Privacy Policy
Trilogies Ai equipment (Trilogies Computing Co.) Privacy Policy
Effective date: January 1, 2025 Last updated: May 1, 2025
1. Collection and Use of Personal Data
1. Types of Information We Collect
Basic identity information: name, contact information (telephone, email, address).
Transaction information: order records, payment details (credit card/bank account information is processed by a third-party payment platform).
Device and usage data: IP address, device model, operating system, service usage logs (such as AI tool operation records).
Customer service data: maintenance request records, communication records (such as emails and chat records).
2. Purpose of Collection
Fulfilling contractual obligations (e.g. processing orders, providing repair services).
Send product update notifications and subscription renewal reminders.
Optimize product functions (analyze user usage data anonymously).
Legal compliance (such as tax reporting and cooperating with law enforcement agencies).
2. Data Sharing and Disclosure
1. Third-party service providers
Payment processing: Oceanpayment (only necessary transaction information is shared).
Logistics partners: SF Express, Hong Kong Post (share name, address and contact information to complete delivery).
Cloud services: Trilogies Internal Data Centre, AWS Hong Kong Data Centre (storing encrypted user data).
2. Other Disclosure Situations
Legal requests (e.g., court subpoenas, government investigations).
Transfer of corporate assets (such as transfer of customer data during mergers and acquisitions).
3. User Rights
Under the Personal Data (Privacy) Ordinance (PDPO), you have the following rights:
Access and Correction: You may request access to or correction of your personal data (please contact trilogishk@gmail.com ).
Right to erasure: You may request the erasure of your data, provided there is no legal obligation to retain it.
Opt-out of marketing: You can choose to stop receiving promotional information by using the unsubscribe link in the email or contacting customer service.
4. Data Security Measures
1. Technical protection
Transport layer encryption (TLS/SSL) ensures the security of online transactions.
Regular vulnerability scans and system updates.
2. Internal Control
Employees receive privacy protection training.
Strictly limit data access to necessary personnel only.
V. Cookies and Tracking Technology
1. Purpose
Analyze website traffic and save user preferences (such as language settings).
2. Management methods
You can refuse cookies by setting your browser, but this may affect some functions.
VI. Cross-border data transmission
We promise:
All data is stored in Hong Kong or in regions approved by the PDPO (such as AWS Hong Kong servers).
If cross-border transmission is required (such as international logistics), we will ensure that the recipient meets the same protection standards.
VII. Privacy of Minors
Users under the age of 13 must obtain the consent of their guardian before using the service.
If we discover that we have mistakenly received data from minors, we will delete it immediately.
8. Policy Updates and Contact Information
1. Revision Notice
Major changes will be notified to users via official website announcements or emails.
2. Privacy Officer
Email: trilogishk@gmail.com
Mailing address: Trilogies Privacy Department, Room 1404D, 14/F, 80 Hung To Road, Kowloon, Hong Kong
IX. Personal Data Retention Policy
We only retain your personal data for as long as necessary to fulfill the purpose for which it was collected. The retention period will depend on the nature of the data, business needs and legal requirements (such as tax record retention).
For example, transaction records will be retained for 7 years to comply with Hong Kong tax regulations, while customer service records will be retained for 12 months after the issue is resolved.
When the data is no longer required, we will securely delete or anonymize it.
10. Data Protection Impact Assessment (DPIA)
For high-risk data processing activities (such as large-scale data analytics or sensitive data processing), we conduct Data Protection Impact Assessments (DPIAs) to identify and mitigate potential privacy risks and ensure compliance with the PDPO’s guidelines.
11. Data Breach Notification
If a personal data breach occurs, we will notify the Privacy Commissioner for Personal Data (PCPD) and affected users as soon as reasonably practicable.
The notification will include the nature of the breach, the types of data affected, the potential impact, and remedial actions taken or planned.
12. Responsibilities of Third-Party Data Processors
We enter into agreements with third-party data processors (such as payment platforms, logistics providers) to ensure that they comply with the PDPO’s data protection standards.
Third parties only process personal data under our instructions and with appropriate security measures in place.
13. User Consent
We will obtain users' explicit consent before collecting and processing personal data (especially sensitive data such as health data).
You may withdraw your consent at any time, at which time we will cease processing the relevant data (unless otherwise required by law).
14. Data Portability
Users have the right to request access to their personal data in a structured, commonly used and machine-readable format for transfer to another service provider.
Please send your request to trilogishk@gmail.com and we will respond within 30 days.
15. Automated Decision Making
Our services currently do not involve automated decision making or profiling. If there are changes, we will notify users in advance and provide options to object to or challenge such decisions.
16. Complaints and Dispute Resolution
If you have concerns or complaints about our data handling practices, please contact our Privacy Officer at trilogishk@gmail.com.
We will investigate and respond within 30 days. If you are not satisfied with the outcome, you may lodge a complaint with the Privacy Commissioner for Personal Data (PCPD).
17. Privacy Policy Update
We may update this Privacy Policy from time to time. Significant changes will be notified to users through the website or email, and the effective date will be clearly marked.
Please review this policy periodically for the latest information.