Privacy Policy & Personal Data Protection Policy (PDPA)

1. What Personal Data We Collect

“Personal data” means information about an individual who can be identified from that information, either on its own or together with other information available to us.

Depending on how you interact with QLF, we may collect information such as:

• your name and mobile telephone number;
• gender;
• date of birth or birthday;
• reservation details, including preferred date, time and number of diners;
• preferences, enquiries, feedback and communications with us;
• information submitted through our website, QR codes, WhatsApp, social media, promotions or membership programmes; and
• basic website usage or technical information collected through analytics technologies or cookies, where applicable.

You are generally not required to provide personal data unless it is necessary for us to provide a requested service. Where consent is required, you may choose whether to provide your personal data.

If you provide us with personal data relating to another person, such as a family member or fellow diner, you should ensure that you are authorised to provide that information to us.

2. How We Collect Personal Data

We may collect personal data when you:

• submit an enquiry, reservation or other form through our website;
• communicate with us by telephone, WhatsApp, SMS, social media or other channels;
• make or manage a table reservation;
• scan a QR code and join the Qi Lai Feng WhatsApp Club;
• participate in promotions, membership programmes, surveys or customer feedback activities;
• visit or interact with our website or digital services; or
• voluntarily provide information to our restaurant team.

We may also receive limited personal data from reservation, messaging, technology or service providers that you use to interact with us.

3. How We Use Your Personal Data

We may collect, use and process your personal data for reasonable business purposes, including:

• processing and managing table reservations;
• responding to enquiries, requests, feedback or complaints;
• providing customer service;
• administering our WhatsApp Club, promotions and customer programmes;
• understanding customer demographics, preferences and dining behaviour;
• conducting internal customer and business analysis;
• improving our restaurant, menus, customer experience, website and services;
• sending promotions, new menu updates, birthday offers, dining offers, events and other marketing communications where permitted;
• preventing fraud, misuse or security incidents;
• complying with legal, regulatory and accounting requirements; and
• other purposes that are reasonably related to the above or that we notify you of when collecting your personal data.

Where required by law, we will obtain your consent before using your personal data for a new purpose.

4. Marketing Communications

With your consent or where otherwise permitted under applicable Singapore law, we may contact you through WhatsApp, SMS, telephone or other channels regarding QLF promotions, new dishes, birthday offers, special events and restaurant updates.

Our marketing practices will be carried out in accordance with the PDPA and applicable Do Not Call requirements.

You may withdraw your marketing consent or opt out at any time by replying “STOP” or “OPT OUT” through WhatsApp/SMS, or contacting us using the details below. Withdrawal of marketing consent will not affect your ability to make restaurant reservations or dine with us.

5. Disclosure of Personal Data

Qi Lai Feng will never sell or rent your personal data to third parties.

We may disclose personal data only where reasonably necessary to service providers working on our behalf, such as website hosting, reservation systems, WhatsApp or customer messaging platforms, customer relationship management systems, analytics providers and IT support providers.

We may also disclose information where required or permitted by Singapore law or a lawful request from a government or regulatory authority.

Where personal data is transferred outside Singapore through our technology providers, we will take reasonable steps to ensure that it receives a standard of protection comparable to that required under the PDPA.

6. Protection and Retention

We take reasonable administrative, technical and organisational measures to protect personal data under our possession or control against unauthorised access, collection, use, disclosure, modification, loss or similar risks.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected or for legitimate legal or business requirements. When personal data is no longer required, we will securely delete, dispose of or anonymise it where appropriate.

If a data breach occurs, we will assess the incident and notify the Personal Data Protection Commission (“PDPC”) and affected individuals where notification is required under the PDPA.

7. Your Rights

Subject to the PDPA and applicable exceptions, you may:

• request access to personal data we hold about you;
• request correction of inaccurate or incomplete personal data;
• withdraw consent to our continued collection, use or disclosure of your personal data; and
• ask questions or raise concerns about how we handle your personal data.

Withdrawal of consent may affect our ability to provide certain services where the information is necessary for those services.

8. Third-Party Websites

Our website may contain links to external websites, reservation platforms, delivery platforms, social media services or other third-party services. Their privacy practices are governed by their own privacy policies, and QLF is not responsible for those external privacy practices.

9. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology, business practices or applicable laws. The latest version will be published on our website with the updated effective date.

10. Contact Us

For questions, requests, withdrawal of consent or concerns regarding your personal data, please contact:

We may need to verify your identity before processing an access, correction or other personal data request.