Privacy Policy

2. The Company and the Developer

The organisation responsible for this website and for the decisions about how guest information is handled is MING HING RESTAURANT GROUP (HK) LIMITED, a company arranged under the law of Hong Kong. The registered and operating address for correspondence is:

The websites of the group are created and maintained with the involvement of the developer Ming Hing. Where this policy speaks of the group or of the Company, it means the business name given above acting through its team and its appointed service partners. Whenever a page on this site speaks about local cooking teams or the group desk, that voice belongs to the Company. Questions about technical operation, security or the behaviour of the website itself may be addressed to the group desk and will be handled with the developer when engineering answers are required. The Company remains the controller for guest data and the first point of contact for any request.

3. The Information We Collect

The type of information collected falls into a few honest buckets. Contact details arrive when a person uses the reservation form, writes an email or rings the linked number. That set normally includes a name, an email address, a telephone number and, when supplied, a company or party name. Booking details cover the preferred date, the number of guests, the chosen outlet, seating notes and any dietary or allergy flags. Correspondence history is kept so the desk does not make a guest repeat an earlier request. Technical data is gathered quietly by the hosting layer, including the type of device, the browser, the general region of access and the pages visited, none of which reveals an identity on its own. Payment information is accepted only through licensed gateways and is never stored on the group servers. Finally, if a person applies to join the group kitchen as staff or partner, application details are held for the recruitment process.

4. How Information Is Gathered

Information reaches the Company by deliberate action and by simple operation. A deliberate action occurs when a guest types a reservation, chooses to send an enquiry or agrees to receive news. That information is provided freely and can be withdrawn at any time. Operational collection happens automatically: the hosting network logs the technical fingerprints of each visit so that the site stays fast and secure, and small files placed on the device support preferences and traffic measurement. In both cases the aim is equal. The Company does not reach for more detail than a good host needs to run a table and answer a question. No personal data is bought from brokers, scraped from public posts without reason or guessed from device lists. Where a third party supplies the Company with a lawful list, that supply is documented before any approach is made to a new guest.

5. Privacy for Children

The dining rooms welcome families, and children often join the dim sum table, but the website is not directed at children and does not try to collect detail from anyone below the relevant age of consent. A reservation made for a family may include the first name and age range of a young guest so the kitchen can offer a suitable portion, yet that detail is kept no longer than the booking and is never used for advertising. Parents or guardians control the account and the decisions attached to it. If the Company learns that details of a young child were given without proper consent, the record will be removed without delay. A guardian who notices such a record may ask for deletion through the group desk and the request will be honoured both quickly and completely, with a written confirmation of what was erased. The youngest guests on the floor deserve the same respect at the door of a website as they receive at the door of a restaurant.

6. The Use of Personal Information

Guest information exists to serve one master purpose: to place a warm, well timed meal in front of a happy table. In service of that goal the Company uses contact details to confirm bookings, to answer messages and to follow up after a visit when a guest asks for one. Booking details plan the covers and the prep so no steamer is wasted and no guest is left standing. Allergy flags protect health and shape safe menu choices. If a guest chooses to opt into news, the Company may send seasonal menus, private dining invitations and openings relating to the group, always with an easy way to stop. Payment data is handed only to the licensed processor for that single transaction. On rare occasions details support an internal audit or a dispute. In every use the Company starts from a narrow view and widens only when the guest has agreed, the law requires it or fairness demands an answer.

7. Legal Bases for Processing

Lawful processing stands on one of several clear foundations. Performance of a contract covers the moments when detail is needed to hold and deliver a booking a guest has asked for. Legitimate interest covers the quiet technical work such as keeping the site safe, counting traffic and linking a reservation to a correct kitchen list, always weighed against the expected privacy of the person involved. Consent covers optional activities like signing up for marketing, and consent may be withdrawn as freely as it was given. Compliance with a legal obligation covers tax, health, safety and any regulator request that has a proper basis. Where an activity does not fit one of these foundations, the activity does not happen. The balancing test behind legitimate interest is reviewed when this page is updated, and a guest who disagrees with a judgment may raise the point with the group desk to see the reasoning in plain language.

