Privacy Policy

We collect personal data only when you voluntarily provide it or when it is generated through your use of our website. The types of data we may collect include:

• Contact information: name, email address, phone number — provided through our contact form
• Correspondence: content of messages or enquiries submitted to us
• Usage data: browser type, pages visited, time on site — collected via analytics cookies (with consent)
• Session data: IP address, session identifiers — from essential cookies

We do not collect sensitive personal data (such as health, biometric, or financial data) through our website.

We process personal data on the following bases under the PDPO:

• Consent: for optional analytics and marketing cookies, and for marketing communications
• Contractual necessity: when processing data to respond to service enquiries or deliver agreed services
• Legitimate interests: for essential website security and service improvement

• Responding to enquiries and service requests
• Delivering and managing our AI services where we have been engaged
• Improving our website and service quality through aggregate analytics
• Complying with legal and regulatory obligations

We do not sell personal data to third parties. We do not use personal data for automated decision-making or profiling that produces legal effects.

Contact enquiry data is retained for 24 months from the date of submission, after which it is securely deleted. Data related to active service engagements is retained for the duration of the engagement plus 36 months. Analytics data is retained in aggregated, anonymised form only. You may request deletion of your data at any time — see Section 6 for how to exercise this right.

We may share personal data with trusted third-party service providers who assist with website analytics and operational infrastructure. These providers are required to handle data in accordance with applicable privacy laws. We may also disclose data when required by Hong Kong law or regulatory authority.

Third-party services we use may include Google Analytics (with consent) and our hosting infrastructure provider. We do not share operational client data — provided in the course of AI service delivery — with any third party.

• Encryption: Data in transit is protected via TLS/SSL. Data at rest is encrypted where applicable.
• Access controls: Personal data access is restricted to authorised staff on a need-to-know basis.
• Breach notification: In the event of a data breach affecting personal data, we will notify affected individuals and the Office of the Privacy Commissioner for Personal Data (PCPD) as required.

We use essential cookies necessary for website operation, and optional analytics cookies (with your consent). Full details of cookie types and your control options are provided in our Cookie Policy.

Under the Personal Data (Privacy) Ordinance, you have the right to:

• Request access to personal data we hold about you
• Request correction of inaccurate personal data
• Request deletion of your personal data (subject to legal retention obligations)
• Withdraw consent to optional data processing at any time
• Lodge a complaint with the Office of the Privacy Commissioner for Personal Data (PCPD)

To exercise any of these rights, contact us at [email protected]. We will respond within 40 days in accordance with the PDPO.

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and recommend reviewing their respective privacy policies before sharing personal data with them.

Our services are intended for adults (18 years and above). We do not knowingly collect personal data from individuals under 18. If we become aware that personal data from a minor has been collected without appropriate consent, we will delete it promptly.

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date at the top of this page. Continued use of our website following any update constitutes acceptance of the revised policy.

For privacy-related enquiries: