Privacy Policy

1. Introduction

DRISDA SOLUTION LIMITED, referred to in this policy as the Company, we, or us, develops and operates the website at https://www.bayhaven.buzz and provides computer systems design and computer integrated systems design services to businesses across Hong Kong and the wider region. The services available on this website are developed and operated by the developer Drisda and are delivered by the Company. We are committed to protecting the personal information of everyone who visits our website, communicates with our team, or uses our services.

This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and the choices you have. It also describes the legal grounds we rely on and the steps we take to keep your data safe. Please read this policy carefully before you share any personal data with us. If anything in this policy is unclear, please contact us at the address shown in the Contact Information section, and we will be glad to help.

2. Scope of This Policy

This Privacy Policy applies to the website at https://www.bayhaven.buzz, to any pages, forms, and features hosted on that website, and to all services delivered by the Company. It covers personal data collected online through the website and offline through emails, phone calls, meetings, and written agreements.

The policy does not apply to websites operated by third parties, even if you reach them through links on our website. It also does not apply to the practices of companies we do not control or people we do not manage. If you are a client, supplier, partner, or candidate, this policy works together with any separate agreement or notice we provide to you, and where there is a conflict, the specific agreement takes precedence for that relationship.

We review the scope of this policy regularly and we update it whenever we introduce a new service, a new form of processing, or a new part of the website. The version published on this page is always the version that applies at the time you use the website.

Where this policy refers to a device, that term includes desktop computers, laptops, tablets, and mobile phones that you use to reach our website or our services. Where it refers to you, that term includes visitors, clients, suppliers, business contacts, and candidates for employment, whichever role applies at the time. The rights and obligations described here apply equally to all of those groups unless a section says otherwise.

3. Information We Collect

We collect several categories of personal data in the course of running our business and delivering our services:

• Identity data, which includes your name, job title, and the name of your employer.
• Contact data, which includes email addresses, phone numbers, and postal addresses.
• Professional data, which includes your role, company size, industry, and project requirements.
• Financial data, which includes billing addresses, payment references, and transaction history when you buy our services.
• Technical data, which includes IP addresses, browser type, operating system, device identifiers, and the pages you visit on our website.
• Usage data, which records how you interact with our website and our services.
• Communication data, which includes the content of messages, emails, and notes from phone calls.

We only collect data that is relevant to running the business, providing services, and keeping our website secure. We do not collect personal data indiscriminately, and we do not buy personal data from brokers or aggregators.

In some situations you may give us the personal data of other people, for example when you introduce a colleague to our services or send us a reference for a project. When you do this, you confirm that you have the right to share that information with us and that the people concerned understand how their data will be used under this policy. We rely on that confirmation as the basis for processing the data you pass along.

4. How We Collect Information

We collect personal data in three main ways. First, you provide it directly when you fill in a form on the website, write to feedback@bayhaven.buzz, phone us at +12768668047, or meet our team at our office in Causeway Bay, Hong Kong.

Second, we collect it automatically through cookies, server logs, and analytics tools when you browse the website. This technical data helps us keep the site reliable and understand how visitors use it. Third, we receive data from legitimate business sources, including public company records, industry directories, professional networks, and business partners who introduce clients to us.

We keep our collection practices transparent and we never collect more data than the task requires. If you choose not to share certain data, we may not be able to answer your enquiry, prepare a proposal, or provide the requested service.

5. Use of Information

We use personal data for clear, legitimate purposes. We use it to answer enquiries, prepare proposals, and manage client relationships. We use it to deliver computer systems design and computer integrated systems design services, including solutions architecture, systems integration, data platform work, security reviews, and managed support.

We use it to process invoices, manage accounts, and meet our legal and tax obligations. We use it to improve the website, our services, and our documentation. We use it to protect the security of our systems and to prevent fraud and abuse. With your consent, we use it to send occasional updates and news about our services, and you may withdraw that consent at any time.

We may combine information from different sources to build a fuller picture of a business relationship, but we always do so fairly and we never use personal data for purposes that are incompatible with this policy.

We do not use personal data for automated decision making that produces legal effects or significantly affects you. All of our decisions about proposals, pricing, and delivery are made by people. Where we use tools to support those decisions, a human always reviews the outcome before it affects you.

6. Legal Basis for Processing

We process personal data only when we have a lawful basis to do so. For most services we rely on the performance of a contract, which covers the processing needed to deliver what you agreed with us.

We rely on your consent for direct marketing and for some cookies, and you may withdraw consent at any time. We rely on legitimate interests for security, analytics, and general business administration, always balancing our interests against your rights and freedoms.

We rely on a legal obligation when the law requires us to keep records or to respond to public authorities. When we process special categories of data, which is rare in our line of work, we do so only with your explicit consent or where the law permits it. We document each processing activity and we review the legal basis regularly.

7. Cookies and Similar Technologies

Our website uses cookies and similar technologies to make the site work and to understand how visitors use it. Essential cookies keep the website functioning, for example by remembering your choices during a single visit.

Analytics cookies help us see which pages are popular and where visitors come from, so that we can improve the content and the experience. We do not use advertising cookies and we do not sell any data gathered through cookies.

Most browsers let you block or delete cookies through the settings menu. If you disable cookies, some parts of the website may not work as intended, but the core content remains available. We review our cookie use at least once a year and we update this policy whenever we add a new technology.

