This privacy policy describes how YiYe Space Engineering Company Limited handles personal information on this website and across our engineering services. We encourage you to read it in full before you share any personal data with us.
1. Introduction
Our privacy policy explains how YiYe Space, the developer and operator of this website, and YiYe Space Engineering Company Limited, the engineering firm behind the services we offer, collect, use, store, and protect personal information. YiYe Space Engineering Company Limited is a computer systems design and engineering company registered in Hong Kong with its office at Rm 1603 16/F Cameron Sino Technology Ctr, 73 Chai Wan Kok St, Chai Wan Kok, Hong Kong (HK). We respect your privacy and we take the care of your personal data seriously.
This policy applies to everyone who visits this website, contacts us through our forms, or uses the services described here. Please read this policy carefully before you provide any personal information to us. If you do not agree with any part of this policy, you should not use our website or our services. By continuing to use this website, you acknowledge that you have read and understood the practices described in this policy.
We review this policy regularly and we will post any updated version on this page with a new revision date. The version that is current at the time of your visit governs how your data is handled during that visit.
2. The Data We Collect
We collect only the information that we need to operate our website and to deliver our engineering services. The categories of personal data we may collect include the following:
- Contact details such as your full name, email address, phone number, and postal address.
- Professional details such as your job title, company name, industry, and role in a project.
- Project information such as site addresses, building drawings, specification notes, and the scope of work you ask us to evaluate.
- Communication data such as the contents of messages you send us, the subject lines of your enquiries, and the times of your messages.
- Technical data such as your browser type, device type, operating system, screen resolution, and internet protocol address.
- Usage data such as the pages you view on this website, the duration of your visits, and the websites that referred you to us.
- Preference data such as the services that interest you and the way you respond to our communications.
We do not collect more data than we need, and we do not buy personal data from third party brokers. Where you provide data to us, we expect it to be accurate and up to date, and we will act on the data you give us in good faith.
3. How We Collect Data
We collect personal data in several ways, always in a transparent manner. First, you give us data directly when you submit a contact form, send us an email, call our office, or meet our engineers on site. Second, we collect data automatically when you browse this website through cookies, log files, and similar technologies that record how our pages are used. Third, we may collect data from publicly available sources such as company registries, professional directories, and public procurement notices when we are preparing a proposal or a compliance review.
Fourth, we may receive limited data from business partners or clients who introduce you to us for a specific project. In every case, we tell you what data we hold, why we hold it, and how long we keep it. We do not collect data from any source in secret, and we do not use invasive methods that gather information beyond what is needed for the purposes described in this policy.
4. How We Use Your Data
We use your personal data only for legitimate and clearly stated purposes. We use your contact details to respond to your enquiries, to schedule site surveys, and to send you the documents you request. We use your project information to prepare feasibility studies, space plans, engineering designs, and cost estimates. We use your communication data to maintain an accurate record of every exchange with you, which helps us deliver consistent service across our team.
We use your technical and usage data to keep the website secure, to diagnose faults, to improve page performance, and to understand which of our services are most useful to our visitors. We may use your preference data to tailor our responses and to inform you about services that are genuinely relevant to your industry, always with a simple way for you to opt out.
We do not sell your personal data, we do not rent your personal data, and we do not use your data for purposes that are unrelated to the services you asked about. If we ever wish to use your data for a new purpose, we will ask for your consent or ensure that a lawful basis exists first.
5. Legal Grounds for Processing
When we process your personal data, we rely on legal grounds recognised under the laws of Hong Kong and, where applicable, the General Data Protection Regulation. The primary ground is consent, which you give when you voluntarily submit your details through our forms or ask us to contact you. The second ground is the performance of a contract, which applies when we are preparing a proposal, delivering engineering services, or managing an active project with your company.
The third ground is legitimate interest, which covers activities such as keeping our website secure, improving our services, preventing fraud, and maintaining professional records. The fourth ground is legal obligation, which applies when we must keep records to comply with Hong Kong laws, building regulations, or professional standards.
