老火湯LO FO TONG

Your details

Lo Fo Tong collects as little as possible. This page says exactly what we hold and what you can ask us to do with it.

What we collect

If you join the weekly soup letter we store your email address, the language you chose, and a record of the consent you gave with its date. A name is optional. We keep a salted hash of your IP address and the browser user-agent string your device sends, both to stop abuse — never the IP address itself. We do not run advertising trackers and we do not build a profile of you.

Why we collect it

To send you the weekly letter, and to show you the pack waitlist if you asked for it. Nothing else.

Asking Ah Ma

If you use the 問阿媽 assistant, the question you type is sent to an AI provider (Google Gemini, or Anthropic as a fallback) so it can be answered, together with the matching entries from our own soup and ingredient records. Those providers process it on servers outside Australia. We do not attach your name or email to it, and we do not keep a record of your questions. Do not type anything into it you would not want handled that way; if a question is private, the recipes are all on the site to read directly.

Consent and unsubscribing

We use double opt-in: you will not receive a letter until you tap the confirmation link. Every letter carries a one-click unsubscribe that we honour immediately. You can unsubscribe without contacting us.

Where it is stored

In an encrypted Google Firestore database in Sydney, so your details stay in Australia. Two honest caveats: the website itself is served from a global network, and the confirmation email passes through our mail provider, and both of those operate outside Australia.

Access and deletion

Ask us and we will tell you what we hold about you, or delete it. Deletion is permanent and takes effect within 30 days, usually sooner. One honest exception: if you have bought something, the order record (including the email address you gave at checkout) is kept, because tax and consumer law require us to keep records of sales. Ask and we will tell you exactly what that record holds.

Sharing

We do not sell your details and we do not share them for anyone else’s marketing. Our email provider processes your address only to deliver our letters. If you buy a package, Stripe processes your payment; we never see your card details.

Contact

Email the address in the site footer for any privacy question, correction or deletion request.

Last updated 20 August 2026.