WJP Privacy Statement

Introduction

WJP ("we," "us," or "our") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Statement explains how we collect, use, process, and protect your personal data when you visit our website, use our services, or interact with us in any capacity.

This Privacy Statement applies to all personal data processing activities conducted by WJP and complies with applicable privacy laws, including the European Union General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other relevant privacy regulations in the European Economic Area (EEA) and United States.

Data Controller Information

WJP

Hong Kong

Email: info@wjp.comhk

For EEA residents, WJP acts as the data controller for the personal information described in this Privacy Statement.

Personal Information We Collect

Information You Provide Directly

• Contact Information: Name, email address, phone number, company name, job title

• Project Information: Project details, requirements, specifications, and preferences

• Communication Records: Messages, inquiries, feedback, and correspondence

• Business Information: Company details, industry sector, project scope and timeline

• Marketing Preferences: Communication preferences and consent records

Information Collected Automatically

• Website Usage Data: IP address, browser type, device information, pages visited

• Analytics Data: Website performance metrics, user behavior patterns, session duration

• Cookies and Tracking

Information from Third Parties

• Business Partners: Information shared by authorised business partners or referrals

• Public Sources: Publicly available business information for B2B purposes

• Service Providers: Data from authorised third-party service providers

How We Use Your Personal Information

Primary Purposes

• Service Delivery: Providing design, manufacturing, and consultation services

• Project Management: Managing projects, timelines, and client communications

• Customer Support: Responding to inquiries and providing technical assistance

• Contract Management: Processing agreements, invoices, and business transactions

Secondary Purposes

• Business Development: Identifying opportunities and improving our services

• Marketing Communications: Sending relevant updates, newsletters, and promotional materials (with consent)

• Website Improvement: Analyzing usage patterns to enhance user experience

• Compliance: Meeting legal obligations and regulatory requirements

Legal Bases for Processing (EEA)

• Contract Performance: Processing necessary for service delivery and contract fulfillment

• Legitimate Interests: Business operations, fraud prevention, and service improvement

• Consent: Marketing communications and optional data processing activities 

• Legal Obligation: Compliance with applicable laws and regulations

Data Sharing and Disclosure

Authorized Sharing

• Service Providers: Trusted third parties who assist in service delivery (cloud hosting, payment processing, analytics)

• Business Partners: Authorised partners involved in project execution (with your consent)

• Professional Advisors: Legal, financial, and business consultants (under confidentiality agreements)

Legal Requirements

•Regulatory Compliance: When required by law, regulation, or legal process

•Protection of Rights: To protect our rights, property, or safety, or that of others

•Business Transfers: In connection with mergers, acquisitions, or asset sales (with appropriate safeguards)

International Transfers

When transferring personal data outside the EEA or your country of residence, we implement appropriate safeguards including:

•Adequacy Decisions: Transfers to countries with adequate protection levels

•Standard Contractual Clauses: EU-approved contractual protections

•Binding Corporate Rules: Internal data protection standards

•Consent: Where legally required and appropriate

Data Retention

We retain personal information for as long as necessary to fulfill the purposes outlined in this Privacy Statement, unless a longer retention period is required or permitted by law.

Retention Periods

•Active Client Data: Duration of business relationship plus 7 years for legal compliance

•Marketing Data: Until consent is withdrawn or 3 years of inactivity

•Website Analytics: 26 months from collection date

•Communication Records: 7 years for business and legal purposes

Your Privacy Rights

Rights for All Users

• Access: Request information about personal data we hold about you

• Correction: Request correction of inaccurate or incomplete information

• Deletion: Request deletion of personal data (subject to legal obligations)

• Objection: Object to certain types of data processing

Additional Rights for EEA Residents (GDPR)

• Restriction: Request restriction of processing under certain circumstances

• Automated Decision-Making: Protection against solely automated decision-making

• Supervisory Authority: Right to lodge complaints with data protection authorities

Additional Rights for California Residents (CCPA)

• Know: Right to know what personal information is collected and how it's used

• Delete: Right to request deletion of personal information

• Opt-Out: Right to opt-out of the sale of personal information (Note: WJP does not sell personal information)

• Non-Discrimination: Right to non-discriminatory treatment for exercising privacy rights

Exercising Your Rights

To exercise your privacy rights, contact us at:

• Email: info@wjp.comhk 

• We will respond to your request within 30 days (or as required by applicable law).

Data Security

We implement comprehensive security measures to protect your personal information:

Technical Safeguards

• Encryption: Data encryption in transit and at rest

• Access Controls: Role-based access limitations and authentication

• Network Security: Firewalls, intrusion detection, and secure networks

• Regular Updates: Security patches and system updates

Organizational Safeguards

• Staff Training: Regular privacy and security training for employees

• Confidentiality Agreements: Binding confidentiality obligations for all staff

• Incident Response: Procedures for detecting and responding to security incidents

• Vendor Management: Due diligence and contractual protections for third parties

Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance user experience and analyse website performance.

Cookie Categories

• Essential Cookies: Necessary for website functionality

• Analytics Cookies: Help us understand website usage patterns

• Marketing Cookies: Used for targeted advertising (with consent)

• Preference Cookies: Remember your settings and preferences

You can manage cookie preferences through your browser settings or our cookie consent tool.

Children's Privacy

Our services are designed for business use and are not intended for individuals under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information promptly.

Changes to This Privacy Statement

We may update this Privacy Statement periodically to reflect changes in our practices, services, or applicable laws. We will notify you of material changes by:

• Posting the updated Privacy Statement on our website

Jurisdiction-Specific Information

For EEA Residents

This Privacy Statement complies with the GDPR. Your personal data may be processed in countries outside the EEA, but only with appropriate safeguards in place.

For California Residents

This Privacy Statement complies with the CCPA. California residents have specific rights regarding their personal information as outlined in the "Your Privacy Rights" section above.

For Other Jurisdictions

We comply with applicable privacy laws in all jurisdictions where we operate. If you have questions about privacy rights in your specific location, please contact us.

Acknowledgment: By using our website or services, you acknowledge that you have read and understood this Privacy Statement and agree to the collection, use, and disclosure of your personal information as described herein.

Language: This Privacy Statement is available in multiple languages. In case of conflicts between versions, the English version shall prevail.

Effective Date: This Privacy Statement is effective as of 1 January 2023 and replaces all previous privacy statements.