1. Introduction
This Privacy Policy explains how Hong Kong TruvelTang Co., Limited, referred to throughout this document as the Company, we, us or our, collects, uses, stores, discloses and protects personal information when you visit our website at https://www.zhihao.buzz or when you interact with our services. The Company operates in the Computer Systems Design and Related Services industry and provides computer integrated systems design, engineering and technical consulting services. This policy has been prepared with the support of our development team, which operates under the developer name TruvelTang, and it reflects our commitment to handling personal information responsibly and transparently.
By accessing our website or using our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described here, please do not use our website or provide us with personal information. We encourage you to review this policy periodically, because our practices and applicable law may change over time.
We have written this policy in plain language so that it is easy to understand. Where we rely on a legal term, we explain what that term means in practical terms. Our goal is to make sure that you know what information we hold, why we hold it, and what choices you have about how it is used.
2. Who We Are
The Company is Hong Kong TruvelTang Co., Limited, a company engaged in computer systems design and related services. Our registered business address is Rm 12 6/F THE CLOUD, 111 TUNG CHAU ST, Tai Kok Tsui, Hong Kong (HK). For the purposes of applicable data protection law, we act as the controller of the personal information that we collect through this website and through our business activities.
Our team provides systems architecture, cloud infrastructure engineering, data engineering, cybersecurity and integrated systems support. In the course of providing these services, we may receive personal information about our clients, their employees, prospective customers and visitors to our website. This policy describes how we handle that information across all of these relationships.
If you have any questions about who we are, how we process personal information or how to exercise your rights, you may contact us using the details provided in the Contact Us section at the end of this policy.
3. Information We Collect
We collect several categories of information, only as needed to operate our website and to provide our services. The types of information we collect depend on how you interact with us, and we aim to limit collection to what is necessary for the relevant purpose.
Information you provide directly
When you contact us, request information or engage our services, you may provide us with personal information such as your name, email address, telephone number, company name, job title and the contents of your messages. If you enter into a service agreement with us, we may also collect billing details and other information needed to deliver the agreed services.
Information collected automatically
When you visit our website, our systems may automatically record certain technical information, including your internet protocol address, browser type and version, device type, operating system, referring pages, pages viewed, the dates and times of your visits and other diagnostic data. This information is generally collected in aggregate or pseudonymous form and is used to maintain the security and performance of the website.
Information from third parties
In some cases we may receive information about you from third parties, such as analytics providers, business partners or public sources, where permitted by law. We combine this information only to the extent necessary to improve our services and to understand how our website is used.
4. How We Collect Information
We collect personal information through a number of methods. The most common method is direct collection, which occurs when you submit a form on our website, send us an email, call us or communicate with us through any other channel. Direct collection also occurs when you provide information in connection with a proposal or a service engagement.
We also collect information through automated technologies, including cookies and similar tools that track how visitors use our website. These technologies help us understand which pages are useful, identify technical problems and protect the website against abuse. Further details about our use of cookies are provided in the Cookies and Tracking section below.
Finally, we may collect information from publicly available sources or from service providers who assist us in operating our business. Whenever we collect information from a source other than you, we do so in accordance with applicable law and we take reasonable steps to ensure that the information is relevant and accurate.
5. How We Use Information
We use the personal information we collect for a range of legitimate business purposes. These purposes include providing, maintaining and improving our services, responding to your inquiries, managing our client relationships, and complying with our legal obligations.
Providing and improving services
We use personal information to deliver the systems design and engineering services you request, to communicate with you about projects, to troubleshoot technical issues and to develop and improve our offerings. Information about how our website is used helps us refine content and user experience.
Communication and support
We use your contact information to respond to questions, send you information you have requested and provide support. If you have opted in to receive communications from us, we may send you updates about our services. You may withdraw your consent to marketing communications at any time.
Security and legal compliance
We use technical and diagnostic information to protect the security and integrity of our website and systems, to detect and prevent fraud or abuse, and to meet our legal and regulatory obligations. We may also process information to establish, exercise or defend legal claims.
6. Legal Bases for Processing
Where applicable data protection law, such as the General Data Protection Regulation, applies, we rely on one or more legal bases to process personal information. The relevant basis depends on the purpose of the processing and on your relationship with us.
Consent
We rely on your consent when you choose to provide information for a specific purpose, such as subscribing to communications or submitting an inquiry. You may withdraw consent at any time, and withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
Performance of a contract
We process personal information where it is necessary to perform a contract with you or to take steps at your request before entering into a contract, such as preparing a proposal or delivering an agreed service.
