Privacy Policy

1. Introduction and Scope

This Privacy Policy describes how Star Fir Technology Limited, a Hong Kong limited liability company doing business as Star Fir Technology, collects, uses, stores, shares, and protects personal information obtained through our website at www.starfir.store, through any related digital properties, through our professional services, and through any other interactions with our organization. This policy applies to all visitors, users, clients, prospective clients, vendors, and job applicants who interact with Star Fir Technology in any capacity.

Star Fir Technology is a computer systems design and related services firm specializing in enterprise systems architecture, cloud infrastructure engineering, systems integration, cybersecurity, and managed IT operations. Our base camp is located at Room 01, 26/F, Working View Commercial Building, 21 Yiu Wah Street, Causeway Bay, Hong Kong. Throughout this document, references to Star Fir Technology, we, us, and our refer to Star Fir Technology Limited. The website was developed and is maintained by the Star Fir Technology engineering team, who designed this site with data privacy and security as foundational requirements.

By accessing our website or using our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any provision, discontinue use immediately. We may modify this policy, effective upon posting, and your continued use after changes constitutes acceptance. This Privacy Policy complies with the Personal Data (Privacy) Ordinance of Hong Kong, the California Consumer Privacy Act, and applicable provisions of the GDPR. We are committed to transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, and confidentiality in all data handling practices.

2. Information We Collect

2.1 Information You Provide Directly

We collect information you voluntarily provide when interacting with our website, communicating with our team, or engaging our services. This includes contact form submissions, email correspondence, phone calls, service inquiry forms, and client onboarding documentation. Categories include your full name, business email, telephone number, job title, organization name, physical business address, payment information, tax identification numbers, and any other information you include in messages or service requests. When you engage Star Fir Technology for professional services, we may collect additional technical information under strict security protocols, including system access credentials, network configuration data, and architectural diagrams. We treat all client-provided technical information with the highest level of confidentiality.

2.2 Information Collected Automatically

When visiting our website, information is collected automatically including your IP address, browser type and version, operating system, device type, screen resolution, referring and exit pages, date and time stamps, pages viewed and time spent, clickstream data, and form interaction behavior. We use server logs, web beacons, and tracking pixels. Server log data is typically retained for a period of thirty days before being purged, unless required for security investigations or legal compliance purposes.

2.3 Information from Third Parties

We may receive information about you from third-party sources to supplement our own records and to help us provide more relevant services. These sources may include business intelligence platforms, publicly available business registries, professional networking platforms, trade association directories, credit reporting agencies, and referral partners. We treat all information received from third-party sources in accordance with this Privacy Policy and applicable law.

3. How We Use Your Information

We use the information we collect for specific business purposes that are necessary to provide our services, operate our business, and comply with legal obligations. We use information to provide, maintain, and improve our services including the delivery of contracted computer systems design, architecture consulting, cloud infrastructure engineering, systems integration, cybersecurity assessment, and managed IT operations services. We communicate about project status, deliverables, milestones, change requests, risk assessments, and service-related notifications throughout the engagement lifecycle from initial scoping through final delivery and ongoing operational support. We respond to inquiries with personalized replies and may follow up on those that do not result in immediate engagement. We process payments, manage billing and invoicing, maintain financial records, and fulfill accounting obligations. We send marketing communications where consented or permitted by applicable law — opt-out available at any time. We analyze website usage, improve user experience, and develop aggregate insights. We protect system security, monitor for unauthorized access, investigate security incidents, detect fraud, enforce our Terms of Service, and comply with legal obligations under Hong Kong law.

4. Legal Bases for Processing

Contractual Necessity — processing necessary for contract performance. Legitimate Interests — processing for our legitimate business interests including operating our business, customer support, fraud protection, analytics, and B2B marketing, provided those interests are not overridden by your rights. Consent — where required under Hong Kong's Personal Data (Privacy) Ordinance, obtained before processing for specific purposes, with the right to withdraw consent at any time. Legal Obligation — processing to comply with applicable laws of Hong Kong and other jurisdictions where we operate. Vital Interests — in rare circumstances, to protect vital interests of a natural person.

5. Disclosure of Your Information

We do not sell your personal information. We do not rent, trade, or disclose your personal information to third parties for their independent commercial use. We may share information with service providers bound by contractual obligations including cloud hosting providers, payment processors, CRM operators, email services, analytics providers, and professional advisors. Each is contractually bound to appropriate security measures. We may disclose as required by law or legal process with reasonable efforts to notify you unless prohibited. We may disclose in connection with a corporate transaction, requiring the acquiring entity to honor this Privacy Policy. We may disclose aggregated, de-identified information for any lawful purpose.

