This policy explains how we handle personal information. It was last updated on August 17, 2026.
HK XingCheng Limited respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy describes the types of information we collect, the reasons we collect it, how we use and store that information, and the choices available to you regarding its use. We encourage you to read this policy in full so that you understand our practices clearly before you use our website or engage our services.
Our website and related services are designed and maintained by XingCheng, the developer behind this platform. XingCheng builds our systems with privacy and data protection treated as first-class design principles rather than afterthoughts. That commitment shapes the way we collect, handle, and secure every piece of information that passes through our environment.
By accessing this website or using our services, you acknowledge that you have read and understood this policy. If you do not agree with any part of it, you should discontinue use of the website and refrain from providing personal information to us. We may update this policy from time to time, and the most current version will always be published on this page with the date of its most recent revision.
HK XingCheng Limited is a company operating in the Computer Systems Design and Related Services industry, within the broader Professional, Scientific, and Technical Services sector. We specialize in systems architecture, cloud migration, data engineering, security design, workflow automation, and managed support for organizations of all sizes.
Our registered office is located at the following address: HK XingCheng Limited, Rm 2112C 21/F WITTY COML BLDG, 1A-1L TUNG CHOI ST, Mong Kok, Hong Kong (HK). For the purposes of this policy, references to HK XingCheng Limited, the Company, we, us, or our mean the entity named above.
You can reach us by email at hello@xingcheng.hair or by telephone at +13159744804. Our website is available at https://www.xingcheng.hair.
This policy applies to personal information we collect through our website, through email and telephone communications, and through the delivery of our consulting and support services. It covers information collected from prospective clients, current clients, website visitors, and individuals who contact us for any reason.
This policy does not apply to information that is not personal information, such as aggregated or anonymized data that can no longer be linked to a specific individual. It also does not apply to third-party websites that may be linked from our own, as those sites maintain their own privacy practices that we do not control. We describe third-party links in greater detail later in this policy.
Where we act as a service provider processing information on behalf of a client, that client remains the primary controller of the information, and our processing is governed by the agreement we hold with that client in addition to this policy. We process such information only in accordance with documented instructions and applicable law.
We collect several categories of information in connection with our website and services. The specific information we collect depends on how you interact with us and the nature of the engagement, if any.
We do not intentionally collect sensitive categories of personal information, such as health information, biometric data, or government identification numbers, unless a specific engagement legally requires it and you provide it voluntarily. If you believe you have submitted sensitive information to us in error, please contact us so that we can delete it.
We collect information through several channels. Most information is collected directly from you when you interact with us, while a smaller portion is collected automatically as you browse our website.
Direct collection occurs when you fill out a contact form, send us an email, call our office, subscribe to our newsletter, or provide information during a consultation or project. In each of these cases, you choose the information you share, and we use it only for the purposes described in this policy.
Automatic collection occurs through cookies, server logs, and similar technologies that record technical and usage information as you navigate the site. This collection helps us understand how visitors use our website, diagnose technical problems, and improve the overall experience. You can control some of this collection through your browser settings, as described in the section on cookies below.
In some cases we may receive information about you from third parties, such as a colleague who refers you to us or a business directory that lists your organization. When this happens, we treat the information in accordance with this policy and applicable law.
We use the information we collect for a limited and clearly defined set of purposes, all of which relate to operating our business and serving our clients. We do not sell personal information, and we do not use it for unrelated marketing without your consent.
When we rely on consent to process your information, you may withdraw that consent at any time by contacting us. Withdrawal does not affect the lawfulness of processing that occurred before the withdrawal.
We process personal information on the basis of one or more lawful grounds, depending on the context in which the information was collected and the jurisdiction that applies.
Where you have entered into, or are considering entering into, an agreement with us, we process your information as necessary to perform that contract or to take steps at your request before entering into a contract. This covers most of our client-facing activity, from initial proposals through project delivery and support.
We may also process information where we have a legitimate interest that is not overridden by your rights and interests. Legitimate interests include maintaining the security of our systems, understanding how our website is used, and improving our services. Where we rely on legitimate interests, we have assessed that the processing is proportionate and would be reasonably expected by you.
