OKiBook

Privacy Policy

This Privacy Policy Statement (the “PPS”) is issued by OKiBOOK Limited and its affiliates (collectively “we,” “our,” or “us”) in accordance with the Personal Data (Privacy) Ordinance (Cap. 486) of the Laws of Hong Kong (“PDPO”). This PPS explains our policies and practices regarding the collection, use, retention, disclosure, transfer, security, and access of personal data.

1. Our Commitment to Privacy

We are committed to protecting the privacy, confidentiality, and security of all personal information we hold by complying with the PDPO’s requirements. We also ensure that our employees and agents uphold these obligations. Whenever we ask you to provide information that can identify you, you can be assured it will only be used in accordance with this PPS. Our commitment to PDPO compliance is based on the following principles: Minimal Collection • We only collect personal data that is relevant and required to provide our services and products. Use Limitation • Personal data will be used only for the purposes specified and not for any other purpose without your consent. Restricted Disclosure • We will not disclose personal data to any third party unless: a. We have your consent; or b. We are required by law to do so, and such disclosure is under proper authority. Data Security & Accuracy • All practicable steps are taken to keep your personal data secure, confidential, and accurate. • We will not retain personal data longer than necessary. Access Control • Only authorized personnel may access or process your personal data. Your Rights • You have the right to access or correct your personal data.

2. Collection of Personal Data

We collect personal information in various ways, including—but not limited to—when you: Use our website (the “Site”) Contact us directly Apply for our services You may be asked to provide, as appropriate, your name, year and month of birth, address, telephone number, and email address. Providing this information is optional; however, without it, we may be unable to process your request or deliver the services you want. 2.1 Automatically Collected Information When you visit the Site, certain information may be automatically collected, including: IP address Domain name Browser type and configuration Language settings Geo-location data (approximate) Operating system Time and duration of your visit Previous sites visited We may also track your usage and activity on the Site. This aggregated data does not identify individual users; it is used to analyze trends, administer the Site, track users’ movements around the Site, and gather demographic information. 2.2 Billing Information If you secure a reservation or purchase a voucher from a participating merchant through our platform, you will be asked to provide billing information (e.g., credit card details). These details are processed securely, used only to complete the transaction, and handled in accordance with this PPS. All personal data you supply to us is secured, and access is restricted to authorized personnel only. We disclose personal data to third parties only as described in Section 4 below.

3. Use of Personal Data

We use your personal information to: Provide and improve our services Operate, maintain, and enhance the Site Send you messages (e.g., confirmations, invoices, technical notices, security alerts) Personalize and enhance your Site experience Process applications, requests, and account registrations Facilitate partnership applications Respond to and follow up on inquiries; provide customer support Conduct statistical analysis, research, surveys, and quality assurance Notify you of changes to our services that may affect you Send information about new promotions, products, and services offered by OKiBOOK and our selected partners Conduct aggregated analysis of promotion performance Maintain internal records and meet regulatory/compliance obligations Process payments or deposits on behalf of participating merchants in connection with voucher purchases, reservations, or other services you initiate

4. Transfer of Personal Data

When you sign up for our services, we may share your personal information with third parties strictly as needed for them to render their services. Such third parties include, but are not limited to: Payment Processors & Credit Card Companies • To bill you for services you request. Email Service Providers • To send emails on our behalf (e.g., newsletters, transaction confirmations). Business Partners, Joint Venture Partners, Service Providers, Vendors, Agents, Consultants, and Independent Contractors We share data only when required in the normal course of business for purposes such as: Complying with applicable laws, statutes, governmental orders, or court orders, or responding to lawful requests and legal processes. Protecting the rights and property of OKiBOOK, our agents, members, and others, including enforcing our agreements, policies, and terms of use. Cooperating in good faith to respond to an emergency or protect the personal safety of any person. Facilitating a merger, sale of company assets, financing, or acquisition of all or part of our business. Transferring necessary personal and billing data to participating merchants or their authorized payment handlers, but only as required to complete and support your transaction. Any third party receiving personal data must handle it in accordance with their own privacy policies as well as this PPS where applicable.

5. Direct Marketing

We may use the personal data we collect (e.g., your name, address, telephone number, and email address) for direct marketing purposes. We will not transmit or disclose your personal data to any third party for direct marketing unless we have your express consent or you indicate you have no objection.

6. Security

The security of your personal information is important to us. We implement reasonable security measures—both technical and organizational—to protect your data from loss, misuse, unauthorized access, disclosure, alteration, and destruction. When you enter sensitive information (such as credit card numbers) on our online forms, we encrypt it using Secure Socket Layer (SSL) technology. Payments are processed by Shopify Payments, which complies with the Payment Card Industry Data Security Standard (PCI‑DSS). If you create a password for our Site, you are responsible for keeping it confidential. If you believe your password has been compromised, please notify us immediately. We also have suitable procedures in place to safeguard information collected offline. Despite our efforts, no security measure is entirely impenetrable. When we collect payments on behalf of merchants, we partner with third‑party PCI‑DSS‑compliant processors to ensure your payment details are handled securely and in accordance with legal standards.

7. Cookies

We may automatically collect certain information through the use of “cookies.” Cookies are small data files stored in your web browser that track and collect browsing information. We use cookies to: Identify which areas and features of the Site are most popular Count the number of computers accessing our Site Personalize your experience and remember your preferences Recognize you on future visits so you don’t have to re‑enter information We may link the information stored in cookies to any personally identifiable information you submit. Cookies cannot penetrate or damage your computer; they only collect information you choose to share. You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser settings to decline them. If you decline cookies, you may lose access to certain features or services of the Site. Please note that cookies used by our service providers are not covered by this PPS, and we do not have access or control over those cookies.

8. Hyperlinks

The Site may contain links to other websites. We are not responsible for the privacy or content practices of those sites. We encourage you to read the privacy policy of each site you visit that is not governed by this PPS.

9. Retention of Personal Data

We retain all personal data in accordance with PDPO guidance. We will only keep and use your personal data for as long as: Your account is active or needed to provide you with services Necessary to fulfill the purpose for which the data was collected (including any related purpose) Required to comply with our legal obligations Needed to resolve disputes or enforce our agreements

10. Controlling Your Personal Data

You have the following rights regarding your personal data: Access & Information • To be informed about and to access the personal data we hold about you. Rectification & Deletion • To have your personal data supplemented, corrected, or deleted. Restriction & Objection • To restrict or object to the processing of your personal data. Data Portability • To receive your personal data in a structured, commonly used, and machine‑readable format and to have it transmitted directly to another data user. Complaint • To lodge a complaint with the relevant data protection authority. To restrict the collection or use of your personal data, you can: Uncheck or deselect any form fields on the Site that ask for direct marketing consent. Email us at service@okibook.com to change your marketing preferences at any time. To exercise any of the rights above, please contact our Data Protection Officer at service@okibook.com. We will take reasonable steps to verify your identity before granting access or making corrections. Please note we may charge a reasonable fee for processing any data access request, as permitted by the PDPO.