LEGAL · 法律

Privacy Policy私隱政策

Last updated 13 July 2026最後更新:2026 年 7 月 13 日 PDPO · Cap. 486, Hong Kong《私隱條例》· 香港第 486 章

XHealth Solution Company Ltd. (“XHealth”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal data in accordance with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong (the “PDPO”) and its six Data Protection Principles. This Policy explains what personal data we collect through this website and our services, how we use it, and the rights you have. XHealth Solution Company Ltd.(下稱「XHealth」、「我們」)尊重您的私隱,並承諾按照香港《個人資料(私隱)條例》(第 486 章)(下稱「《私隱條例》」)及其六項保障資料原則保護您的個人資料。本政策說明我們透過本網站及服務收集哪些個人資料、如何使用,以及您所享有的權利。

Data user資料使用者 XHealth Solution Company Ltd.
Registered office註冊辦事處 [ registered address, Hong Kong ][ 香港註冊地址 ]
Data protection enquiries資料保障查詢 [email protected]
WhatsApp / PhoneWhatsApp/電話 +852 6623 5297

01Introduction引言

This Policy applies to personal data we collect through this website (including its diagnosis, founder-session and contact forms) and in the course of providing our consulting services. You are not obliged to provide the personal data we request, but if you do not, we may be unable to process your enquiry, prepare your diagnosis, or provide our services. 本政策適用於我們透過本網站(包括其診斷、創辦人約見及聯絡表單)以及在提供顧問服務過程中所收集的個人資料。您並無義務提供我們索取的個人資料,但若您不提供,我們可能無法處理您的查詢、為您製作診斷,或提供我們的服務。

Some of the information you submit relates to your business rather than to you as an individual. Where information identifies a living individual, we treat it as personal data under this Policy; business information is also handled confidentially under our Terms & Conditions. 您提交的部分資料涉及您的業務,而非您個人。凡能識別在世個人的資料,我們均按本政策視為個人資料處理;業務資料亦按我們的服務條款及細則保密處理。

02Personal data we collect我們收集的個人資料

Depending on how you interact with us, we may collect: 視乎您與我們互動的方式,我們可能收集:

Identity & contact details身份及聯絡資料

  • Your name or preferred title, email address, WhatsApp number or phone number;您的稱呼或姓名、電郵地址、WhatsApp 號碼或電話號碼;
  • Your company name and website, and your preferred time and channel for us to reach you.您的公司名稱及網站,以及您方便我們聯絡的時段與渠道。

Business & marketing information you submit您提交的業務及營銷資料

Through the diagnosis and enquiry forms you may provide information such as: your industry, main products or services, year founded and team size, target markets, ideal-customer profile, customer-acquisition channels, enquiry and closing volumes, average customer value, revenue range, growth budget, current and past marketing spend, main competitors, 12-month goals, key challenges, things you prefer not to do, and links to your website, Google Business Profile, social accounts and customer reviews — plus any message you choose to send us. 透過診斷及查詢表單,您可能提供以下資料:所屬行業、主要產品或服務、成立年份與團隊人數、目標市場、理想客戶輪廓、獲客渠道、查詢與成交數量、平均客戶價值、營業額區間、增長預算、目前及過往的營銷投入、主要競爭對手、未來 12 個月目標、主要難題、您不願採用的做法,以及您的網站、Google 商家檔案、社交帳號與客戶評價的連結——連同您選擇傳送給我們的任何訊息。

Transaction information交易資料

  • For paid services, records of your quotation, payments and invoices. Payments are processed by third-party providers (for example FPS, PayMe, your bank or a card provider); we receive confirmation of payment and the records we need for accounting — we do not collect or store your full card number.就付費服務而言,您的報價、付款及發票記錄。付款由第三方服務供應商處理(例如「轉數快」、PayMe、您的銀行或信用卡機構);我們收到付款確認及作會計用途所需的記錄——我們不會收集或儲存您的完整信用卡號碼。

