Privacy Policy

1. Data We Collect

Inquiry data. When you submit our contact form or email us, we collect your name, company name, email address, website URL, the service you are interested in, and the content of your message.

Client engagement data. For clients, we process business contact details, account and platform access credentials, order and transaction records, supplier and cost records, and correspondence relating to the engagement.

End-customer data processed on a client's behalf. When we operate a client's store or provide customer support, we process end-customer data such as name, delivery address, contact details and order details. We act as a processor on the client's instructions; the client remains the controller of that data.

Website usage data. Our web server records standard technical information such as IP address, browser type and pages requested, for security and operational purposes.

2. How and Why We Use Data

To respond to inquiries and prepare proposals; to deliver the services set out in a service agreement; to process and fulfill orders and provide customer support; to purchase inventory and services on a client's behalf and reconcile those costs; to produce performance and cost reporting; to maintain accounting records; and to comply with legal obligations.

We do not sell personal data, and we do not use inquiry data for unrelated marketing.

3. Third-Party Processors

We share personal data with third parties only as needed to deliver the services. Categories include: suppliers and manufacturers, logistics and shipping carriers, ecommerce platforms (such as Shopify and WooCommerce) and marketplaces, advertising platforms (Meta, Google, TikTok), specialist media partners engaged under our supervision, payment and banking providers, and business software providers such as email, storage and helpdesk tools.

These providers process data for the purposes we specify and are required to apply appropriate confidentiality and security measures. Some of these providers operate outside Hong Kong, which means personal data may be transferred across borders in the course of delivering the services.

4. Retention

Inquiry data is retained for [PLACEHOLDER] unless the inquiry becomes an engagement. Client engagement records, including reconciliation statements and supporting invoices, are retained for the period required by applicable accounting and tax rules, being at least [PLACEHOLDER] after the end of the engagement.

End-customer data processed on a client's behalf is returned or deleted at the end of the engagement in accordance with the client's instructions, except where retention is required by law.

5. Your Rights

Subject to applicable law, including the Hong Kong Personal Data (Privacy) Ordinance, you may request access to the personal data we hold about you, request correction of inaccurate data, request deletion where we are not required to retain it, and object to or restrict certain processing.

Where we process data on behalf of a client as a processor, requests from end-customers are directed to that client as the data controller, and we support the client in responding.

To exercise a right, email us at Support@signatureink.co. We respond within the period required by applicable law.

6. Security

We apply access controls, credential management and confidentiality obligations for staff and contractors handling personal data. Access to client accounts is limited to team members who require it to perform the services. No method of transmission or storage is completely secure, but we take reasonable measures appropriate to the risk.

7. Cookies

This website does not set marketing or tracking cookies. If analytics or tracking is added in future, this policy will be updated and, where required, consent will be requested before such cookies are set.

8. Changes to This Policy

We may update this Privacy Policy from time to time. The current version is always published on this page with its effective date.