Privacy Policy

XDK Core Limited (“XDK Core”, “we”, “us”, or “our”) respects your privacy and is committed to handling personal data responsibly and in accordance with applicable data protection laws.

This Privacy Policy explains how we may collect, use, store and protect personal data when you visit our website or communicate with XDK Core Limited.

1. Who We Are

The data controller responsible for the processing described in this Privacy Policy is:

XDK Core Limited
16F, King's Commercial Centre
25 King's Rd
Tin Hau
Hongkong

Phone: +852 9474 9324

General enquiries: sales@xdkcore.com

Industrial equipment: industry@xdkcore.com

Software distribution: software@xdkcore.com

Logistics services: logistics@xdkcore.com

XDK Core Limited is registered in Hong Kong.

2. Scope of This Privacy Policy

This Privacy Policy applies to personal data processed in connection with:

• your use of our website;
• enquiries sent directly to XDK Core Limited;
• email correspondence with us;
• telephone communications with us;
• communications concerning potential or existing business relationships.

Our website is primarily intended for business-to-business communications and professional users.

3. Information We May Collect

Information you provide directly

The website currently does not contain contact forms, user accounts, checkout functionality or online payment facilities.

We therefore do not ask you to submit personal information directly through the website.

If you choose to contact us using an email address or telephone number published on the website, we may receive personal information that you voluntarily provide.

Depending on your communication, this may include:

• your name;
• business email address;
• telephone number;
• job title;
• company or organisation;
• country or location;
• information contained in your enquiry;
• information contained in subsequent correspondence;
• other information that you choose to provide.

Please avoid sending personal information that is unnecessary for your business enquiry.

Technical information

Like most websites, our hosting infrastructure or web server may automatically process limited technical information necessary to deliver, secure and maintain the website.

This may include:

• IP address;
• browser type;
• device information;
• operating system;
• date and time of access;
• requested pages;
• referring information;
• server logs and security-related technical data.

Such information may be processed for website delivery, technical administration, cybersecurity, fraud prevention, troubleshooting and maintaining the integrity of our systems.

4. How We Use Personal Data

We may use personal data to:

• respond to enquiries and requests;
• communicate with prospective and existing business partners;
• assess potential business opportunities;
• prepare or discuss quotations, proposals or commercial arrangements;
• maintain business correspondence;
• provide information requested by you;
• administer and secure our website and IT infrastructure;
• prevent misuse, fraud and security incidents;
• comply with applicable laws and legal obligations;
• establish, exercise or defend legal claims where necessary;
• maintain appropriate business records.

We do not use personal data obtained through general enquiries for unrelated purposes without an appropriate legal basis.

5. Legal Bases for Processing

Where the General Data Protection Regulation (“GDPR”) or similar legislation requiring a legal basis for processing applies, we may process personal data on one or more of the following bases:

Legitimate interests

We may process personal data where necessary for our legitimate business interests, including:

• responding to business enquiries;
• communicating with prospective customers and partners;
• managing business relationships;
• operating and securing our website;
• protecting our legal and commercial interests.

We consider these interests against the rights and interests of the individuals concerned.

Steps before entering into a contract

Where you contact us regarding a potential transaction, we may process information where necessary to take steps at your request before entering into a contract.

Performance of a contract

If you or the organisation you represent enters into a commercial relationship with XDK Core Limited, certain personal data may be processed where necessary to administer that relationship or perform contractual obligations.

Legal obligations

We may process personal data where necessary to comply with legal, regulatory, accounting or other obligations applicable to XDK Core Limited.

Consent

Where applicable law requires consent for a particular type of processing, we will rely on consent and provide an appropriate way to withdraw it.

6. Cookies and Analytics

At the date of this Privacy Policy, XDK Core Limited does not use website analytics, advertising pixels or behavioural tracking technologies such as Google Analytics, Meta Pixel or Microsoft Clarity on this website.

We do not currently use cookies for advertising or behavioural profiling.

The website or its underlying technical infrastructure may use strictly necessary technical mechanisms where required for security, website functionality or network communication.

If we introduce analytics, advertising cookies or other non-essential tracking technologies in the future, we will update this Privacy Policy and, where required by applicable law, implement an appropriate consent mechanism before such technologies are used.