6. Data Retention

We retain personal information for no longer than necessary to fulfill the purposes for which it was collected, or as required by applicable law. Contact form submissions and inquiry correspondence are retained for two years from the date of last communication. Client engagement records are retained for the duration of the relationship plus seven years per Hong Kong professional standards. Financial records are retained for seven years per applicable tax law. Server logs are retained for thirty days. Anonymized aggregate data may be retained indefinitely for trend analysis and business planning purposes.

7. Data Security

We implement comprehensive administrative, technical, and physical safeguards aligned with industry standards and regularly reviewed for evolving threats. Technical safeguards include TLS 1.3 encryption for data in transit, AES-256 encryption at rest, multi-factor authentication, role-based access controls with the principle of least privilege, automated vulnerability scanning and penetration testing, intrusion detection and prevention systems, endpoint detection and response, SIEM with real-time alerting, and regular third-party security assessments. Administrative safeguards include documented security policies reviewed annually, mandatory security awareness training, background checks, formal incident response procedures, vendor risk management, and tested business continuity and disaster recovery plans. In the event of a breach, we will notify affected individuals and relevant authorities per the Personal Data (Privacy) Ordinance of Hong Kong and other applicable legal requirements.

8. Your Privacy Rights

Depending on your jurisdiction of residence, you may have certain rights regarding your personal information. We honor all applicable privacy rights. Rights may include access and data portability, correction of inaccurate information, deletion under certain circumstances, restriction of processing, opt-out of sale or sharing (Star Fir Technology does not sell personal information and has not done so in the preceding twelve months), and non-discrimination for exercising your rights. Hong Kong residents have rights under the Personal Data (Privacy) Ordinance including the right to access personal data and request correction. To exercise any of these rights, submit a verifiable request using the contact information in Section 16. We will acknowledge receipt within ten business days and respond within the time period required by applicable law. Identity verification will be required before any request is fulfilled.

9. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience and analyze website traffic. Essential cookies enable core functionality without requiring consent under most privacy regulations. Analytics cookies help us understand interaction patterns anonymously so we can improve our content and user experience. You may configure your browser settings to block, delete, or manage cookies on a site-by-site basis. Please note that disabling essential cookies may affect the functionality of our website.

10. Children's Privacy

Our website and services are directed at business professionals and are not intended for use by individuals under the age of eighteen years. We do not knowingly collect, solicit, maintain, or process personal information from children under the age of thirteen. If we become aware that we have inadvertently collected such information, we will take immediate steps to delete it from our records.

11. International Data Transfers

Star Fir Technology is headquartered in Hong Kong, and our primary data processing activities may occur in Hong Kong, the United States, and other jurisdictions where our service providers or clients maintain operations. If you are visiting our website or using our services from outside Hong Kong, please be aware that your information may be transferred to, stored in, and processed within jurisdictions that may have data protection laws differing from those of your country of residence. We implement appropriate safeguards for cross-border transfers as required by applicable law including Hong Kong data protection requirements under the Personal Data (Privacy) Ordinance. By using our website or services, you acknowledge that your information may be subject to the laws of the jurisdictions where processing occurs.

12. Third-Party Services and Links

Our website may contain links to third-party websites that are not owned, operated, or controlled by Star Fir Technology. These links are provided for your convenience and informational purposes only. We are not responsible for the privacy practices of any third-party websites. When engaging third-party service providers, we conduct due diligence to assess their data protection practices and enter into written agreements that impose data protection obligations consistent with this Privacy Policy.

13. Do Not Track Signals

Our website does not currently take action to respond to browser-based Do Not Track signals, as there is no universally adopted standard for how such signals should be interpreted. We continue to monitor developments in this area. You may manage your tracking preferences through the cookie controls described in Section 9 of this Privacy Policy or through your browser settings.

14. Data Breach Notification

In the event of a security incident that results in unauthorized access to, disclosure of, or loss of personal information under our control, we will execute our incident response procedures to contain the incident, assess the scope and impact, and notify affected individuals and relevant regulatory authorities in accordance with the Personal Data (Privacy) Ordinance of Hong Kong and other applicable legal requirements. Notifications will include a description of the incident, affected categories, likely consequences, and measures taken to address and mitigate the breach.

15. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time and from time to time. Material changes will be posted with a new Last Updated date and, where required by applicable law, additional notice such as a prominent notification on our website or a direct email to individuals with whom we have an established relationship. We encourage periodic review.

16. Contact Us About Privacy

STAR FIR TECHNOLOGY LIMITED
Attn: Privacy Officer
Room 01, 26/F, Working View Commercial Building
21 Yiu Wah Street, Causeway Bay
Hong Kong

Email: contact@starfir.store
Phone: +1 (507) 832-4918

The Star Fir Technology engineering team developed this website with data privacy as a foundational summit stone of our practice.