Privacy Policy

1. Introduction and Scope

This Privacy Policy describes how BBB LIFE, the developer and operator of this website, and BBB Life Limited, a company registered at Rm L 16/F MG TWR, 133 HOI BUN RD, Kwun Tong, Hong Kong (HK), collect, use, disclose, and safeguard your personal information when you visit our website at https://www.bbblife.rest or use any of our computer systems design and related services.

We are committed to protecting your privacy and ensuring that your personal data is handled in a safe and responsible manner. This policy applies to all visitors, users, and clients who interact with our digital platforms, services, and communications channels operated by BBB Life Limited.

By accessing or using our website and services, you acknowledge that you have read, understood, and agree to be bound by the terms of this Privacy Policy. If you do not agree with any part of this policy, you should discontinue use of our website and services immediately.

2. Information We Collect

2.1 Personal Information You Provide

When you interact with BBB Life Limited through our website contact forms, email correspondence, phone calls, or service agreements, we may collect the following categories of personal information:

• Contact Information: Your full name, email address, phone number, company name, and job title.
• Business Information: Details about your organization, technical requirements, project specifications, and infrastructure documentation that you share during consultations.
• Communication Data: Records of correspondence including emails, chat messages, support tickets, and phone call summaries.
• Billing Information: Invoicing details, payment references, and transaction records for services rendered. Note: We do not store full credit card numbers on our servers; payment processing is handled by PCI-compliant third-party processors.

2.2 Information Collected Automatically

When you visit our website, certain information is collected automatically through standard web technologies:

• Log Data: IP address, browser type and version, operating system, referring URLs, pages visited, time and date of visits, and time spent on each page.
• Device Information: Device type, screen resolution, language preferences, and unique device identifiers.
• Cookies and Similar Technologies: Session identifiers, preference tokens, and analytics tracking data as described in Section 6 of this policy.
• Usage Patterns: Navigation paths, click patterns, scroll depth, and interaction with page elements to help us improve user experience.

3. How We Use Your Information

BBB Life Limited uses the information we collect for the following legitimate business purposes:

• Service Delivery: To provide, maintain, and improve our computer systems design and related services, including project management, technical support, and system monitoring.
• Communication: To respond to your inquiries, provide project updates, send service-related notifications, and deliver technical documentation relevant to your engagement.
• Business Operations: To manage client accounts, process payments, fulfill contractual obligations, and maintain internal records required for legal and regulatory compliance.
• Improvement and Development: To analyze usage patterns, identify areas for service enhancement, develop new features, and optimize our website performance and security.
• Marketing: With your explicit consent, to send occasional newsletters, industry insights, service announcements, and relevant technology updates. You may opt out at any time.
• Security and Fraud Prevention: To detect, prevent, and respond to potential security incidents, fraudulent activities, and violations of our Terms of Service.
• Legal Compliance: To comply with applicable laws, regulations, legal processes, and enforceable governmental requests in Hong Kong and applicable international jurisdictions.

4. Legal Basis for Processing

Under applicable data protection laws, including the Personal Data (Privacy) Ordinance of Hong Kong (Cap. 486), we process your personal information based on one or more of the following legal grounds:

• Contractual Necessity: Processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
• Legitimate Interests: Processing is necessary for our legitimate business interests, including improving services, ensuring network security, and preventing fraud, provided these interests are not overridden by your rights and freedoms.
• Consent: You have given clear consent for us to process your personal data for a specific purpose, such as receiving marketing communications.
• Legal Obligation: Processing is necessary for compliance with a legal obligation to which BBB Life Limited is subject.

5. Data Sharing and Disclosure

BBB Life Limited does not sell, rent, or trade your personal information to third parties. We may share your information only in the following limited circumstances:

5.1 Service Providers and Partners

We engage trusted third-party companies and individuals to facilitate our services, such as cloud hosting providers (including Firebase by Google), email communication platforms, analytics services, and payment processors. These providers have access to your personal information only to perform specific tasks on our behalf and are contractually obligated to protect your data and not use it for any other purpose.

5.2 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website of any change in ownership or uses of your personal information.

5.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities, including courts, tribunals, government agencies, or law enforcement in Hong Kong or other jurisdictions where we operate.

5.4 Protection of Rights

We may disclose information to protect the rights, property, or safety of BBB Life Limited, our clients, employees, or others. This includes exchanging information with other companies and organizations for fraud protection and credit risk reduction.

6. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and collect analytical data. Below is a detailed explanation of the types of cookies we use:

6.1 Essential Cookies

These cookies are necessary for the website to function properly. They enable core functionality such as security, network management, and accessibility. You may disable these by changing your browser settings, but this may affect how the website functions.

6.2 Analytics Cookies

We use analytics services to collect information about how visitors use our website. These cookies help us understand which pages are most popular, how visitors navigate the site, and where we can improve the user experience. All data collected is aggregated and anonymized.

6.3 Preference Cookies

These cookies allow our website to remember choices you make, such as your language preference or the region you are in, and provide enhanced, more personalized features.

6.4 Managing Cookies

Most web browsers allow you to control cookies through their settings preferences. You can typically configure your browser to reject all cookies, accept only certain types of cookies, or alert you when a website attempts to set a cookie. Please note that limiting cookies may impact the functionality of our website.

