A clear record of how data is used.

Scope

This policy applies to the AI Concept Studio website and WhatsApp or email enquiries opened from it. External websites, messaging platforms, social platforms, and third-party services have their own privacy arrangements.

Information we may handle

The current site has no contact form or account system. When you contact us through WhatsApp or email, the information you provide is sent through the relevant third-party messaging or email service.

• Your name, company, role, contact details, enquiry content, and attachments when you provide them.
• Information shared while we understand a need, prepare a proposal, or arrange work.
• Basic technical records generated by hosting or security services, such as IP address, browser, device, request time, visited path, and error records.
• Website analytics such as visited pages, language, service category, referring sites, and clicks on WhatsApp or email links.

How we use information

We use information only for purposes directly related to why it was collected. We do not sell personal data or use enquiry information for unrelated direct marketing without separate consent.

• Respond to, assess, and follow up an enquiry.
• Prepare proposals, quotations, work arrangements, and deliverables.
• Maintain site security and reliability, diagnose errors, and prevent abuse.
• Understand which content and services are useful and improve navigation and enquiry routes.
• Meet applicable legal, accounting, contractual, or legitimate-rights requirements.

Service providers and disclosure

Information may be processed by providers supporting website hosting, security, messaging, email, file handling, or professional services. We disclose it to others only where needed for the relevant work, where you have agreed, or where required by law. Some providers may operate infrastructure outside Hong Kong. Third-party platforms such as WhatsApp maintain their own data-handling arrangements.

Retention and security

We keep information only for as long as needed to complete the original purpose, manage work, or meet legal and accounting needs, then take reasonable steps to delete or de-identify it. We use reasonably practicable safeguards against unauthorised access, loss, misuse, or disclosure, but no internet transmission can be guaranteed risk-free.

GA4 event-data retention is currently set to 2 months and user-data retention to 14 months. New activity resets the retention period for that user. Google deletes expired data through its scheduled process. These settings apply to the relevant user-level and event-level data; they do not limit retention of standard aggregated reports or define browser-cookie expiry.

Cookies and technical data

This website uses Google Analytics 4 (GA4) to measure page views, service views, and clicks on contact links. When analytics is on, Google may use first-party cookies such as _ga to distinguish browsers and report usage, and process related technical information through its infrastructure. GA4 is managed through Google Tag Manager, with Google Signals and advertising personalisation signals disabled.

GA4 analytics is on by default and starts when the page loads. You can turn it off below; the preference is saved in this browser’s local storage. GA4 collection also respects your browser’s Do Not Track or Global Privacy Control signal. Turning it off stops this site’s GA4 measurement and clears the site’s accessible GA cookies. You will need to choose again if you clear browser data or use another browser.

Our custom analytics events record page and contact-link context. They do not read or send your WhatsApp messages, email contents, or attachments. A contact-link click does not mean you have submitted an enquiry. Hosting and security services may still process technical records needed to deliver, protect, or diagnose the website.

Cloudflare provides website hosting, content delivery, and security. Cloudflare Web Analytics / RUM also measures page visits and loading performance; that measurement and security records operate independently of the GA4 control below. Website fonts are served by this site without separate requests to Google Fonts.

How Google uses information from sites that use its services

Access, correction, and questions

You may ask whether we hold personal data about you and request access or correction under the Personal Data (Privacy) Ordinance. Email cs@aiconceptstudio.online with enough detail for us to verify your identity and locate the record. Applicable legal limitations and exemptions remain in effect.

Policy updates

We may update this policy when site features, providers, or legal requirements change. The current version will appear on this page with its update date.