LokBuddy policies
Privacy Policy
Effective date: July 2026Who Is Responsible for Your Data
Lokbuddy Technology (Hong Kong) Limited operates this website and controls the personal information collected for LokBuddy accounts, digital-guide requests, city-route bookings, customer support, and health check-up booking assistance. Questions and data requests can be sent to support@lokbuddy.net.
Accounts and the Free Digital Guide
To create and verify an account, we collect your name, email address, country or region, account-verification status, and the time of your privacy consent. The account system processes your login credentials; LokBuddy staff will never ask you to send your password by email, WhatsApp, or WeChat. If you request the free digital guide, we use your verified account name and email address and record enough information to send the guide, prevent accidental repeat requests, and provide support.
City-Route Bookings and Buddy Matching
For a City Decoding Walk, we may collect your account name and email, preferred WeChat ID or WhatsApp number, route, date, time, group-size categories, service language, booking notes, expected museum-access version, order amount, payment status, and booking status. After LokBuddy matches a Buddy, we store the assignment and share the contact method and practical booking details needed for that Buddy to contact you and deliver the route. Your account may display the matched Buddy's approved public profile and meeting information.
Health Check-up Booking Requests
For an initial health check-up booking request, we may collect the information needed to submit and manage it: name, email, WhatsApp or telephone number, selected package, preferred date and time, number of people, country or region, service language, order amount, payment status, and appointment status. Please do not submit passports, medical records, test results, diagnoses, or medical history through the initial request unless a separate notice clearly explains why Xingyuan Club requires them.
Payments
LokBuddy uses WooCommerce to create and manage orders. Where Stripe or Antom is offered, the selected payment provider processes the payment and may return transaction references, payment method information, and payment status to the order. LokBuddy does not collect complete card details through its booking forms. Payment providers process information under their own privacy terms.
How We Use and Share Information
We use personal information to create and secure accounts, verify email addresses, send a requested guide, calculate and process an order, validate booking availability, match and prepare a Buddy, arrange a health appointment, send status and security notices, provide support, prevent fraud and duplicate orders, maintain accounting records, and handle disputes. We do not sell personal information. We share only what is reasonably necessary with the matched Buddy, Xingyuan Club, payment providers, website and order infrastructure, email providers, communications services, and professional or legal advisers, or where disclosure is required by law.
WhatsApp, WeChat, Cookies, and Technical Data
If you choose WhatsApp or WeChat, those services process your account and messages under their own terms. The LokBuddy WhatsApp widget opens WhatsApp and does not create a separate message inbox in WordPress. We may also process security logs, device or browser information, and essential cookies needed for login, orders, fraud prevention, and consent preferences.
Website Analytics
LokBuddy uses Umami, a privacy-friendly, cookieless web analytics service, to understand aggregated visitor trends — such as which pages are viewed, which routes and experiences are popular, the countries, devices, browsers, and operating systems visitors use, and how far people progress through the booking steps. Umami does not use advertising cookies and does not track you across other websites. Analytics runs only after you accept the Analytics choice in the cookie banner; you can decline or change this choice at any time, and the analytics script will not load. When analytics is active, Umami infers an approximate country and device from your browser and IP address without storing an identifiable profile of you. To confirm a completed, paid booking, LokBuddy also records a single, revenue-only confirmation event from its own server — this contains only the booking type, amount, and currency, never your name, email, or contact details.
International and Cross-border Processing
LokBuddy is operated from Hong Kong, the routes and partner services are delivered in Shanghai, and technology providers may operate in other locations. Information may therefore be accessed or processed in Hong Kong, mainland China, or another location used by a service provider. We limit transfers to the stated service purpose and take reasonable contractual, organisational, and technical steps appropriate to the information involved.
Retention and Security
Retention depends on the record. Account information is kept while the account is active and afterwards only where reasonably necessary. Booking, order, payment, consent, support, accounting, fraud-prevention, and dispute records may need to be kept for different periods. We do not keep personal information longer than reasonably necessary for those purposes and use reasonable technical and organisational safeguards. No internet service can guarantee absolute security.
Your Rights and Contact
You may request access to, correction of, deletion of, or a copy of your personal information. We may need to verify the request, and deletion may be limited where records must be retained for legal, accounting, payment, fraud-prevention, or dispute-handling obligations. Contact support@lokbuddy.net.