Legitimate interests
We may process personal information where it is necessary for our legitimate interests or those of a third party, provided those interests are not overridden by your rights and freedoms. Examples include improving our services, ensuring the security of our systems and managing our business operations.
Legal obligation
We process personal information where we are required to do so by law, including for tax, accounting and regulatory reporting purposes.
9. Data Retention
We retain personal information only for as long as is necessary to fulfill the purposes for which it was collected, to satisfy our legal and contractual obligations, or as otherwise permitted by law. The retention period depends on the type of information and the purpose for which it is held.
For example, information provided in connection with a service engagement is generally retained for the duration of the engagement and for a reasonable period afterward to meet accounting, tax and legal requirements. Inquiry and contact information is retained for as long as needed to respond to you and to manage our business relationship, after which it is securely deleted or anonymized.
When personal information is no longer required, we take reasonable steps to securely delete or destroy it, or to anonymize it so that it can no longer be associated with an individual.
10. Data Security
We take the security of personal information seriously and implement appropriate technical and organizational measures to protect it against unauthorized access, disclosure, alteration and destruction. These measures are reviewed and updated as our systems and the threat landscape evolve.
Our safeguards include access controls, encryption in transit, secure development practices and regular review of our systems. Access to personal information is limited to personnel and service providers who require it to perform their duties, and they are bound by confidentiality obligations.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security. However, we work continuously to protect the information entrusted to us and to respond promptly to any suspected security incident in accordance with applicable law. In the event of a data breach, we will assess the risk to affected individuals and, where required, notify the relevant individuals and authorities in a timely manner.
We also require our service providers to implement comparable safeguards and to notify us promptly of any security incident affecting personal information that we have entrusted to them. We periodically review our vendors and our own internal controls to ensure that security practices remain appropriate to the sensitivity of the information we handle.
11. International Transfers
The Company is based in Hong Kong, and our website and services are operated from Hong Kong. If you access our website from outside Hong Kong, please be aware that your personal information may be transferred to, stored and processed in Hong Kong or in other jurisdictions where our service providers operate.
Where personal information is transferred across borders, we take steps to ensure that it receives an adequate level of protection in accordance with applicable law, such as by relying on appropriate safeguards or standard contractual clauses where required. By using our website and services, you consent to the transfer of your information as described in this policy.
12. Your Privacy Rights
Depending on where you are located, you may have certain rights in relation to your personal information. These may include the right to access, correct, delete or restrict the processing of your information, the right to data portability, the right to object to processing and the right to withdraw consent where processing is based on consent.
You may also have the right to lodge a complaint with a supervisory authority if you believe that our processing of your personal information violates applicable law. We would, however, appreciate the opportunity to address your concerns directly before you take that step.
To exercise any of these rights, please contact us using the details in the Contact Us section. We will respond to your request within the timeframes required by applicable law and may ask you to verify your identity before we act on a request.
Please note that some rights are not absolute and may be subject to exceptions. For example, we may need to retain certain information to comply with legal obligations, to protect the security of our systems or to establish or defend legal claims. Where a request cannot be fulfilled in full, we will explain the reason to you.
13. Privacy for Children
Our website and services are not directed to individuals under the age of eighteen, and we do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without appropriate consent, we will take steps to delete that information as soon as reasonably practicable.
If you are a parent or guardian and believe that your child has provided us with personal information, please contact us using the details below so that we can investigate and take appropriate action.
14. Third Party Links
Our website may contain links to websites operated by third parties. This Privacy Policy applies only to our website, and we are not responsible for the privacy practices or content of any third party website. We encourage you to review the privacy policies of any third party websites you visit.
The inclusion of a link does not imply our endorsement of the linked website or its operators. If you follow a link to a third party website, any information you provide to that website is subject to that website privacy policy, not to this one.
15. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements or other factors. When we make material changes, we will update the policy on this page and adjust the effective date shown at the end of the document.
We encourage you to review this policy periodically to stay informed about how we protect your information. Your continued use of our website after any changes to this policy will constitute your acknowledgment of the updated policy.
16. Contact Us
If you have any questions, concerns or requests regarding this Privacy Policy or our handling of personal information, please contact us using the details below. We will make every effort to respond to your inquiry promptly.
- Company: Hong Kong TruvelTang Co., Limited
- Address: Rm 12 6/F THE CLOUD, 111 TUNG CHAU ST, Tai Kok Tsui, Hong Kong (HK)
- Email: support@zhihao.buzz
- Phone: +14017354772
- Website: https://www.zhihao.buzz
Effective date: August 2026