1. Introduction
This Privacy Policy explains how HONGKONG FUXINGFU INDUSTRIAL CO., LIMITED collects, uses, stores, shares and protects personal information when you visit our website, contact our office, request a quotation, commission a study or engage us for any industrial systems service. The developer behind this website is Fuxingfu Industrial, and this policy describes the practices of the whole practice, including the engineering, sourcing, audit and support teams that work under the Fuxingfu Industrial name.
We are an industrial systems integration and computer integrated systems design company. Most of the information we handle is technical, such as machine schedules, network diagrams and factory layout drawings. Personal information is a smaller but important part of what we manage, and we treat it with the same care that we apply to a control system design. This policy tells you what to expect in plain language, without hiding important details in dense wording.
Please read this policy carefully before submitting information through our website or before instructing us on a project. If any part of it is unclear, you are welcome to contact us using the details in the final section and we will explain our practice in relation to your particular situation.
2. Scope of This Policy
This policy applies to the website published at chammo.buzz and to any enquiry, correspondence or commercial relationship that begins through that website or through the contact details published on it. It also applies to personal information collected during the delivery of our services, including information about employees and representatives of client organisations, suppliers, contractors and prospective suppliers.
This policy does not apply to third party websites that we do not control, even where we link to them. It also does not govern information that we process on behalf of a client under a written services agreement where that client is itself the data controller, because in that situation the client decides the purpose and scope of processing and we act only on documented instructions.
3. Who Controls Your Data
For the purposes of applicable data protection law, the data controller is HONGKONG FUXINGFU INDUSTRIAL CO., LIMITED, whose registered office and principal place of business is Rm B 22/F ARTHUR COML BLDG, 33 ARTHUR ST, Yau Ma Tei, Hong Kong (HK). The controller determines why and how personal information is processed in connection with this website and our general business operations.
Where we process information on behalf of a client under a services agreement, that client is the controller and we are the processor. In those circumstances we act only on the documented instructions of the client and we return or delete the information at the end of the engagement, unless a law requires us to keep it for longer.
Our contact point for privacy matters is the address shown above and the email address admin@chammo.buzz. Communications about privacy are directed to a responsible member of the team rather than to a general inbox without ownership.
4. Information We Collect
The information we collect falls into three broad groups. The first group is information you provide directly, such as your name, your email address and the content of your message. The second group is information collected automatically as your browser interacts with the website, such as technical log data. The third group is information generated during a project, such as attendance records, correspondence and site notes that identify individuals.
We aim to collect only what is necessary for a stated purpose. We do not buy personal information from data brokers, we do not build advertising profiles, and we do not combine personal information from unrelated sources in order to construct a detailed picture of private individuals.
5. Information You Provide Directly
When you complete the contact form on our website, you may provide a name, an email address, a subject line and a message. When you telephone or email us, you may provide additional information that you choose to disclose, such as your role, the name of your employer, a site address and details of a technical problem.
During a project we may receive business contact details of client staff, supplier staff and contractor staff, including names, job titles, telephone numbers and email addresses. We use these details to schedule meetings, arrange site access, manage safety inductions and maintain accurate records of who attended what and when.
- Identity and contact details such as name, employer, role, email address and telephone number
- Correspondence content including emails, drawings, specifications and meeting notes
- Project records including site attendance, induction records and access logs
- Financial details such as billing contacts and purchase order references
- Any other information you choose to send to us voluntarily
6. Information Collected Automatically
Our web server records standard technical information when a page is requested. This typically includes the internet protocol address from which the request originated, the date and time of the request, the page requested, the referring page, the browser type and version and the operating system family. This information is used to operate the website, diagnose faults, understand aggregate traffic patterns and protect the service against abuse.
We do not use this technical information to attempt to identify individual visitors unless it is necessary to investigate a security incident, a fraud attempt or a legal claim. Aggregate statistics may be retained for capacity planning and for reporting to management, but they are not used to profile individual users.
8. How We Use Information
We use personal information for the purposes for which it was provided and for closely related purposes that you would reasonably expect. The most common uses are responding to enquiries, preparing quotations, delivering contracted services, maintaining project records, managing supplier relationships, meeting legal and accounting obligations and protecting our rights in the event of a dispute.
- To respond to your enquiry and to provide the information or quotation you requested
- To plan, deliver, document and support industrial systems projects
- To administer contracts, invoices, payments and supplier records
- To communicate about schedules, site visits and technical matters
- To keep accurate business records and to comply with legal duties
- To detect, investigate and prevent security incidents and misuse
- To improve our services and the clarity of our website
We will not use your personal information for a materially different purpose without first telling you and, where the law requires it, obtaining your consent.
9. Lawful Bases for Processing
Where the law requires a lawful basis for processing, we rely on one or more of the following. We process information to perform a contract with you or to take steps at your request before entering a contract, for example when we prepare a quotation or deliver a service you have commissioned. We process information for our legitimate interests in running an industrial systems practice, provided those interests are not outweighed by your rights and freedoms.
We process information to comply with legal obligations, including tax, accounting, safety and record keeping duties. We rely on your consent where consent is the appropriate basis, for example for an optional newsletter or for a non essential measurement tool, and you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
| Activity | Lawful Basis |
|---|---|
| Responding to a website enquiry | Steps before entering a contract or legitimate interest |
| Delivering an engaged service | Performance of a contract |
| Invoicing and accounting | Legal obligation and contract |
| Security monitoring | Legitimate interest in protecting our systems |
| Optional marketing | Consent, which may be withdrawn |
11. Service Providers and Processors
We use a small number of service providers to operate our business, including email hosting, file storage, accounting and website hosting. These providers process personal information only on our instructions and are bound by written terms that require appropriate confidentiality and security measures. They are not permitted to use the information for their own purposes.
