1. Introduction
NEXYRA LIMITED ("we", "us", "our", or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.
Company Registration: BR No. 80324157 | Jurisdiction: Hong Kong S.A.R.
2. Information We Collect
2.1 Personal Information
We collect personal information that you voluntarily provide, including:
- Full name, email address, phone number
- Company name and business information
- Billing and delivery addresses
- Payment information (processed securely by third-party providers)
- Service preferences and inquiry details
- Communications you send us (emails, contact form submissions)
2.2 Automatically Collected Information
When you visit our website, we automatically collect:
- Browser type, IP address, device information
- Pages viewed, time spent on site, referral source
- Cookies and similar tracking technologies
- General geographic location (city-level)
3. How We Use Your Information
We use collected information for:
- Providing, improving, and personalizing our services
- Processing orders, payments, and service agreements
- Communicating with you about your account or service inquiries
- Sending marketing materials (with your consent)
- Analytics and website optimization
- Compliance with legal and regulatory obligations
- Fraud prevention and security
4. Legal Basis for Processing
Under GDPR and Hong Kong Privacy Ordinance, we process personal data on the following grounds:
- Contractual necessity: To fulfill service agreements
- Legitimate interests: Business operations, security, fraud prevention
- Consent: For marketing communications and optional analytics
- Legal obligation: Compliance with tax and regulatory requirements
5. Data Sharing & Disclosure
We do not sell or rent your personal information. We may share data with:
- Service providers: Payment processors, hosting providers, email services (bound by strict confidentiality agreements)
- Legal requirements: When required by law or to protect rights and safety
- Business transfers: In the event of acquisition or merger
All third-party providers are located in jurisdictions compliant with GDPR and international data protection standards.
6. Data Retention
We retain personal data as follows:
- Service account data: For the duration of your subscription, plus 7 years for tax/compliance purposes
- Contact form inquiries: 2 years unless converted to a service agreement
- Marketing preferences: Until you opt out
- Website analytics: 12 months (aggregated)
7. Your Rights
You have the following rights regarding your personal data:
- Right to access: Request a copy of data we hold about you
- Right to rectification: Correct inaccurate or incomplete information
- Right to erasure: Request deletion of your data (subject to legal retention requirements)
- Right to restrict processing: Limit how we use your data
- Right to data portability: Receive data in a portable format
- Right to object: Opt out of marketing or certain processing activities
To exercise these rights, contact us at contact@nexyracastalimited.com. We will respond within 30 days.
8. Cookies & Tracking
Essential Cookies: Required for website functionality (authentication, security). Cannot be disabled.
Analytics Cookies: Help us understand site usage. You can opt out via browser settings or our cookie preference center.
Marketing Cookies: Used to display targeted content. Can be disabled.
We use Google Analytics (configured for GDPR compliance). Data is anonymized and not shared with Google for profiling.
9. Security
We implement industry-standard security measures to protect your information:
- HTTPS/TLS encryption for data in transit
- Encrypted databases for data at rest
- Regular security audits and penetration testing
- Employee access controls and confidentiality agreements
- Incident response procedures
While we strive to protect your data, no method is 100% secure. We cannot guarantee absolute security.
10. International Transfers
Your data may be transferred to and processed in countries outside Hong Kong. Where applicable, we use Standard Contractual Clauses and adequacy decisions to ensure protection equivalent to Hong Kong/EU standards.
11. Children's Privacy
Our services are not directed to individuals under 18. We do not knowingly collect data from children. If we become aware of such collection, we will delete it immediately.
12. Third-Party Links
Our website may contain links to third-party sites. This Privacy Policy does not apply to external websites. We encourage you to review their privacy policies before providing information.
13. Updates to This Policy
We may update this Privacy Policy periodically. Changes will be posted on this page with an updated "Last Updated" date. Continued use of our services constitutes acceptance of the updated policy.
14. Contact Us
For privacy-related questions or to exercise your rights:
- Email: contact@nexyracastalimited.com
- Mail: Unit 2904-05, 29/F, Universal Trade Centre, 3 Arbuthnot Road, Central, Hong Kong S.A.R.
- Phone: +1 660-866-5234
- Data Protection Officer: contact@nexyracastalimited.com
If you believe we have not addressed your concern, you may lodge a complaint with the Office of the Privacy Commissioner for Personal Data (Hong Kong) or your local data protection authority.