What we collect when you send us an enquiry, why we hold it, who else sees it, how long we keep it, and how to ask us to change or delete it.
This policy describes how we collect, use and protect your personal data when you visit www.kawaygroup.com or contact us through it. The data controller is Kaway Group Limited.
This policy covers personal data collected through the website. We process it in accordance with the data protection law that applies to you: the General Data Protection Regulation, Regulation (EU) 2016/679, for visitors in the European Economic Area, the UK GDPR for visitors in the United Kingdom, and the Personal Data (Privacy) Ordinance, Cap. 486, in Hong Kong.
The form asks for your name and email address, which are required, and for your company if you want to give it. You then describe what you need, and you may add the quantity, the reader or lock system you use, an approximate delivery date, a file with your artwork or a specification up to 10 MB, and a link to a file held somewhere else.
Please send only what is needed to answer your enquiry. The form is not the place for confidential technical documentation or for anyone else's personal data. If you share a link instead of a file, the service hosting it is outside our control and its own terms apply.
If you write to us directly, we hold your message, your address and anything you attach, for as long as we need it to deal with the matter.
Our hosting provider records standard technical data in its server logs when a page is requested: the IP address, the browser and device type, the page requested and the time. This is used to deliver the site, to keep it secure and to detect abuse. We do not run analytics on this website, we build no profile of you and we do not track you across other sites. See our Cookies policy.
We will not use your data for a purpose that is incompatible with these without telling you first.
We do not sell your personal data and we do not share it for advertising. We use a small number of service providers to run the website and to communicate with you:
Each acts as a processor on our instructions, under a contract that requires it to protect the data and to use it only for the service it provides. Within Kaway Group, access is limited to the people who need it to answer you.
We also disclose data where the law, a court or a competent authority requires it. If the business is ever sold or merged, data may pass to the acquirer, who would be held to the commitments made here.
Kaway Group Limited is established in Hong Kong and some of our providers are in the United States, so your data is transferred internationally.
For visitors in the EEA and the United Kingdom, where a transfer goes to a country that has not been recognised as offering an adequate level of protection, we rely on appropriate safeguards: the Standard Contractual Clauses approved by the European Commission, the UK addendum where it applies, or the recipient's certification under the EU-U.S. Data Privacy Framework. You can ask us for details of the safeguards used by writing to hello@kawaygroup.com.
After the applicable period the data is deleted or anonymised.
If you are in the European Economic Area or the United Kingdom you have the right to ask for access to your personal data, to have it corrected, to have it erased, to restrict how we use it, to receive it in a portable format, and to object to processing based on our legitimate interest. Where processing rests on consent, you can withdraw it at any time, which does not affect what was done before.
In Hong Kong, the Personal Data (Privacy) Ordinance gives you the right to ask whether we hold data about you, to obtain a copy and to request correction.
Write to hello@kawaygroup.com to exercise any of these. We answer within one month, and we may ask you to confirm your identity first so that we do not disclose your data to somebody else.
If you are not satisfied with our answer, you can complain to the data protection authority of the country where you live or work. In Hong Kong this is the Office of the Privacy Commissioner for Personal Data.
We apply technical and organisational measures appropriate to the risk: encrypted connections, access limited to the people who need it, and providers chosen for their own security standards. No transmission over the internet and no method of storage can be guaranteed completely secure, and we will tell you and the relevant authority if a breach ever requires it.
Some browsers send a Do Not Track signal. There is no agreed standard for how a website should respond to one, so we do not act on it. In practice it changes nothing here, because this website does not track you.
This is a business to business website and it is not directed at children under 16. We do not knowingly collect data from them. If you believe a child has sent us personal data, write to hello@kawaygroup.com and we will delete it.
We may update this policy as our practices or the legal framework change. The date at the top shows the latest revision, and we recommend you look at it from time to time.
For any question, request or complaint about this policy or about how we handle your personal data, write to hello@kawaygroup.com or to Kaway Group Limited, Room 2105, SH2822, Trend Centre, 29-31 Cheung Lee Street, Chai Wan, Hong Kong.