1. Introduction
This Privacy Policy describes how KIN SHING LUNG MARINE PRODUCTS LIMITED, a company registered in Hong Kong with its principal place of business at Rm 9 G/F SUN SHING MANSION, 32-42 BONHAM STRAND W, Sheung Wan, Hong Kong (HK), collects, uses, stores, and protects personal information when you visit the website located at https://www.kinshing.buzz. The website and the services presented on it are developed and operated by the developer KinShing on behalf of the Company. The Company respects your privacy and is committed to protecting the personal data that you share with us. By accessing the website, you acknowledge that you have read and understood the practices described in this policy. Please read the policy carefully, and contact us if you have any question about how your information is handled.
2. The Company and Scope of This Policy
This policy applies to all visitors, clients, business partners, suppliers, and any other person who interacts with the website or with the services offered by the Company. It covers personal information collected through the website, through email correspondence, through telephone enquiries, and through any online form that you complete. The policy does not apply to websites operated by third parties, even if you reach those websites through links that appear on our pages.
Where a separate written agreement exists between you and the Company, the terms of that agreement will govern the way your information is handled in relation to the project covered by that agreement. In the event of any conflict between the agreement and this policy, the specific agreement takes precedence for that engagement. The Company reviews this policy on a regular basis to keep it accurate, clear, and aligned with current law and with the way the business operates.
3. Information We Collect
We collect two broad categories of information. The first category is information that you provide to us directly. This includes your name, your email address, your phone number, the name of your company, your location, and the contents of any message that you send through the contact form on the website. When you enquire about our services, we may ask for additional details about your operation so that we can respond to you accurately and usefully.
The second category is information that is collected automatically when you use the website. This includes your IP address, your browser type, your operating system, the pages that you view, the time and date of your visits, and the website that referred you to us. We may also collect technical information about the device that you use to access the website. We only collect information that is relevant to a clear and legitimate purpose, and we avoid collecting data that serves no business need.
4. How We Collect Information
Information is collected in several distinct ways. Direct collection occurs when you submit a form, send us an email, telephone our office, or otherwise provide details to us during the course of a conversation. Automatic collection occurs through server logs, cookies, and similar technologies that record how the website is used and which pages are viewed. Collection may also occur when you correspond with us about a project, an order, or a support matter, in which case the correspondence itself becomes a business record.
We collect information lawfully, fairly, and in a transparent manner. We do not purchase personal data from data brokers, and we do not scrape personal information from other websites or public sources. Every collection activity is limited to what is needed for the purpose described to you at the time, and we do not use hidden methods to gather data without your knowledge.
5. How We Use Information
We use personal information for clear and legitimate purposes. We use contact details to respond to enquiries, to provide quotations, to manage client relationships, and to deliver the services that you request from us. We use website analytics to understand how visitors interact with our pages so that we can improve the structure, the content, and the performance of the website.
We may use your information to send you service updates, security notices, or other messages that are directly relevant to an ongoing engagement with the Company. We do not sell personal information to third parties, and we do not rent our mailing lists. We do not use your information for advertising that is unrelated to our services without your consent. All use of your information is proportionate to the purpose for which it was collected.
6. Legal Bases for Processing
We process personal information on lawful grounds recognised under applicable data protection law. The primary basis is consent, which you give when you submit an enquiry or sign up for communications, and which you may withdraw at any time without affecting the lawfulness of processing that has already taken place.
A second basis is the performance of a contract, which applies when we process information in order to deliver services under an agreement with you or with your organisation. A third basis is our legitimate interest in operating the business, improving the website, and protecting our systems, our staff, and our clients, provided that such processing does not override your rights and freedoms. A fourth basis is compliance with a legal obligation, such as keeping records required by customs, health, or tax authorities. We will always be able to explain which legal basis applies to a particular use of your information.
9. International Data Transfers
As a Hong Kong based company serving a global market, your information may be stored on servers that are located outside of the country in which you reside. Hong Kong is the principal place where the Company operates, and the service providers that we use may hold data in other jurisdictions in order to keep the website fast and reliable.
We take reasonable steps to ensure that any cross border transfer of personal information is protected by appropriate safeguards, such as data processing agreements and standard contractual clauses that preserve the level of protection promised by this policy. We will not transfer your information to a jurisdiction that does not provide an adequate level of data protection unless the transfer is necessary for the provision of the service that you have requested. You may ask us for details of the safeguards that are in place for any specific transfer, and we keep a record of the jurisdictions where data is stored.
10. Data Retention
We retain personal information only for as long as it is needed for the purposes described in this policy. Enquiry records are kept for a reasonable period so that we can follow up on requests and respond to any later questions about the same matter. Records that relate to a contract are kept for the duration of the agreement plus the additional period required by applicable accounting and tax laws.
Website logs are retained for a shorter period, typically long enough to support security monitoring and performance analysis. When information is no longer needed for any legitimate purpose, it is deleted or anonymised in a secure manner. We conduct periodic reviews of the data that we hold to identify information that can be removed, and our retention periods are documented and applied consistently across the business.
11. Data Security
We apply a combination of technical and organisational measures to protect personal information against loss, misuse, unauthorised access, alteration, and disclosure. The website is served over an encrypted connection, and access to our administrative systems is restricted to authorised personnel only. Our staff are trained on the importance of data protection and handle personal information on a need to know basis.
We review our security controls on a regular basis and update them in response to new risks and new technology. Despite these measures, no method of transmission over the internet can be guaranteed as completely secure, and we cannot guarantee the absolute security of information transmitted to us electronically. In the unlikely event of a data breach that affects your personal information, we will notify affected individuals and the relevant authorities in line with our legal obligations and without undue delay.
