Privacy Policy

1. Our Commitment

kfchow.com ("we", "us", "our") is committed to protecting your privacy. This policy explains how we handle information when you use ChickenRight at kfchow.com/kb/chickenright/ — a high-protein chicken recipe service that delivers recipe infographics with full macro breakdowns.

We comply with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong SAR and the EU General Data Protection Regulation (GDPR, Regulation 2016/679). For EU users, kfchow.com acts as the Data Controller.

2. Legal Basis for Processing

Under GDPR Article 6, we process personal data on the following lawful bases:

3. Information We Collect

ChickenRight is designed to be privacy-respecting. We collect minimal information:

• Usage data: Anonymous page views (via nginx access logs — IP addresses, timestamps, pages visited). These logs are retained for 30 days for operational purposes and are not used for profiling.
• Google Analytics 4: With your consent, we collect anonymized visitor behavior data (pages viewed, time on site, browser type, country-level location, referral source). GA4 does not store full IP addresses — IPs are anonymized before processing. No personally identifiable information is collected. You may withdraw consent at any time by clearing your browser cookies for this site.
• Recipe feedback: When you rate or provide feedback on a recipe, we collect the recipe ID, your rating, and optional message. No personal information is required.
• Chatbot messages: Messages submitted through the "Ask GenKen" chatbot widget are processed to answer recipe questions and handle inquiries. These are not linked to personal identifiers.
• Telegram subscription: When you subscribe via the Free Recipe Push service, we store your Telegram Chat ID, cuisine preferences, delivery frequency, and preferred delivery schedule. You are asked to explicitly confirm before any data is stored. Use /stop or contact the bot to unsubscribe and delete your data at any time.
• Local storage: Theme preference (light/dark/auto) and cookie consent choice are stored in your browser's localStorage and never transmitted to our servers.

4. Google Analytics 4 (GA4)

We use Google Analytics 4 to understand how visitors interact with ChickenRight — which recipes are popular, how users navigate the site, and which features are most useful. This helps us improve recipe content, fix UI issues, and prioritize new features.

What GA4 collects (with consent):

• Pages visited and time spent on each page
• Browser type, device type, and screen resolution
• Country-level geographic location (not precise)
• Referral source (how you found ChickenRight)
• Recipe browsing and search patterns

Safeguards: IP anonymization is enabled. We do not send personally identifiable information to Google. We do not use Google Signals (cross-device tracking) or link GA4 data to any other Google service. GA4 data is stored for 26 months, after which it is automatically deleted by Google.

Your choice: A consent banner appears on your first visit. If you reject, no GA4 cookies are set and no data is sent to Google. You can change your choice at any time by clearing cookies for kfchow.com and revisiting.

Google's privacy policy: policies.google.com/privacy

5. What We Do NOT Collect

We do not:

• Use cookies for advertising or cross-site tracking
• Collect email addresses, names, or personal identifiers (except when you voluntarily provide them via Telegram subscription)
• Use Facebook Pixel or any meta-platform tracking
• Serve targeted advertisements of any kind
• Create user profiles for behavioral advertising
• Sell, rent, or share any data with third parties (except GA4 data processed by Google as a data processor under our DPA)

6. How We Use Information

Information collected is used solely to:

• Operate and improve ChickenRight (fix recipe errors, add new recipes, improve infographics)
• Deliver recipe infographics via Telegram according to your selected schedule and preferences
• Maintain server security and prevent abuse
• Respond to user inquiries via our "Ask GenKen" chatbot (💬 button bottom-right) or Telegram @genkenkfcbot
• Analyze anonymous usage patterns via GA4 to understand which recipes and features are most useful

7. Data Retention

• Server access logs: 30 days
• Recipe feedback: retained indefinitely (for quality improvement; no personal data attached)
• Chatbot messages: retained for 90 days
• Telegram subscription data (chat ID, cuisine, frequency, delivery schedule): until you unsubscribe
• GA4 data: 26 months (Google's default; auto-deleted by Google)

8. Your Rights (GDPR & HK PDPO)

For all users:

• Right of access — You may request a copy of any personal data we hold about you.
• Right to rectification — You may ask us to correct inaccurate personal data.
• Right to erasure — You may request deletion of your personal data ("right to be forgotten").

Additional rights for EU/EEA users (GDPR):

• Right to data portability (Art. 20) — Receive your data in a structured, machine-readable format.
• Right to object (Art. 21) — Object to processing based on legitimate interests.
• Right to restriction (Art. 18) — Restrict processing in certain circumstances.
• Right to withdraw consent (Art. 7(3)) — Withdraw consent at any time without affecting prior lawful processing.
• Right to complain — Lodge a complaint with your local EU Data Protection Authority or the Hong Kong Privacy Commissioner.

To exercise any of these rights, contact us via the 💬 "Ask GenKen" chatbot widget (bottom-right of any page) or Telegram @genkenkfcbot. We will respond within 30 days as required by law. For GDPR requests, we will respond within one month (extendable by two months for complex requests).

9. Data Breach Notification

In the unlikely event of a personal data breach, we will:

• Notify affected users without undue delay, within 72 hours of becoming aware of the breach
• Notify the relevant supervisory authority (HK Privacy Commissioner and/or EU DPA) within 72 hours where required by law
• Describe the nature of the breach, likely consequences, and measures taken to address it

10. Data Security

We implement reasonable technical and organizational measures to protect data against unauthorized access, alteration, or destruction. The Service is served over HTTPS with TLS encryption. However, no method of transmission over the Internet is 100% secure.

11. Children's Privacy

ChickenRight is a family-friendly recipe service. However, the Service is not specifically directed at children under 13 (or the relevant digital age of consent in your jurisdiction, up to 16). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately.

12. International Data Transfers

Our servers are located in Hong Kong SAR. All subscription data (Telegram chat ID, recipe preferences, delivery schedule) is stored on our Hong Kong server. GA4 data is processed by Google on servers globally (including the US) under Google's Standard Contractual Clauses. By using the Service, you acknowledge that your data may be transferred and processed in Hong Kong and, for GA4, in other jurisdictions.

13. Third-Party Services

The Service uses the following third-party resources:

• Telegram Bot API: Recipe delivery via Telegram — your chat ID and delivery preferences are transmitted to Telegram's servers to enable message delivery. No other user data is shared.
• Google Analytics 4: Anonymous visitor analytics (see Section 4) — Google acts as a data processor under our Data Processing Agreement

14. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Material changes will be announced via our Telegram channel @genkenkfcbot.

15. Contact

For privacy-related inquiries or to exercise your data rights, contact our Data Protection Officer:

Via our 💬 "Ask GenKen" chatbot widget on any page, or Telegram @genkenkfcbot

kfchow.com · Hong Kong SAR