1. Introduction

Filipino Hub Limited (“we,” “us,” or “our”) is committed to protecting the privacy and personal data of all participants in the Filipino Food Trail 2026 (“the Trail”). This Privacy Policy sets out how we collect, use, disclose, and safeguard your personal information in accordance with the Personal Data (Privacy) Ordinance (Cap. 486) of the Hong Kong Special Administrative Region.

This Privacy Policy applies to all personal data collected through the Trail web application (“the Web App”), the Filipino Hub website at https://thefilipinohub.com/, QR code scanning at participating restaurants, receipt uploads, prize claim and verification processes, and any related communications.

By registering for the Trail, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described herein, please do not register for or participate in the Trail.

2. Information We Collect

We collect information that you provide directly to us, as well as data generated through your participation in the Trail. The information we collect falls into three broad categories: personal information you provide, usage and trail activity data, and device and technical data.

Personal Information You Provide

When you create an account, we generate a unique participant code together with a Stamp QR Code and a Claim QR Code. The Stamp QR Code is used when visiting restaurants to collect digital stamps when HK$150 or above is spent. The Claim QR Code is used to claim keychain prizes at venue partners depending on the prize tier achieved. We collect your first name and last name for account identification and prize claims. We collect your email address for account creation, verification, and notifications. We collect your phone number for account verification and prize coordination. We collect a password, which is stored in encrypted form, for account security. You may also choose to opt in to receive marketing communications and promotional offers.

Usage and Trail Activity Data

As you participate in the Trail, we collect your restaurant check-in history with timestamps to track your progress. We collect Stamp QR Code scan data to verify your visits at participating restaurants. We collect spending amounts at participating restaurants to determine your eligibility for prizes, as each visit requires a minimum spend of HK$150. We collect photographs or digital copies of receipts that you upload to your account after each verified visit. We collect records of rewards and keychain claims to process and fulfill your prizes. We also track the number of verified visits you complete to determine which prize tiers you have unlocked.

Uploaded receipts may be in PNG, JPEG, or PDF format. Image files are automatically resized and compressed for storage purposes. PDF files are stored without modification. All receipts are stored securely and are accessible only via time-limited links.

Device and Technical Data

When you use the Web App, we automatically collect certain technical information. This includes your device type and operating system for compatibility purposes. We collect your browser type and version for analytics and troubleshooting. We collect your IP address for security and fraud prevention purposes. We also collect general location data at the city or region level for trail analytics and restaurant mapping. The Web App may request access to your device camera, including front and rear cameras, for the purpose of capturing receipt photos and scanning QR codes.

Cookies and Tracking Technologies

We use cookies and similar technologies as described in our Cookie Policy. Essential cookies are deployed on a contractual necessity basis. Analytics, functionality, and marketing cookies are deployed only with your explicit consent.

3. How We Use Your Information

We use your personal information for the following specific purposes. We use your name, email address, phone number, and password to create, verify, and manage your account. We use your check-in history, Stamp QR Code scan data, receipt photographs, and spending information to verify restaurant visits and to process check-ins at participating restaurants. We use your visit count and timestamps to track your progress on the food trail and to determine which prize tiers you have unlocked. We use your spending data and visit count to determine your eligibility for rewards, including the keychain prizes and the completion e-certificate.

We use your email address and phone number to send you notifications about your trail progress, prize unlocks, and event updates, as well as promotional offers where you have given your consent. We use usage data and device data to analyse how the Web App is used, to improve our services, and to enhance the overall participant experience. We may use your IP address, device data, and usage data to prevent fraud and ensure the security of the Trail, our participants, and our systems.

Where necessary, we also process your personal data to comply with applicable legal obligations, to respond to lawful requests from public authorities, and to establish, exercise, or defend legal claims.

4. Legal Basis for Processing

Where required under the Personal Data (Privacy) Ordinance (Cap. 486) and other applicable laws, we process personal data on the following bases:

You may withdraw consent at any time by contacting us at hello@thefilipinohub.com. Please note that withdrawal of consent may limit your ability to participate in certain Trail features.

5. Information Sharing and Disclosure

We do not sell, rent, or trade your personal data. We may disclose your information only in the following limited circumstances:

All third-party recipients are bound by confidentiality agreements and are required to implement appropriate data protection measures. We do not authorize them to use your data for their own purposes.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

Technical Measures

Organizational Measures

Visit verification is based on Stamp QR Code scans recorded in the Web App, receipt photographs uploaded by participants, and confirmation by participating restaurants. The Organizer's digital records are the authoritative record of visits, spending, and prize eligibility.

The Web App stores failed login attempts per email or account, including the failure count and timestamps, with a lockout after five failed attempts for five minutes. Failed login attempt records are automatically cleared after five minutes of inactivity.

7. Your Rights

Subject to applicable law, you have the following rights regarding your personal data:

To exercise any of these rights, please contact our Data Protection Officer using the details provided in Section 9. We will respond to all requests within thirty days of receipt.

8. Data Retention

We retain your personal information for the duration of the Filipino Food Trail 2026 event and for six months thereafter. This retention period allows us to fulfill prize claims, address any disputes that may arise, and meet audit requirements. Specifically, we retain account data, visit and spending data, receipt photographs, prize claim records, and marketing consent records for this period.

After this period, your data will be securely deleted or anonymized, unless you request earlier deletion where technically feasible, we are required by law to retain it longer, or retention is necessary for ongoing legal proceedings.

9. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your data, please contact our Data Protection Officer:

10. Children's Privacy

The Trail is not intended for individuals under eighteen years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately at hello@thefilipinohub.com so that we can delete it.

11. Policy Updates

We may update this Privacy Policy from time to time. Material changes will be communicated via Web App notification, email to registered participants, and posting on our website. Your continued participation in the Trail after such changes constitutes acceptance of the updated Privacy Policy.