12. Privacy for Children
The website and the services that the Company provides are intended for business users and are not directed at children. We do not knowingly collect personal information from children, and we do not design our services to appeal to children. If a child has provided us with personal information without the consent of a parent or guardian, the parent or guardian may contact us using the details in the Contact Us section of this policy and request that the information be deleted.
We will act on such requests promptly and will remove the information from our records as soon as it is reasonably possible. Where we become aware that personal information has been collected from a child in a way that is inconsistent with this policy, we will delete it without delay. We encourage parents and guardians to supervise the online activity of children and to contact us if they have any concern about information that may have been collected through the website.
13. Your Privacy Rights
Depending on the jurisdiction in which you are located, you may have the right to access the personal information that we hold about you, to ask for a copy of that information, and to request that inaccurate information be corrected. You may also have the right to request the deletion of your data, to restrict or object to certain processing, and to ask that your data be transferred to another service provider in a structured and machine readable format.
Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of any processing that took place before the withdrawal. To exercise any of these rights, please contact us using the details provided in the Contact Us section of this policy. We will respond within the time period required by applicable law, and we will verify your identity before releasing any personal information to you.
14. Email Communications
If you contact us by email, the address that you write from and the content of the correspondence will be stored in our mail system so that we can reply to you and maintain a record of the conversation. We may retain correspondence for as long as it remains relevant to an active or recent engagement, and we delete or archive older correspondence in line with our retention practices.
We send service related messages, such as replies to enquiries and updates on active projects. These messages are necessary to our relationship with you and are not marketing communications, so they do not require separate consent. If we ever send marketing communications, we will do so only with your consent, and each message will include a clear and simple way for you to opt out. We will never add your address to a third party mailing list.
15. Third Party Websites and Services
The website may contain links to external websites and to services that are operated by third parties. We do not control the content or the privacy practices of these external sites, and this policy does not apply to them. When you leave our website and visit a third party site, the privacy policy of that destination site applies to your information.
We encourage you to review the privacy policy of any website that you visit before you provide personal information to it. Links are provided for your convenience, and the presence of a link on our website does not imply any endorsement of the destination site. If you choose to use a third party service that connects to our systems, that service will handle your data under its own terms and its own policy, and we are not responsible for the practices of such third parties.
16. Analytics and Usage Data
We use analytics tools to understand how the website is used and how it can be improved. These tools collect aggregate information such as the number of visitors, the pages viewed, the time spent on each page, and the general geographic origin of traffic. We use this information to identify popular content, to detect technical problems, and to guide improvements to the structure and design of the site.
Analytics data is collected in a way that does not, as far as is reasonably possible, identify individual users, and we do not use analytics data to make automated decisions that affect you. The insights that we gain may be used in internal reports and in the planning of future services. The analytics provider may process this data under its own terms, and we require every provider to apply appropriate security safeguards and to use the data only for the purposes that we have agreed.
17. Marketing Preferences
We respect your choices about the communications that you receive from us. If you have agreed to receive marketing communications from the Company, you may change your mind at any time by following the opt out instructions contained in any message that we send, or by contacting us directly. Opting out of marketing communications will not affect the service messages that we must send to you in relation to an ongoing project.
We will never make the provision of our services conditional on your agreement to receive marketing communications, and you will always have a clear choice. We keep a record of your preferences so that we can honour them consistently, and we review our mailing practices to ensure that we do not contact people who have asked us to stop.
18. Automated Decision Making
We do not use automated decision making, including profiling, that produces legal effects on you or that significantly affects you in a similar way. The decisions that we make about the provision of our services are made by people, and any computer system that we operate supports those decisions rather than replacing them.
If this position changes in the future, we will update this policy and we will take the steps required by applicable law, including informing you of the logic involved and providing you with an opportunity to request human intervention and to challenge any automated decision. Where the law requires it, we will seek your consent before introducing any form of automated decision making that affects you.
19. Business Transfers and Mergers
In the event that the Company is acquired by, merged with, or transfers its assets to another business, personal information held by the Company may be transferred as part of that transaction. In such a case, the receiving business would continue to protect your information in a manner consistent with this policy, and your information would not be used for purposes that are incompatible with the purposes described here.
We will notify you of any such transfer through the website or by other appropriate means, and you will have an opportunity to decide how you would like your information to be handled following the transfer. We will not sell personal information as a standalone asset, and any transfer will be carried out in accordance with applicable law. We will update this policy to reflect the identity of any new data controller after the transaction is completed.
20. Changes to This Privacy Policy
We may update this policy from time to time to reflect changes in our practices, in the law, or in the way that the website operates. When we make a material change, we will revise the date that appears at the top of this page and, where appropriate, we will draw the change to your attention through the website.
We encourage you to review this policy periodically so that you remain informed about how your information is protected. Your continued use of the website after changes take effect means that you accept the updated policy. If we make a change that requires your consent under applicable law, we will obtain that consent before the change applies to information that we already hold. Older versions of this policy can be provided to you on request.
21. Contact Us
If you have any question about this policy, about the personal information that we hold, or about your privacy rights, please contact us. You may reach the Company by email at care@kinshing.buzz or by telephone at +15097230411. You may also write to the Company at Rm 9 G/F SUN SHING MANSION, 32-42 BONHAM STRAND W, Sheung Wan, Hong Kong (HK).
We will acknowledge every request within a reasonable time and will resolve valid requests without undue delay. If you believe that your privacy has been affected, you also have the right to lodge a complaint with the relevant data protection authority in your jurisdiction, and we will cooperate with such authorities to resolve any dispute fairly.