Privacy policy

Last updated: 12 August 2026

1. About This Policy / About This Policy

SUN LOK FOOD TRADING LIMITED (English name: SUN LOK FOOD TRADING LIMITED; Business name: SUNLOK Large Wholesale Outlet; hereinafter referred to as "SUNLOK", "the Company", "we") values the privacy of customers and website visitors.

This privacy policy explains what personal data we collect through the website, Shopify online store, customer account, Facebook Login, WhatsApp customer service, phone, email and other related services, the purpose of collecting and using data, to which entities we may disclose data, data retention and security arrangements, and how you may exercise your personal data rights.

This policy applies to the website:

https://sunlokoutlet.com

SUN LOK FOOD TRADING LIMITED, trading as New Lok Wholesale Outlet (“New Lok”, “the Company”, “we”, “us” or “our”), respects the privacy of our customers and website visitors.

This Privacy Policy explains what personal data we collect through our website, Shopify online store, customer accounts, Facebook Login, WhatsApp customer service, telephone, email and other related services; why and how the information is used; with whom it may be shared; how it is retained and protected; and how you may exercise your privacy rights.

This Policy applies to:

https://sunlokoutlet.com

2. Personal Data We Collect / Personal Data We Collect

We may collect the following categories of personal data:

2.1 Identity and Contact Details

Including name, title, phone number, WhatsApp number, email address, delivery address, billing address and other contact details.

2.2 Customer Account Details

Including customer account ID, login status, account preferences, account creation and update records, and technical data related to account security.

2.3 Order and Transaction Details

Including order number, items purchased, quantity, price, discount, payment method, payment status, delivery arrangements, refunds, returns and transaction records.

2.4 Payment Verification Details

Including bank transfer records, payment screenshots submitted by the customer, payment date, payment amount, and other details required for verification.

We will not ask customers to send complete credit card numbers, credit card security codes, or online banking passwords via WhatsApp or email.

2.5 Customer Service and Communication Details

Including messages, queries, complaints, feedback, photos, videos, recordings, documents, and conversation records submitted via WhatsApp, email, phone, website forms, or other channels.

2.6 Wholesale and Business Inquiry Details

Including business registration documents, company name, company contact details, procurement requirements, and other business data submitted by the customer.

If the business registration documents contain personal names, addresses, or other personal data, we will also handle them in accordance with this policy.

2.7 Logistics and Delivery Details

Including recipient name, phone number, delivery address, pickup point, delivery requirements, logistics tracking number, delivery status, and data required to process address changes or delivery exceptions.

2.8 Facebook Login Details

When you choose to log in using Facebook Login, we may receive from Meta:

Facebook User ID;
Name;
Email address;
Profile picture;
Other basic profile data that Meta authorizes us to receive;
Technical authentication data required to provide login and verification services.

The actual data collected depends on the Facebook permissions you grant and the features provided by Meta at that time.

We will not obtain or request your Facebook password.

2.9 Technical, Website, and Device Details

Including IP address, browser type, device type, operating system, cookie identifiers, login and security logs, website activity, pages viewed, referral source, and approximate location data.

2.10 Other Data

Including data required by law for us to collect, and other data you voluntarily provide to us that is reasonably related to the service.

We may collect the following categories of personal data:

Identity and contact information, including name, title, telephone number, WhatsApp number, email address, delivery address and billing address.
Customer-account information, including customer identifiers, account status, preferences and account-security information.
Order and transaction information, including order number, products, quantities, prices, discounts, payment method, payment status, delivery arrangements, refunds and returns.
Payment-verification information, including bank-transfer records, payment screenshots, payment dates and amounts voluntarily provided by customers.
Customer-service information, including messages, enquiries, complaints, feedback, photographs, videos, recordings, documents and conversation records.
Wholesale and business-enquiry information, including business-registration documents, company information, contact-person details and purchasing requirements.
Logistics information, including recipient name, telephone number, address, collection point, delivery instructions, tracking number and delivery status.
Facebook Login information, including Facebook user ID, name, email address, profile picture, other basic profile information authorised by you, and technical authentication information required to provide login services.
Technical and usage information, including IP address, browser, device, operating system, cookie identifiers, security logs, pages visited and referral information.
Other information required by law or voluntarily provided by you in connection with our services.