7. Data Retention

BBB Life Limited retains your personal information only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable laws and regulations. The specific retention periods depend on the nature of the data and the purpose of processing:

• Client Project Data: Retained for the duration of the client relationship plus seven years after project completion for legal, tax, and audit purposes.
• Communications Data: Retained for three years from the date of last correspondence, unless a longer period is required for dispute resolution or regulatory compliance.
• Website Analytics Data: Retained in anonymized form for up to 26 months. IP addresses are anonymized before storage.
• Marketing Consent Records: Retained for the period during which we are actively marketing to you, and for a reasonable period after consent is withdrawn to maintain suppression lists.
• Server Logs and Security Data: Retained for 90 days for security monitoring, then automatically purged.

When personal information is no longer needed, we securely delete, destroy, or anonymize it in accordance with our data disposal procedures and industry best practices.

8. Data Security Measures

Protecting your personal information is a top priority at BBB Life Limited. As a computer systems design firm, we apply our own expertise in security architecture to protect the data entrusted to us. Our security framework includes:

• Encryption: All data transmitted between your browser and our servers is protected using Transport Layer Security (TLS 1.3) encryption. Data at rest is encrypted using AES-256 encryption standards.
• Access Controls: Strict role-based access controls limit data access to authorized personnel only. Multi-factor authentication is required for all administrative accounts.
• Network Security: Enterprise-grade firewalls, intrusion detection systems (IDS), and intrusion prevention systems (IPS) monitor and protect our infrastructure 24 hours a day, 7 days a week.
• Regular Audits: We conduct quarterly security assessments, vulnerability scans, and penetration testing to identify and remediate potential weaknesses in our systems.
• Employee Training: All BBB Life Limited staff undergo mandatory data protection and security awareness training upon joining and annually thereafter.
• Incident Response: We maintain a documented incident response plan and will notify affected individuals and relevant authorities within 72 hours of becoming aware of a data breach, as required by applicable law.

9. Your Data Protection Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

9.1 Right to Access

You have the right to request copies of your personal data that we hold. We will provide this information within 30 days of receiving a verified request, subject to any applicable exemptions under law.

9.2 Right to Rectification

You have the right to request that we correct any information you believe is inaccurate or incomplete. We will promptly update our records upon verification of the corrected information.

9.3 Right to Erasure

Also known as the right to be forgotten, you have the right to request that we delete your personal data under certain circumstances, such as when the data is no longer necessary for the purpose it was collected or when you withdraw consent.

9.4 Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data under certain conditions, such as when you contest the accuracy of the data or object to processing.

9.5 Right to Data Portability

You have the right to request that we transfer the data we have collected to another organization, or directly to you, in a structured, commonly used, and machine-readable format.

9.6 Right to Object

You have the right to object to our processing of your personal data where we are relying on legitimate interests as the legal basis, or for direct marketing purposes.

9.7 Exercising Your Rights

To exercise any of these rights, please contact us using the details provided in Section 12. We will respond to your request within the timeframe required by applicable law. We may need to verify your identity before processing your request.

10. International Data Transfers

BBB Life Limited is headquartered in Hong Kong, and our primary data processing activities occur in the Hong Kong Special Administrative Region. However, as part of our service delivery, your personal information may be transferred to, stored, and processed in other countries where our service providers, cloud infrastructure, or affiliated entities operate.

When we transfer personal data internationally, we implement appropriate safeguards to ensure that your information receives an adequate level of protection. These safeguards may include:

• Standard contractual clauses approved by relevant data protection authorities.
• Verification that the recipient country has adequate data protection laws as determined by Hong Kong authorities.
• Binding corporate rules for intra-group transfers.
• Certification under recognized international privacy frameworks.

By using our services, you acknowledge that your information may be transferred to and processed in countries outside your country of residence, which may have different data protection standards than your home jurisdiction.

11. Childrens Privacy

Our website and services are not directed to individuals under the age of 18. BBB Life Limited does not knowingly collect personal information from children. If we become aware that a child under 18 has provided us with personal data without parental consent, we will take immediate steps to delete such information from our servers.

If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately using the details in Section 12 so that we can take appropriate action.

12. Contact Information and Complaints

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer using the following details:

We will acknowledge receipt of your complaint within five business days and aim to resolve it within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Privacy Commissioner for Personal Data in Hong Kong or your local data protection supervisory authority.

13. Changes to This Privacy Policy

BBB Life Limited reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technologies, legal obligations, or for other operational reasons. When we make material changes, we will:

• Post the updated policy on this page with a revised Last Updated date.
• Display a prominent notice on our website for a minimum of 30 days following significant changes.
• Send an email notification to active clients and subscribers who have provided their email address, where the changes materially affect their rights or our obligations.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website and services after any changes constitutes your acceptance of the updated policy.

14. Third-Party Links and Services

Our website may contain links to third-party websites, plugins, and applications that are not operated or controlled by BBB Life Limited. Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements or practices.

When you leave our website, we encourage you to read the privacy policy of every website you visit. This Privacy Policy applies solely to information collected by BBB Life Limited through our website and services.