Privacy Policy

1. Who we are

Chillax Techie is a web design and development studio based in Hong Kong. For the personal data described in this policy, we act as the data user under the PDPO.

If you have any question about this policy or about your personal data, email us at [email protected].

2. Personal data we collect

We collect only what we need to provide the service. Depending on how you use the site, that may include:

• Contact details: name, email address, phone or WhatsApp number — provided by you in a conversation, form, or enquiry.
• Enquiry content: the messages you exchange with the AI consultant on this site, and the project brief derived from that conversation (industry, page count, features, style preferences).
• Engagement data: the plan, amount, and status of your order, plus the company details, copy, images, and other files you submit through the onboarding form.
• Marketing consent records: whether you opted in to email or WhatsApp marketing, when and where you opted in, and any unsubscribe you have made.
• Technical and usage data: browser type, referrer, page views, and interaction events. For this site's short-link statistics, a visitor is identified by a salted hash — we do not store raw IP addresses.

We do not collect your card number. Payments are handled directly by Stripe; card details never pass through our servers and are never stored in our database.

We do not intentionally collect sensitive personal data. Please do not put HKID numbers, bank account details, or health information into a chat message or an uploaded file — none of it is needed to deliver the service.

3. How we use it

We use your personal data to:

• respond to enquiries, prepare quotations, and generate the website preview you asked for;
• deliver the engagement — design, build, and hand over the site, and arrange the related domain and hosting;
• process payments, issue receipts, and keep transaction records;
• contact you about the progress of your project (service messages, not marketing);
• send you marketing about our web design, SEO, and GEO services where you have consented;
• improve the content and flow of this site and our services; and
• comply with applicable legal, accounting, and tax obligations.

4. Cookies and analytics

This site uses Google Analytics 4 to understand how visitors use it — which pages get read, which channels visitors arrive from. Google Analytics sets cookies on your device and collects usage data.

You can refuse or delete cookies in your browser settings, or install Google's Google Analytics Opt-out Browser Add-on. The site's core functionality continues to work if you do.

5. Who we share it with

We do not sell your personal data. We disclose it only to the service providers we need to run the service:

• Google Cloud (including Gemini models on Vertex AI) — to operate our AI consultation chat and website preview generation;
• Stripe — to process payments;
• Mailgun — to send service notifications and, where you have consented, marketing email;
• Cloudflare — for content delivery and site security;
• Google Analytics — for site usage analytics.

We may also disclose personal data where required by law, a court order, or a regulator.

6. Cross-border transfers

Some of the providers above operate servers outside Hong Kong. Specifically, our AI chat and preview generation are processed in Google Cloud's United States region (us-central1). By using the service you understand and agree to this necessary cross-border processing.

7. Direct marketing

Under Part VIA of the PDPO, we use your name, email address, and phone number to market our web design, SEO, and GEO services only after you have consented.

Every marketing email carries an unsubscribe link that takes effect immediately, and any WhatsApp marketing can be stopped on request. You can also email [email protected] at any time to stop all marketing communications. We do not charge for this.

8. Data retention

We keep personal data only as long as the purpose it was collected for requires:

• AI-generated website previews expire automatically 48 hours after they are generated;
• enquiries and chat records that do not become engagements are deleted once they are no longer needed after our last contact;
• order and payment records are kept for 7 years to meet Hong Kong tax and accounting requirements;
• unsubscribe records are kept indefinitely, so that we do not market to you again.

9. Security

The whole site is served over HTTPS, and our database and file storage are restricted to authorised personnel. We take reasonable physical, technical, and administrative measures to protect personal data, but no transmission over the internet can be guaranteed to be completely secure.

10. Your rights

Under sections 18 and 22 and Data Protection Principle 6 of the PDPO, you have the right to:

• ask whether we hold personal data about you, and request a copy;
• request correction of inaccurate personal data;
• withdraw a direct marketing consent you gave earlier; and
• request deletion of personal data that is no longer needed.

Send your request to [email protected]. We will respond within 40 days of receiving it. For a data access request, the PDPO allows us to charge a fee not exceeding cost; we will tell you before any fee applies.

If you believe we have handled your personal data in a way that does not comply with the PDPO, you may complain to the Office of the Privacy Commissioner for Personal Data, Hong Kong.

11. Third-party links

This site may link to third-party websites. We do not control and are not responsible for their privacy practices; please read their own policies.

12. Children

This service is aimed at businesses and commercial users, not at people under 18. We do not knowingly collect personal data from children.

13. Changes to this policy

We may update this policy from time to time. The updated version, with a new “last updated” date, will be posted on this page; if a change is significant, we will also notify clients with an active engagement by email.

14. Contact us

For privacy enquiries, email: [email protected]