Where we rely on consent, you may withdraw that consent at any time without penalty, and we will stop processing your data for that purpose as soon as we reasonably can. Where we rely on legitimate interest, you may object to that processing, and we will stop unless we can demonstrate compelling grounds that override your interests.
7. When We Share Information
We share your personal data only when it is necessary to deliver our services or to comply with the law, and we share as little data as possible. We share limited project data with our own subcontracted engineers, fabricators, and specialist consultants who work under written agreements that require them to protect your data. We share data with our professional advisers, such as lawyers and insurance providers, when this is needed to protect our interests or to manage risk.
We share data with authorities and regulators when Hong Kong law, court orders, or building regulations require us to do so. We may share anonymised, aggregated statistics that cannot identify you with industry bodies or for research purposes. We do not share your data with marketing agencies, we do not sell your data to anyone, and we do not transfer your data to unrelated companies for their own use. Every party we share data with must protect it to a standard at least as strict as ours.
8. International Transfers of Data
Because our projects sometimes involve clients and suppliers in other countries, your data may be transferred outside of Hong Kong. When we transfer data to another country, we ensure that the receiving party provides an adequate level of data protection. Where we work with providers in the European Economic Area, we rely on standard contractual clauses or other approved transfer mechanisms. Where we work with providers in other regions, we assess the local legal environment and we put contractual safeguards in place.
We keep a record of all international transfers we make, the legal basis for each transfer, and the safeguards that apply. If you would like a copy of the safeguards that apply to a particular transfer of your data, you can ask us through the contact details at the end of this policy, and we will provide the relevant information without undue delay.
9. Data Retention Periods
We keep your personal data only for as long as it is needed for the purposes for which it was collected. Contact and communication data is retained for three years after our last exchange with you, after which it is deleted or anonymised. Project data is retained for the life of the project plus a further seven years, because Hong Kong building regulations and professional indemnity requirements make it necessary to keep engineering records for this period.
Website technical and usage data is retained for a maximum of twenty-six months. Records relating to legal disputes are retained until the dispute is resolved and any appeal period has ended. When a retention period ends, we delete or anonymise the data so that it can no longer identify you. We review our retention schedules at least once a year to make sure they remain appropriate.
10. Security of Your Information
We apply reasonable technical and organisational measures to protect your personal data against loss, misuse, and unauthorised access. Our website is served over encrypted connections, and our forms transmit data using secure protocols. Access to personal data within our company is limited to the staff members who need it to perform their duties, and each staff member is bound by confidentiality obligations.
Our servers and office systems are protected by firewalls, access controls, and up-to-date security software. We conduct regular reviews of our security practices, and we require our subcontractors to meet comparable standards. In the unlikely event of a data breach that creates a risk to your rights, we will notify the relevant authorities and, where required, we will inform you directly with a description of the incident and the steps we have taken. No method of transmission or storage is completely secure, but we work hard to keep your data safe.
11. Your Rights and Choices
Under the laws of Hong Kong and, where applicable, the General Data Protection Regulation, you have a number of rights regarding your personal data. You have the right to request a copy of the personal data we hold about you. You have the right to ask us to correct any inaccurate or incomplete data. You have the right to request the deletion of your data in certain circumstances. You have the right to object to processing that is based on legitimate interests. You have the right to restrict the processing of your data while a request is being considered. You have the right to receive the data you provided to us in a structured, machine-readable format and to transmit it to another party. You also have the right to withdraw any consent you previously gave.
To exercise any of these rights, contact us using the details at the end of this policy. We will respond to your request within thirty days, and we will not charge a fee for a reasonable request. If your request is complex or you make several requests at once, we may extend the response period by a further two months, and we will tell you why within the first thirty days. We may ask you to verify your identity before we act on a request, to protect your data from unauthorised access.
