CPCS is a wholly owned subsidiary of Cathay Pacific Airways Limited.
1. Our Commitment to Protect Your Personal Data
2. The Personal Data We Collect
We may collect the following personal data of you through our websites, mobile applications and other channels that you interact with us:
a. Your demographic information such as your name, gender and date of birth;
b. Your contact information such as your telephone numbers, mailing addresses and email addresses;
c. Your business information such as your employer’s name, contact information and your staff number;
d. The information about your transactions with us, such as the goods and services you purchase from us;
e. Your responses to market surveys and contests conducted by us or on our behalf.
It is voluntary for you to provide your personal data to us. However, if you do not provide certain personal data, we may not be able to provide you with our products or services.
3. Purposes for which the Personal Data are Collected and Used
We may use your personal data for one or more of the following purposes:
a. To process and administer your purchase orders with or through us;
b. To provide you with any products or services you requested from us, including our delivery services and the online services available at our websites;
c. For marketing and promotional purposes, such as sending you information about our products and services, with your consent (please see Section 5 - "Direct Marketing" for details);
d. For customer relationship management purpose;
e. To administer customer loyalty programmes run by CPCS or the group companies of Cathay Pacific Airways Limited (“Cathay Pacific group companies”);
f. To conduct market research;
g. To improve our products and services;
h. To contact you regarding your enquiries;
i. To handle any complaints filed by or related to you;
j. To comply with any legal requirements, or orders, directions or requests from any court, authority or government body of any jurisdiction, which may be within or outside of Hong Kong.
We may from time to time use aggregated non-identifying information about our customers to improve our services, products or websites. For these purposes, we may disclose the aggregated non-identifying information to third parties. This information will not be able to identify any specific customer.
Except as provided below, we will not knowingly or intentionally use or share the personal data you provide to use in ways unrelated to the aforementioned purposes without your prior consent.
4. Disclosure and Transfer of Personal Data
CPCS may disclose and transfer your personal data to and jointly use your personal data with (whether within or outside Hong Kong) Cathay Pacific group companies, our business partners, service providers, and other persons who we consider appropriate, for fulfilling the purposes described above.
The entities with whom we may share your personal data include but are not limited to:
a. Cathay Pacific group companies, including but not limited to, Cathay Pacific Airways Limited, Asia Miles Ltd., Cathay Holidays Limited, and Hong Kong Airport Services Ltd.;
b. agent, contractor or third party service provider who provides administrative, marketing and research, distribution, information technology, data processing, telemarketing, telecommunications, computer, or other services to CPCS in connection with the operation of its business; and
c. other business partners such logistic service providers, loyalty programme operators and other companies involved in providing customer service or fulfilling customer requests.
Where permitted by applicable laws, we may also disclose your personal data to third parties, such legal advisors, to enforce our agreements with you, to establish legal claims or defenses, to obtain legal advice, to exercise and defend our legal rights, to protect our rights or property and those of Cathay Pacific group companies, or to protect the life, body or property of an individual.
We may also transfer any information we have about you as an asset in connection with a merger or sale (including transfers made as part of insolvency or bankruptcy proceedings) involving all or part of CPCS or as part of a corporate reorganization or stock sale or other change in corporate control.
Please be advised that the personal data that CPCS collects or obtains may be transferred to jurisdictions that offer lesser protection of personal data than that provided in Hong Kong. By submitting personal data to CPCS, or by using our services, websites or mobile applications, you understand and consent to such transfer.
5. Direct Marketing
We may use your personal data (including your name, telephone numbers, mailing addresses, email addresses and purchase history) to send you information about our products and services (including food, beverage and catering services), loyalty programmes, and other related promotions. We will not use your personal data for this purpose unless we have received your consent or indication of no objection.
We do not give your personal data to others for them to market their products and services to you. If we plan to do this, we will get your separate consent beforehand.
You may opt-out from receiving marketing communications from us at any time, free of charge, by:
a. following the opt-out instructions contained in the relevant communications;
b. writing to us at the addresses listed under Section 11 – “Contact Us”; or
c. updating your communication preferences in your Deli-Delight user account through our websites or mobile applications.
CPCS uses certain monitoring and tracking technologies (such as cookies, beacons, pixels, tags and scripts; collectively referred to as “cookies”) on our websites. These technologies are used in order to maintain, provide and improve our services on an ongoing basis, and in order to provide our visitors and customers with a better experience. The four main functions of these tools are as below:
a. Site functionality cookies - these cookies allow you to navigate our websites and use our features, such as “Add to Cart”.
b. Site analytics cookies - these cookies allow us to measure and analyse how our visitors and customers use the websites, to improve both the functionality of the websites and your shopping experience.
c. Customer preference cookies - when you are browsing or shopping on our websites, these cookies will remember your preferences (like your language or location), so that we can make your shopping experience as seamless as possible, and more personal to you.
d. Targeting or advertising cookies - these cookies are used to deliver ads relevant to you. They also limit the number of times that you see an ad and help us measure the effectiveness of our marketing campaigns.
By visiting our websites, you agree to our use of these cookies on your device.
7. Links to Other Sites
Our websites may contain links to other sites that are operated by third parties with different privacy policies. You should remain alert when you leave our website and read the privacy policies of other websites. We have no control over the personal data that you submit to or receive from these third parties.
No data transmission over the Internet, a website, mobile application or via email or other message service can be guaranteed to be secure from intrusion. However, we maintain commercially reasonable physical, electronic and procedural safeguards to protect your personal data against unauthorised or accidental access, processing, erasure, loss or use.
All personal data we collect about you is stored on our or our contractors’ secure servers. We comply with our security policies and standards when accessing or using this information and restrict access to your personal data to those persons who need to use it for the purpose(s) for which it was collected.
You are responsible for keeping any information that we send to you secure and for complying with any other security procedures that we notify you of. In particular, where we have given you (or where you have chosen) a password which enables you to access certain parts of our website or mobile applications, we ask you not to share a password with anyone.
9. Retention of Personal Data
CPCS maintains and executes retention policies of records containing personal data to ensure personal data is not kept longer than is necessary for the fulfilment of the purposes for which the data is or is to be used. We keep your personal data for as long as we need it to provide our products and services to you, to comply with legal obligations or to protect our or other's interests. We decide how long we need information on a case-by-case basis.
10. How to Access or Correct Your Personal Data
You may request access to and correct your personal data held by us. If you wish to obtain a copy of your personal data, or if you consider that your personal data held by us is inaccurate, please write to us at the addresses in Section 11 – “Contact Us”.
For request to access your personal data, please use our data access request form, or the one specified by the Office of the Privacy Commissioner for Personal Data.
We may charge a reasonable fee for the processing of any data access request in accordance with the Ordinance. In determining a reasonable charge for handling such requests, the cost of actual time spent by administrator(s) / manager(s) who are involved in processing a particular data access request is the basic element of the fee charged. In addition, cost of copying per sheet of paper will also be charged.
11. Contact Us
Customers requesting to exercise their rights or needing more information or clarification on specific personal data practices of CPCS may contact us at the following addresses:
Data Protection Manager
Cathay Pacific Catering Services (H.K.) Limited
11 Catering Road East
Hong Kong International Airport, Lantau, Hong Kong