Privacy Policy

1.Scope and Legal Framework

This policy applies to individuals who visit the Site, create an account, submit a form, start a trial or use the Services.

Personal data is processed under the Hong Kong Personal Data (Privacy) Ordinance (Cap. 486) (the “PDPO”) and any other law that applies where you are located (including the GDPR for users in the European Economic Area).

This policy should be read together with our Terms of Use and Cookie Policy.

2.Data We Collect

To provide the Services we may collect the following categories of data:

1. (a) Identity and contact: name, email, phone number and WhatsApp details
2. (b) Business information: legal or trading name, sector, location, colour palette and site content
3. (c) Account and transaction: registration details, orders, subscription status and support correspondence
4. (d) Payment metadata: payment status, billing period and Stripe transaction references (card numbers are not stored on our servers)
5. (e) Technical data: IP address, browser and device information, language and currency preference, and cookie identifiers

3.How We Collect Data

Data is collected through registration and contact forms, the account dashboard, the payment flow, email/WhatsApp correspondence and automatic Site logs. We may also receive limited information from third parties (for example, payment results from Stripe).

4.Purposes and Legal Bases

We process personal data for the following purposes and on the corresponding legal bases:

1. (a) Performance of a contract: opening an account, building and hosting the Customer Site, and providing support
2. (b) Legitimate interests: security, fraud prevention, quality measurement and keeping a record of communications
3. (c) Legal obligation: accounting, tax, disputes and requests from competent authorities
4. (d) Consent: marketing messages where we ask for consent (you may withdraw it at any time)

5.Cookies

The Site uses cookies for essential functions such as session, security, language and currency preference, and (where used) analytics. Details are set out in the Cookie Policy.

6.Payment Information

Card and payment data are processed by our payment provider Stripe, Inc. and its affiliates in accordance with PCI-DSS. We do not store card numbers on our own servers.

Stripe’s processing of personal data is governed by its own privacy policy. We retain transaction references for billing, refunds and payment disputes.

7.Sharing

We do not sell personal data or supply it as a marketing list. We may share data only:

1. (a) With suppliers needed to perform the Services: hosting, email, support tools and Stripe
2. (b) Where required by law, court order or a competent public authority
3. (c) In connection with a merger, transfer or reorganisation, provided the recipient applies protection consistent with this policy

8.International Transfers

VELCORE TECHNOLOGY LIMITED is established in Hong Kong. Our suppliers (hosting, payments, email) may be located in other countries, so your data may be transferred outside Hong Kong. We apply contractual and technical safeguards to such transfers.

9.Retention

We keep data for as long as needed for the purpose of collection and for statutory retention (in particular commercial and tax records). After a subscription ends, account data is deleted or anonymised within a reasonable time; invoicing records that must be kept by law are retained for the relevant period.

10.Security

We apply appropriate technical and organisational measures, including access control, encryption in transit (TLS), least-privilege permissions and regular backups. Transmission over the internet cannot be guaranteed as absolutely secure; you remain responsible for protecting your password.

11.Your Rights

Under the PDPO and other applicable law you may request access to your personal data, correction, deletion or restriction, object to processing and, where the GDPR applies, exercise data portability and lodge a complaint with a supervisory authority.

Please send requests to support@esnafmax.com in a form that allows us to verify your identity. Legal exceptions apply. We may refuse unfounded or excessive requests or charge a fee where the applicable law allows.

12.Children

The Services are not directed at collecting data from anyone under 18. If we learn that such data has been provided, we will delete the relevant record.

13.Changes

We may update this policy from time to time. The current text is published on this page. We will notify you of material changes by email or on the Site.

14.Contact

For privacy and data requests:

VELCORE TECHNOLOGY LIMITED — Incorporation No. 80005054

Email: support@esnafmax.com

Phone: +90 543 946 39 69

Address: Unit 1603, 16th Floor, The L. Plaza, 367 - 375 Queens Road Central, Sheung Wan, Hong Kong