Privacy Policy

1. Who We Are

The data controller responsible for this website is Lok Cheuk Limited, a company registered in Hong Kong. Our contact details are provided at the bottom of this policy.

2. What Information We Collect

Information you provide voluntarily

When you submit an inquiry through our contact form, we collect the information you enter - which may include your name, company name, country, email address, and the content of your message. This information is submitted voluntarily and only when you choose to contact us.

Information collected automatically

When you visit our website, our web server may collect standard technical log data, including your IP address, browser type, operating system, referring URL, and pages visited. This data is collected automatically as part of normal web server operation.

We do not use this data to identify you as an individual. It is retained only for security, server integrity, and basic operational diagnostics.

3. Cookies

This website uses only strictly necessary cookies - those required for the website to function correctly. These cookies do not track you, do not identify you as an individual, and are not used for advertising or analytics purposes.

We do not use:

• Analytics or tracking cookies (e.g. Google Analytics)
• Advertising or retargeting cookies
• Social media cookies
• Any cookies that build a profile of your browsing behaviour

Because we use only strictly necessary cookies, we are not required to obtain your consent for their use under the GDPR or the Hong Kong PDPO. No cookie consent banner is displayed, as none is required.

4. How We Use Your Information

We use the personal information you submit through our contact form solely to:

• Respond to your inquiry
• Follow up on a business discussion you have initiated
• Maintain a record of our correspondence for legitimate business purposes

We do not use your information for automated decision-making, profiling, or marketing without your explicit consent.

5. Legal Basis for Processing (GDPR - EEA Visitors)

If you are located in the European Economic Area, we rely on the following legal bases under Article 6 of the GDPR:

• Legitimate interests (Art. 6(1)(f)) - to respond to business inquiries you have submitted to us, and to maintain basic server logs for security and operational purposes.
• Consent (Art. 6(1)(a)) - where you have freely provided information by submitting a contact form, we treat this as an indication of consent to being contacted in response.

6. Data Sharing and Third Parties

We do not sell, rent, or trade your personal data to any third party.

We may share your information with trusted third-party service providers who assist us in operating our website or conducting our business (such as hosting providers), but only where such parties are contractually obligated to keep your information confidential and to use it only for the purposes we specify.

We may disclose your information if required to do so by law, regulation, or a lawful request from a government authority in Hong Kong or another applicable jurisdiction.

7. International Data Transfers

Our website is hosted on servers that may be located outside Hong Kong. If you are visiting from the European Economic Area, your data may be transferred to and processed in countries that are not subject to EU data protection law.

Where such transfers occur, we take reasonable steps to ensure your data is protected in accordance with applicable standards, including the use of service providers that offer adequate data protection safeguards.

8. Data Retention

We retain personal information only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. Contact form submissions are retained for as long as the associated business relationship or inquiry requires, and are deleted when no longer needed.

Server log data is typically retained for no longer than 90 days unless retention is required for security or legal purposes.

9. Your Rights

Under the Hong Kong PDPO

You have the right to request access to personal data we hold about you, and to request correction of any inaccurate data, in accordance with the Personal Data (Privacy) Ordinance.

Under the GDPR (EEA visitors)

If you are located in the EEA, you have the following rights in relation to your personal data:

• Right of access - to obtain a copy of the personal data we hold about you
• Right to rectification - to have inaccurate data corrected
• Right to erasure - to request deletion of your data where there is no compelling reason for its continued processing
• Right to restriction - to request that we limit how we use your data in certain circumstances
• Right to object - to object to processing based on legitimate interests
• Right to data portability - to receive your data in a structured, machine-readable format
• Right to withdraw consent - where processing is based on consent, to withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, please contact us using the details below. We will respond within one month of receiving your request.

10. Security

We take reasonable technical and organisational measures to protect the personal information we hold against unauthorised access, loss, or disclosure. However, no method of internet transmission or electronic storage is completely secure, and we cannot guarantee absolute security.

11. Children's Privacy

This website is not directed at children under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has submitted personal information to us, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we do, we will revise the "last updated" date at the top of this page. We encourage you to review this policy periodically.

13. Complaints

If you have concerns about how we handle your personal data and are located in Hong Kong, you have the right to lodge a complaint with the Office of the Privacy Commissioner for Personal Data (PCPD) at www.pcpd.org.hk.

If you are located in the EEA, you have the right to lodge a complaint with the data protection authority in your country of residence.