Privacy Policy
The short version: this website collects nothing about you. No accounts, no cookies, no payment details. Your order reaches us only when you choose to send it on WhatsApp.
Last updated: 4 August 2026
DECIPASTRY, Hong Kong.
This website is operated by DECIPASTRY (Business Registration 41686990-000), a small pâtisserie in Kwun Tong, Hong Kong. In this policy, “we” and “us” mean DECIPASTRY.
For anything about your personal data, contact us at decipastry@gmail.com or on WhatsApp +852 6027 7211.
Your basket never leaves your browser.
As you build an order request, the items you pick are saved in your own browser’s local storage. This is not a cookie, it is never transmitted anywhere, and we cannot read it. Clearing your browser data removes it.
This website sets no cookies of its own, and runs no advertising or cross-site tracking of any kind.
Only what you type, only when you press send.
The order form asks for your name, a contact number, your preferred date and time, and — for delivery — an address. The website itself never receives any of this. It formats what you typed into a message and hands it to WhatsApp; nothing is sent to any server we control. If you close the page without sending, we never see it.
We use these details only to confirm availability, agree a price, and fulfil your order. We do not use them for marketing and we do not sell or rent them to anyone.
No payment is ever handled on this website.
There is no checkout, no card form and no payment processor on this site. Once we confirm your order, payment details are arranged with you directly over WhatsApp. We never ask for card numbers, and no financial information is collected by this website.
Three services, each for one purpose.
- WhatsApp (Meta) — carries the conversation in which you send your order. Your use of WhatsApp is governed by Meta’s own privacy policy. The same applies to Instagram if you message us there instead.
- Lalamove — for deliveries only, we pass your name, phone number and address to the driver so the delivery can be made. Nothing else is shared, and nothing is shared at all for studio pickup.
- Cloudflare — hosts this website. See below.
Cloudflare serves the site and counts visits.
This site is hosted by Cloudflare, Inc. As with any hosted website, Cloudflare processes each request in order to deliver the page — including your IP address, browser type, the page requested and the time. It uses this to serve pages quickly and to protect the site from attacks and automated abuse, and it may record failed connection attempts. Cloudflare is based in the United States, so this processing takes place outside Hong Kong.
We also use Cloudflare Web Analytics to see how many people visit and which pages they read. It is cookieless, does not follow you to other websites, and does not build a profile of you. We see totals, not individuals.
The fonts used on this site are served from this website itself, not from a third party, so no font provider sees your visit.
As long as your order needs it.
Your order messages stay in our WhatsApp or Instagram conversation. We keep them while they are needed to fulfil your order and to keep proper business records, and delete them when they are no longer needed. You can ask us to delete your conversation at any time.
Ask us what we hold, and correct it.
Under the Personal Data (Privacy) Ordinance (Cap. 486) you may ask whether we hold personal data about you, request a copy of it, and ask us to correct anything inaccurate. Email decipastry@gmail.com and we will respond within 40 days as the Ordinance requires. There is no charge for a reasonable request.
We’ll date any update.
If this policy changes, the new version appears on this page with a new “last updated” date at the top.