8. Sharing and Disclosure

The Company shares guest details cautiously and only as far as the table needs. Payment processors see what is required to clear a charge and nothing else. A delivery partner sees an address only if a dish is truly being carried to a doorstep. Systems partners who host the email or hold the reservation board act under instruction and may not use the details for their own aims. Restaurant venues inside the group share the reservation board so the right kitchen receives the right chit, but each remains bound by this same policy. Authorities receive data only where a lawful and specific request is presented. The Company does not sell personal information, does not rent a subscriber list and does not trade guest tables for advertising gain. Any wider sharing, such as a new owner of the group buying the full business, happens only after notice and with the same affection for privacy carried into the new kitchen.

9. Cookies and Site Technology

A cookie is a small file saved by the browser so a site can remember a preference between visits. The group websites use the least that is honestly needed. Strictly necessary cookies keep the reservation flow working and hold no interest for any advertiser. Preference cookies may remember how a page was last laid out. Measurement cookies help count visits and see which menu sections draw the most interest, all in a form that cannot name a single guest. Marketing cookies are not set until a guest opts in. Browsers let a person clear or block cookies at any time, and blocking the necessary kind only slows the booking form. On the kitchen floor of the web the principle is the same as on the cooking line: keep the rack clean, take only what the serving requires and be transparent about where each pot sits. Visitors are welcome to run the site with cookies disabled and lose only a little convenience.

10. Data Security Measures

Protection begins the way a good stock begins: with clean equipment and careful hands. All pages on the group websites are served over an encrypted connection so the trip between the browser and the kitchen is private. Access to guest records is limited by role; a server sees only the orders of the room and a desk lead sees the wider board, with a note kept of who looked and when. Passwords are stored in a form that cannot be read back to plain text, and keys rotate on a fixed calendar. The hosting provider keeps its own certified defences, patched on schedule and watched round the clock. Backups are sealed so a failure in the data room cannot scatter records to the wind. Training reminds the team that a login is like a ladle: useful only when held by the right hand. No system is perfect, but the Company presses every knob tight and responds fast when any seal shows a weakness.

11. Data Retention

Records are kept only while they still have work to do. A reservation detail lives for the booking, the visit and the settlement that follows, then retires when its purpose ends. Contact history stays for a reasonable window so the desk can serve a returning guest with memory intact, and that window is reviewed on a schedule, not left to drift. Financial records are held for the period ordered by tax law because a quiet year later may need an honest answer. News opt in lists are refreshed, and addresses that stop engaging are quietly retired. Anonymised counts may remain indefinitely because they cannot point to one person, but anything that names a guest has a shelf life on the label. When a record is due to go, deletion is done with the care of closing out a chit, so nothing lingers in a forgotten drawer waiting to embarrass either the guest or the kitchen that served them.

12. Your Rights and Choices

Every guest holds a set of switches over their own detail. The right of access allows a request to see what the Company holds and why. The right of correction replaces a stale number or a misspelled name with the truth. The right of erasure asks that a record be deleted when its purpose is spent. The right to object raises a polite challenge to use founded on legitimate interest, and the profile is checked again each time. The right to restrict asks that a record be frozen while a dispute is settled. Where consent is the base, withdrawal turns off that channel at once and without a fuss. These requests cost nothing to make and the desk answers within the window set by law. A guest who feels unheard may write to the supervisory return address with a complaint. Exercising a choice never penalises a table; the kitchen team stays glad to serve whether a guest stands on every right or simply wants dumplings and tea.