In limited cases we process information to comply with a legal obligation, such as retaining records required by law or responding to a lawful request from a regulatory authority. Finally, where no other basis applies, we may seek your explicit consent before processing certain types of information.
We collect log data automatically whenever you visit our website. This data includes your internet protocol address, browser type, operating system, referring page, pages viewed, and timestamps. Log data is used to diagnose technical issues, monitor system health, and protect the website from abuse.
We may also use analytics services that help us understand aggregate patterns of website usage, such as which pages are most frequently visited and how long visitors spend on the site. These services process information in a manner that is intended to be non-identifying where possible, and we configure them to minimize the collection of personal information.
We do not use analytics data to build profiles for advertising purposes, and we do not share raw log data with third parties except as described in the section on sharing below.
HK XingCheng Limited is based in Hong Kong, but some of the service providers we use may store or process information in other countries. When we transfer personal information across borders, we take steps to ensure that it receives an adequate level of protection in accordance with applicable law.
Where required, we rely on recognized safeguards such as standard contractual clauses, adequacy decisions, or other lawful transfer mechanisms. We also assess the data protection practices of any third party that may process information on our behalf outside the jurisdiction in which it was collected.
If you would like more information about the safeguards we apply to international transfers, you may contact us using the details provided at the end of this policy.
We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, including any legal, accounting, or reporting requirements. The precise retention period depends on the nature of the information and the context in which it was collected.
Contact and inquiry information is generally retained for as long as needed to respond to the inquiry and to maintain a record of our communications. Information related to an active engagement is retained for the duration of the engagement and for a reasonable period afterward to address any follow-up matters. Where we are subject to a legal obligation to retain records for a specific period, we retain the relevant information for that period.
When information is no longer needed, we delete it or anonymize it in a manner that prevents it from being linked back to you. We periodically review the information we hold and remove data that is no longer required.
We take the security of your personal information seriously and apply technical and organizational measures designed to protect it against unauthorized access, disclosure, alteration, and destruction. These measures are consistent with our core expertise in security design and are reviewed and updated on an ongoing basis.
Our safeguards include access controls that limit who can view personal information, encrypted transmission of data over our website, and secure storage environments. We also require our service providers to maintain appropriate security standards, and we include data protection obligations in our contracts with them.
No method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security. However, we are committed to protecting your information to the highest standard reasonably achievable, and we will notify you and any relevant authority in the event of a breach as required by applicable law.
Depending on your jurisdiction, you may have certain rights regarding your personal information. These rights can include the right to access, correct, delete, restrict, or object to the processing of your information, as well as the right to data portability.
To exercise any of these rights, contact us using the details at the end of this policy. We will respond to your request within the timeframes required by law and may ask you to verify your identity before fulfilling it.
Our website and services are intended for business users and are not directed to children under the age of sixteen. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without appropriate parental consent, we will take steps to delete that information promptly.
If you are a parent or guardian and believe that your child has provided personal information to us, please contact us using the details below so that we can investigate and, where appropriate, remove the information from our records.
Our website may contain links to third-party websites, applications, or services that are not operated by us. This policy applies only to information collected by HK XingCheng Limited. We are not responsible for the privacy practices of third parties, and we encourage you to review the privacy policies of any website you visit through a link from our own.
When you leave our website and interact with a third-party service, any information you provide to that service is governed by its own privacy policy rather than this one. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party sites or services.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the date at the top of this page and, where appropriate, provide a more prominent notice.
We encourage you to review this policy periodically so that you remain informed about how we protect your information. Your continued use of our website after any changes to this policy take effect constitutes your acceptance of the revised policy.
If you have any questions, concerns, or requests regarding this Privacy Policy or our handling of your personal information, please contact us using any of the methods below. We will respond to your inquiry as promptly as possible and in accordance with applicable law.
If you are located in a jurisdiction that provides for a data protection authority, you may also have the right to lodge a complaint with that authority if you believe that your rights have been infringed. We would, however, appreciate the opportunity to address your concerns directly before you escalate the matter.