Personal Information We Collect

Lucky Ace International Limited (“Lucky Ace”) is the sole and exclusive franchise holder of Arabica Coffee and Farm (“ Arabica”) in the Greater China Region. Respecting and protecting our customers’ privacy and personal information is important to Lucky Ace and its subsidiary and affiliated companies. The Personal Information we collect will only be used to provide better services and improve the Site. This Privacy Policy will help you understand how we collect, use, and safeguard your personal data in our interactions with you. It also describes your data protection rights, including the right to object to some of the processing that we may carry out. By using the Site, you agree to the collection and use of information in accordance with this policy.

When you visit the Site, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse the Site, we collect various personal information from you and the device you used to access the Site, including but not limited to the individual web pages or products that you view, the websites or search terms referred you to the Site, your geographical location and information about how you interact with the Site. We refer to this automatically-collected information as “Device Information.”

We collect Device Information using the following technologies:

- “Cookies” are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit http://www.allaboutcookies.org.

- “Log files” track actions occurring on the Site, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.

- “Web beacons,” “tags,” and “pixels” are electronic files used to record information about how you browse the Site.

Additionally when you make a purchase or attempt to make a purchase through the Site, we collect certain information from you, including but not limited to your name, billing address, shipping address, payment information (including credit card information, Paypal account, email address, and phone number). We refer to this information as “Order Information.”

In this Privacy Policy, “Personal Information” refers to both Device Information and Order Information.

HOW DO WE USE YOUR PERSONAL INFORMATION, AND WHAT IS THE LEGAL BASIS FOR THIS USE?

We use the Order Information that we collect generally to fulfill any orders placed through the Site (including processing your payment information, arranging for shipping, and providing you with invoices and/or order confirmations). Additionally, we use the Order Information to:

- Communicate with you;

- Provide you with recommendations on products in our stores and/or on our Site;

- To provide you with direct marketing communications in relation to our relevant products and services, or other products and services provided by us, our related companies and brand partners;

- Maintain your shopping cart on our Site;

- Screen our orders for potential risk or fraud;

- Fulfill any orders you may make with us (including verification and security checks of your details, processing of your payments, shipping products that you have ordered to you, and processing return or exchanges of products you have purchased);

- To analyze trends, usage and browsing and shopping behavior with us (whether on an individualized or aggregated basis), which helps us better understand how you and our collective customer base access and use our Site and services, so that we can improve our services and to respond to customer desires and preferences. For these purposes, we will use your Personal Information including but not limited to personal data relating to your gender, age, interests, geographical location, Site usage (including browsing behavior/activities), shopping behavior and other personal data; and

- Monitor use of our Site and online services, to improve and protect our products, content, services and websites, both online and offline.

We use the Device Information that we collect to help us screen for potential risk and fraud (in particular, your IP address), and more generally to improve and optimize our Site (for example, by generating analytics about how our customers browse and interact with the Site, and to assess the success of our marketing and advertising campaigns).

SHARING YOUR PERSONAL INFORMATION

We share your Personal Information with third parties to help us use your Personal Information, as described above. For example, we use Google Analytics to help us understand how our customers use the Site--you can read more about how Google uses your Personal Information. here: https://www.google.com/intl/en/policies/privacy/. You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.

WITHDRAWING CONSENT OR OTHERWISE OBJECTING TO DIRECT MARKETING

Where your consent is needed, you have the option of withdrawing that consent, although we may have other legal grounds for processing your data for other purposes, such as those set out above. Specifically, in the case of customers from the European Economic Area (EEA), we are able to send you direct marketing without your consent, where we rely on our business or legitimate interests. Irrespective of the legal basis on which we rely to send you direct marketing, you have an absolute right to opt-out of direct marketing or profiling we carry out for direct marketing, at any time. You can do this by: (a) contacting us at customercare@arabicacoffee.hk, or (b) in the case of emails, by clicking the unsubscribe link at the bottom of such emails.

WHO WILL WE SHARE THIS DATA WITH, WHERE AND WHEN?

Your Personal Information will be shared with the affiliated and related companies of Lucky Ace International Limited.

Personal Information may also be shared with government authorities and/or law enforcement officials if required for the purposes above, if mandated by law or if required for the legal protection of our legitimate interests in compliance with applicable laws.