We do not obtain or ask for your Facebook password. We also do not ask customers to send complete credit-card numbers, card security codes or online-banking passwords through WhatsApp or email.

3. Sources of Personal Data

We may obtain personal data through the following means:

You providing data directly to us;
You browsing or using this website;
You creating an account or submitting an order;
You using Facebook Login;
You contacting us via WhatsApp, email, phone, or website forms;
Shopify, Meta, Facebook, or WhatsApp;
Banks, payment services, and fraud prevention service providers;
SF Express or other logistics and warehousing service providers;
IT, website analytics, security, and technical service providers;
Public or commercial data sources permitted by law.

We may obtain personal data directly from you, through your use of our website and services, when you create an account or place an order, when you use Facebook Login, or when you contact us through WhatsApp, email, telephone or website forms.

Information may also be received from Shopify, Meta, Facebook, WhatsApp, banks, payment providers, fraud-prevention services, SF Express, logistics providers, technology providers and lawful public or commercial sources.

4. Purposes of Collection and Processing

We may process personal data for the following purposes:

Creating, verifying, logging in, and managing customer accounts;
Providing Facebook Login functionality;
Processing, confirming, and fulfilling orders;
Verifying bank transfer and payment records;
Processing refunds, returns, exchanges, cancellations, and after-sales services;
Arranging SF Express or other logistics services;
Providing logistics tracking and delivery status;
Handle address changes and specified delivery requirements;
Reply to general inquiries, complaints, and product issues;
Handle cases of wrong delivery, missing items, damage, or out of stock;
Handle wholesale applications, quotations, and business cooperation;
Verify customer identity and protect account security;
Detect, prevent, and investigate fraud, abuse, or security incidents;
Maintain records of orders, payments, accounting, tax, and transactions;
Improve website, products, customer service, and user experience;
Conduct internal analysis, statistics, and service quality management;
Send offers, promotions, or direct promotional information after obtaining necessary consent;
Establish, exercise, or defend legal rights;
Comply with laws, court orders, law enforcement, and regulatory requirements.

We may process personal data to:

Create, authenticate and manage customer accounts;
Provide Facebook Login;
Process, confirm and fulfil orders;
Verify bank transfers and payment records;
Process refunds, returns, exchanges and cancellations;
Arrange SF Express or other delivery services;
Provide shipment tracking and delivery updates;
Handle delivery-address changes and delivery requests;
Answer enquiries, complaints and product-related issues;
Handle missing, incorrect, damaged or out-of-stock items;
Process wholesale enquiries and quotations;
Verify identity and protect account security;
Detect and prevent fraud, abuse and security incidents;
Maintain transaction, accounting and tax records;
Improve our website, products and customer service;
Conduct internal analytics and quality management;
Send marketing communications where valid consent has been obtained;
Establish, exercise or defend legal rights; and
Comply with legal, court, law-enforcement and regulatory requirements.

5. AI and Automated Customer-Service Tools / AI and Automated Customer-Service Tools

We may use artificial intelligence, OCR, or other automated tools to assist:

Identify customer query intent;
Categorise and prioritise messages;
Extract data from images or documents provided by the customer;
Match customer accounts and orders;
Suggest standard customer service replies;
Suggest order notes based on preset rules;
Identify situations requiring manual customer service follow-up;
Send internal notifications to relevant colleagues.

Matters involving payment confirmation, payment disputes, complaints, reshipment, compensation, wholesale approval, or other important decisions may be reviewed by staff or taken over directly.

Customers may request that the conversation be handled by manual customer service.

We may use artificial intelligence, OCR and other automated tools to classify enquiries, extract information from customer-provided images or documents, match customer accounts and orders, suggest standard responses, recommend order notes under predefined rules, identify cases requiring human assistance and notify relevant staff.

Payment confirmation, payment disputes, complaints, replacement or compensation decisions, wholesale approval and other significant matters may be reviewed or handled by staff. Customers may request human assistance.