8. Sharing and Disclosure

We never sell personal data. We share data only where it is necessary and lawful. We share data with service providers who help us run the business, such as hosting companies, email providers, accounting firms, and payment processors. These providers process data only on our instructions and under written agreements that protect your information.

We share data with professional advisors, including lawyers and auditors, when we need their advice or when the law requires it. We disclose data to public authorities where the law requires it and to protect our legal rights.

If the Company is involved in a merger, acquisition, or sale of assets, personal data may be transferred as part of the transaction, and we will notify you of any material change. Any other sharing happens only with your consent.

We do not share personal data for the marketing purposes of other companies, and we will never rent or sell your contact details to any mailing list. If a request for data comes from a party with no lawful basis for it, we will decline and explain why.

9. International Data Transfers

The Company is based in Hong Kong and most data is stored in Hong Kong and the Asia Pacific region. From time to time, data may be processed in other countries, for example where our hosting or support providers operate servers abroad.

When we transfer personal data across borders, we take steps to keep it protected. We rely on recognized safeguards such as standard contractual clauses approved by the relevant authorities, or transfers to countries that have adequate data protection laws. We also apply contractual and technical controls to limit access to personal data wherever it is stored.

If you would like details of the safeguards used for a specific transfer, please contact us at feedback@bayhaven.buzz and we will provide the relevant information.

10. Data Retention

We keep personal data only for as long as it is needed. Enquiry data is retained for as long as the conversation is active and for a reasonable period afterwards. Client and contract data is kept for the life of the relationship and for as long as tax and corporate records are required by law.

Website analytics are kept in aggregate form for a limited period. When data is no longer needed, we delete it securely or remove identifying details.

Our retention schedules are reviewed regularly and we respond to requests for deletion in line with your rights. If you believe we are holding data that should be removed, please contact us and we will assess your request promptly.

11. Security Measures

We take the security of personal data seriously. We use encryption in transit, secure storage, and strict access controls based on the principle of least privilege. Access to personal data is limited to team members who need it for their role, and access is logged and reviewed.

We apply security patches promptly, run regular vulnerability reviews, and use strong authentication wherever possible. Our staff complete security awareness training and we maintain an incident response plan for data incidents. We test our controls through internal and external reviews.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. We work hard to keep risks low, and if an incident affects your data, we will inform you and the relevant authorities where the law requires it.

12. Your Privacy Rights

Depending on where you are located, you may have a range of rights over your personal data. You have the right to access the data we hold about you and to ask for a copy. You have the right to correct inaccurate data and to complete incomplete records.

You have the right to ask us to delete data where the law allows it. You have the right to restrict processing in certain circumstances and to object to processing that is based on legitimate interests. You have the right to data portability where we process data automatically on the basis of consent or contract. You have the right to withdraw consent at any time.

To exercise any of these rights, contact us at feedback@bayhaven.buzz. We respond to every request within one month and we never penalize you for exercising your rights.

Before we act on a request, we may need to verify your identity to make sure we are not releasing data to the wrong person. Verification is usually a simple matter of matching the details you give us against the records we hold. Where a request is clearly unfounded or excessive, we may charge a reasonable fee or decline it, and we will explain our reasoning if we do.

13. Privacy for Children

Our services are designed for businesses and are not directed to children under the age of 16. We do not knowingly collect personal data from children.

If a child under 16 has provided us with personal data without the consent of a parent or guardian, we will delete that data as soon as we become aware of it. If you are a parent or guardian and you believe your child has shared personal data with us, please contact us at feedback@bayhaven.buzz so that we can act quickly.

Where we are required by law to verify age or to obtain parental consent before processing a minor data, we will do so. We encourage parents and guardians to supervise the online activity of young people.

14. Third Party Links

Our website may include links to third party websites, tools, or resources, for example to partner pages or industry references. These third party sites operate under their own privacy policies and we have no control over how they collect or use data.

When you leave our website, this policy no longer applies and you should read the privacy policy of the site you visit. We are not responsible for the content, practices, or security of any third party site.

We choose the links on our website carefully and we review them from time to time, but we cannot accept responsibility for changes made by third parties after we add a link.

15. Changes to This Policy

We review this Privacy Policy regularly and we may update it from time to time. When we make significant changes, we will revise the effective date at the top of the page and, where appropriate, we will notify you by email or through a notice on the website.

Changes take effect when the updated policy is published unless we state otherwise. We encourage you to review this page periodically so that you stay informed about how we protect your personal data.

Your continued use of the website and our services after changes are published means you accept the updated policy. If a change affects a legal agreement, we will handle it in line with the terms of that agreement.

16. Contact Information

If you have any questions about this Privacy Policy or about how we handle personal data, we would be glad to hear from you. You may contact the Company by email at feedback@bayhaven.buzz or by phone at +12768668047.

Our postal address is DRISDA SOLUTION LIMITED, Rm 01 26/F WORKING VIEW COML BLDG, 21 YIU WAH ST, Causeway Bay, Hong Kong (HK).

We aim to respond to all privacy enquiries within one business day and to resolve concerns promptly. If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner for Personal Data, Hong Kong, or to the supervisory authority for your own jurisdiction.