Privacy Policy

Protecting You, One Byte at a Time…

1. Information About Us

Company Name: Grant Lloyd Industries Limited (trading as Grant Lloyd)
Registration Number: Hong Kong Company No. 12084472
Registered Address: 9th Floor, Java Commercial Centre, 128 Java Road, North Point, Hong Kong
Data Protection Officer (DPO): Fred Lui
Contact Email: [email protected]
Postal Address: 9th Floor, Java Commercial Centre, 128 Java Road, North Point, Hong Kong

2. Scope of This Notice

This Privacy Policy applies when we collect, hold, and process your personal data during your interactions with Grant Lloyd. For example, this includes our website, client communications, and service delivery. Furthermore, it outlines our operational practices and your rights under applicable regulations, such as the EU General Data Protection Regulation (GDPR) and the Hong Kong Personal Data (Privacy) Ordinance (PDPO).

3. What Is Personal Data?

“Personal data” refers to any information relating to an identified or identifiable natural person. This includes direct identifiers (such as your name, business email, and phone number) as well as indirect identifiers (such as IP addresses, device signatures, and online tracking credentials).

4. Your Statutory Rights

Under applicable data protection laws, you maintain the following rights regarding your personal information:

Right to be Informed: The right to clear, transparent information about how your personal data is collected and processed.
Right of Access: The right to request copies of the personal data we hold about you (Part 10).
Right to Rectification: The right to request the prompt correction of inaccurate or incomplete data.
Right to Erasure (“Right to be Forgotten”): The right to request the deletion of your personal data where no legal override applies.
Right to Restrict Processing: The right to request that we limit how your personal data is processed under specific circumstances.
Right to Object: The right to object to data processing carried out for legitimate business interests or direct marketing purposes.
Right to Data Portability: The right to receive personal data provided to us in a structured, commonly used machine-readable format.

To exercise any of these rights, please contact our Data Protection Officer using the details in Part 13.

5. Personal Data We Collect

Depending on the nature of your interaction with us, we may collect and process the following categories of information:

Contact Information: Full name, business email address, telephone number, and mailing address.
Professional Credentials: Job title, department, company name, and industry focus.
Account & Communication Records: Inquiries, technical briefs, feedback, and email correspondence.
Transaction & Financial Data: Billing details, service records, and payment confirmations required to execute commercial contracts.
Technical & Usage Data: IP addresses, browser types, operating systems, session duration, and website browsing metrics.

6. How We Use Your Personal Data

We only process personal data when supported by a lawful legal basis:

Contractual Necessity: Delivering services, managing client accounts, and fulfilling operational agreements.
Legitimate Interests: Communicating regarding active ongoing inquiries, improving service delivery, maintaining security, and optimising site performance.
Legal Compliance: Fulfilling statutory, accounting, and regulatory obligations.
Consent & Communications: Sending promotional materials or industry insights where explicit consent has been granted. You can opt out at any time using the “unsubscribe” link in our communications or by contacting us directly.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the operational, statutory, and accounting purposes for which it was originally collected. Once personal data is no longer required, it is securely destroyed or permanently anonymised.

8. International Data Transfers

As a Hong Kong entity serving global clients, we may store or transfer your personal data outside the European Economic Area (EEA) or the United Kingdom. However, we implement appropriate safeguards – such as Standard Contractual Clauses (SCCs) – to ensure consistent data protection standards.

9. Data Sharing & Third Parties

We do not sell, rent, or trade personal data. We may share information with trusted third-party service providers acting on our behalf under strict data processing agreements:

Operational Service Providers: Third parties assisting with IT infrastructure, website hosting, analytics providers, payment processing, and email communication systems.
Legal & Regulatory Obligations: Authorities, courts, or law enforcement bodies when disclosure is required by law, court order, or regulatory mandate.

10. Subject Access Requests (SARs)

You may request access to the personal data we hold about you at any time.

Submission Process: Send a written request to [email protected] with the subject line “Subject Access Request”.
Fees: We process subject access requests free of charge. However, if a request is manifestly unfounded or excessive, we may apply an administrative fee.
Response Timelines: We respond to verified requests within one calendar month. Complex requests may require up to two additional months, and we will inform you if an extension becomes necessary.

11. Cookies & Tracking Technologies

Cookies are small text files placed on your device when you visit our website. They help the website function efficiently, analyse visitor usage, and deliver tailored content.

Cookie Category	Purpose	Legal Basis
Strictly Necessary	Essential for navigating the site and core functionality (e.g., security, form submissions).	Legitimate Interest
Performance & Analytics	Collects aggregate data on website usage, page views, and traffic sources to help us optimise speed and usability.	Consent
Functional Cookies	Remember user choices (e.g., language or region settings) to provide enhanced features.	Consent

You can accept or decline non-essential cookies via our website cookie consent banner upon your first visit. Additionally, you can configure your web browser settings to block or delete cookies at any time. Please note that blocking essential cookies may affect site functionality.

12. Google Analytics Disclosure

Our website uses Google Analytics, a web analytics service provided by Google LLC (“Google”). Google Analytics uses cookies to help us evaluate how users interact with our website, compile report activity, and optimise site speed and Search Engine Optimisation (SEO).

Data Collected: Cookies transmit information about your site usage directly to Google servers in the United States and other regions.
IP Anonymisation: We utilise IP anonymisation features so that Google truncates your IP address before storage.
Data Privacy & Sharing: Google acts as our data processor and uses this information solely on our behalf. Google will not associate your IP address with any other data held by Google.
Opting Out: You can prevent Google Analytics from collecting data by installing the Google Analytics Opt-out Browser Add-on or by declining analytical cookies on our banner.

For more information on how Google collects and processes data, please review Google’s Privacy & Terms.

13. Contact Information

For inquiries regarding this policy, updates to your personal records, or to exercise your legal data rights, contact our Data Protection Officer:

Attention: Fred Lui (Data Protection Officer)
Subject Line: Data Privacy / GDPR Inquiry
Email: [email protected]
Postal Address: 9th Floor, Java Commercial Centre, 128 Java Road, North Point, Hong Kong

14. Changes to This Privacy Notice

We reserve the right to update this Privacy Notice to reflect changing legal requirements or operational updates. Consequently, we will publish revised versions directly on this website with an updated revision date.

Let’s Talk!

If you need a reputable Quality Control Service, please get in touch with us. We’d be delighted to help you.