Privacy Policy | Bauhinia Forge

Bauhinia Forge is committed to handling personal data with care. This policy explains what data we collect, how we use it, and the rights available to individuals in respect of that data. It is written in plain terms to make those matters clear.

1. Introduction

Bauhinia Forge ("we", "us", or "our") operates from 28 Queen's Road Central, Central, Hong Kong. This policy applies to personal data collected through our website at bauhinaforge.digital, through direct client engagement, and through the course of providing our AI integration services. We are the data controller for the purposes of the Personal Data (Privacy) Ordinance (Cap. 486) (PDPO).

2. Data We Collect

2.1 Information you provide directly

Name and contact details submitted through our enquiry form
Email address and telephone number when making contact
Business name and role if provided
The content of messages sent to us

2.2 Information collected automatically

Basic usage data — pages visited, time spent on pages, device type
IP address and browser information via analytics tools
Cookie preferences stored locally on your device

2.3 Information from client engagements

When conducting workflow discovery or integration work, we may handle business process documentation and operational data. The scope of any such data access is defined in a confidentiality agreement before engagement begins. Client data is not stored beyond the engagement scope.

3. Legal Basis for Processing

We process personal data on the following bases:

Consent: Where you have submitted a form or agreed to cookies
Legitimate interest: To respond to enquiries and operate our website effectively
Contract: When personal data is necessary for the provision of services under a client agreement

4. How We Use Your Data

Responding to enquiries submitted through our contact form
Communicating about service engagements and proposals
Improving the functionality and content of this website
Complying with legal and regulatory obligations

We do not sell, rent, or trade personal data to third parties for marketing purposes.

5. Data Sharing

We do not share personal data with third parties except in the following circumstances:

Service providers who support our website operations (such as analytics providers), subject to appropriate agreements
Legal or regulatory authorities where disclosure is required by law
Professional advisors (legal, accounting) under confidentiality obligations

6. Data Retention

Enquiry form submissions are retained for up to 24 months unless a client engagement commences, in which case the relevant data is retained for the duration of the engagement plus seven years, consistent with standard business record-keeping obligations under Hong Kong law. Analytics data is aggregated and anonymised after 14 months.

7. Cookies

This website uses cookies to understand how visitors use it. You can manage cookie preferences at any time through our Cookie Policy page. Essential cookies are required for the site to function; analytics and marketing cookies are optional and require your consent.

8. Data Security

We apply ISO 27001–aligned data handling protocols. Access to personal data is restricted to personnel with a need to handle it. We do not transmit personal data via unsecured channels. In the event of a data breach involving personal data, we will notify affected individuals and the Office of the Privacy Commissioner for Personal Data (PCPD) as required by the PDPO.

9. Your Rights Under the PDPO

Under the Personal Data (Privacy) Ordinance, you have the right to:

Request access to personal data we hold about you
Request correction of inaccurate personal data
Withdraw consent where processing is based on consent
Lodge a complaint with the Office of the Privacy Commissioner for Personal Data (PCPD) at www.pcpd.org.hk

To exercise any of these rights, contact us at [email protected]. We will respond within 40 days as required by the PDPO.

10. Third-Party Links

This website may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before providing any personal data.

11. Children's Privacy

Our services are directed at business professionals and are not intended for individuals under the age of 18. We do not knowingly collect personal data from minors.

12. International Transfers

We operate from Hong Kong and store data locally where practicable. Where data is processed by third-party service providers outside Hong Kong, we require appropriate contractual protections consistent with PDPO requirements.

13. Changes to This Policy

We may update this policy from time to time. Material changes will be noted on this page with a revised date. Continued use of our website after changes are posted constitutes acceptance of the updated policy.

14. Contact

For data-related enquiries, corrections, or access requests:

Email: [email protected]
Address: 28 Queen's Road Central, Central, Hong Kong
Phone: +852 2384 7629