experience
- Measure the success of our ad campaigns
- Comply with legal requirements
- Process your payments and protect against fraudulent transactions
- Process your personal information where this is necessary to keep our website safe and secure
- Keep an up to date suppression list where you have asked not to be contacted, so we do not inadvertently re-contact you
- We may publish guests’ reviews and feedback on our website, social media platforms, newsletters, posters, or other collaterals
How do we use personal information for this purpose?
- We will need to use your personal information (such as your email address or other contact details) to send you information about Pirata Group products and services that you may be interested in [and/or to offer you opportunities to participate in competitions or surveys]
- We will need to use your personal information (such as your name, email address and credit card details) to set up and manage your booking (for example by sending you reminders about upcoming reservations or processing deposits for your booking and / or additional pre-orders such as bouquets, wines, etc. as and when required
- We will need to use your contact information (such as your email address and mobile number) to inform you if you have won a prize after entering our competitions
- We will need to use your personal information (such as your contact details) to respond to your enquiries and requests (for example, information about group bookings, private events, or upcoming special menus)
- We may use your personal information (such as email address and phone number) to contact you with news and promotional offers, provided this is in line with your marketing preferences
- We may combine the information we receive and collect about you to better understand your interests and preferences, so that we can provide you with an experience that is tailored to those interests and preferences
- We may use cookies and similar technologies to track your online behaviour (such as your clicks and purchases) and measure the success of our ad campaigns, so that we can better personalise offers for you in the future. For more information regarding how we use cookies, please see our Cookie Policy (Karen Leung pls link the cookie policy)
- We may sometimes need to process personal information to comply with legal requirements to which we are subject (for example tax or financial reporting requirements)
- We may need to process your personal information in order to keep your payments safe and secure and protect against fraudulent transactions.
- We may need to process your personal information in order to keep our website safe and secure and protect against illegal or fraudulent activity such as cyber attacks
- We understand that you may prefer for us not to contact you with details of our products, service, or promotions. We keep records of your preferences to ensure that we do not contact you if you have asked us not to. We may need to process certain of your personal information (such as your name and email address) in order to do this
- We will use your personal information when publishing your guest review, in accordance with your preferences (eg, via a pseudonym or fully-anonymised), which enables us to be honest and transparent with our guests regarding the nature and quality of our services
What is the legal basis for us processing your information in this way?
- It is in our legitimate interests to process personal information for the purposes of complying with legal requirements to which we are subject
- We will ask for your consent before processing your information in this way
- We need to process your information in this way in order to perform our responsibilities in relation to your booking
- We need to process your information in this way to help with any requests that you make prior to entering into a contract with us, such as for private events or group bookings
- It is in our legitimate interest to contact you with news and promotional material about Pirata Group and our restaurants, provided this is in line with your marketing choices
- There are certain types of promotional material that we will only send if you have specifically consented to this, for example if we send you promotional materials about products and services offered by third party organisations. For more information about how we use your information for marketing purposes and details of how to unsubscribe, see the section on Direct Marketing below
- It is in our legitimate interest to look at your preferences that we derive from your visits, app usage and browsing behaviour so that we can personalise our advertising for you, to better meet your needs as a guest
- It is in our legitimate interest to look at your browsing behaviour and purchases to measure the success of our online ad campaigns so that we can provide you with more personalised offers in the future
- It is in our legitimate interests to process personal information to keep our guests’ payments secure
- It is in our legitimate interests to monitor how our website is used to detect and prevent fraud, other crimes and the misuse of our website, and to ensure that guests can safely use our website
- It is in our legitimate interests to process personal information in order to maintain an up to date suppression list and ensure that we do not contact you where you have asked us not to
Children’s privacy
We will never knowingly collect Personal Information from individuals under the age of eighteen (18) without first obtaining verifiable parental consent. If you are under the age of 18 you should not provide information to us. If we become aware that a person under 18 has provided personal information to us without verifiable parental consent, we will remove such personal information from our files.
Sharing your data with third parties
Only our authorised staff are permitted to access our guests’ personal data held in our database. We may share your personal information across restaurants within Pirata Group. It may also be disclosed to a third party who acquires us, a member of our Group, or substantially all of our assets.
In the case of marketing communications, your data will only be shared with third parties if you have consented to do so, such as in the case of collaborations, joint competitions and the like.
Our website may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy statements and that we have no control over how they may use your personal information. You should check the privacy statements of third party websites before you submit any personal information to them.
