Privacy Policy

Who are we?
We are Loon Fung (“Loon Fung”, “we”, “us” or “our”) consisting of:
Loon Fung Limited, with company registration number 01753513 and ICO registration number Z5102962; and 
Loon Fung (London) Limited, with company registration number 00883449 and ICO registration number Z5349852
each a limited liability company registered in England and Wales with its registered office at 111 Brantwood Road, London, United Kingdom, N17 0DX.
Loon Fung are suppliers of oriental foods and goods to the retail and wholesale market.
Loon Fung Limited is the data controller that is responsible for the management of our website.
 

What are our legal bases for using your information?
Loon Fung will only use your personal information if we have a lawful basis to do so. Typically, we will use your personal information if it is necessary to pursue our legitimate interests which might be reasonably expected as part of running our business, and which does not materially impact your rights, freedom, or interests. We also use your personal information where it is necessary to perform the contract with you (such as when you order an item for delivery) or in order to take steps prior to entering into a contract. It also may be necessary to process your personal information to comply with our legal obligation(s) or in order to protect the vital interests of you or another person.
It may also, in certain circumstances, be necessary for us to use your personal information if we have your consent.
 

When do we collect your personal data?
- When you register for your Reward Card on loonfung.co.uk or in store
- When you create an account with us
- When you communicate with us by phone, email or other means with queries, requests, complaints etc.
- When you engage with us on social media
- When you participate in a promotion or competition
- When you comment or review our products and services
- When you fill in any forms in store
- When you use our website
 

What information is being collected?
- If you have an online account with us: your name (first and last), address, email address, telephone number, account username and reward card number.
- If you have a business, business details such as business name, type, proof of business, address and contact details
- Details of your interactions with us by email, phone or in store including notes from our correspondence with you, details of any complaints or comments you make and purchases.
- Details of your orders with us.
 

How will your information be used?
- To register your account with us and provide you with certain services via your account. It is in our legitimate interests to promote and grow our business and maintain good customer relations.
- To provide you with marketing and promotional information, and company updates (see section 6 below).
- To process any orders that you make by phone, online or in store. This is necessary to perform our contract with you.
- If you are a business, to enter into, and continue, business relations with you. It is in our legitimate interests to foster and maintain business relations with our business partners.
- To respond to your queries, requests and complaints. It is in our legitimate interests to respond to your queries and provide any information and materials requested in order for you to have a positive experience with us and to maintain good customer relations.
- To manage our relationship with you including notifying you about any changes to our terms or privacy policy or asking you to leave a review or take a survey. It is in our legitimate interests to maintain our business reputation and improve our products and customer relations. 
- To enable you to partake in a prize draw or competition. It is in our legitimate interests to promote and grow our business, inform our marketing strategy and maintain good customer relations.
- To administer and protect our business and our website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data). This is necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise).
- To use data analytics to improve our website, products, marketing, customer relationships and experiences. This is necessary for our legitimate interests (to understand how our website is being used, to keep our website updated and relevant, to develop our business and to inform our marketing strategy).
Where we need to collect your personal information by law, or under the terms of a contract we have with you, and you fail to provide that information when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with products or services). In this case, we may have to cancel a product order you have with us but we will notify you if this is the case at the time.
 

Marketing
If we have your contact details, from time to time we may contact you with information about Loon Fung, our products, updates, offers, discounts and similar marketing and promotional information which we believe you may be interested in. We may also ask for your feedback on our products and services.

We will only send you marketing messages if you have given us your consent to do so, unless consent is not required under applicable law (in which case, we do so to pursue our legitimate interests in growing our business and informing our marketing strategy).

Where you provide consent, you can withdraw your consent at any time, but without affecting the lawfulness of our processing based on consent before its withdrawal. In any case, you have the right to opt out of receiving electronic marketing  communications from us by clicking on the ‘unsubscribe’ or ‘update preferences’ link at the bottom of our marketing communications, changing your preferences within your account, or emailing us at customerservices@loonfung.co.uk (in the subject heading, please state “Please remove me from your marketing database”).

