Privacy Policy of Alchemy (Hong Kong)

Alchemy Telco Solutions Asia Limited (company number 71072767) (“Alchemy”) is based at Flat/Room 17-22 18/F, 1 Hung To RoadKwun Tong, Kowloon, Hong Kong. We are a global services company, specialising in Trade-In and Recycling Services, Problem Solving / Consultancy, Product Sourcing, Accessories and Onsite Managed Services, and other services related thereto (collectively the “Services”).

1. Basic Policy 

Alchemy operates conscientiously within the requirements of the laws, regulations and guidelines in Hong Kong, including the Personal Data (Privacy) Ordinance (“PDPO”) We work within the principles of fair data processing, namely:

• Using information in a way that people would reasonably expect.

• Thinking about the impact of our processing.

• Being transparent and ensuring that people know how we will use their information.

This policy (“Policy”) which will be updated at regular intervals, sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us.

Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.

2. What This Policy Covers 

This Policy covers how we treat any Personal Information (defined below) that we collect and receive either from our website (the “Site”) or as part of our broader operating processes.

We do not sell or pass on any Personal Information about our clients or prospects and we only use any information shared with us for running and improving Services and other purposes provided in this Policy and other applicable terms and conditions. This Policy describes: what information we collect; the steps we take to protect and secure it; how we use and share information; and finally, how you can contact us with questions or concerns.

3. Information We Process

• Personal Information. We collect your personal information (g., name, address, email address, phone number, occupation, copy of your Driving License and/or other Government-issued identification, etc.) (“Personal Information”) when you:

  • Send us an inquiry through the Site.

  • Email us.

  • Work with us as a customer, supplier, or employee.

• Your other information. When you access and use Services, we may collect additional contextual information about you, your company as well as your design and aesthetics preferences. We do not link this additional data to any other personal identifiable information we collect about you and do not undertake any profiling activity.

• Billing If you contract us for Services, we will require your billing information in order to process the transaction. Billing information includes your name, address, bank details and other information necessary to process the transaction.

4. Use of Personal Information 

• Personal Information is only collected in situations where you have consented; where there is a legitimate interest to disclose the information; where the disclosure of Personal Information is required for the fulfilment of your contract with Alchemy; and where otherwise permissible under the PDPO.

• We may use Personal Information collected from you to the extent necessary for process of applications, shipment and provision of our products, after-sales support and other customer support activities, or otherwise operating the Services. We may also make you aware of new and additional products, Services and opportunities available to you. We may use Personal Information to improve our products and Services and better understand your needs. We may also use Personal Information for the background check or otherwise to fulfill the requirements under the applicable laws and regulations

• If there are additional purposes for which we propose to use Personal Information that are not specified in this Policy, they will be contained in the terms of any consent we may ask you to agree to when we collect Personal Information. We will always give you the option to decline to provide Personal Information or to decline to allow us to use Personal Information for the purposes for which we have proposed to use it; provided that we may not be able to provide our products and Services if you decline to provide or to allow us to use the certain Personal Information.

• When you access the Site a small text file is saved to your web browser— a cookie. A “cookie” assigns you a unique identifier so that we can recognise you each time you re-enter the Site. We use cookies to help us to improve the Site and to provide us with information about usage of the Site. Certain third parties also place cookies on your device when you browse the Site. Cookies help us deliver an enhanced personalised experience to you. You also have choices with respect to cookies. By modifying your browser preferences, you have the choice to accept all cookies, to be notified when a cookie is set, or to reject all cookies. If you choose to reject all cookies you will be unable to use those Services or engage in activities that require the placement of cookies. Certain aspects of the Site may not function properly if you set your browser to reject all cookies.

• If you require further information, please see Section 10 ‘Contacting Alchemy’.

5. Disclosure, Sharing, and Retention of Personal Information

• Alchemy does not share, sell, rent or trade Personal Information with any third parties for marketing or promotional purposes. Where necessary Alchemy will share with its trading partners personal data required for the provision of the goods and services you have engaged us for.

Alchemy reserves the right to share data with relevant authorities if compelled to do so to comply with legal obligations under applicable laws and regulations. We will use third party payment processors for card transactions to pay for goods and Services but these third parties are authorised to use the data only as necessary to provide these Services to us and are prohibited from using Personal Information for promotional purposes.

We may share Personal Information amongst other Alchemy businesses. Where information is shared, that other Alchemy business is bound by the original Primary Purpose for which the information was collected.

• Alchemy may disclose Personal Information under the following circumstances:

• to respond to lawful requests by public authorities, including but not limited to national security or law enforcement requests.

• to be required by law, such as to respond to court orders, or similar legal processes, to establish or exercise our legal rights or, defend against legal claims, or if in our judgment in such circumstances disclosure is required or appropriate.

