Privacy Policy

Next Security Limited ("Next Security", "we", "us", or "our") is committed to protecting the privacy of individuals whose personal data we process. This Privacy Policy describes how we collect, use, disclose, retain, and otherwise process personal data in connection with your access to and use of our website at https://nextsecurity.hk (the "Website").

This Privacy Policy has been developed in accordance with the Personal Data (Privacy) Ordinance (Chapter 486) of the Laws of the Hong Kong Special Administrative Region of the People's Republic of China (the "PDPO") and is intended to inform you of our personal data handling practices.

By accessing or using the Website, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this Privacy Policy, you should discontinue use of the Website.

1. Who we are

For the purposes of the PDPO, the data user is:

Next Security Limited Unit 721, 7/F, Building 19W
No. 19 Science Park West Avenue
Hong Kong Science Park
Pak Shek Kok, New Territories
Hong Kong SAR

For privacy-related queries, please contact us at [email protected].

2. Personal data we collect

We collect personal data that you voluntarily provide to us, as well as certain information that is generated automatically through your use of the Website. The categories of personal data we may collect include:

Information you provide directly to us:

• Name
• Job title
• Company name
• Work email address
• Telephone number (where provided)
• The content of any message or enquiry you submit through our contact form
• Any other information you choose to provide in correspondence with us

Information collected automatically:

• Internet Protocol (IP) address
• Browser type and version
• Operating system
• Referring website
• Pages visited and time spent on the Website
• Date and time of access
• Other diagnostic and aggregated usage data

The Website is intended for business-to-business audiences only and is not directed at individuals under the age of 18. We do not knowingly collect personal data from individuals under the age of 18.

3. How we collect personal data

We collect personal data from you in the following ways:

• Directly from you, when you complete our contact form, send us an email, or otherwise communicate with us in connection with our services.
• Automatically through your use of the Website, including through cookies, server logs, and similar technologies operated by us or our service providers (see Section 8).

4. Purposes of collection and use

We collect, use, and process your personal data for the following purposes:

• To respond to your enquiries and arrange scoping discussions in relation to our cybersecurity services
• To communicate with you regarding our services, including the provision of further information you have requested
• To maintain business records of enquiries received and communications conducted
• To operate, maintain, secure, and improve the Website
• To analyse aggregate usage of the Website for the purpose of improving its content and performance
• To comply with applicable legal, regulatory, and reporting obligations
• To detect, prevent, and respond to fraudulent, abusive, or unlawful activity in connection with the Website
• For any other purpose disclosed to you at the time of collection or for which you have given consent

We will not use your personal data for any purpose materially different from those set out above without obtaining your further consent, except where permitted or required by applicable law.

5. Legal grounds for processing

Where the processing of personal data is subject to data protection laws that require a specific legal ground, we process your personal data on the basis of:

• Your consent, where you have provided personal data voluntarily through the Website.
• Our legitimate interests in operating, promoting, and securing the Website and our business, and in responding to enquiries from prospective clients.

You may withdraw your consent at any time by contacting us at [email protected], without affecting the lawfulness of any processing carried out prior to such withdrawal.

6. Disclosure of personal data

We treat your personal data as confidential. We may, however, disclose your personal data to:

• Our personnel, on a strict need-to-know basis for the purposes set out in this Privacy Policy.
• Service providers who process personal data on our behalf in connection with the operation of the Website and our business, currently including:
  • Cloudflare, Inc.: content delivery, security, and DDoS protection
  • Google LLC (Google Analytics): web analytics and aggregated usage statistics
• Additional service providers that we may engage from time to time, including but not limited to hosting and infrastructure providers, transactional email providers, and customer relationship management providers.
• Professional advisers, including legal counsel, accountants, and auditors, where reasonably necessary for the conduct of our business.
• Regulatory, governmental, or law enforcement authorities, where required by applicable law, court order, or other lawful process.

We require all service providers acting on our behalf to handle personal data in accordance with applicable data protection laws and the purposes for which the personal data has been provided.

