LokBuddy policies
Privacy Policy
Effective date: August 2026Who Is Responsible for Your Data
Lokbuddy Technology (Hong Kong) Limited operates this website and controls the personal information collected for LokBuddy accounts, digital-guide requests, city-route bookings, customer support, and health check-up booking assistance. Questions and data requests can be sent to support@lokbuddy.net.
Accounts and the Free Digital Guide
To create and verify an account, we collect your name, email address, country or region, account-verification status, and the time of your privacy consent. The account system processes your login credentials; LokBuddy staff will never ask you to send your password by email, WhatsApp, or WeChat. If you request the free digital guide, we use your verified account name and email address and record enough information to send the guide, prevent accidental repeat requests, and provide support.
City-Route Bookings and Buddy Matching
For a City Decoding Walk, we may collect your account name and email, preferred WeChat ID or WhatsApp number, route, date, time, group-size categories, service language, booking notes, expected museum-access version, order amount, payment status, and booking status. After LokBuddy matches a Buddy, we store the assignment and share the contact method and practical booking details needed for that Buddy to contact you and deliver the route. Your account may display the matched Buddy's approved public profile and meeting information.
Health Check-up Booking Requests
For a health check-up group request, the signed-in primary contact owns the order and receives the updates. For that contact, we collect name, account email, WeChat or WhatsApp contact, and country or region. For each listed participant, we collect the necessary identity and booking details needed to submit and manage the request: full legal name, passport number, nationality or region, date of birth, sex shown on the passport, marital status, selected package, preferred date and time, optional participant email or WeChat or WhatsApp contact, and participant-level appointment status. Participants do not need separate LokBuddy accounts. Passport numbers are masked in normal account and operations displays and are not included in status emails. Please do not submit passport images, medical records, test results, diagnoses, or medical history through this initial request.
Payments
LokBuddy uses WooCommerce to create and manage orders. Where Stripe or Antom is offered, the selected payment provider processes the payment and may return transaction references, payment method information, and payment status to the order. LokBuddy does not collect complete card details through its booking forms. Payment providers process information under their own privacy terms.
How We Use and Share Information
We use personal information to create and secure accounts, verify email addresses, send a requested guide, calculate and process an order, validate booking availability, match and prepare a Buddy, arrange a health appointment, send status and security notices, provide support, prevent fraud and duplicate orders, maintain accounting records, and handle disputes. We do not sell personal information. We share only what is reasonably necessary with the matched Buddy, Xingyuan Club, payment providers, website and order infrastructure, email providers, communications services, and professional or legal advisers, or where disclosure is required by law.
WhatsApp, WeChat, Cookies, and Technical Data
If you choose WhatsApp or WeChat, those services process your account and messages under their own terms. The LokBuddy WhatsApp widget opens WhatsApp and does not create a separate message inbox in WordPress. We may also process security logs, device or browser information, and essential cookies needed for login, orders, fraud prevention, and consent preferences.
Website Analytics
LokBuddy measures how the website is used with its own first-party, cookieless analytics, built and operated by LokBuddy itself — no third-party analytics service is involved, and no advertising cookies are used. It records aggregated trends only: which pages and routes are viewed, where visitors come from, approximate region, device, and browser aggregates, and counts of key events — including a revenue-only booking-confirmation counter that contains only the booking type, amount, and currency, never your name, email, or contact details. This measurement works without cookies, runs regardless of your cookie choices, hashes identifiers with a daily-rotating salt so no individual profile is built, and keeps aggregates for approximately 24 months.
International and Cross-border Processing
LokBuddy is operated from Hong Kong, the routes and partner services are delivered in Shanghai, and technology providers may operate in other locations. Information may therefore be accessed or processed in Hong Kong, mainland China, or another location used by a service provider. We limit transfers to the stated service purpose and take reasonable contractual, organisational, and technical steps appropriate to the information involved.
Retention and Security
Retention depends on the record. Account information is kept while the account is active and afterwards only where reasonably necessary. Booking, order, payment, consent, support, accounting, fraud-prevention, and dispute records may need to be kept for different periods. We do not keep personal information longer than reasonably necessary for those purposes and use reasonable technical and organisational safeguards. No internet service can guarantee absolute security.
Your Rights and Contact
You may request access to, correction of, deletion of, or a copy of your personal information. We may need to verify the request, and deletion may be limited where records must be retained for legal, accounting, payment, fraud-prevention, or dispute-handling obligations. Contact support@lokbuddy.net.