• to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, violations of our various terms of use, or as otherwise required by law

• We will retain existing customer information for as long as a customer account is active with us or as needed to provide Services – and where required to comply with our legal obligations under applicable laws and regulations, resolve disputes, and enforce our agreements. We will retain all prospective customer data ongoing until any such time that we receive a request to opt-out.

6. International Transfer of Your Personal Data

Information that we collect may, from time to time, be stored, processed in or transferred between parties located in countries outside of Japan. We have hosting facilities in UK and European Economic Area (EEA). We adhere to the provisions in the PDPO, during the transfer of your personal data by ensuring appropriate safeguards are deployed and ensure that when required, these are part of Service contracts. Alchemy operations across EEA adhere to the EU General Data Protection Regulations 2018 to ensure data security. Your personal data may also be processed by staff operating outside the EEA who work for us or for one of our suppliers. These countries include but are not limited to the United States of America (USA). Transfers to the USA will be protected by appropriate safeguards, namely the use of standard data protection clauses adopted or approved by the European Commission, a copy of which can be obtained from https://www.privacyshield.gov/. This arrangement imposes strong data protection obligations on companies receiving personal data from the EU, safeguards on US government data, effective protection and redress for individuals, and is subject to annual joint review by EU and USA.

7. Confidentiality and Security of Personal Information

We use physical, electronic, and procedural safeguards to protect Personal Information. We instruct our management and employees concerning legal requirements and company regulations related to privacy protection as part of our continuing efforts to manage Personal Information appropriately.

Our IT arrangements aspire to “Data Protection by Design” and should be able to detect a significant data breach. Where such a breach could result in discrimination, damage to reputation, financial loss, loss of confidentiality or any other significant economic or social disadvantage we will notify the relevant authority if required under the applicable laws. Where a breach is likely to result in a high risk to the rights and freedoms of individual data subjects, we will also notify those concerned directly and at the earliest practical opportunity. We shall then fully investigate any data breach and implement corrective actions to prevent recurrence.

By using Services or providing Personal Information to us, you are consenting to Alchemy communicating with you electronically regarding security, privacy, and administrative issues related to your use of Services. We may post a notice on the Site if a security breach occurs. In these circumstances, we may also send an email to you at the email address you have provided.

Data transmissions over the Internet are not 100% secure. Consequently, we cannot guarantee or warrant the security of any information you transmit to us and you do so at your own risk. Once we receive your transmission, we use reasonable efforts to ensure security on our systems.

8. Access to Personal Information

You may request details of Personal Information that we hold about you in accordance with the provisions of the PDPO. If you would like a copy of the information which we hold about you or believe that any information we hold on you is inaccurate, out of date, incomplete, irrelevant or misleading, please email privacy@alchemyglobalsolutions.com

Disclosures will be made only of the Personal Information about the individual submitting the request.

The fee for processing the request is KRW 1,600. The fee must be borne by the applicant.

We will aim to supply the information within 14 days.

We reserve the right to refuse to provide you with information that we hold about you, in certain circumstances set out in the PDPO.

9. Changes to the Privacy Statement

Alchemy reserves the right to revise, modify, or update this statement at any time. We will notify you via email about material changes in the way we treat personal data, or by placing a prominent notice on the Site.

10. Contacting Alchemy for Complaints or Privacy Concerns

We have established an office in order to receive and respond to any inquiries and complaints concerning our handling of Personal Information efficiently and appropriately. Please note that any such communications must be in writing (which may include e-mail).

The primary point of contact for all issues arising from this Policy, including requests to exercise data subject rights, is our Data Protection Officer. The Data Protection Officer can be contacted in the following way:

Address: Flat/Room 17-22 18/F, 1 Hung To Road, Kwun Tong, Kowloon, Hong Kong.

Email: privacy@alchemyglobalsolutions.com.

We take complaints very seriously and will respond shortly after receiving written notice of your complaint. Alchemy is the data controller for the purposes of the personal data processed under this Policy.

You also have a right to lodge a complaint with the national data protection supervisory authority, the Privacy Commissioner for Personal Data (PCPD): https://www.pcpd.org.hk

We do ask that you please attempt to resolve any issues with us first, although you have a right to contact the supervisory authority at any time.