6. Legal Bases for Processing / Legal Bases for Processing

Where applicable law requires, we may process personal data based on the following bases:

Fulfilling a contract with you or taking necessary steps before entering into a contract;
Processing and fulfilling your order;
Complying with statutory, tax, accounting, or regulatory obligations;
Your consent;
Where appropriate, the legitimate interests of SUNLOK for the operation and protection of the business, customers, and systems;
Preventing fraud and protecting information security;
Establishing, exercising, or defending legal claims.

Where required by applicable law, our processing is based on performance of a contract, steps requested before entering into a contract, compliance with legal obligations, your consent, our legitimate interests in operating and securing the business, fraud prevention, information security, or the establishment, exercise or defence of legal claims.

7. Disclosure and Service Providers / Disclosure and Service Providers

We will not disclose personal data without reasonable necessity.

To provide services, we may disclose necessary data to the following entities:

Shopify, as the e-commerce and hosting platform for this website;
Meta, Facebook, and WhatsApp, for login and communication services;
Banks, payment processing, and anti-fraud service providers;
SF Express and other logistics, transportation, or warehousing service providers;
Cloud hosting, artificial intelligence, OCR, notification, and communication service providers;
Website analytics, information security, and technical support service providers;
Accountants, auditors, insurance companies, legal advisors, and other professional advisors;
Courts, law enforcement, tax, or regulatory authorities;
Qualified parties involved in corporate restructuring, mergers, acquisitions, or business transfers.

The service provider may only process data within the scope of providing the relevant service or complying with legal requirements.

We do not disclose personal data without a reasonable need.

Where necessary, information may be shared with Shopify; Meta, Facebook and WhatsApp; banks, payment processors and fraud-prevention services; SF Express and other logistics providers; cloud-hosting, AI, OCR, notification and communications providers; analytics, security and technical-support providers; professional advisers; courts, tax, law-enforcement and regulatory authorities; and qualified parties involved in a corporate transaction.

Service providers may process information only as necessary to provide the relevant services or comply with applicable law.

8. Shopify Data Processing / Shopify Processing

This store is hosted and provided with e-commerce services by Shopify.

When you browse this website, create an account, or shop, Shopify may process your personal data to provide, protect, and improve its services. Shopify's services may use your interaction data with this store, other merchants, and Shopify.

Shopify and its service providers may be located outside Hong Kong.

For information on how Shopify processes personal data, please refer to:

https://privacy.shopify.com/en

Our store is hosted and supported by Shopify. When you browse our website, create an account or make a purchase, Shopify may process personal data to provide, protect and improve its services. Shopify’s services may use information concerning your interactions with our store, other merchants and Shopify.

Shopify and its service providers may be located outside Hong Kong.

For more information, see:

https://privacy.shopify.com/en

9. Facebook and Meta Data / Facebook and Meta Data

Personal data obtained through Facebook Login will only be used for:

Creating and identifying customer accounts;
Providing and maintaining login functionality;
Protecting account and system security;
Providing customer service;
Preventing fraud or unauthorized use;
Improving account and login experience.

We do not sell your personal data obtained through Facebook Login for money, nor do we ask for your Facebook password.

Facebook Login data is used only to create and identify customer accounts, provide authentication, maintain account and system security, provide customer support, prevent fraud or unauthorised use, and improve the account and login experience.

We do not sell Facebook Login data for money and do not request your Facebook password.

Meta's privacy policy:

https://www.facebook.com/privacy/policy/

10. Cross-border Data Processing / International Data Transfers

Some service providers, data centres, and servers may be located outside Hong Kong, and their privacy laws may differ from Hong Kong's.

We will take reasonable and practicable measures to require the recipient of the data to process personal data in accordance with applicable laws, contractual obligations, and appropriate security measures.

Some service providers, data centres and servers may be located outside Hong Kong, where privacy laws may differ.

We take reasonable and practicable measures to require recipients to protect personal data through applicable legal, contractual and security safeguards.

11. Data Retention / Data Retention

We will only retain personal data for the period necessary to achieve the purpose of collection, fulfil contracts, handle customer service, resolve disputes, and fulfil legal, accounting, tax, or regulatory obligations.

The retention period will be determined based on the following factors:

The nature and sensitivity of the data;
The duration of the order or customer relationship;
The need to handle disputes or claims;
The need to prevent fraud and ensure system security;
Applicable laws or regulatory requirements.