Who has access to your information?
We may share your personal information with third parties that perform services for us or on our behalf, which may include email marketing, customer relationship management, online surveys and analytics services. In addition, we retain a third party to process or analyse data we collect on our website, which may include your personal information. The website is maintained or hosted by a specialist IT service provider and is contractually obliged not to use your personal information in any way other than that which we have specified.

It may be necessary to share your personal information with third parties (such as law enforcement, regulators, governmental authorities and other parties) if we are legally required to do so, or if we believe, in good faith, that such disclosure is necessary to comply with a legal obligation or request, to enforce our terms and conditions or to protect the rights, property or our safety, or the safety of our customers or potential customers, a third party, or the public

If we are involved in a merger, acquisition, reorganisation, partnership, share sale, asset sale or other transaction, we may disclose your personal information to involved third parties (such as potential or actual purchasers and professional advisers and service providers) as part of that transaction.

We do not sell or rent your information to any third parties.
 

How is your personal information kept secure?
We use appropriate technical and organisational security measures to keep your personal information secure and require our third party data processors to do likewise. All personal information is subject to restricted access to prevent unauthorised access, modification or misuse. Please note, however, that we may release your personal information if required to do so by law, or by search warrant, subpoena or court order (subject to any laws or requirements that may apply, we will try to inform you of this as appropriate).

Please also note that, despite our precautions, we cannot guarantee the security of information transmitted over the internet or that unauthorised persons will not obtain access to personal information.
 

How long will we keep your personal information?
We only retain your personal information for as long as is necessary for the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. At the end of the applicable retention period, your information will either be deleted completely or anonymised, for example by aggregation with other data so that it can be used in a non-identifiable way for statistical analysis and business planning.

Inactive accounts
If you have continuously not used your account for 12 months or longer, it will be closed,  you  will need to reapply to rejoin and your reward card will not be usable at a store. Once closed, the information  (including purchase history) associated with your account will be kept for 6 years in accordance with our retention practices.
 

What are your rights in respect of your personal information?
You have the right to:
- Obtain a copy of the personal information which we hold about you (the “right of access”)
- In certain circumstances, receive a copy of the personal information you have provided to us in a structured, commonly used, machine-readable format that supports re-use, or to request the transfer of your personal information to another person (the “right of portability”)
- Obtain rectification of any inaccurate or incomplete personal information we hold about you without undue delay (“right to rectification”)
- In some circumstances, require us to erase your personal information without undue delay if the continued processing of that personal information is not justified (“right to erasure”)
- In some circumstances, require us to limit the purposes for which we process your personal information if the continued processing of the personal information in this way is not justified, such as where the accuracy of the personal information is contested by you (“right to restriction”)
- Object to the processing we carry out on the basis of legitimate interests in certain circumstances (“right to object”). You can also ask us to stop using your personal information for direct marketing. Please see section 6 above for further information.

If you have provided consent to any processing of your personal information, you have a right to withdraw that consent (without affecting the lawfulness of our processing prior to you having withdrawn your consent).

Please note that not all of the above rights are absolute and we may be entitled to refuse requests, wholly or partly, where exceptions under applicable law apply. If you wish to exercise one of these rights, please contact us using the contact details below.

You also have the right to lodge a complaint to your national data protection authority (though we appreciate you addressing any concerns or complaints with us first). The relevant data protection authority in the UK is the Information Commissioner's Office (www.ico.org.uk).
 

International data transfers
We may from time to time need to transfer your personal information to third party service providers which are located outside the UK. In the event we need to transfer your personal information to a country which is not recognised by the UK government as ensuring an adequate level of protection for personal data, we shall ensure that appropriate safeguards are in place to ensure adequate protection for your personal information (for example, by entering into standard contractual clauses with the recipients of your personal information).
 

Cookies and similar technologies
We use cookies and similar technologies to distinguish you from other users of our website. For more information on cookies and the purposes for which we use these, please refer to our Cookies Policy.
 

Links
Our website may, from time to time, contain links to and from the websites of our business partners, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal information to these websites.
 

Contact Us
Please contact us if you wish to raise any data protection issue with us, or exercise your rights, by writing to us at 111 Brantwood Road, London, N17 0DX or emailing us at customerservices@loonfung.co.uk.

Last updated: 9 Feb 2024