Skip to main content

Privacy Policy

How Okya collects, uses, and protects personal data across our website and platform, and how to exercise your data rights.

Z
Written by Zachary Marble

1. Introduction

Okya Limited ("Okya", "we", "our", or "us") is committed to protecting personal data and maintaining transparency in how we collect, use, and safeguard information.

This Privacy Policy explains how we process personal data when you:

  • visit our website (okya.co)

  • interact with us

  • use our services

2. Who We Are

Okya Limited is a cloud-based SaaS platform providing integrated solutions for restaurants, hospitality, and retail businesses.

Address: Universal Trade Centre, 29F Unit 2904-05, 3 Arbuthnot Road, Central, Hong Kong 999077

3. Scope

This policy applies to:

  • Website visitors

  • Prospective customers

  • Business customers

  • End-user data processed through our platform

Important: Okya acts as a Data Controller for website & marketing data, and as a Data Processor for customer data processed via our platform.

4. Personal Data We Collect

A. Information You Provide

  • Name

  • Email

  • Company

  • Phone number

  • Messages / inquiries

B. Automatically Collected Data

  • IP address

  • Device & browser information

  • Usage data

  • Location (approximate)

C. Platform Data (via Customers)

  • Customer/end-user data

  • Transaction data

  • Order data

  • Behavioral data

5. How We Use Data

We process personal data to:

  • Provide and operate our services

  • Respond to inquiries and support requests

  • Improve platform performance and functionality

  • Ensure security and prevent fraud

  • Comply with legal obligations

  • Communicate with users and customers

6. Legal Basis for Processing

We process personal data under:

  • Contractual necessity (providing services)

  • Legitimate interests (improving services, security)

  • Consent (marketing, cookies where required)

  • Legal obligations

7. Cookies & Tracking

We use cookies and similar technologies to:

  • Operate the website

  • Analyze usage via Google Analytics

  • Improve performance

Where required by law, we obtain user consent before placing non-essential cookies. For more information about cookies, please refer to your browser settings.

8. Data Sharing

We may share data with:

  • Infrastructure providers (e.g., cloud hosting)

  • Payment providers

  • Analytics tools

  • Service providers and subprocessors

  • Authorities where legally required

We ensure all third parties process data securely and in compliance with applicable laws.

9. International Transfers

We may process data globally. Where required, we implement safeguards such as Standard Contractual Clauses (SCCs) and equivalent legal protections to ensure data is transferred securely.

10. Data Security

Okya maintains a security program designed to protect the confidentiality, integrity, and availability of personal data.

This includes:

  • Encryption (in transit and at rest)

  • Access controls and authentication

  • Monitoring and logging

  • Backup and recovery systems

Okya maintains controls aligned with SOC 2 Type II, and undergoes periodic audits and renewal processes.

In the event of a personal data breach that is likely to result in a risk to individuals, Okya will notify affected parties and relevant authorities as required by applicable law.

11. Data Retention

We retain personal data only as long as necessary to:

  • Provide services

  • Meet legal obligations

  • Resolve disputes

Data is securely deleted or anonymized when no longer required.

12. Your Rights

You have the right to:

  • Access your data

  • Correct inaccurate data

  • Request deletion

  • Restrict processing

  • Object to processing

  • Request data portability

  • Withdraw consent

To exercise your rights, contact: [email protected]

We will respond to verified requests within 30 days, or as otherwise required by applicable law.

13. Children's Data

Our services are not directed to children, and we do not knowingly collect personal data from children except as may be processed by customers through their own use of the service in accordance with applicable law.

14. Updates to This Policy

We may update this Privacy Policy periodically. When we do, we will update the Effective Date above. If changes are material, we may provide additional notice where appropriate.

15. Contact Us

If you have questions about this Privacy Policy or how we handle personal data, please contact: Okya Limited Email: [email protected]

Address: Universal Trade Centre, 29F Unit 2904-05, 3 Arbuthnot Road, Central, Hong Kong 999077

Did this answer your question?