Privacy Policy

1. Who we are

The data user responsible for your personal data is Aperion Labs Limited, Suite C, Level 7, World Trust Tower, 50 Stanley Street, Central, Hong Kong. You can contact us at sonnh@aperion.global.

2. Personal data we collect

Data you give us. When you email us or contact us as a partner, member of the press or investor, we collect what you choose to send, such as your name, email address, company, job title and the content of your message and any attachments.

Data collected automatically. When you browse the Website, our hosting provider and the services listed in Section 5 may automatically record technical information, including IP address, browser type and version, device and operating system, referring page, pages viewed and the date and time of your visit.

We do not knowingly collect sensitive personal data, and the Website has no account registration, payment or sign-up forms.

3. How we use personal data

We use personal data only for the following purposes:

• to reply to your enquiries and manage our relationship with partners, press and investors;
• to operate, secure, maintain and improve the Website, including detecting and preventing abuse, fraud and security incidents;
• to understand, in aggregate, how the Website is used;
• to comply with legal and regulatory obligations, and to establish, exercise or defend legal claims.

We do not sell your personal data, and we do not use it for direct marketing without your consent.

4. Cookies and similar technologies

The Website itself does not set advertising or tracking cookies. Third-party services we use to deliver the Website (such as font and content delivery providers) may receive standard technical data such as your IP address when your browser loads their resources.

If we introduce analytics or other non-essential cookies in the future, we will update this section and, where required by law, ask for your consent first. You can also block or delete cookies through your browser settings at any time.

5. Who we share data with

We may transfer personal data to the following classes of recipients, only as needed for the purposes above:

• service providers acting on our behalf, such as website hosting, content delivery, font delivery (for example, Google Fonts) and email providers;
• our professional advisers, such as lawyers, auditors and accountants;
• a buyer, investor or successor, in connection with a financing, merger, acquisition or sale of all or part of our business;
• courts, regulators, law enforcement or other authorities, where required by law.

We require our service providers to protect personal data and to use it only for the services they provide to us.

6. International transfers

Our service providers may store or process data outside Hong Kong. When this happens, we take reasonable steps to make sure your personal data receives a level of protection comparable to the protection it has under the PDPO.

7. How long we keep data

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting or reporting requirements. As a general rule, we keep enquiry correspondence for up to 24 months after our last contact with you, and server logs for no longer than 12 months, unless we need them longer to investigate a security incident or deal with a legal claim.

8. Security

We use reasonable technical and organisational measures to protect personal data against unauthorised or accidental access, processing, erasure, loss or use, including encrypted connections (HTTPS) and access controls. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.

9. Your rights

Under the PDPO, you have the right to ask whether we hold your personal data, to request a copy of it, and to ask us to correct it if it is inaccurate. Depending on where you live, you may also have the right to request deletion, restrict or object to processing, or withdraw consent.

To make a request, email sonnh@aperion.global with the subject “Data Request”. We will respond within 40 days, as required by the PDPO. As permitted by law, we may charge a fee that is not excessive for complying with a data access request.

10. Children

The Website is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has sent us personal data, please contact us and we will delete it.

11. Third-party links

The Website may link to third-party websites or services. We are not responsible for their privacy practices, and we encourage you to read their privacy policies.

12. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page shows when it was last changed. If we make significant changes, we will make that clear on the Website.

13. Contact us