Privacy Policy

1. Introduction

Newstepille Limited ("we," "us," "our," or "Newstepille") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website, contact us, or engage with our services.

We comply with Hong Kong's Personal Data Protection Ordinance (PDPO), the European Union's General Data Protection Regulation (GDPR), and other applicable data protection laws. Please read this policy carefully to understand our practices.

2. What Personal Data We Collect

We collect personal data that you provide directly:

• Contact Information: Name, email address, phone number, company name, and job title (when you submit our contact form)
• Project Data: Details about your facility, data, or business processes (only when you engage our services)
• Communication Records: Emails, messages, and notes from our interactions

We also collect automatically: Browser type, IP address, pages visited, and general location data (via analytics). This data helps us understand how our website is used.

3. How We Use Your Data

We use personal data for these purposes:

• Responding to your inquiries and providing quotations
• Delivering our AI solutions and related services
• Improving our website and services based on usage patterns
• Compliance with legal obligations and contract fulfillment
• Periodic service updates and support communications (you can opt out anytime)

4. Data Sharing & Third Parties

We do not sell or rent your personal data to third parties. We may share data with:

• Service Providers: Cloud hosting, email, and analytics providers (under strict data protection agreements)
• Legal Requirements: When required by law or to protect our rights
• Your Consent: Only when you explicitly authorize us to share data with others

All third-party providers are contractually bound to protect your data and use it only for the purposes we specify.

5. Data Security

We implement industry-standard security measures to protect your personal data:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure access controls and authentication protocols
• Regular security audits and penetration testing
• Limited staff access to sensitive data (role-based permissions)

6. Cookies & Tracking Technologies

Our website uses cookies to enhance your experience. Essential cookies are necessary for basic functionality. Analytics cookies help us understand usage patterns. You can manage cookie preferences in our Cookie Policy.

7. Your Data Rights (PDPO & GDPR)

You have the right to:

• Access: Request a copy of your personal data we hold
• Correction: Correct inaccurate or incomplete data
• Deletion: Request deletion (subject to legal retention obligations)
• Portability: Receive your data in a structured, portable format
• Withdraw Consent: Opt out of optional data processing at any time
• Object: Object to certain processing activities

To exercise these rights, contact us at [email protected].

8. Data Retention

We retain personal data only as long as necessary to provide our services or comply with legal requirements. Contact information may be retained for 3 years after our last interaction unless you request deletion. Project data is retained according to contractual obligations and legal requirements.

9. International Data Transfers

Some of our service providers may be located outside Hong Kong or the EU. When we transfer data internationally, we implement appropriate safeguards including Standard Contractual Clauses (for GDPR) and ensure compliance with applicable laws.

10. Data Breach Notification

In the event of a data breach that compromises your personal data, we will notify you within the timeframes required by law. For GDPR, we notify within 72 hours of becoming aware of the breach.

11. Children's Privacy

Our services are not intended for persons under 18 years old. We do not knowingly collect personal data from children. If we become aware of data collection from a minor, we will promptly delete it.

12. Policy Updates

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of material changes via email or by posting a notice on our website.

13. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us:

14. Regulatory Rights

If you believe we are violating your data protection rights, you have the right to lodge a complaint with:

• Hong Kong: Personal Data Protection Commissioner's Office (PCPO)
• EU: Your local data protection authority