PRIVACY POLICY
Standard baseline version: 31 August 2026
This baseline is provided for merchant review and adaptation. The merchant identified in this website footer (the “Merchant”, “we”, “us” or “our”) is responsible for the personal data it collects through this website and its services. Contact the Merchant using the public contact details in the website footer if you have a privacy question, request or complaint, or need the contact details of its data protection representative.
1. Scope
This Policy explains how the Merchant may collect, use, disclose, protect and retain personal data when you visit this website, contact the Merchant, request information, make a booking or purchase, create an account, submit content, subscribe to communications, or otherwise interact with the Merchant. A particular feature may not apply to every Merchant or visitor.
2. Personal data we may collect
Depending on your interaction, we may collect:
• identity and contact details, such as your name, email address, telephone number, billing or delivery address and account details;
• enquiry, booking, order and service details, including your instructions, preferences, correspondence and support history;
• transaction information, such as the items or services requested, amount, currency, payment status, refunds and payment-provider references. Payment providers generally process full payment credentials directly; the Merchant should update this Policy if it stores or receives them;
• information you choose to submit, including reviews, forms, documents, images or other content;
• marketing preferences and records of consent or withdrawal; and
• technical and usage information, such as IP address, device and browser type, pages visited, referring page, timestamps, security logs, and cookie or analytics identifiers where those technologies are enabled.
Please do not provide personal data that is unnecessary for your interaction. If you provide another person’s data, you should have authority to do so and should make this Policy available to that person.
3. How we collect personal data
We may collect data directly from you, automatically from your device when permitted, from the Connect67 website platform and other service providers acting for the Merchant, and from business partners or public sources where lawful and relevant. Forms and optional tracking controls may provide additional notices at the point of collection.
4. Purposes of collection, use and disclosure
We may handle personal data to:
• respond to enquiries and provide requested information;
• create and administer accounts, bookings, orders, deliveries, returns, refunds and services;
• process and reconcile payments through approved payment providers;
• communicate operational messages and provide customer support;
• maintain, secure, troubleshoot and improve the website and services;
• prevent fraud, misuse and security incidents, and enforce applicable terms;
• keep business, tax, audit and dispute records;
• comply with law, lawful requests and regulatory obligations; and
• send marketing only where permitted and manage consent, unsubscribe and do-not-contact preferences.
We will not use personal data for a materially different purpose without an appropriate basis and notice. Withdrawing consent does not affect processing already carried out and may prevent us from providing a feature that requires the data.
5. Disclosures and service providers
We may disclose relevant data to providers that support hosting and website operations, communications, analytics selected by the Merchant, payments, delivery or fulfilment, professional advice, security, support and record keeping. We may also disclose data to authorities or other parties where required by law, to protect rights and safety, in connection with a genuine business transfer, or with your direction or consent. Providers should receive only the data reasonably needed for their role and must handle it under appropriate obligations. We do not sell personal data unless this Policy is expressly updated to describe that practice and any required choices.
6. International transfers
Some providers may process data outside the country where you are located. Where transfer restrictions apply, the Merchant must use legally recognised safeguards or ensure a comparable standard of protection. Contact the Merchant for information about safeguards relevant to your data.
7. Cookies and similar technologies
The website may use essential technologies for security, preferences and core operation. Optional analytics or advertising technologies should load only in accordance with the website’s consent controls and applicable law. You may use those controls or your browser settings to manage optional technologies, although blocking essential storage may affect functionality.
8. Marketing communications
Where permitted, the Merchant may send marketing using the preferences and contact details you provide. Marketing messages should identify the sender and provide an appropriate unsubscribe or opt-out method. You may withdraw marketing consent or request that marketing stop using the message instructions or the Merchant’s public contact details. Service and transaction messages may still be sent when necessary.
9. Retention
We retain personal data only for as long as reasonably needed for the stated purposes, legitimate business and security needs, and applicable legal, accounting, tax or dispute requirements. Retention periods vary by record type. Data should then be deleted, anonymised or made inaccessible unless continued retention is required or permitted.
10. Security
The Merchant and its providers use reasonable administrative, technical and physical safeguards appropriate to the nature of the data. No system or transmission is completely secure. If a data incident occurs, the Merchant will assess and notify affected persons and regulators where required by applicable law.
11. Your choices and rights
Subject to applicable law and exceptions, you may ask to access or correct your personal data, withdraw consent, object to or restrict certain uses, request deletion or portability where available, or complain about our handling of data. We may need to verify your identity and may request information needed to process the request. Contact the Merchant through the public details in the website footer. You may also complain to the privacy regulator with jurisdiction over the Merchant or the processing.
12. Children
This website is not directed to children unless the Merchant’s published services say otherwise. A parent or legal guardian should provide required consent and supervision where a child’s data is involved. Contact the Merchant if you believe a child provided data without appropriate authority.
13. Third-party sites
Links or embedded services operated by other organisations are governed by their own notices and practices. Review those notices before providing data to them.
14. Changes to this Policy
We may update this Policy to reflect changes in practices, services or law. The current version will be posted on this page with an updated version date. Material changes should be communicated where required. Changes apply prospectively and do not reduce rights that cannot lawfully be limited.
15. Contact
Use the verified public contact details, enquiry method and business address in this website’s footer to contact the Merchant about privacy. Include enough information for the Merchant to understand the request, but do not send passwords or unnecessary sensitive data.
Approved editorial portrait of Master Xing Yi.
About Master Xing Yi
Rooted in Tradition. Guided by Wisdom.
The approach is reflective and practical: understand the person, consider the environment, examine timing, and translate insight into deliberate action.
