This policy explains how Astera Technology Limited ("we", "us") collects and uses personal data through its Gatherland brand. We handle personal data in line with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong.
1. Who is responsible for your data
1.1 Astera Technology Limited, Unit A2, 19/F, Max Share Centre, 367–373 King's Road, North Point, Hong Kong, is the data user responsible for personal data collected through the platform.
1.2 Send questions or requests about your personal data through the contact form.
2. What we collect
2.1 Information you give us
- your name, email address and phone number;
- the bookings you make, including the venue, date, time, group size and any add-ons;
- messages you send to hosts or to us;
- reviews you write, including scores, tags, text and photos;
- requests you send, such as enquiries, "Name your price" requests and concierge forms.
2.2 Information collected automatically
- basic device and log data, such as your IP address, browser type, pages visited and the time of each request.
2.3 Payment information
- Card details are entered with and handled by our payment provider. We never store full card numbers. We receive limited information from the provider, such as whether a payment succeeded and the last digits of the card.
2.4 Hosts. If you list a venue, we also collect the information needed to verify you and pay you: business registration, identity and payout account details.
3. Why we use it
We use personal data to:
- create and manage your account;
- process bookings, payments, refunds and deposits;
- send booking confirmations, reminders and entry instructions by email and WhatsApp;
- let you and hosts message each other about a booking;
- publish reviews you choose to write;
- handle disputes, support requests and reports;
- verify hosts and pay them;
- run your rewards, credit and referral balance;
- keep the platform secure and prevent fraud and misuse;
- keep accounting records and meet our legal obligations;
- send you direct marketing, only if you have agreed to it (see section 8).
4. Who we share it with
4.1 Hosts. When you make a booking or send an enquiry, the host receives the contact details needed for that booking (your name and phone number), the booking details and any messages you send. Hosts must use this information only for your booking.
4.2 Service providers. We use providers who process data on our behalf:
- a payment provider, to take payments and make refunds and payouts (Stripe);
- a transactional email provider, to send booking and account emails (Resend);
- WhatsApp, to send booking messages such as entry instructions to your phone number;
- hosting and infrastructure providers, to run the platform (Railway and Cloudflare).
These providers may process data outside Hong Kong (including Singapore, Japan and the United States). We require them to protect it and use it only to provide their service to us.
4.3 Public content. Reviews, including your display name, are shown publicly on the venue page.
4.4 Legal reasons. We may disclose data where required by law, a court order or a law enforcement request, or where needed to protect the safety of any person.
4.5 We do not sell personal data.
5. Cookies
5.1 Essential cookies support sign-in and language preferences. They remain available if you decline optional analytics.
5.2 With your permission, Google Analytics uses optional cookies to measure visits, venue searches, enquiries and booking activity. We exclude form contents, contact details, free-text searches and raw booking references. Google may process this usage data outside Hong Kong. Advertising storage, Google signals and advertising personalization are disabled in this integration.
5.3 You can change your choice through Cookie settings in the footer. Declining analytics prevents the Google tag from loading; withdrawing permission stops analytics and removes its cookies in this browser. Essential booking and account functions continue to work.
6. How long we keep it
6.1 We keep your account data while your account is open.
6.2 If you delete your account, we delete or anonymise your personal data, except:
- booking and payment records, which we keep for seven years as required for business and accounting records;
- data we need to keep to resolve an open dispute or meet a legal obligation;
- device and log data, which we keep for up to 12 months.
6.3 Published reviews may remain on the platform without your name after you delete your account.
7. Security
7.1 We use reasonable technical and organisational measures to protect personal data, including encrypted connections and limiting access to staff who need it.
7.2 No system is completely secure. If a data breach affects you, we will tell you and take steps to limit the harm.
8. Direct marketing
8.1 We send direct marketing, such as newsletters and offers, only if you have given your consent.
8.2 You can withdraw consent at any time, free of charge, using the unsubscribe link in any marketing email, from Account settings, or through the contact form.
8.3 Booking confirmations, reminders and other service messages are not marketing and are sent whether or not you have opted in.
9. Your rights
9.1 Under the Ordinance, you have the right to request access to the personal data we hold about you and to request its correction.
9.2 You can download a copy of your data or delete your account from Account settings at any time.
9.3 Submit a formal data access or correction request through the contact form. We will respond within the time required by the Ordinance. We may charge a fee for a data access request as permitted by the Ordinance; we will tell you the amount before we proceed.
10. Children
There is no minimum age to use the platform. If you are under 18, please ask a parent or guardian before you share personal data with us. If you believe a child has given us personal data without a parent's or guardian's knowledge, report this through the contact form.
11. Changes to this policy
We may update this policy. The date at the top shows when it was last updated. If we make material changes, we will tell you by email or on the platform.
12. Contact
Privacy questions and data requests: contact form. Astera Technology Limited, Unit A2, 19/F, Max Share Centre, 367–373 King's Road, North Point, Hong Kong.