When data is no longer needed, we will take reasonable measures to delete, anonymise, or securely isolate the data.

If data needs to be retained due to statutory retention obligations, payment records, tax, accounting, anti-fraud, refunds, disputes, or legal claims, we may not be able to delete it immediately and completely.

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, performance of contracts, customer service, dispute resolution and legal, accounting, tax or regulatory obligations.

Retention periods depend on the nature and sensitivity of the information, the duration of the customer relationship, dispute and fraud-prevention requirements, system-security needs and applicable law.

When information is no longer required, we take reasonable measures to delete, anonymise or securely isolate it. Immediate deletion might not be possible where records must be retained for legal, payment, tax, accounting, fraud-prevention, refund, dispute or legal-claim purposes.

12. Data Security / Data Security

We take reasonable and practicable administrative, technical, and physical measures to protect personal data from unauthorised or accidental access, processing, deletion, loss, disclosure, or other misuse.

Such measures may include:

Account and password protection;
Access restriction;
Transmission and storage security;
System monitoring and logging;
Employee confidentiality and permission management;
Service provider review;
Backup and incident handling procedures.

However, no internet transmission or electronic storage system can guarantee absolute security.

We use reasonable and practicable administrative, technical and physical safeguards against unauthorised or accidental access, processing, deletion, loss, disclosure or misuse.

Measures may include account protection, access controls, transmission and storage security, system monitoring, staff confidentiality, provider reviews, backups and incident-response procedures.

No internet transmission or electronic-storage system can be guaranteed completely secure.

13. Cookies, Analytics and Advertising / Cookies, Analytics and Advertising

We may use the following cookies or similar technologies:

Essential cookies required for the website to function;
Functional cookies that record preferences and the shopping cart;
Analytical cookies that analyse website usage:
Advertising or personalised cookies used with legal permission and required consent.

In regions where applicable law requires, we will obtain consent before enabling non-essential cookies.

You can manage your choices via website cookie settings, data sharing exit page or browser settings. Disabling some cookies may affect website functionality.

We may use essential cookies, functional cookies, analytics cookies and, where permitted and valid consent has been obtained, advertising or personalisation cookies.

Where required by applicable law, we obtain consent before activating non-essential cookies. You may manage your choices through our cookie settings, data-sharing opt-out page or browser settings. Disabling certain cookies may affect website functionality.

14. Sale, Sharing and Targeted Advertising

We will not sell your personal data obtained via Facebook Login or customer orders for money.

However, certain website analytics, advertising, personalisation or Shopify enhanced services may be legally defined as data 'sharing', 'selling' or 'targeted advertising' in some jurisdictions.

If applicable, you can opt out via this website's cookie settings, Global Privacy Control or Shopify data sharing exit page.

We do not sell Facebook Login or customer-order data for money.

However, certain analytics, advertising, personalisation or Shopify Enhanced Services might be classified as “sharing”, “sale” or “targeted advertising” under the laws of some jurisdictions.

Where applicable, you may opt out through our cookie settings, Global Privacy Control or Shopify data-sharing opt-out page.

15. Direct Marketing

With legal consent obtained, we may use your name, email address, phone number or WhatsApp number to send product, offer and promotional information.

You can opt out for free at any time via:

Using the unsubscribe function in the message;
Replying to request to stop receiving;
Emailing gtsangtrading@gmail.com;
Contacting us via WhatsApp.

Opting out of direct marketing will not affect order, payment, delivery or important service notifications.

Where required, we obtain consent before using your name, email address, telephone number or WhatsApp number for marketing.

You may opt out without charge by using the unsubscribe function, replying with an opt-out request, emailing gtsangtrading@gmail.com or contacting us through WhatsApp.

Marketing opt-out does not affect order, payment, delivery or other essential service communications.

16. Your Privacy Rights

Under applicable law, you may request:

Confirmation that we hold your personal data;
Access to the personal data we hold;
A copy of the data;
Correction of inaccurate or incomplete data;
Deletion of data no longer needed;
Withdrawal of consent;
Opting out of direct marketing;
Restriction or objection to certain processing activities;
Portable data, where applicable;
A human review of important automated processing results;
A complaint to the relevant privacy regulator.

