Privacy Policy & Personal Information Collection Statement

Effective date: 15 August 2025
Last updated: 15 August 2025

A. WHO WE ARE

I II Concept (Hong Kong) Limited (“we”, “our”, “us”)
Registered in Hong Kong  
Registered office: 6/F Vogue Building, 67 Wyndham Street, Central, Hong Kong

B. WHY WE COLLECT YOUR DATA (PURPOSES)

Purpose

Examples of personal data

Legal basis under PDPO

Enquiry & project discussion

Name, company, email, phone, message content

DPP 1 – purpose notified before collection

Site security & operation

IP address, browser type, server logs

DPP 4 – security

Site analytics (aggregate)

Page views, device type (stored via Webflow Analyze local-storage)

Not personal data; if ever identifiable we rely on DPP 1 & 3

Legal / regulatory compliance

All categories above

Statutory obligation

We will not use your data for direct marketing without obtaining your explicit consent under Part VI A PDPO.

C. WHETHER IT IS OBLIGATORY TO PROVIDE DATA

Fields marked “required” on our forms are necessary for us to respond; if you do not provide them we may be unable to assist you. Other fields are voluntary.

D. CLASSES OF TRANSFEREES

We may share data with:

  • Service providers – Webflow Inc. (hosting, US), email/IT suppliers, professional advisers.
  • Government or regulators when required by law.
  • Successors in any corporate transaction affecting our business.

Whenever we transfer personal data outside Hong Kong, we use contractual safeguards equivalent to the PCPD’s Model Clauses.

E. RETENTION

  • Enquiry-related data: kept 3 years after final interaction, then erased or anonymised.
  • Server logs: 12 months for security review.
  • Aggregate analytics: anonymous; retained indefinitely.

F. DATA SECURITY

We employ HTTPS, encryption at rest, access controls, and regular vulnerability patching. Service providers are contractually bound to comparable standards.

G. YOUR RIGHTS (DPP 6)

You may:

  • Access a copy of the personal data we hold about you.
  • Correct any inaccuracy.
  • Withdraw consent to any new purpose we proposed (if applicable).

How to exercise your rights: email info@i-iiconcept.com. We will respond within 40 days. A reasonable fee may be charged for access requests as permitted by s.28 PDPO.

H. COOKIES & ONLINE TRACKING

We use only the cookies/local-storage items listed in our separate Cookie & Online-Tracking Policy. Those items do not identify you personally. If any tracking technology does identify you, this Privacy Policy will apply.

I. CHANGES TO THIS POLICY

We review this statement annually. The “Last updated” date reflects the most recent revisions. Material changes will be announced on this page.