Privacy Policy

Data Controller

The data controller for personal information is YFIFARE HONG KONG LIMITED.

Business Registration Number (BR No.): 80023676

Registered and business address: FLAT 08A, 19/F, CHINA SHIPBUILDING TOWER, 650 CHEUNG SHA WAN ROAD, LAI CHI KOK, KOWLOON, HONG KONG

Contact email: wish@yfifare.com

Information We Collect

1. Information you provide voluntarily

When you submit a partnership request, schedule a demonstration, or contact us by email through the Website, we may collect:

• Personal contact information: name, email address, telephone number
• Professional and company information: company name, business type, description of cooperation needs
• Other information you voluntarily provide in connection with business inquiries

2. Technical information collected automatically

When you visit the Website, our servers or underlying technical components may automatically record:

• IP address and approximate geographic location (country/region level)
• Browser type, version, and device type
• Operating system and language preferences
• Visit time, page browsing path, and referring page
• Identifier information generated by cookies or similar technologies

Such technical information is generally used in aggregated or anonymised form for website security, troubleshooting, and visit statistics, and is not ordinarily used on its own to identify a specific individual.

How We Use Your Information

We process your information lawfully, fairly, and only as necessary for the following purposes:

• To respond to your inquiries, partnership requests, or demonstration appointments;
• To assess potential cooperation opportunities and technical fit;
• To arrange business communications, product demonstrations, or solution discussions;
• To send follow-up information related to your inquiry;
• To maintain website security and prevent fraud, attacks, and misuse;
• To compile and analyse website visit data in order to improve website content and user experience;
• To comply with applicable laws, regulatory requirements, or lawful requests from judicial or administrative authorities.

Legal Basis for Processing

We process your personal information on one or more of the following bases:

• To respond to your inquiry or cooperation request and facilitate communication initiated by you (pre-contractual steps or legitimate interests);
• As necessary to safeguard the Website and information systems (legitimate interests);
• To comply with obligations under applicable law (legal obligation);
• Where applicable, based on your explicit consent (for example, when you submit a form and indicate acceptance of relevant terms).

Cookies and Similar Technologies

The Website may use the following types of cookies or similar technologies:

• Essential cookies: used to maintain basic website functionality, security, and language preferences;
• Analytics cookies: used to understand page visits and optimise website structure (where enabled).

You may refuse or delete non-essential cookies through your browser settings. Refusing cookies may affect the normal operation of certain functions.

The Website currently uses third-party resources such as Google Fonts to load fonts. Providers of such services may receive basic technical information such as your IP address. Their respective privacy policies govern their processing practices.

Information Sharing and Disclosure

We do not sell your personal information. We may share or disclose information only in the following circumstances:

• With your explicit consent or authorisation;
• With service providers who support website hosting, email services, technical operations, or data analysis for the Company (limited to information necessary to achieve the purpose and subject to confidentiality obligations);
• To comply with laws, court orders, regulatory requirements, or lawful requests from government authorities;
• Where reasonably necessary to protect the lawful rights, property, or safety of the Company, users, or the public;
• In connection with corporate restructuring, merger, or asset transfer, where information is transferred to relevant parties in accordance with law (we will require recipients to remain bound by this Policy).

Cross-Border Transfers

Because the Website may use servers, cloud services, or technology providers located outside Hong Kong, your information may be transferred to, processed in, or stored in jurisdictions outside Hong Kong.

In such cases, we will take reasonable steps to ensure that recipients maintain an appropriate level of data protection and that transfers occur only to the extent necessary to achieve the purposes described in this Policy.

Retention Periods

We retain your personal information only for as long as necessary to fulfil the purposes described in this Policy, or for longer where required by law. Reference periods include:

• Partnership inquiries and business communication records: generally retained for no more than 24 months from the date of the last meaningful communication, unless a formal contracting process has commenced or law requires otherwise;
• Website access logs and security records: generally retained for no more than 12 months;
• Cookie data: retained until expiry or deletion in accordance with cookie type and browser settings.

After the retention period expires, we will delete or anonymise the relevant information unless we are required by law to retain it.

Your Rights

Under the Ordinance and applicable law, and subject to statutory conditions, you have the right to:

• Access personal information we hold about you;
• Request correction of inaccurate or incomplete information;
• Request deletion of relevant information in circumstances permitted by law;
• Object to or restrict certain processing activities;
• Withdraw consent previously given (without affecting lawful processing based on consent before withdrawal);
• Lodge a complaint with the relevant supervisory authority regarding personal data processing.

To exercise any of the above rights, please contact us using the details at the end of this Policy. To protect information security, we may verify your identity before processing your request. We will respond within a reasonable period.

Information Security

We implement reasonable technical and administrative measures to protect your personal information, including access controls, transmission encryption (such as HTTPS), permission management, and security auditing, in order to prevent unauthorised access, disclosure, alteration, or loss.

Although we take security measures seriously, internet transmission and electronic storage cannot be guaranteed to be absolutely secure. Please exercise caution when submitting sensitive information and avoid transmitting confidential business information through insecure channels.

Minors

The Website and our B2B business services are not directed at minors under the age of 18. We do not knowingly collect personal information from minors. If we discover that we have inadvertently collected information from a minor, we will delete it promptly.

Policy Updates

We may update this Privacy Policy from time to time. Updated versions will be published on this page with the latest effective date indicated. Where changes are material, we will provide notice in a prominent place on the Website or by other appropriate means.

Your continued use of the Website or communication with us after an update constitutes your acknowledgement that you have read and understood the revised Policy.