7. Sharing of Personal Data

XDK Core Limited does not sell personal data.

We do not disclose personal data received through business enquiries to unrelated third parties for their own advertising or marketing purposes.

Personal data may, however, be technically processed by service providers that support the operation of our business and communications, such as:

• website hosting and infrastructure providers;
• email and communications service providers;
• IT and cybersecurity service providers.

Such providers process information only to the extent necessary to provide their services or as otherwise permitted by applicable law.

We may also disclose information where required by law, regulation, court order or a competent authority, or where reasonably necessary to protect our legal rights or defend legal claims.

8. International Processing

XDK Core Limited is established in Hong Kong and operates internationally.

If you contact us from the European Economic Area, United Kingdom, United States or another jurisdiction, your communication may result in personal data being processed in or accessible from Hong Kong.

Our technical service providers may also process information in other jurisdictions depending on their infrastructure.

Where applicable data protection legislation imposes requirements relating to international transfers of personal data, we will take appropriate measures to comply with those requirements.

9. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including responding to enquiries, maintaining appropriate business records, managing business relationships, complying with legal obligations and establishing or defending legal claims.

The appropriate retention period may vary depending on:

• the nature of the information;
• the nature and duration of the business relationship;
• whether an enquiry results in a commercial transaction;
• applicable legal or regulatory requirements;
• the need to resolve disputes or protect legal rights.

Information that is no longer reasonably required will be deleted, anonymised or otherwise handled in accordance with applicable law.

10. Data Security

We take reasonable administrative, organisational and technical measures designed to protect personal data against unauthorised access, disclosure, alteration, loss, misuse or destruction.

However, no internet transmission, email communication or electronic storage system can be guaranteed to be completely secure.

Users should therefore exercise reasonable care when sending confidential or sensitive information electronically.

11. Direct Marketing

We do not sell personal data or provide personal data to unrelated third parties for their own direct marketing purposes.

Where applicable law requires consent or another specific legal basis before personal data may be used for direct marketing, XDK Core Limited will comply with those requirements.

You may request at any time that we stop using your personal information for direct marketing communications by contacting us at sales@xdkcore.com.

12. Your Privacy Rights

Your rights depend on the law applicable to your circumstances.

Hong Kong

Under the Hong Kong Personal Data (Privacy) Ordinance (Cap. 486), individuals may have rights relating to access to and correction of their personal data, subject to applicable conditions and exceptions.

Requests may be made using the contact information provided below.

European Economic Area

Where the GDPR applies to the processing of your personal data, you may have rights including the right to:

• request access to your personal data;
• request correction of inaccurate or incomplete personal data;
• request deletion of personal data in certain circumstances;
• request restriction of processing;
• object to certain processing based on legitimate interests;
• receive certain personal data in a portable format where applicable;
• withdraw consent where processing is based on consent;
• lodge a complaint with a competent data protection supervisory authority.

These rights are subject to the conditions, limitations and exceptions provided by applicable law.

Exercising a privacy right will not result in discriminatory treatment.

13. Automated Decision-Making

XDK Core Limited does not currently use personal data collected through this website for automated decision-making or profiling that produces legal or similarly significant effects on individuals.

14. Children’s Privacy

This website is intended for businesses and professional users and is not directed at children.

XDK Core Limited does not knowingly seek to collect personal data from children through this website.

If we become aware that personal data relating to a child has been provided to us in circumstances where its processing is inappropriate, we will take reasonable steps to delete it.

15. Third-Party Websites

Our website may contain links to external websites operated by manufacturers, software providers, logistics partners or other third parties.

XDK Core Limited is not responsible for the privacy practices of independent third-party websites.

We encourage users to review the privacy notices of external websites before providing personal information to them.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in:

• our business activities;
• website functionality;
• technologies used on the website;
• applicable laws and regulations;
• our data processing practices.

The current version will be published on this page together with its most recent update date.

Material changes may be highlighted where appropriate.

17. Contact Us

If you have questions about this Privacy Policy, wish to exercise a privacy right or have concerns about how your personal data is handled, please contact:

XDK Core Limited
16F, King's Commercial Centre
25 King's Rd
Tin Hau
Hongkong

Email: sales@xdkcore.com

Phone: +852 9474 9324

We may need to request reasonable information to verify your identity before responding to certain data protection requests.