We will not sell, rent, or trade your personal data to any third party.

7. Cross-border transfer of personal data

We may transfer your personal data to, or store your personal data in, locations outside of Hong Kong, including in connection with the operation of our service providers' global infrastructure (for example, the global edge network of Cloudflare, or the servers used by Google Analytics). Where such transfers occur, we take reasonable steps to ensure that your personal data continues to be afforded a level of protection consistent with this Privacy Policy and applicable law.

8. Cookies and similar technologies

The Website uses cookies and similar tracking technologies to operate, secure, and analyse the use of the Website. Cookies are small text files placed on your device when you visit a website.

The categories of cookies used on the Website include:

• Strictly necessary cookies, which are required for the operation, security, and integrity of the Website (including those set by our content delivery and security provider, Cloudflare).
• Analytics cookies, which collect aggregated information about how the Website is used to help us improve its content and performance (including those set by Google Analytics).

Most web browsers allow you to control cookies through their settings. Disabling certain categories of cookies may affect the functionality of the Website.

9. Retention of personal data

We take all reasonably practicable steps to ensure that personal data will not be kept longer than is necessary for the fulfilment of the purposes (or any directly related purpose) for which the data is or is to be used, unless the retention is otherwise permitted or required by law. When personal data is no longer required, we will take reasonable steps to destroy, anonymise, or de-identify it in a secure manner.

10. Security of personal data

We have implemented reasonable technical and organisational measures designed to protect personal data against unauthorised or accidental access, processing, erasure, loss, or use. These measures include access controls, encryption in transit, and ongoing review of our information security practices.

However, no method of transmission over the internet or method of electronic storage is completely secure. While we take reasonable steps to protect your personal data, we cannot guarantee its absolute security.

In the event of a personal data breach likely to materially affect your interests, we will take reasonable steps to notify you and the Office of the Privacy Commissioner for Personal Data, Hong Kong (the "PCPD") without undue delay, in accordance with applicable law and PCPD guidance.

11. Your rights

Under the PDPO, you have the right to:

• Request access to the personal data we hold about you.
• Request correction of any personal data that is inaccurate.
• Request removal of personal data that is no longer required for the purposes for which it was collected.

To exercise any of the above rights, please contact us at [email protected]. A standard Data Access Request Form (PCPD Form OPS003) is available from the PCPD website at www.pcpd.org.hk. We may require you to verify your identity before responding to such requests. We will respond to your request within the time periods required by applicable law and, where permitted under the PDPO, may charge a reasonable fee for processing data access requests.

If you are not satisfied with our response, you have the right to lodge a complaint with the PCPD.

12. Direct marketing

You have the right to stop receiving direct marketing communications from us at any time. We will not use your personal data for direct marketing purposes without first notifying you and obtaining your consent in accordance with the PDPO.

If you no longer wish to receive direct marketing communications from us, you may opt out by following the instructions provided in any such communication, or by contacting us at [email protected].

13. Third-party websites

The Website may contain links to third-party websites operated by other organisations. This Privacy Policy applies only to the Website. We are not responsible for the privacy practices or the content of any third-party websites. We encourage you to review the privacy policies of any third-party websites you visit.

14. Changes to this Privacy Policy

We may modify this Privacy Policy from time to time to reflect changes in our practices, the law, or the operation of the Website. Any updates will be posted on this page and the "Last Updated" date at the top of this Privacy Policy will be revised accordingly. Your continued use of the Website after any changes constitutes your acceptance of the updated Privacy Policy.

15. Governing law

This Privacy Policy, and any matters arising from or in connection with it, are governed by, and will be construed in accordance with, the laws of the Hong Kong Special Administrative Region of the People's Republic of China.

16. Contact us

If you have any questions or complaints about this Privacy Policy or our handling of your personal data, please contact us at:

Next Security Limited Unit 721, 7/F, Building 19W
No. 19 Science Park West Avenue
Hong Kong Science Park
Pak Shek Kok, New Territories
Hong Kong SAR

Email: [email protected]