Privacy Policy

Last Updated: November 5, 2025

GSTechnologies Limited (“we,” “us,” or “our”) is committed to protecting the privacy and personal data of our clients, partners, and website visitors in full compliance with the Personal Data (Privacy) Ordinance (Cap. 486) of the Hong Kong Special Administrative Region (“PDPO”). This Privacy Policy explains how we collect, use, disclose, retain, and safeguard your personal data when you visit our website https://gsctechno.com/ (“the Site”) or engage with our services, including IT consulting, custom software development, cloud solutions, cybersecurity, data analytics, and information services.

By providing your personal data to us whether through our website, email, phone, or in the course of a service engagement, you confirm that you have read, understood, and consented to the practices described in this Policy.

1. Types of Personal Data We Collect

We may collect the following categories of personal data:

• Contact Information: Full name, job title, company name, business email address, telephone number, and postal address (if provided).
• Service-Related Data: Details about your IT infrastructure, project requirements, software specifications, or support requests submitted via contact forms, emails, or meetings.
• Technical Data: IP address, browser type, operating system, pages visited, and usage patterns collected automatically through cookies and similar technologies to enhance Site functionality and user experience.
• Billing and Transactional Data: Invoicing details, payment records, and contract information (processed securely through third-party payment or accounting platforms).

2. Purpose of Collection and Use of Personal Data

We collect and use your personal data only for lawful, necessary, and directly related purposes, including:

• Responding to your inquiries and providing information about our IT and information services;
• Designing, developing, deploying, and supporting custom software, cloud, or cybersecurity solutions;
• Managing client relationships, contracts, billing, and service delivery;
• Conducting IT assessments, data analytics, or system audits as part of agreed engagements;
• Complying with legal, regulatory, or statutory obligations under Hong Kong law (e.g., tax, anti-money laundering, or contractual disclosure requirements);
• Improving our website, services, communication, and overall client experience.

We will not use your personal data for direct marketing or any new purpose without your prior consent, unless permitted or required by law.

3. Disclosure of Personal Data to Third Parties

We do not sell, rent, or trade your personal data. However, we may disclose your data to the following third parties only when necessary and under strict confidentiality and data processing agreements:

• Service Providers: Cloud platforms, collaboration tools, CRM systems, email service providers, and secure file-sharing platforms used to deliver our services;
• Subcontractors: Specialized technical partners engaged (with your knowledge or consent) to assist in software development, cybersecurity testing, or infrastructure deployment;
• Professional Advisors: Legal, accounting, or compliance consultants where necessary for business operations or regulatory adherence;
• Regulatory Authorities: Government or supervisory bodies, if disclosure is required by law or in response to a lawful request under Hong Kong or international regulations.

All third parties are contractually obligated to protect your data and process it only on our instructions and in compliance with the PDPO.

4. Data Retention

We retain personal data no longer than necessary for the purposes for which it was collected or as required by law:

• Prospective clients or website visitors: Data is retained for up to 3 years from the last point of contact, unless you request earlier deletion.
• Active or former clients: Data is retained for the duration of the business relationship and for up to 7 years thereafter to meet legal, tax, audit, and contractual obligations under Hong Kong law.
• Technical logs and cookies: Automatically deleted or anonymized within 12 months, unless needed for security or fraud prevention.

You may request access to or deletion of your data at any time (see Section 6).

5. Cookies and Tracking Technologies

Our Site uses cookies and similar technologies to:

• Ensure basic website functionality;
• Analyze traffic and user behavior (via anonymized analytics tools such as Google Analytics);
• Remember your preferences (e.g., language or region).

These technologies do not collect personally identifiable information unless you have already provided it through a form or login. You may disable cookies via your browser settings, though this may limit certain Site features. We do not use cookies for cross-site tracking or behavioral advertising without your explicit consent.

6. Your Rights Under the PDPO

Under the PDPO, you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Correction: Request correction of inaccurate or incomplete data.
• Right to Opt-Out of Direct Marketing: Although we do not currently engage in unsolicited direct marketing, you may object to any future use of your data for such purposes.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time (this will not affect the lawfulness of processing prior to withdrawal).

To exercise these rights, please contact our Data Protection Contact (Section 8). We may charge a reasonable fee for access requests, in accordance with PDPO guidelines.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction, including:

• Encryption of data in transit (via SSL/TLS) and at rest (where sensitive);
• Access controls limiting data access to authorized personnel only;
• Regular security assessments, vulnerability scanning, and patch management;
• Staff training on data protection obligations under the PDPO and internal policies.

While we take commercially reasonable steps to safeguard your data, please note that no electronic transmission or storage system is 100% secure.

8. Data Protection Contact

For any questions about this Privacy Policy, to exercise your rights under the PDPO, or to lodge a complaint regarding the handling of your personal data, please contact:

GSTechnologies Limited
Email: info@gsctechno.com
Address: 7/F, MW Tower, 111 Bonham Strand, Sheung Wan, Hong Kong

We will respond to all legitimate requests within 30 days as required under the PDPO.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices, services, or legal requirements under Hong Kong law. The revised version will be posted on this page with an updated “Effective Date.” We encourage you to review this Policy periodically.