Privacy Policy

Melephant ("we") values your personal data privacy. This privacy statement explains how we collect, use, disclose, store, and protect your personal data when you use this website and related services. This statement is intended to comply with the relevant requirements of Hong Kong's Personal Data (Privacy) Ordinance (Chapter 486) ("PDPO").

1. Scope of Application

This statement applies to our processing of personal data when you visit and use this website. Third-party websites, platforms, or services (including those accessed through links on this website) have their own privacy policies, and we are not responsible for their practices.

2. Types of Data We May Collect

We may collect the following data when you voluntarily provide it or during your use of the website (depending on actual functions):

  • Contact information: name, company name, position, email, phone number, mailing address, etc.
  • Communication content: inquiries, opinions, attachments, and related correspondence submitted through forms, email, or other means.
  • Technical and usage data: IP address, browser type, device identifier, operating system, access time, browsing behavior, referral source, error logs, etc.
  • Cookie and similar technology data: used for remembering preferences, statistical analysis, and improving experience (see below for details).

3. Purposes and Uses of Collecting Personal Data

The purposes for which we collect and use personal data may include:

  • Responding to your inquiries, requests, complaints, or providing customer support.
  • Providing, maintaining, and improving website content, functionality, and service quality.
  • Conducting internal statistical analysis, audits, research, and product/service improvements.
  • Protecting website and user security, preventing fraud, abuse, and handling disputes.
  • Sending you information related to our business with your consent (or as permitted by law) (see "Direct Marketing" for details).
  • Complying with applicable laws, regulatory requirements, and legitimate requests from law enforcement agencies.

4. Whether Personal Data Must Be Provided

You may decide whether to provide personal data. However, if you fail to provide certain data, we may not be able to process your requests or provide relevant services to you.

5. Cookies and Similar Technologies

We may use cookies or similar technologies to maintain website operation, remember your preferences, conduct traffic statistics, and improve user experience. You can manage or delete cookies through your browser settings. Please note that if you disable cookies, some website functions may not work properly.

6. Disclosure and Transfer of Personal Data

We will not sell your personal data. We may disclose or transfer personal data in the following circumstances:

  • To suppliers or contractors who provide services to us (e.g., website hosting, IT support, analysis services, communication tools), requiring them to process only within the necessary scope and take reasonable security measures.
  • With your explicit consent, or when necessary to fulfill your request.
  • To comply with laws, court orders, regulatory requirements, or respond to legitimate requests from law enforcement agencies.
  • To protect the rights, property, or safety of us, users, or the public.

If personal data needs to be transferred outside Hong Kong, we will take reasonably practicable measures to ensure the recipient provides a level of protection not lower than that required by the PDPO.

7. Retention Period

We will retain personal data for the period necessary to achieve the collection purpose, or as required by applicable law and business needs. Thereafter, we will take reasonable steps to delete or anonymize it.

8. Security of Personal Data

We will take reasonable technical and organizational measures to protect personal data from unauthorized access, processing, deletion, loss, or use. However, data transmitted over the internet is not absolutely secure, and we cannot guarantee the absolute security of the transmission process.

9. Direct Marketing (if applicable)

If we intend to use your personal data for direct marketing (e.g., sending communications related to our products, services, events, or information), we will obtain your consent or non-objection in accordance with PDPO requirements. You may opt out at any time through the methods we provide.

10. Access and Correction of Personal Data

You may request access to or correction of personal data we hold about you in accordance with PDPO provisions. We may charge a reasonable fee for processing access requests and will respond within the time required by law or a reasonable time.

11. Children's Privacy

This website is not directed at children. If you believe a minor has provided personal data to us, please contact us for handling.

12. Updates to This Statement

We may update this privacy statement from time to time and publish the latest version on this page. We recommend that you review it regularly to understand how we protect your personal data.

13. Contact Us (Data Protection Officer)

If you have any questions about this statement or our privacy practices, or wish to make a request for access/correction of personal data, please contact us through the following methods:

Last updated: 2026-01-31