Last updated: 23 September 2026
Small Potato BIG Dream Limited (小薯大夢, “we”, “us” or “our”) is a Hong Kong social enterprise. We respect your privacy and handle personal data in accordance with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong.
This policy explains what personal data we collect when you visit our website, send us an enquiry, place an order or join one of our workshops, how we use it, and the choices you have.
Information we collect
We collect only the information we need to respond to you and to provide our products and services.
- Information you give us: your name, company or organisation, email address, phone or WhatsApp number, and the details of your enquiry, such as event date, number of guests, budget, venue and any dietary or allergy requirements.
- Order and booking details: delivery address, contact person on the day, invoicing information and a record of what you ordered.
- Messages: what you send us by email, phone, WhatsApp or social media.
- Technical information: when you visit our website, standard technical data such as your IP address, browser type, device and the pages you view may be recorded by our systems to keep the website secure and working properly.
We do not knowingly collect personal data from children through this website. Workshops for young people are booked by a parent, guardian, school or organisation.
How we use your information
- To reply to your enquiry and prepare a quotation.
- To confirm, prepare, deliver and invoice your order, catering booking, gift sets or workshop.
- To contact you about your order, including checking dietary and allergy requirements.
- To protect our website and forms from spam, abuse and fraud.
- To understand, in aggregate, how our website is used so that we can improve it.
- To keep proper business records and meet our legal, accounting and tax obligations.
- With your consent, to tell you about new products, seasonal gift sets and events. You can opt out at any time.
We do not sell your personal data, and we will not use it for direct marketing without your consent.
Providing your information
Giving us your personal data is voluntary. If you choose not to provide the information marked as required, we may not be able to answer your enquiry or fulfil your order.
Who we share it with
We share personal data only where it is needed, and only with:
- Trusted service providers who host our website and data, deliver our email, protect our forms against spam, or deliver orders on our behalf. They may only use the data to provide their service to us and must keep it confidential and secure.
- Partner venues, cafés or co-organisers, where this is needed to run an event or workshop you have booked.
- Professional advisers such as our accountants, auditors and lawyers.
- Government or law enforcement bodies, where we are required to by law.
Some of our service providers may store or process data outside Hong Kong. Where this happens, we take reasonable steps to make sure your data receives a comparable level of protection.
Cookies and similar technologies
Our website uses a small number of essential cookies, for example to remember your language preference and to keep the website secure. We do not use cookies to show you advertising.
We may collect aggregated, non-identifying statistics about visits to our website, such as which pages are viewed most often. These statistics do not identify you personally.
Videos on our website are embedded in privacy-enhanced mode. If you follow a link to WhatsApp, Instagram, LinkedIn, YouTube or another third-party service, that service’s own privacy policy applies.
You can block or delete cookies in your browser settings. Some parts of the website may not work properly without essential cookies.
How long we keep it
We keep personal data only for as long as we need it for the purposes above. Enquiries that do not lead to an order are normally deleted within 24 months of our last contact. Order, invoice and accounting records are kept for as long as the law requires, generally seven years. After that, data is securely deleted or anonymised.
How we protect it
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss or misuse. Our website uses encrypted connections, and access to personal data is limited to staff who need it for their work. No method of transmitting or storing data is completely secure, but we work to protect it and will act promptly if a problem arises.
Your rights
Under the Personal Data (Privacy) Ordinance, you have the right to:
- ask whether we hold personal data about you and request a copy of it;
- ask us to correct personal data that is inaccurate;
- withdraw your consent to receiving marketing messages at any time.
To make a request, please contact us using the details below. We will reply within 40 days. As the law allows, we may charge a reasonable fee for providing a copy of your data.
Links to other websites
Our website links to other websites and platforms, such as social media posts and news articles about our events. We are not responsible for their content or privacy practices.
Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.
Language
This policy is available in English and Chinese. In case of any discrepancy or inconsistency between the English and Chinese versions, the English version shall prevail.
Contact us
For any question or request about your personal data, please contact our Data Privacy team at Small Potato BIG Dream Limited:
Email: contact@smallpotatobigdream.hk
Phone / WhatsApp: +852 9884 9957