Legal / Privacy
Privacy Policy
This policy explains how Byte Harbor Company collects, uses, stores and protects personal data when you use our websites, request a service or contact us.
1. Who we are and what this policy covers
Byte Harbor Company (also referred to as “Byte Harbor”, “BHB”, “we”, “us” or “our”) operates technology services in Hong Kong, including the ByteHarbor computer and IT equipment recycling service.
This policy applies to personal data collected through our company website, recycling website, enquiry and feedback forms, and related communications. It does not govern third-party websites or services that we do not control.
2. Personal data we may collect
- Contact and identity data: your name, company name, telephone number, email address, WhatsApp number or preferred contact method.
- Enquiry and service data: messages, device type, brand, model, year, condition, quantity, district, preferred handover arrangement and any photos or details you voluntarily provide.
- Feedback data: website feedback, support requests and the contact details you provide for a response.
- Basic technical data: information reasonably required to operate and secure our websites, such as IP address, browser type, timestamps, request records and error logs.
Please do not send passwords, payment-card information, government identity numbers or other sensitive information through a general enquiry or feedback form.
Supplying data is generally voluntary. Fields marked as required are needed for us to process the relevant enquiry or submission. If you do not provide them, we may be unable to respond or arrange the requested service.
3. How we use personal data
We may use personal data for the following purposes:
- to respond to enquiries, prepare quotations and arrange inspections, handovers or pickups;
- to provide support, manage feedback and communicate about a requested service;
- to maintain, secure and improve our websites and business operations;
- to prevent misuse, investigate security incidents and maintain appropriate records; and
- to comply with applicable laws, lawful requests and regulatory obligations.
We will not use personal data for an unrelated purpose without the data subject’s prescribed consent where such consent is required. We do not use contact details for direct marketing without the required consent, and any recipient may ask us to stop.
4. When personal data may be shared
We may disclose personal data only where reasonably necessary to:
- service providers supporting website hosting, communications, security or business operations;
- operational partners involved in an agreed collection, inspection or equipment-handling arrangement;
- professional advisers, insurers, regulators, law-enforcement bodies or courts where permitted or required by law; or
- another party with your instruction or consent.
If you choose WhatsApp, email or another third-party communication channel, your use of that channel is also governed by the relevant provider’s terms and privacy practices.
5. Retention, accuracy and security
We take practicable steps to keep personal data accurate, protect it against unauthorised or accidental access, processing, erasure, loss or use, and retain it only for as long as reasonably necessary for the purpose for which it was collected or to meet legal and operational requirements.
Security measures may include access controls, restricted administration, secure transmission where available, logging and periodic deletion or anonymisation. No internet transmission or storage method is completely risk-free, so absolute security cannot be guaranteed.
6. Cookies, local storage and external links
Our websites may use essential browser storage to remember settings such as language or display preferences and to support core functionality. We do not describe essential storage as advertising consent.
Our websites may contain links to independent third parties. We are not responsible for the content, availability or privacy practices of websites that we do not operate.
7. Access and correction
Subject to the Personal Data (Privacy) Ordinance, you may ask whether we hold personal data about you and request access to or correction of that data. We may need to verify your identity and may charge a fee that is not excessive where permitted by law.
You may also ask us to correct inaccurate contact information, withdraw a direct-marketing consent or stop using your data for direct marketing.
8. Changes to this policy
We may update this policy to reflect changes in our services, technology or legal requirements. The effective date shown above indicates the current version. Material changes will be highlighted where reasonably practicable.
9. Privacy contact
For privacy questions or a data access or correction request, contact the Privacy Contact at Byte Harbor Company and state the website or service concerned.