Last updated: September 2026 · Effective date: May 2025
CrossSpace ("we", "us", or "our") is committed to protecting your personal data in accordance with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong ("PDPO") and applicable data protection laws. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website or engage our services.
1. About Us
CrossSpace is a technology company incorporated in Hong Kong, providing AI technology consulting and development services. Our registered contact email is [email protected].
2. Information We Collect
We may collect the following categories of personal data:
- Contact Information: Name, email address, company name, and job title when you contact us or submit an inquiry.
- Communication Data: The content of messages, emails, or other communications you send to us.
- Usage Data: technical information generated when you visit our website, such as IP address, browser type and pages viewed. IP addresses are processed by our hosting provider in order to deliver and secure the site; our analytics reporting is aggregated and does not identify individuals.
- Business Information: Information you provide about your company, industry, and business requirements during consultations.
We do not collect sensitive personal data (such as financial account numbers, health information, or government identification numbers) through this website.
3. How We Use Your Information
We use your personal data for the following purposes:
- To respond to your inquiries and provide information about our services;
- To prepare and deliver technology consulting proposals and project scopes;
- To manage and fulfill contractual obligations in connection with our services;
- To improve our website and services through aggregated analytics;
- To comply with applicable laws and regulations;
- To communicate with you about updates, service changes, or relevant information (with your consent where required).
4. Legal Basis for Processing
We process your personal data on the following legal bases:
- Contractual necessity: Processing required to fulfill a contract or take pre-contractual steps at your request;
- Legitimate interests: Processing necessary for our legitimate business interests, such as responding to inquiries and improving our services;
- Consent: Where you have provided explicit consent for specific processing activities;
- Legal obligation: Processing required to comply with applicable laws.
5. Data Sharing and Disclosure
We do not sell, rent, or trade your personal data to third parties. We may share your information in the following limited circumstances:
- Service Providers: Trusted third-party service providers who assist in operating our website or delivering our services (e.g., cloud hosting, analytics), subject to confidentiality obligations;
- Legal Requirements: When required by law, court order, or governmental authority;
- Business Transfers: In connection with a merger, acquisition, or sale of assets, where personal data may be transferred as part of the transaction;
- With Your Consent: For any other purpose with your explicit consent.
6. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Specifically:
- Inquiry and contact data: retained for up to 2 years from last contact;
- Client engagement data: retained for the duration of the engagement plus 7 years for legal and accounting purposes;
- Website analytics data: retained in aggregated, anonymized form.
7. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit (TLS/SSL);
- Access controls limiting data access to authorized personnel;
- Regular review of our security practices.
While we take reasonable precautions, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.
8. Your Rights Under PDPO
Under the Personal Data (Privacy) Ordinance (Cap. 486), you have the right to:
- Access: Request a copy of the personal data we hold about you;
- Correction: Request correction of inaccurate or incomplete personal data;
- Opt-out: Opt out of direct marketing communications at any time.
To exercise these rights, please contact us at [email protected]. We will respond within 40 days as required by the PDPO.
9. Cookies and Tracking
Our website may use cookies and similar tracking technologies to improve your browsing experience and analyze website traffic. These may include:
- Essential cookies: Necessary for the website to function properly;
- Website analytics: we use a privacy-focused analytics service (Cloudflare Web Analytics) that sets no cookies and does not track individuals across sites. It reports aggregated page views and referrers only.
You can control cookie settings through your browser. Disabling certain cookies may affect website functionality.
10. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.
11. International Data Transfers
CrossSpace is based in Hong Kong. If you are accessing our website from outside Hong Kong, please be aware that your information may be transferred to and processed in Hong Kong or other jurisdictions where our service providers operate. We take steps to ensure that such transfers comply with applicable data protection requirements.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will post the updated policy on this page with a revised "Last updated" date. We encourage you to review this policy periodically.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
CrossSpace
Email: [email protected]
Location: Hong Kong