Privacy Policy

This policy explains how OceanFlow Limited, a company incorporated in Hong Kong, handles personal data through oceanflow.io and related business enquiries.

1. Who we are

OceanFlow Limited is the data user responsible for personal data collected through this website.

2. Personal data we collect

When you submit the contact form or contact us directly, we may collect your name, work email, company, role, company type, workflow challenge, message, and the contents of subsequent communications.

Our hosting infrastructure may also create technical records such as IP address, browser type, requested page, timestamps, and diagnostic or security events. We do not currently use advertising cookies, behavioural advertising, or a marketing analytics service on this website.

3. Why we use personal data

• To assess and respond to enquiries
• To arrange and prepare for workflow discussions
• To operate, secure, diagnose, and improve the website
• To maintain business records and comply with legal obligations
• To establish, exercise, or defend legal claims where necessary

We will not use contact-form information for direct marketing without providing the notices and choices required by applicable law.

4. Providing information

Providing information is voluntary. However, we cannot meaningfully assess or respond to an enquiry without the fields marked as required on the contact form.

5. Who may receive personal data

We may provide relevant personal data to contracted hosting, cloud, security, professional-advisory, and communications providers that process it for OceanFlow; to authorities or other persons where required or permitted by law; or to parties involved in a corporate transaction, subject to appropriate safeguards.

Some providers may process data outside Hong Kong. Where this occurs, we take practicable steps intended to protect the data through contractual, technical, or organisational safeguards.

6. Retention

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, related business and legal requirements, security, dispute resolution, and record keeping. Retention periods may vary by record type. Data that is no longer required is deleted or anonymised where reasonably practicable.

7. Security and data incidents

We use practicable technical and organisational measures intended to protect personal data against unauthorised or accidental access, processing, erasure, loss, or use. No internet transmission or storage system can be guaranteed completely secure. We assess suspected personal-data incidents and take appropriate containment, remediation, and notification steps.

8. Access and correction

Under Hong Kong’s Personal Data (Privacy) Ordinance, you may request access to personal data we hold about you and ask us to correct inaccurate data, subject to applicable legal requirements and exemptions. Send requests to kevin@oceanflow.io. We may need to verify your identity before acting on a request.

9. Third-party sites

This website may link to third-party websites or services. Their privacy practices are governed by their own notices, not this policy.

10. Changes and enquiries

We may update this policy as our website, providers, or legal obligations change. The latest version and update date will appear on this page. Questions or privacy requests may be sent to kevin@oceanflow.io.