We may request reasonable data verification of your identity and to prevent unauthorised data disclosure.

Some rights are limited by legal exceptions, statutory retention requirements and other legitimate reasons.

Subject to applicable law, you may request confirmation, access, a copy, correction, deletion, restriction, objection, withdrawal of consent, marketing opt-out, data portability where applicable, or human review of significant automated processing.

You may also lodge a complaint with the applicable privacy regulator.

We may request reasonable information to verify your identity and prevent unauthorised disclosure. Rights may be subject to legal exceptions and mandatory retention requirements.

17. Facebook Data Deletion Procedure

To delete personal data collected via Facebook Login, please follow the procedure below:

Emailing gtsangtrading@gmail.com;
In the email subject line, write 'Facebook Data Deletion Request';
Provide the name and email address used for Facebook Login;
If you know the relevant order number or customer account details, you may provide them together;
Please do not provide your Facebook password, online banking password or credit card security code.

We will:

Confirm that we have received the request;
Take reasonable steps to verify the applicant's identity;
Locate data linked to the relevant Facebook Login account;
Delete or anonymise the Facebook Login data no longer needed;
Notify the applicant once processing is complete.

Order, payment, refund, tax, accounting, anti-fraud or dispute data required to be kept by law may be retained until the applicable period expires.

Facebook Data Deletion Instructions Page:

https://sunlokoutlet.com/pages/facebook-data-deletion

To request deletion of personal data collected through Facebook Login:

Email gtsangtrading@gmail.com;
Use the subject “Facebook Data Deletion Request”;
Provide the name and email address used for Facebook Login;
If available, provide the relevant order number or customer-account information;
Do not provide your Facebook password, online-banking password or card security code.

We will acknowledge the request, take reasonable steps to verify the requester’s identity, identify data associated with the relevant Facebook Login account, delete or anonymise information that is no longer required, and notify the requester when processing is complete.

Order, payment, refund, tax, accounting, fraud-prevention or dispute records may be retained where required by law.

Facebook Data Deletion Instructions:

https://sunlokoutlet.com/pages/facebook-data-deletion

18. Children’s Data

Our website and services are not intended for children as the primary audience.

We will not, in the knowledge of the fact, request children to provide personal data without obtaining appropriate consent from a parent or guardian.

If you believe a child has provided personal data to us, please contact us via gtsangtrading@gmail.com.

Our website and services are not directed primarily at children.

We do not knowingly request personal data from children without appropriate parental or guardian consent. If you believe a child has provided personal data, please contact gtsangtrading@gmail.com.

19. Third-Party Websites and Services

This website may contain links to third-party websites, applications or services.

Third parties process data in accordance with their own privacy policies; we recommend you read the relevant policies before submitting your personal data.

Our website may contain links to third-party websites, applications or services. Those parties process personal data under their own policies, which should be reviewed before information is submitted.

20. Changes to This Privacy Policy

We may update this policy due to changes in services, technology, cooperating suppliers or legal requirements.

Updated versions will be published on this page and state the date of the last update. If changes may have a significant impact on your rights or the way your data is used, we will provide additional notice where appropriate.

We may update this Policy when our services, technologies, providers or legal obligations change.

The revised version will be published on this page with the updated date. Where appropriate, we will provide additional notice of material changes affecting your rights or how personal data is used.

21. Contact Us

Data Controller
SUNLOK Food Trading Co., Limited
SUN LOK FOOD TRADING LIMITED

Trading Name
SUNLOK Wholesale Outlet
New Lok Wholesale Outlet

Privacy Contact Email
gtsangtrading@gmail.com

Telephone
+852 6679 9323

Correspondence Address
Room 301, Festigood Centre,
8 Lok Yip Road, Fanling,
New Territories, Hong Kong

Website
https://sunlokoutlet.com

Facebook Data Deletion Page
https://sunlokoutlet.com/pages/facebook-data-deletion

Your cart is empty

Japanese & Australian Wagyu

Japanese & Australian Wagyu

Your cart

Estimated total

Privacy policy

Let customers speak for us

Language

Language

Privacy policy

Let customers speak for us