Personal Information will also be shared with third party service providers, who will process it on our behalf for the purposes identified above. In particular, we use third party providers of courier services, e-mail/SMS/MMS/WeChat blasting services, data storage and cloud service providers (for storage of your personal data and hosting of applications that process your personal data for the purposes identified in this policy), Google and Facebook (for matching of your Personal Information with their database in order to send you our direct marketing materials through your Google and/or Facebook account(s)), digital marketing and website analytic agencies (for display of advertising materials on our Site and other websites that you may visit, and analysis of your online behavior and usage of our Site.

If you are from the EEA, where information is transferred outside the EEA, and where this is to a stakeholder or vendor in a country that is not subject to an adequacy decision by the EU Commission, Personal Information will be adequately protected by EU Commission approved standard contractual clauses, an appropriate Privacy Shield certification or a vendor's Processor Binding Corporate Rules. A copy of the relevant mechanism can be provided for your information on request to the contact mentioned in the section How do I get in touch with you below. Your Personal Information may be transferred to Hong Kong and Macau Special Administrative Regions, Mainland China, Singapore, and Japan.

WHAT RIGHTS DO I HAVE?

Where permitted by law, you have the right to ask us for a copy of your Personal Information we have collected; to correct , delete or restrict (stop any active) processing of your Personal Information; and to obtain the Personal Information you provide to us in a structured, machine readable format, and to ask us to share (port) this data to another controller.

In addition, if you are from EEA you can object to the processing of your Personal Information in some circumstances (in particular, where we do not have to process the Personal Information for business or other legitimate interests, purposes for which consent has been given (including direct marketing) or other legal requirements).

These rights may be limited, for example if fulfilling your request would reveal Personal Information about another person, where they would infringe the rights of a third party (including our rights) or if you ask us to delete information which we are required by law to keep or have compelling legitimate interests in keeping. Relevant exemptions are available under applicable laws. We will inform you of relevant exemptions we rely upon when responding to any request you make.

To exercise any of these rights, or to obtain other information, such as a copy of a legitimate interests balancing test, you can get in touch with us using the details set out below. (Applicable only if you are from the EEA: If you have unresolved concerns, you have the right to complain to an EU data protection authority where you live, work or where you believe a breach may have occurred.)

HOW DO I GET IN TOUCH WITH YOU?

If you have any concerns about how we process your Personal Information, or would like to opt out of direct marketing, you can get in touch with us at customercare@arabicacoffee.hk. You may also access, verify or update your Personal Information by logging into the Site or completing the “Customer Information Renewal Form” at one of our stores.

WHO IS THE DATA CONTROLLER?

The data controllers are Lucky Ace International Limited, and its related companies; contact details can be found in the section How do I get in touch with you above.

HOW LONG WILL MY DATA BE KEPT?

Where we process registration data, we do this for as long as you are an active user of our Site and it is required for business and legitimate interests or legal requirement [(applicable if you are from the EEA only for 7 years after any business and legitimate interests or legal requirements no longer exist)].

Where we process personal data for marketing purposes or with your consent, we process the data until you ask us to stop and for a short period after this (to allow us to implement your requests). We also keep a record of the fact that you have asked us not to send you direct marketing or to process your Personal Information so that we can respect your request in future.

(Applicable if you are from the EEA only) Where we process Personal Information for site security purposes, we retain it for 7 years after any business and legitimate interests no longer exists, and where we process Personal Information in connection with performing a contract or for a competition, we keep the data for 7 years from your last interaction with us.

Cookies

Cookies are files with small amount of data, which may include an anonymous unique identifier. Cookies are sent to your browser from a web site and stored on your computer's hard drive.

Like many sites, we use "cookies" to collect information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Site.

Security

The security of your Personal Information is important to us, but please be reminded that no method of transmission over the Internet, or method of electronic storage, is 100 secure. While we strive to use commercially acceptable means to protect your Personal Information, we cannot guarantee its absolute secured. We also suggest that you keep your computer’s operating system updated with the latest versions and to install anti-virus programs for further security and protection.

Changes To This Privacy Policy

This Privacy Policy is effective as of October 1, 2018 and will remain in effect except with respect to any changes in its provisions in the future, which will be in effect immediately after being posted on this page.

We reserve the right to update or change our Privacy Policy at any time and you should check this Privacy Policy periodically. Your continued use of our service and the Site after we post any modifications to the Privacy Policy on this page will constitute your acknowledgment of the modifications and your consent to abide and be bound by the modified Privacy Policy.

If we make any material changes to this Privacy Policy, we will notify you either through the email address you have provided us, or by placing a prominent notice on our website.

Contact Us

If you have any questions about this Privacy Policy, please contact us at customercare@arabicacoffee.hk