Privacy Policy
Who we are
This website, maiyatechnique.com, is operated by Maiya Technique Consulting Service Co., Limited, a company incorporated in Hong Kong SAR ("Maiya", "we", "us", "our"). We are the data user under the Hong Kong Personal Data (Privacy) Ordinance (Cap. 486) ("PDPO") and, where the EU or UK General Data Protection Regulation applies, the data controller in respect of the personal data described below.
Our registered address is Flat/Rm D10, 9/F, Block 2, Camelpaint Building, 62 Hoi Yuen Road, Kwun Tong, Kowloon, Hong Kong.
This policy explains what we do with personal data collected through this website and through business enquiries sent to us. Where we act as a service provider running advertising campaigns for a client, that client generally decides how personal data is used and we act on their instructions — in those cases the client's own privacy notice governs, and our role is set out in the services agreement between us.
Scope of this policy
This policy applies to:
- visitors to this website;
- people who contact us by email, telephone or through a form on this site;
- representatives of prospective, current and former clients, suppliers and partners;
- people who apply to work with us.
It does not apply to third-party websites we link to, or to platforms such as Google, Meta or TikTok when you use them directly.
Personal data we collect
Data you give us
When you contact us — by email, by phone, through a form, or by requesting a call — we collect what you choose to send. Typically this is your name, business email address, telephone number, employer, job title, and the content of your message. If we go on to work together, we also process contract and billing details and the ordinary records of a business relationship such as correspondence, meeting notes and invoices.
Data collected automatically
Our hosting provider records standard server log data, including your IP address, browser type and version, operating system, the pages you request, the referring page, and the date and time of your visit. This is generated by the act of connecting to any website and is used to keep the site running and secure.
Where you consent to it, our analytics and advertising cookies also collect information about how you use the site — pages viewed, time on page, clicks, approximate location derived from IP address, and whether you arrived from one of our advertisements. See section 5.
Data from third parties
We may receive limited business contact data from advertising and analytics platforms, from public professional networks and company registers, and from partners who refer business to us. We do not buy consumer marketing lists.
What we do not collect
We do not intentionally collect special category data (such as health, religion, political opinions, or biometric data), and we do not ask for payment card details through this website. Please do not send us sensitive information through the contact channels on this site.
Why we use it and on what basis
Under the PDPO we may use personal data for the purpose for which it was collected and a directly related purpose. Where the GDPR applies, we must also have a legal basis. The table below sets out both.
| Purpose | Data used | GDPR legal basis |
|---|---|---|
| Responding to your enquiry and providing a proposal | Contact and enquiry data | Steps taken at your request prior to entering a contract (Art. 6(1)(b)); legitimate interests in responding to business enquiries (Art. 6(1)(f)) |
| Providing and administering our services | Contact, contract and correspondence data | Performance of a contract (Art. 6(1)(b)) |
| Invoicing, accounting and tax records | Contract and billing data | Legal obligation (Art. 6(1)(c)) |
| Operating, securing and troubleshooting the website | Server log data | Legitimate interests in a secure and functioning website (Art. 6(1)(f)) |
| Analytics — understanding how the site is used | Analytics cookie data | Consent (Art. 6(1)(a)) |
| Advertising, retargeting and measuring campaign performance | Advertising cookie and pixel data | Consent (Art. 6(1)(a)) |
| Sending business updates to existing clients | Business contact data | Legitimate interests in direct marketing to existing business contacts, subject to opt-out (Art. 6(1)(f)); consent where required by local law |
| Establishing, exercising or defending legal claims | Any relevant data | Legitimate interests in protecting our legal position (Art. 6(1)(f)) |
Direct marketing under the PDPO
Section 35 of the PDPO requires us to notify you and obtain your consent before using your personal data in direct marketing. We will not use your data to market our services to you unless you have indicated that you do not object after being told what we intend to do. You may require us to stop using your personal data for direct marketing at any time, at no charge, by emailing privacy@maiyatechnique.com. We will act on that request without delay.
