Privacy Policy

1. Information We Collect

We may collect the following categories of information:

1.1 Personal Information You Provide

When you fill out our contact form, initiate a project inquiry, or communicate with us via email or phone, you may voluntarily provide us with:

• Your full name
• Email address
• Phone number
• Company name and job title
• Project details and requirements you choose to share

1.2 Information Collected Automatically

When you visit our website, certain information is automatically collected through standard web technologies, including:

• IP address and approximate geographic location
• Browser type, version, and device information
• Pages visited, time spent, and navigation patterns
• Referring website or source
• Timestamp of visits

2. How We Use Your Information

We use the collected information for the following purposes:

• To respond to your inquiries and provide information about our services
• To prepare project proposals and technical assessments
• To improve our website functionality and user experience
• To analyze usage trends and optimize our service offerings
• To comply with legal obligations and enforce our terms
• To communicate important updates, service changes, or administrative notices

We do not use automated decision-making or profiling that produces legal effects concerning you.

3. Legal Basis for Processing

We process your personal data based on one or more of the following legal grounds:

• Consent: You have given clear consent for us to process your personal data for a specific purpose.
• Contractual Necessity: Processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
• Legitimate Interests: Processing is necessary for our legitimate interests or those of a third party, provided those interests are not overridden by your rights and freedoms.
• Legal Obligation: Processing is necessary to comply with applicable laws and regulations.

4. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share your data in the following limited circumstances:

• Service Providers: With trusted third-party vendors who assist us in operating our website, conducting our business, or servicing you, provided they agree to keep your information confidential.
• Legal Compliance: When required by law, court order, or governmental regulation, or to protect our rights, property, or safety.
• Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction.

5. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. When determining retention periods, we consider:

• The nature and sensitivity of the information
• The potential risk of harm from unauthorized use or disclosure
• The purposes for which we process your information
• Applicable legal, regulatory, and contractual requirements

Inquiry and correspondence data is typically retained for a period of three years from the date of last communication, unless a longer period is required for ongoing project engagement.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS/SSL protocols
• Secure server infrastructure with access controls
• Regular security assessments and vulnerability testing
• Employee training on data protection practices
• Incident response procedures for potential data breaches

However, no method of electronic transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Cookies and Tracking Technologies

Our website may use cookies and similar tracking technologies to enhance your browsing experience. Cookies are small text files stored on your device that help us:

• Remember your preferences and settings
• Understand how you interact with our website
• Improve website performance and functionality

You can control cookie settings through your browser preferences. Disabling cookies may affect certain features of our website. We do not use cookies for advertising or cross-site tracking purposes.

8. Your Data Protection Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data under certain conditions.
• Right to Restrict Processing: Request limitation of how we process your data.
• Right to Data Portability: Request transfer of your data to another organization.
• Right to Object: Object to processing based on legitimate interests or direct marketing.
• Right to Withdraw Consent: Withdraw previously given consent at any time.

To exercise any of these rights, please contact us at log@vaststarry.lat. We will respond within 30 days.

9. International Data Transfers

As a Hong Kong-based company, your information may be transferred to and processed in Hong Kong and other jurisdictions where our service providers operate. We ensure that appropriate safeguards are in place for any cross-border data transfers in accordance with applicable data protection laws, including the use of standard contractual clauses or equivalent mechanisms.

Hong Kong maintains its own data protection regime under the Personal Data (Privacy) Ordinance (Cap. 486), which governs the collection, processing, and use of personal data within the territory.

10. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal data, please contact us immediately. We will take steps to remove such information from our records.

11. Third-Party Links

Our website may contain links to third-party websites or services that are not owned or controlled by Vast Starry. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access through our website.

12. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. When we do, we will revise the effective date at the top of this page. We encourage you to review this policy periodically to stay informed about how we protect your information. Significant changes may be communicated to you via email if you have an active engagement with us.

13. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Data Controller: Vast Starry Union Trade Co., Limited
• Email: log@vaststarry.lat
• Phone: +852 6302 1190
• Address: Rm S239 2/F THE CAPITAL, 61-65 CHATHAM RD S, Tsim Sha Tsui, Hong Kong