13. International Transfers

The group works across venues in Hong Kong and serves guests who travel from many ports, so a booking or an enquiry may at times cross more than one country. The seat of the business, and therefore the anchor of this policy, sits in Hong Kong at the address shown above. Where information must travel to another place, the Company relies on safeguards that keep the cargo as safe as the day it left the dock. These safeguards include written contract clauses shared with partners, careful choice of hosting regions and a policy of keeping data close to its work whenever that is possible. A transfer is never made for its own thrill; it happens only so a table can be set or a message answered. A guest who wants to know which regions might hold a record at any moment may ask the group desk and receive a plain answer, because a good host never leaves a guest guessing where the private note has gone.

14. Third Party Services

Parts of the site rely on tools built by others, the same way a kitchen leans on a trusted knife maker. Reservation software holds the live availability board. An email service carries the messages the desk sends. Payment platforms clear the meal cards. Analytics tools count the crowd at the passes. Each of these partners receives only the slice of data its task demands and nothing more. Partners agree in writing to treat the data as confidential, to keep it secure and to return it when the work ends. The Company reviews its partner list on a set cadence and drops any tool that stops earning its trust. Where a partner hosts records on its own stack, that partner owns its security duties while the Company stays answerable to the guest for the whole chain. Nothing a partner sees gives it leave to message a guest or to sell that guest to another table. Suppliers cook beside the group only while they keep the same hygiene.

15. Analytics and Advertising

The group website studies its foot traffic the way a chef studies a service rush. Aggregated numbers show which pages help most, whether the mobile booking form stumbles and which stories bring hungry readers to the menu. These counts are built in a way that cannot single out one visitor; interests are read in the group, never in the individual. Advertising, where it runs, is honest and narrow, pointing neighbours and travellers to a real table rather than chasing each person across the web. Interest is followed only when a visitor has agreed to that kind of tracking, and every ad system offers a control to turn the trail off. Cookies that exist to measure or advertise are optional and explained in the banner that greets first time visitors. In all of this the Company remembers that a statistic is not a guest; behind every bar on the chart sits a person who wants good food and a quiet evening, not a round of surveillance.

16. Social Channels and Messaging

The group keeps a friendly presence on social platforms and messaging services so guests can find a dumpling fix in the place they already spend time. When a person sends a note, tags the group in a post or follows an account, the platform itself holds that detail under its own rules, and the Company receives only what that platform chooses to share. Recommendations, reviews and pictures posted by guests are used to answer questions and, with permission, to show real tables to new friends. The Company never scrapes a follower list or messages a person who has not reached out first. A private booking made through a chat app is handled with the same care as one made by phone and moved onto the secure reservation board as soon as a date is fixed. Anyone who wants a conversation removed from the group archives may contact the desk and the thread will be closed and tidied without reproach.

17. Updates to This Policy

Rules can ripen like a stock left too long, so this notice is checked on a regular cadence and refreshed whenever the kitchen changes its ways. When a material change lands, such as a new purpose for data, a wider sharing step or a different retention window, the top of this page carries a new effective date and the summary above is adjusted to match. Guests who hold an active booking or an open conversation will hear of a significant change directly. Continued use of the site after a change means a guest is comfortable with the new terms, though a person who disagrees remains free to ask for deletion or to step away from the newsletter list. Older versions of the policy remain available on request for anyone who wants to trace how the standard has grown. Transparency is not a one day dish; it is a habit stirred in every time the records are reconsidered, so the notice stays as fresh as the morning pastry.

18. Contact Details and Complaints

The quickest way to reach the person in charge of guest privacy is the group desk. A message, a call or a written note each reach the same careful team. For full formal correspondence the Company can be met at the address in section 2. A friendly first message normally settles any confusion about a booking or a record. If an answer fails to satisfy, a guest may escalate to the supervisory authority for the place of residence and the Company will cooperate fully. Please contact us as follows.

Complaints are logged, given a reference and answered within the legal window. The entire policy above exists so a guest can eat with confidence, knowing that the record of an evening trip to a dim sum house is treated with the same care as the food that made the trip worthwhile. The steam gate is open, and the desk is glad to hear from you.