International transfers
We are based in Hong Kong and our providers operate globally, so personal data may be transferred to and stored in jurisdictions outside your own — including the United States, the European Economic Area, the United Kingdom and Singapore.
Hong Kong is not the subject of an adequacy decision by the European Commission. Where we transfer personal data out of the EEA or the UK, we rely on the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum where applicable), together with any additional safeguards a transfer risk assessment shows to be necessary. You may request a copy of the relevant safeguards by writing to privacy@maiyatechnique.com.
How long we keep data
We keep personal data only as long as we need it for the purpose it was collected for, and then for as long as we are required to retain it by law.
| Data | Retention period |
|---|---|
| Enquiries that do not lead to a contract | 24 months from last contact |
| Client contract and correspondence records | 7 years from the end of the relationship |
| Accounting and tax records | 7 years, as required by Hong Kong law |
| Website server logs | 12 months |
| Analytics and advertising cookie data | As set out in the Cookie Policy; generally up to 14 months, or until you withdraw consent |
| Unsuccessful job applications | 12 months, unless you ask us to keep them longer |
Where data is no longer needed, we delete it or irreversibly anonymise it.
Security
We take practicable steps to protect personal data against unauthorised or accidental access, processing, erasure, loss or use, as required by DPP4 of the PDPO. These include encryption of the site in transit (HTTPS), access controls and multi-factor authentication on our business systems, restricting access to those who need it, written confidentiality obligations for staff and contractors, and periodic review of our providers.
No method of transmission or storage is completely secure. If a breach occurs that is likely to result in a risk to your rights, we will notify the relevant supervisory authority and, where required, you — without undue delay.
Your rights
Under the Hong Kong PDPO
You have the right to ask whether we hold personal data about you, to be given a copy of that data (a "data access request"), to require correction of data that is inaccurate, and to require us to stop using your data for direct marketing. We may charge a fee that is not excessive for complying with a data access request, as the PDPO permits.
Under the GDPR, if it applies to you
Where you are in the EEA or the UK, you also have the right to:
- obtain access to your personal data and information about how it is processed;
- have inaccurate data rectified and incomplete data completed;
- have your data erased in certain circumstances ("right to be forgotten");
- restrict processing in certain circumstances;
- receive data you gave us in a structured, commonly used, machine-readable format, and have it sent to another controller where technically feasible;
- object to processing based on our legitimate interests, and to object to direct marketing at any time — we will stop on request;
- withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal;
- not be subject to a decision based solely on automated processing that produces legal or similarly significant effects — we do not make such decisions about website visitors.
You also have the right to lodge a complaint with a supervisory authority. In Hong Kong this is the Office of the Privacy Commissioner for Personal Data (pcpd.org.hk). In the EEA it is the authority in your country of residence or workplace; in the UK it is the Information Commissioner's Office. We would ask you to raise the matter with us first so we can try to resolve it.
Making a request
Send your request to privacy@maiyatechnique.com. Please tell us what you are asking for and give us enough information to find your records. We may need to verify your identity before we act, and we will only use what you send us for that purpose.
We will respond within 40 days as required by the PDPO, and within one month where the GDPR applies. If a request is complex or you have made several, we may extend the GDPR deadline by up to two further months and will tell you why within the first month.
Children
Our services are sold to businesses and this website is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, contact us and we will delete it.
Third-party sites
This site may link to third-party websites and platforms. We do not control them and are not responsible for their content or their privacy practices. Read their privacy notices before providing personal data to them.
Changes to this policy
We may update this policy to reflect changes in our practices or in the law. The version and effective date at the top of this page always show the current edition. Where a change materially affects how we use your personal data, we will take reasonable steps to notify you — for example, by a notice on this website or by email — before it takes effect.
Contact us
Questions about this policy, or about how we handle personal data:
Maiya Technique Consulting Service Co., Limited
Flat/Rm D10, 9/F, Block 2, Camelpaint Building, 62 Hoi Yuen Road, Kwun Tong, Kowloon, Hong Kong
Privacy matters: privacy@maiyatechnique.com
General enquiries: info@maiyatechnique.com
Telephone: +1 585 312 10 32