Your rights (EEA residents only)
If you are a resident in the European Economic Area, you have the right to:
- Access. You have the right to request a copy of the personal information we are processing about you, which we will provide back to you in electronic form. For your own privacy and security, in our discretion we may require you to prove your identity before providing the requested information. If you require multiple copies of your personal data, we may charge a reasonable administration fee
- Rectification. You have the right to have incomplete or inaccurate personal information that we process about you, rectified
- Deletion. You have the right to request that we delete personal information that we process about you, except we are not obligated to do so if we need to retain such data in order to comply with a legal obligation or to establish, exercise or defend legal claims
- Restriction. You have the right to restrict our processing of your personal information where you believe such data to be inaccurate, our processing is unlawful or that we no longer need to process such data for a particular purpose, but where we are not able to delete the data due to a legal or other obligation or because you do not wish for us to delete it
- Portability. You have the right to obtain personal information we hold about you, in a structured, electronic format, and to transmit such data to another data controller, where this is (a) personal information which you have provided to us, and (b) if we are processing that data on the basis of your consent (such as for direct marketing communications) or to perform a contract with you (such as to manage your booking)
- Objection. Where the legal justification for our processing of your personal information is our legitimate interest, you have the right to object to such processing on grounds relating to your particular situation. We will abide by your request unless we have compelling legitimate grounds for the processing which override your interests and rights, or if we need to continue to process the data for the establishment, exercise or defence of a legal claim
- Withdrawing Consent. If you have consented to our processing of your personal information, you have the right to withdraw your consent at any time, free of charge This includes cases where you wish to opt out from marketing messages that you receive from us. For more information on how to opt out from marketing messages, see the section entitled “Unsubscribing from our mailing lists” below
- You can make any of these requests in relation to your personal data by sending the request by email to [email protected]
Unsubscribing from our mailing lists or loyalty programs
To unsubscribe from any mailing list, please send an email to [email protected]
Retention of personal data
Pirata Group will only retain your personal data for as long as it is necessary for the purpose for which that data was collected and to the extent permitted by applicable laws. When we no longer have a legitimate business reason to retain your personal information, or when you request that we delete your personal information (except where we need to retain it in order to comply with applicable statutory obligations or to establish, exercise or defend legal claims), we will remove such information from our systems and records.
Direct marketing
We may use your personal data including your name, contact information and other information collected to send you marketing communications including Pirata Group-related news, information about our products and services, promotions, offers, joint promotions with third parties and surveys / giveaway / competitions, provided this is in line with your marketing choices. Depending on your marketing preferences, these communications may be sent via social media, email, direct mail, SMS or telephone. You can opt out from receiving these communications at any time (see section on “Unsubscribing from our mailing lists or loyalty programme(s)” above).
Please find below the products and services provided by Pirata Group:
Food and beverage services
Loyalty programmes
Space rental
Group-related news
Other product services including but not limited to telephone service, computer and printing services, gift cards and vouchers, etc.
How We Keep Your Information Secure
We have implemented technical and organisational security measures in an effort to safeguard the personal information in our custody and control. Such measures we have implemented include, for example, limiting access to personal information only to employees and authorized service providers who need to know such information for the purposes described in this Privacy Notice, as well as other administrative, technical and physical safeguards.
While we endeavour to always protect our systems, sites, operations and information against unauthorised access, use, modification and disclosure, due to the inherent nature of the Internet as an open global communications vehicle and other risk factors, we cannot guarantee that any information, during transmission or while stored on our systems, will be absolutely safe from intrusion by others, such as hackers.
To provide you with increased security, certain personal information stored in your online account is only accessible via your username and password. You are responsible for maintaining the confidentiality of your online account credentials, and we strongly recommend that you do not disclose your online account username or password to anyone. We will never ask you for your password in any unsolicited communication. Please notify us immediately (see How to Contact Us section below) of any unauthorised use of your online account credentials or any other suspected breach of security.
How to Contact Us
If there are any questions or concerns regarding this Privacy Notice or the data collection practices outlined herein, please contact us through [email protected]
Changes to this Privacy Notice
This Privacy Notice is written in English and may be translated into other languages. In the event of any inconsistency between the English version and the translated version of this notice, the English version shall prevail.
We reserve the right to change our Privacy Notice from time to time. If we decide to change our Privacy Notice, you are recommended to visit our website regularly for the latest privacy and policies updates.
Last updated 24 January 2025
