Privacy Notice

Introduction

This Privacy Notice explains how Colour Up Holiday Limited ("Colour Up", "we", "us") handles personal data in connection with your use of the Colour Up Holiday website (the "Website"). When handling personal data in Hong Kong, we will comply with applicable law, including the Personal Data (Privacy) Ordinance (Cap. 486) (the "PDPO").

Information handled by the Website

Enquiry form: if you submit the enquiry form, we receive your name, WhatsApp number and anything you choose to add: destination, rough travel time, trip length, number of adults and children, and notes. This is stored in the Website database (Supabase) so that a Colour Up travel consultant can contact you on WhatsApp and follow up your enquiry. The Website database (Supabase) is located in Singapore, outside Hong Kong.

To prevent abuse, when an enquiry is submitted the Website records a hash derived from your IP address (not the IP address itself), used only to limit repeated submissions and cleared periodically.

WhatsApp: you can also contact us directly through the WhatsApp links on the Website. The Website pre-fills a message in your WhatsApp; Colour Up receives it only after you press send in WhatsApp. Messages are handled by WhatsApp/Meta under its own terms and privacy practices.

Enquiry reference: before you tap the WhatsApp enquiry button, the website records a reference number, the source page, your language, and the routes you viewed or saved, so that our consultants can find the itinerary you were looking at. These records do not include your name or phone number unless you fill them in on an enquiry form. They are stored in the website database described above and kept as set out below.

Saved places and trip notes: places you save, the contents of "My Trip" and your answers to the preference questions are stored only in your own device's browser (localStorage) and are not sent to our servers. You can delete them by clearing your browser data.

The Website does not use analytics cookies or Vercel Web Analytics.

Trip assistant

The "trip assistant" on the Website answers in your browser from the destination and itinerary information already published on the Website. It is not a chatbot connected to an external AI service; the questions you type are not sent to our servers or to any third party.

The assistant does not confirm bookings, arrangements or availability. If you choose to contact us through the WhatsApp link it offers, Colour Up receives only what you send in WhatsApp. All arrangements must be confirmed separately in writing by the Colour Up team.

Purposes and sharing

We use the enquiry details you submit and the WhatsApp messages you send us to reply to your travel enquiry and, if you later request services, to follow up on arrangements.

Our service providers include website hosting (Vercel), the Website database (Supabase) and WhatsApp (Meta). Personal data may therefore be processed outside Hong Kong, and we will take reasonable measures to protect it. If we need to provide identifiable personal data to another travel service provider to arrange a journey you request, we will do so in line with applicable law and give notice or obtain consent where required.

Retention and security

Enquiry data is retained for 12 months after our last contact, then deleted or anonymised.

The Website database is accessed by Colour Up through the server only; visitors cannot read other people's data through the Website. We take reasonable steps to protect personal data against unauthorised or accidental access, processing, erasure or use. Only the founder and authorised travel consultants can access customer data.

Your data rights and how to contact us

Subject to the PDPO, you may request access to or correction of personal data. You may also ask us to delete data; we will consider the request under applicable law, retention duties and the circumstances. We will respond to data access and correction requests within the statutory period of 40 days.

Data Protection Officer: the founder of Colour Up Holiday Limited

Email: sales@colourup.com.hk

Address: Rm 802, Kimberley Plaza, 45–47 Kimberley Road, Tsim Sha Tsui, Kowloon, Hong Kong

Changes to this Notice

We may update this Notice when Website features, providers or legal requirements change. We will show the revision date and, where required by law, give further notice or seek consent.