12. Privacy for Children
Our website and our services are directed at professional adults, and we do not knowingly collect personal data from children. We define a child as any person under the age of sixteen in the jurisdictions in which we operate. We do not design our content to appeal to children, and we do not offer products or services that are intended for children.
If you believe that a child has provided personal data to us without the consent of a parent or guardian, please contact us immediately using the details at the end of this policy. We will investigate the matter promptly, and if we confirm that we hold personal data of a child, we will delete it without delay. We encourage parents and guardians to supervise the online activities of children in their care.
13. Third Party Services and Links
This website may contain links to third party websites, tools, and services that we do not operate. When you leave our website and visit a third party website, the privacy practices of that website apply to your data, not this policy. We are not responsible for the content, privacy practices, or security of any third party website.
We may also use trusted third party tools for functions such as hosting, analytics, and email delivery. These providers act on our behalf and they may process limited data under our instructions. We select providers who demonstrate strong privacy and security practices, and we keep their processing under review. We encourage you to read the privacy policy of any website you visit before you provide personal data to it.
14. Analytics and Automated Decisions
We use analytics tools to understand how visitors use this website so that we can improve it. These tools record anonymous statistics about page views, visit durations, and visitor locations at a regional level. We may also use analytics to measure how well our communications perform. The data used by these tools is aggregated and it is not used to identify you as an individual.
We do not make automated decisions that have a legal or similarly significant effect on you based solely on automated processing. Any decision about whether to engage us, price a project, or accept a proposal is made by a human engineer or manager. If this changes in the future, we will update this policy and we will provide you with meaningful information about the logic involved and your right to obtain human intervention.
15. Email Communications and Marketing
When you enquire about our services, we may send you emails that are directly related to your enquiry, such as proposals, project updates, and invoices. These service emails are necessary for the delivery of our services and they are not marketing. From time to time we may send you an occasional update about our capabilities or completed projects, but only if we have a lawful basis to do so.
Every marketing message we send includes a clear and simple way for you to unsubscribe. If you no longer wish to receive any communication from us, you can tell us at any time and we will stop sending you messages, although we may still contact you about obligations that are required for an active project. We do not share your email address with any external marketing list.
16. Business Transactions and Corporate Events
If YiYe Space Engineering Company Limited is involved in a merger, acquisition, restructuring, or the sale of all or part of its assets, your personal data may be transferred as part of that transaction. In such a case, we will take steps to ensure that the buyer protects your data in a manner consistent with this policy. We will also update this policy to reflect the new data controller where appropriate.
If a corporate event results in a change to the way your data is processed, we will notify you before your data is used for a new purpose. This section does not give any third party rights beyond those described in this policy, and it does not restrict the rights of any party under applicable law.
17. Changes to This Privacy Policy
We may update this privacy policy from time to time to reflect changes in our services, changes in the law, or changes in our operating practices. When we make a material change, we will update the revision date at the top of this page and we will post a notice on our homepage for a reasonable period. Where a change is significant and we have your contact details, we may send you a direct notification.
Your continued use of this website after a revised policy has been posted constitutes your acceptance of the revised terms, unless the change is not permitted by law. We encourage you to review this page periodically so that you are always aware of how we protect your personal data. The version of this policy that applies at the time of your visit is the version that governs your use of the website.
18. How to Contact Us
If you have any questions about this privacy policy, or if you wish to exercise any of your rights, you can contact us in several ways. Our engineering office is located at Rm 1603 16/F Cameron Sino Technology Ctr, 73 Chai Wan Kok St, Chai Wan Kok, Hong Kong (HK). You can reach our privacy team by email at service@chikhonglog.autos. You can also call us at +17623185503 during our business hours.
We aim to acknowledge every privacy request within two working days and to provide a complete response within thirty days. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction, including the Office of the Privacy Commissioner for Personal Data in Hong Kong where applicable. Thank you for taking the time to understand how we handle your personal information.