Last updated: 3 November 2026
This policy explains what personal data Juju collects, why, and what you can do about it. It covers givejuju.com, our gift passes, and the messages we send by WhatsApp and email.
Juju is run by Juju Limited (祝祝有限公司), 21/F CMA Building, 64 Connaught Road Central, Hong Kong ("Juju", "we", "us"). We follow Hong Kong's Personal Data (Privacy) Ordinance (Cap. 486).
Questions about your data? Email mika@givejuju.com.
1. What we collect
If you buy a gift (buyers)
- Your name, email address and mobile number
- Whether you're happy to receive order updates on WhatsApp
- Your order: the experience, price, delivery date and the personal message you write
- Payment confirmation from our payment provider. We never see or store your full card details.
If you receive a gift (recipients)
- Your name, and the WhatsApp number or email address the buyer gave us to deliver the gift
- Your gift pass details: the experience, gift code, validity and whether it has been redeemed
- Any feedback you choose to give after your experience
If you're one of our partners
- Business contact details, and bank details for payouts
If you visit our website or contact us
- The email address you give us if you sign up for updates
- Basic technical data, such as device type, browser and pages visited, collected through cookies (see section 8)
- Messages you send us by WhatsApp or email
2. Why we use it
We use personal data to:
- process orders and payments, and issue refunds
- create gift passes and deliver them on the date chosen
- tell buyers when a gift has been delivered
- help recipients book with our partner, and let partners check and confirm gift codes
- pay our partners
- answer questions and fix problems
- prevent fraud and keep our service secure
- ask for feedback and improve Juju
- send updates and offers about Juju, only if you've agreed to receive them
- meet our legal, tax and accounting obligations
3. Recipients' details
When a buyer chooses WhatsApp delivery, they confirm that the recipient knows them and is happy to receive the gift on WhatsApp. We use a recipient's details only to deliver the gift and send messages about it, such as booking reminders and a short feedback request. We don't use recipients' details for marketing unless they sign up themselves.
Recipients can stop our messages at any time by tapping "Stop" in WhatsApp, replying STOP, or emailing mika@givejuju.com.
4. Who we share it with
We share only what's needed, with:
- The partner providing the experience: the recipient's name, gift code and experience details, so they can take the booking
- Our service providers, who act on our instructions:
- Airwallex (payments)
- Meta / WhatsApp (messaging)
- our website hosting and email providers
- Professional advisers, such as accountants and lawyers
- Authorities, where the law requires it
We never sell personal data.
5. Direct marketing
We only send marketing messages if you've given us your consent, for example by signing up for updates on our website. You can unsubscribe at any time using the link in any email, or by emailing mika@givejuju.com. We will not pass your data to anyone else for their marketing.
6. Data stored outside Hong Kong
Some of our service providers store or process data outside Hong Kong. When this happens, we choose providers with appropriate safeguards to protect your data.
7. How long we keep it
- Orders and gift passes: for as long as the gift pass is valid (12 months), and then as long as we need them for accounting and tax purposes. Hong Kong law generally requires business records to be kept for 7 years.
- Marketing sign-ups: until you unsubscribe.
- Messages and support requests: for as long as we need them to help you, and then deleted.
8. Cookies
We use cookies that the website needs to work, and simple analytics to understand how people use the site. You can block or delete cookies in your browser settings, though some parts of the site may not work properly without them.
9. Keeping your data safe
We use reasonable technical and organisational measures to protect your data. Access is limited to the people and providers who need it.
10. Your rights
You can ask us:
- for a copy of the personal data we hold about you
- to correct anything that's wrong
- to stop sending you marketing messages
Email mika@givejuju.com. We'll respond within 40 days, as required by law. We may charge a reasonable fee for a copy of your data, where the law allows it.
11. How to delete your data
To ask us to delete your personal data:
- Email mika@givejuju.com with the subject line "Data deletion request".
- Include your name and the email address or phone number you used with Juju.
- We'll confirm we've received your request and complete it within 30 days.
Please note:
- If you're a recipient with an unused gift pass, deleting your data will cancel the gift pass. We'll check with you first.
- We may need to keep some records, such as transaction records, where the law requires it. We'll tell you if this applies.
- To stop WhatsApp messages straight away, tap "Stop" in the chat or reply STOP.
We don't use Facebook Login. Any data we receive through WhatsApp is deleted the same way.
12. Age
You must be 18 or over to buy a gift on Juju. We don't knowingly collect personal data from children, except where a buyer gives us a recipient's details to deliver a gift.
13. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top will always show the latest version. If we make significant changes, we'll let you know.
14. Contact us
Juju Limited (祝祝有限公司)
21/F CMA Building, 64 Connaught Road Central, Hong Kong
mika@givejuju.com