Legal / Privacy
Privacy Policy
This policy explains how Byte Harbor Company collects, uses, stores and protects personal data when you use our websites, request a service or contact us.
1. Who we are and what this policy covers
Byte Harbor Company (also referred to as “Byte Harbor”, “BHB”, “we”, “us” or “our”) operates technology services in Hong Kong, including the ByteHarbor computer and IT equipment recycling service.
This policy applies to personal data collected through our company website, recycling website, enquiry and feedback forms, and related communications. It covers the sites and services we operate; other organisations run their own websites and services under their own policies.
2. Personal data we may collect
- Contact and identity data: your name, company name, telephone number, email address, WhatsApp number or preferred contact method.
- Enquiry and service data: messages, device type, brand, model, year, condition, quantity, district, preferred handover arrangement and any photos or details you voluntarily provide.
- Feedback data: website feedback, support requests and the contact details you provide for a response.
- Basic technical data: information reasonably required to operate and secure our websites, such as IP address, browser type, timestamps, request records and error logs.
Please limit a general enquiry or feedback form to ordinary contact details and your message. Passwords, payment-card information, government identity numbers and other sensitive information belong in a secure channel arranged with us directly.
Supplying data is generally voluntary. Fields marked as required are needed for us to process the relevant enquiry or submission; supplying them is what lets us respond and arrange the requested service.
3. How we use personal data
We may use personal data for the following purposes:
- to respond to enquiries, prepare quotations and arrange inspections, handovers or pickups;
- to provide support, manage feedback and communicate about a requested service;
- to maintain, secure and improve our websites and business operations;
- to prevent misuse, investigate security incidents and maintain appropriate records; and
- to comply with applicable laws, lawful requests and regulatory obligations.
We use personal data for the purpose it was collected for. For any unrelated purpose we first obtain the data subject’s prescribed consent where such consent is required. Direct marketing to your contact details proceeds on the strength of that consent alone, and any recipient may ask us to stop at any time.
4. When personal data may be shared
We may disclose personal data only where reasonably necessary to:
- service providers supporting website hosting, communications, security or business operations;
- operational partners involved in an agreed collection, inspection or equipment-handling arrangement;
- professional advisers, insurers, regulators, law-enforcement bodies or courts where permitted or required by law; or
- another party with your instruction or consent.
If you choose WhatsApp, email or another third-party communication channel, your use of that channel is also governed by the relevant provider’s terms and privacy practices.
5. Retention, accuracy and security
We take practicable steps to keep personal data accurate, protect it against unauthorised or accidental access, processing, erasure, loss or use, and retain it only for as long as reasonably necessary for the purpose for which it was collected or to meet legal and operational requirements.
Security measures may include access controls, restricted administration, secure transmission where available, logging and periodic deletion or anonymisation. Every method of internet transmission and storage carries some residual risk, so our commitment here covers reasonable and appropriate safeguards.
6. Cookies, local storage and external links
Our websites may use essential browser storage to remember settings such as language or display preferences and to support core functionality. We treat essential storage as exactly that — functionality, kept separate from advertising consent.
Our websites may contain links to independent third parties. Each of those operators remains responsible for the content, availability and privacy practices of its own website.
7. Access and correction
Subject to the Personal Data (Privacy) Ordinance, you may ask whether we hold personal data about you and request access to or correction of that data. We may need to verify your identity and may charge a fee that stays within what the law permits.
You may also ask us to correct inaccurate contact information, withdraw a direct-marketing consent or stop using your data for direct marketing.
8. Changes to this policy
We may update this policy to reflect changes in our services, technology or legal requirements. The effective date shown above indicates the current version. Material changes will be highlighted where reasonably practicable.
9. Privacy contact
For privacy questions or a data access or correction request, contact the Privacy Contact at Byte Harbor Company and state the website or service concerned.