Enacted 03/15/2021

Alchemy Telco Solutions Asia Limited（公司編號： 71072767）（簡稱「Alchemy」）位於香港九龍觀塘偉業街180號Two Harbour Square 25 樓 25-153 室。我們是提供國際服務的公司，專提供回收及環保服務、擬定解決方案/顧問服務、產品採購、配件及現場託管服務，以及其他前述相關服務（統稱「服務」）。

1. 基本方針政策

Alchemy 自覺遵守香港法律、條例及指引，包括個人資料（私隱）條例（「PDPO」）的要求營運公司。

我們秉承公平原則處理資料，即：

• 信息僅用於大眾預期的合理用途。

• 思考我們處理資料將會帶來的影響。

• 透明化及確保大眾知道我們如何使用他們的信息。

本政策（簡稱「政策」）將會定期更新，並就收集到或您提供給我們的任何個人資料處理方面列明基本方針 。

請細閱以下內容，以瞭解我們對您的個人資料相關的看法和做法，以及我們對資料的處理方法。

2. 本政策的保障範圍

本政策的保障範圍涵蓋我們對所收集到，或透過網站（簡稱「網站」）或龐大的營運流程所收到的任何個人信息（請參閱以下定義）的處理方法。我們並不會出售或傳閱客戶或潛在客戶的任何個人資料，這些資料僅用於內部操作及改善服務、本政策中所提及的其他用途以及其他適用的條款與細則。本政策中說明了我們將收集的信息、對信息保護及保安的步驟、使用及分享信息的方法，以及將問題或疑慮提交給我們的聯絡方式。

3. 我們處理的信息

• 個人信息。我們將會在以下情況收集您的個人信息（例如：姓名、地址、電郵地址、電話號碼、職業、駕駛執照副本和/或政府簽發的其他證件）（簡稱「個人信息」）：

• 透過我們的「網站」提交問題。

• 發電郵給我們。

• 與我們合作的客戶、供應商或員工。

• 您的其他信息。當您查閱及使用我們的服務，我們將收集與您、您公司以及設計和美感偏好相關的信息。這些額外收集的資料並不會與我們收集到的可確認您身分的個人信息連結，我們亦不會對其進行任何分析活動。

• 帳單。如果您與我們服務有合約關係，我們需要您提供帳單信息以進行交易。帳單信息包括您的姓名、地址、銀行詳情及交易過程需要的其他信息。

4. 個人信息使用

• 我們僅在以下情況收集您的個人信息：您同意提供個人信息；披露信息是符合合法利益；履行您與Alchemy 的合約而需要披露個人信息；以及 PDPO 所容許的其他情況。

• 我們會將收集到的您的個人信息用於申請程序、運送、提供產品/售後服務/其他客戶支援服務，或營運服務。我們亦會透過個人信息通知您最新的其他產品、服務或機會。此外，我們透過使用您的個人信息改善我們的產品及服務，並進一步瞭解您的需求。您的個人信息亦會作用背景調查，或履行相關法律與法規的要求。

• 如果我們提出的個人信息額外用途並未在本政策中註明，則當我們向您收集個人信息時，將其載於徵求您的同意的任何同意書中。您有權拒絕提供個人信息或拒絕我們將您的個人信息用於該額外用途。倘若拒絕提供或不允許我們使用特定個人信息，我們可能無法向您提供我們的產品及服務。

• 當您瀏覽網站，您的瀏覽器將會保存一份 cookie （文字檔案）。Cookie 會分配一個獨特的標識符給您，並在您每次瀏覽網站時透過標識符辨識您。我們利用 cookie 改善網」，以及了解用戶使用網站的信息。當您使用裝置瀏覽網」，某些第三方亦會在您使用的裝置上設置 cookie。Cookie 有助於我們為您提供更好的使用體驗。您對相關 cookie 有選擇權利。您可以透過瀏覽器的偏好設定更改是否接受全部 cookie、在設置 cookie 時收到通知或拒絕全部 cookie。如果您選擇拒絕全部 cookie，您可能無法使用該些服務，或參與由 cookie 運行的活動。此外，在瀏覽器設定拒絕全部 cookie 亦會導致網站的某些部分無法正常運作。

• 相關詳情，請參閱第 10 節之聯絡 Alchemy。

5. 披露、分享及保留個人信息

• Alchemy 不因營銷或推廣目的將個人信息與任何第三方分享、銷售或做交易。然而，為了向您提供所需產品及服務，Alchemy 將會與交易方分享個人信息。

在適用法律和法規迫使的情況下，為了遵從法律義務，Alchemy 保留向有關監管機構分享資料的權利。我們使用第三方支付處理器處理購買產品及服務的銀行卡交易，這些第三方獲授權僅在需要時使用個人信息為我們提供服務，並且禁止使用個人信息作推廣用途。 我們可能與 Alchemy 其他業務分享個人信息。一旦分享信息，Alchemy 其他業務受到的約束均與信息收集相關的「主要目的」的約束力相同 。

