Privacy Policy

Last updated: 24.07.2026

Bread Space respects your privacy. This Policy explains how we collect, use, retain and disclose personal data when you browse our website, submit an enquiry, subscribe for updates, create an account or place an order.

1. Personal data we may collect
Identity and contact details, such as your name, telephone number and email address.
Order and fulfilment details, such as products, quantities, pickup date, delivery address, recipient details and order notes.
Payment and transaction information, such as payment status, transaction reference and refund records. Full payment-card details are generally processed by third-party payment service providers.
Account and preference information, such as login details, language, subscription and marketing preferences.
Enquiry and customer-service records, such as messages, complaints, photographs and correspondence with us.
Technical and usage information, such as IP address, device, browser, cookies, pages visited and website interactions.

2. How we collect data
Directly from you when you complete a form, create an account, place an order, make a payment, subscribe, join an activity or contact us.
Automatically or through service providers that support the website, cookies, analytics, payment processing, delivery or other services.

3. How we use personal data
To process, confirm and fulfil orders, including payment, delivery, store pickup, refunds and after-sales service.
To verify identity, communicate with you and respond to enquiries, feedback or complaints.
To operate the website, manage accounts, maintain security, manage risk and prevent fraud.
To improve products, services, website functions, operations and customer experience.
With your consent, to send information about new products, promotions, activities and festive ordering.
To comply with legal, regulatory, accounting and record-keeping obligations, and to establish, exercise or protect legal rights.

4. Mandatory and voluntary information
Information marked as required is necessary to complete an order. If you do not provide it, we may be unable to process payment, delivery, pickup or the relevant service.
Information that is not marked as required is voluntary, and not providing it will generally not affect basic ordering services.

5. Disclosure and transfer
We disclose relevant personal data only where necessary to provide services or comply with law, including to payment processors, logistics or delivery providers, website hosting and technology providers, email or messaging providers, professional advisers, law-enforcement or regulatory authorities.
Service providers should process personal data only for the entrusted purpose and apply appropriate safeguards.
Some providers or systems may be located outside Hong Kong. When these services are used, personal data may be processed or stored in another jurisdiction.

6. Direct marketing and subscriptions
We will use your name, email address, telephone number or related contact details to send information about breads, cakes, pastries, gift sets, promotions, activities and Bread Space updates only after obtaining your consent.
You may opt out at any time, free of charge, by using the unsubscribe link in a message or contacting us.
We will not provide your personal data to a third party for that party’s direct marketing without the appropriate notice and consent.

7. Cookies and analytics
The website may use essential cookies for shopping-cart, login, language, security and checkout functions. Subject to applicable consent, it may also use analytics or advertising cookies.
You may manage cookies through your browser or the website cookie settings, although disabling certain cookies may affect website functions.

8. Retention
We retain personal data only for as long as necessary to fulfil the purpose of collection, manage orders and after-sales service, meet legal or accounting obligations, or protect legitimate rights.
When personal data is no longer required, we will take reasonable steps to delete, anonymise or securely dispose of it.

9. Security
We take reasonable and practicable technical and organisational measures to protect personal data against unauthorised or accidental access, processing, erasure, loss or use.
Internet transmission and storage cannot be guaranteed to be completely secure. Please contact us immediately if you notice suspicious account or transaction activity.

10. Access and correction
You have the right under Hong Kong’s Personal Data (Privacy) Ordinance to request access to, and correction of, personal data held by us.
We may need to verify your identity and will process the request in accordance with applicable law.

11. Children’s data
This website is not specifically directed at children. A minor who needs to place an order should do so with the assistance of a parent or guardian.

12. External links
The website may contain links to third-party websites or social platforms. Those services have their own privacy policies, and we do not control how they process personal data.

13. Changes to this Policy
We may update this Policy because of changes to our services, technology or legal requirements. The revised version will be published on the website with an updated date.

14. Privacy enquiries
To request access or correction, opt out of marketing, or ask a question about this Policy, please contact us through the Contact Us page.