Privacy Policy

1. Introduction

Voxelith ("we", "us", "our") is committed to protecting the personal information of individuals who interact with our services and website. This Privacy Policy explains what information we collect, how we use it, the legal basis for doing so, and your rights under applicable law.

This Policy applies to information collected through our website, enquiry forms, client engagements, and communications. It is governed by the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong ("PDPO").

Questions about this Policy can be directed to [email protected].

2. Data We Collect and How We Collect It

We collect personal information in the following ways:

Through our website contact form:

• Name and email address (required)
• Phone number (optional)
• Message content you provide

Through client engagements:

• Contact details of engagement stakeholders
• Professional information relevant to project scope
• Communication records (emails, meeting notes)

Through website analytics (where consented):

• Pages visited, time on site, referral source
• Browser type and device information
• General location (country/city level)

3. Legal Basis for Processing

We process personal data on the following legal bases:

• Consent: Where you have provided explicit consent — for example, by submitting our contact form or accepting analytics cookies.
• Contractual necessity: Where processing is necessary to fulfil or manage a client engagement.
• Legitimate interests: For internal administrative purposes, service improvement, and communication with existing or prospective clients, where this does not override your rights.
• Legal obligation: Where we are required to retain or process data to comply with applicable law.

4. How We Use Your Information

• Responding to enquiries submitted through our website
• Managing client engagements and communications
• Sending project-related correspondence and updates
• Improving our website and services based on aggregated usage data
• Complying with applicable legal and regulatory obligations
• Sending relevant updates about our services, where you have consented to receive these

We do not sell personal information to third parties. We do not use personal information for automated decision-making with legal or similarly significant effects.

5. Data Retention

We retain personal information for as long as necessary to fulfil the purposes described in this Policy, or as required by law:

• Website enquiry data: retained for 12 months from last contact
• Client engagement records: retained for 7 years following engagement close (in line with commercial record-keeping standards)
• Analytics data: retained in aggregated form for up to 24 months

After retention periods expire, data is securely deleted or anonymised.

6. Third-Party Services

We may use the following third-party services, which may process personal data on our behalf:

• Google Analytics: Website usage analytics (where consented via cookie preferences)
• Email service providers: For managing correspondence and enquiry responses

Third parties are engaged under data processing agreements that restrict their use of personal data to the services they provide on our behalf. We do not permit third parties to use your data for their own purposes.

7. Data Security

We apply reasonable technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure, or destruction. These include:

• Encrypted data transmission (HTTPS)
• Access controls limiting data access to authorised personnel only
• Signed confidentiality agreements with team members and contractors
• Regular review of data handling practices

In the event of a data breach that may affect your rights, we will notify affected individuals and relevant authorities as required by the PDPO and applicable regulations.

8. Cookies

We use cookies to improve website functionality and understand how visitors use our site. You can manage your cookie preferences at any time via our Cookie Policy page. Essential cookies are required for the site to function and cannot be disabled.

9. Your Rights

Under the PDPO and applicable data protection law, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request erasure of your data where processing is no longer justified
• Withdraw consent to processing at any time (without affecting prior lawful processing)
• Object to processing based on legitimate interests
• Lodge a complaint with the Office of the Privacy Commissioner for Personal Data (PCPD) in Hong Kong

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

10. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their policies separately before providing any personal information.

11. Children's Privacy

Our services are intended for organisations and individuals aged 18 and above. We do not knowingly collect personal information from anyone under 18. If you believe we have done so, please contact us and we will delete the information promptly.

12. Changes to This Policy

We may update this Policy from time to time. Material changes will be communicated via a notice on our website. Continued use of our services after such notice constitutes acceptance of the updated Policy. The "Last Updated" date at the top of this page reflects the most recent revision.

13. Contact Information

For privacy-related enquiries, please contact:

Voxelith

22 Wing Fung Street, Wan Chai, Hong Kong

Email: [email protected]

Phone: +852 9472 3186