Before engaging a new processor we assess the nature of the information involved, the security controls offered and the legal environment in which the provider operates. Where a processor engages a subprocessor, we require equivalent obligations to flow down and we retain the right to object to a subprocessor that does not meet our standards.
12. International Transfers
Our practice is based in Hong Kong and most information remains in Hong Kong. Some service providers may store or process information in other jurisdictions. Where personal information is transferred across borders, we take steps to ensure that it continues to receive an adequate level of protection, using contractual commitments, internal policies and technical measures as appropriate.
If you require information about the specific safeguards that apply to a particular transfer, you may contact us and we will explain the mechanism that is in place for the data in question, subject to any confidentiality obligations owed to third parties.
13. Data Retention
We keep personal information only for as long as it is needed for the purpose for which it was collected, plus any additional period required by law or justified by a legitimate business need such as defending a legal claim. Retention periods are set by category rather than by a single rule, because an enquiry and an accounting record have very different natural lifetimes.
| Category | Typical Retention |
|---|---|
| Website enquiries that do not proceed | Up to 24 months |
| Project and contract records | Up to 7 years after completion |
| Financial and tax records | As required by applicable law |
| Site attendance and safety records | As required by safety and insurance rules |
| Security logs | Up to 12 months unless an incident is under investigation |
When a retention period ends, we delete or anonymise the information in a secure manner. Where information is held in backups, it is removed in the ordinary course of the backup rotation rather than being specially edited.
14. Security of Your Information
We use technical and organisational measures that are appropriate to the risk. Measures include access control based on role, encrypted transport for website traffic, protected storage for project files, device security requirements for staff, vendor due diligence and written confidentiality obligations. Access to personal information is limited to people who need it to do their work.
No method of transmission or storage is completely secure, and we cannot promise absolute security. If a security incident affects your personal information and the law requires notification, we will notify you and the relevant authority without undue delay and will explain what happened, what we have done and what you can do to reduce any risk.
You also have a role in security. Please use a secure network when sending sensitive information, avoid sending confidential documents through unencrypted channels, and tell us promptly if you believe an account or a communication connected to us has been compromised.
15. Your Privacy Rights
Depending on the law that applies to you, you may have some or all of the following rights in relation to your personal information. We will respond to a valid request within the period required by law, and we will explain our reasoning if we are unable to comply with a request in whole or in part.
- The right to be informed about how your personal information is used
- The right of access to the personal information we hold about you
- The right to correction of information that is inaccurate or incomplete
- The right to erasure in circumstances defined by law
- The right to restrict or object to certain processing
- The right to data portability where processing is based on consent or contract
- The right to withdraw consent at any time where consent is the basis
- The right to lodge a complaint with a supervisory authority
To exercise a right, contact us using the details in the final section. We may need to verify your identity before acting, and we may charge a reasonable fee where the law permits a fee for manifestly unfounded or excessive requests.
16. Marketing Choices
We may send occasional business communications about our services, new capabilities or relevant industry developments. These communications are kept short, factual and infrequent. You can opt out at any time by using the unsubscribe instruction in the message or by contacting us directly, and we will action the request promptly.
Opting out of marketing does not affect communications that are necessary to deliver a service you have engaged, to administer a contract, to respond to an enquiry you have made or to meet a legal obligation. Those communications are part of the service relationship rather than promotional activity.
17. Privacy for Children
Our website and services are intended for businesses and professional users. We do not knowingly collect personal information from children. If you believe that a child has provided personal information to us, please contact us and we will take reasonable steps to delete the information from our systems.
Where a site visit or an event involves young visitors, access is managed by the responsible organisation and our collection of personal information is limited to what is required for safety, security and legal compliance. We do not use information about children for marketing purposes under any circumstances.
18. Third Party Websites
Our website may link to third party websites, documents or services that we do not control. This policy does not extend to those destinations, and we are not responsible for their privacy practices or content. We recommend that you read the privacy notice of any website you visit before providing personal information to it.
Where we link to a supplier, a standards body or a technical resource, the link is provided for convenience and does not imply endorsement of that organisation or of any product it offers. Any interaction you have with a linked party is governed by the terms and privacy notice of that party.
19. Changes to This Policy
We review this policy periodically and update it when our practices, our services or the law change. The effective date at the top of the page shows when the current version took effect. If a change is material, we will take reasonable steps to bring it to your attention, such as a prominent notice on the website or a direct communication where we hold your contact details and the law requires notice.
Continued use of the website after an updated policy takes effect indicates that you have had the opportunity to review the updated terms. We encourage you to return to this page occasionally so that you remain aware of how we protect personal information.
20. How to Contact Us
If you have a question about this policy, a request relating to your personal information or a concern about how information has been handled, please contact HONGKONG FUXINGFU INDUSTRIAL CO., LIMITED using the details below. We take privacy enquiries seriously and will route them to a responsible member of the team.
Registered and business address: HONGKONG FUXINGFU INDUSTRIAL CO., LIMITED, Rm B 22/F ARTHUR COML BLDG, 33 ARTHUR ST, Yau Ma Tei, Hong Kong (HK).
Email: admin@chammo.buzz. Telephone: +18509654532. Business hours are Monday to Friday from 9:00 to 18:00 and Saturday from 10:00 to 14:00, excluding public holidays.
If you are not satisfied with our response, you may have the right to complain to the data protection authority in your jurisdiction. We would appreciate the opportunity to address your concern directly before you escalate it.