• Alchemy 將在下列情況披露個人信息：

• 回應公共機構的合法請求，包括但不限於國家安全或執法要求。

• 法例規定的情況下，例如回應法庭發出的命令或類似的法律程序，確定或行使我們的合法權利或就申索進行抗辯，或經我們判斷有需要披露的情況。

• 針對非法活動、懷疑涉及詐騙、對任何人的人身安全潛在威脅、違反多條使用條款進行調查、預防或採取行動，或法律另有規定之情況下。

• 顧客帳戶依然活躍的狀態下，或為了提供服務，或根據適用的法律及法規需履行我們的法律義務、解決糾紛以及執行我們的協議，我們將會持續保留現有客戶的信息。此外，我們將會繼續保留全部潛在顧客的資料，直至我們接到拒絕保留的要求。

6. 您的個人資料於國際的轉移

來自日本以外的其他國家的合作方之間會保存、處理或轉移我們不定時收集的信息。我們在英國及歐洲經濟區（EEA）亦設有託管設施。我們依據 PDPO 條文在轉移您的個人資料時確保已調配適當的保障，以及確認是服務合約的一部分。Alchemy 於歐洲經濟區（EEA）的營運是遵守歐盟《2018 年通用數據保障條例》以確保資料保安。您的個人資料亦可能由我們位於歐洲經濟區（EEA）境外的員工或供應商的員工處理。這些國家包括但不限於美國。轉移至美國的資料將受到適當的安全保障，即歐洲委員會採用或批准使用的標準資料保障條例，您可以瀏覽以下網站並獲取該條例：https://www.privacyshield.gov/。此安排對從歐盟接受個人資料的公司規定強制性的資料保護義務，為美國政府資料提供保障，以及為個人提供有效保障及申訴，並由 歐盟及美國每年一同檢討。

7. 個人信息的保密及保安

我們採取物理、電子及保障程序來保護個人信息。 我們指示管理團隊及員工注意法律規定，以及與隱私保護相關的公司規例，作為努力持續管理個人信息的一部分。

我們的 IT 安排是按照保障資料的要求而設，可檢測到資料外洩。資料外洩可導致歧視、名譽受損、財務損失、洩密或其他嚴重的經濟或社交弊端，因此，根據適用法律的要求，我們將會上報給相關機構。如果資料外洩對個人資料當事人的權利及自由造成高風險，我們會儘早通知當事人。隨後，我們將徹底調查資料外洩事件，並實施糾正行動以避免同樣事件再次發生。 使用我們的服務或向我們提供個人信息表示您同意Alchemy 以電子的方式與您溝通有關使用服務的保安、隱私及行政問題。如果發生資料外洩，我們將會在網站上發佈通知，同時我們亦會透過您所提供的電郵地址發郵件給您。

網絡上傳輸資料並非 100% 安全。因此，我們無法保証或擔保您傳輸給我們的資料的安全，您需自行承擔風險。一旦收到您傳輸的資料，我們將會盡最大努力保障資料安全地保存於我們的系統中。

8. 查閱個人信息

根據 PDPO 條文，您可以要求查閱我們持有的關於您的個人信息詳情。如果您想獲取一份我們持有的您的資料，或認為我們持有的關於您的資料不正確、未更新、不完整、不相干或有誤導性，請發電郵至：privacy@alchemyglobalsolutions.com。 我們僅會披露向我們提出要求人仕相關的個人信息。 我們會就查閱要求而徵收的韓圜1,600元 費用，申請人須支付此費用。 我們將會在 14 日之內提供該信息。 根據 PDPO 指定的情況下，我們有權拒絕向您提供我們所持有的您個人信息。

9. 政策變更說明

Alchemy 有權隨時修改、修訂或更新此說明。我們會透過電郵通知您有關內容的更改，就像我們處理個人資料，或在網站發佈重要通知一樣。

10. 聯絡 Alchemy 提交投訴或私隱方面的疑問

為了更有有效及適當地處理個人信息相關的任何疑問或投訴，我們開設了辦事處以接受及回應該些疑問及投訴。所有的問題交流必須以書面的形式（亦包括電郵）進行。 有關此政策的全部疑問（包括對資料 行使要求權利）的主要聯絡人是「資料保護專員」。您可以透過以下方式聯絡「資料保護專員」： 地址：香港九龍觀塘偉業街180號Two Harbour Square 25 樓 25-153 室 電郵： privacy@alchemyglobalsolutions.com。

我們以嚴謹及嚴肅的態度處理每宗投訴，並會在收到您的書面投訴的短期內作出回應。Alchemy 是本政策中所處理並用於不同用途的個人資料的管理人。 您亦有權向境內資料保護監管機構，即香港個人資料私隱專員公署（PCPD）（網站： https://www.pcpd.org.hk）投訴。

儘管您有權隨時聯絡監管機構，惟我們希望您在聯絡之前可以先嘗試與我們溝通並解決問題。

於2021年5月31日頒布