Technical & usage information技術及使用資料

  • We keep this to a minimum. Your language preference is stored in your browser's local storage on your own device. If analytics are enabled, we may collect limited technical data such as IP address, device or browser type, and the pages you view, to understand and improve the site.我們將此類資料保持在最低限度。您的語言偏好儲存於您自己裝置的瀏覽器本機儲存空間內。若已啟用分析工具,我們可能收集有限的技術資料,例如 IP 位址、裝置或瀏覽器類型,以及您瀏覽的頁面,以了解及改善本網站。

03How & why we use your data我們如何及為何使用您的資料

We use your personal data only for the purpose for which it was collected, or a directly related purpose, including to: 我們僅為收集資料的目的或直接相關的目的使用您的個人資料,包括用以:

  • assess, prepare and deliver your brand diagnosis, report or founder session;評估、製作及交付您的品牌診斷、報告或創辦人策略會;
  • respond to your enquiries, confirm quotations and arrange meetings;回應您的查詢、確認報價及安排會面;
  • provide, administer and improve our services, and process payments and keep accounting records;提供、管理及改善我們的服務,並處理付款及保存會計記錄;
  • send you service-related communications about an engagement; and就委聘向您發送與服務相關的通訊;以及
  • comply with our legal, regulatory and accounting obligations.履行我們的法律、監管及會計責任。
We collect only the data we reasonably need for these purposes. We will seek your consent before using your personal data for a new purpose that is not related to the above. 我們只收集為上述目的而合理需要的資料。若擬將您的個人資料用於與上述無關的新目的,我們會先徵得您的同意。

04Direct marketing直接促銷

We will not use your personal data for direct marketing without your consent. If you have agreed, we may occasionally send you insights, updates or offers about our services by email or messaging. Every such message includes an easy way to opt out, and you may withdraw your consent at any time, free of charge, by emailing [email protected]. This reflects the direct-marketing requirements under Part 6A of the PDPO. 未經您的同意,我們不會將您的個人資料用於直接促銷。若您已同意,我們可能不時以電郵或訊息向您發送有關我們服務的觀點、更新或優惠。每則此類訊息均設有便捷的取消途徑;您亦可隨時免費撤回同意,只需電郵至 [email protected]。此安排符合《私隱條例》第 6A 部有關直接促銷的規定。

05Disclosure & transfer資料的披露與轉移

We do not sell your personal data. We may disclose it, on a need-to-know basis and under appropriate confidentiality, to: 我們不會出售您的個人資料。我們可能在有需要知悉的基礎上,並在適當的保密安排下,向以下對象披露:

  • our own staff and contractors involved in delivering your engagement;參與交付您委聘工作的我方員工及承辦人;
  • service providers who process data on our behalf — such as website hosting, form processing, communication tools, analytics and payment providers;代我們處理資料的服務供應商——例如網站寄存、表單處理、通訊工具、數據分析及付款服務供應商;
  • professional advisers (such as accountants or lawyers); and專業顧問(例如會計師或律師);以及
  • authorities or other parties where disclosure is required by law, a court or a regulator.於法律、法院或監管機構要求披露時的有關當局或其他方。

Some of these providers may process data outside Hong Kong. Where personal data is transferred outside Hong Kong, we take reasonable steps to ensure it is given a level of protection comparable to that required under the PDPO. 部分供應商可能於香港以外處理資料。凡個人資料轉移至香港以外地方,我們會採取合理步驟,確保其獲得與《私隱條例》所要求相若的保障水平。

06Data security資料保安

We apply reasonable technical and organisational measures to protect personal data against unauthorised or accidental access, processing, loss or use, and access is limited to those who need it. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security. 我們採取合理的技術及組織措施,保護個人資料免遭未經授權或意外的查閱、處理、遺失或使用;資料的接觸權限僅限於有需要的人員。惟互聯網傳輸或電子儲存並無任何方式可達至絕對安全,我們無法保證絕對的安全性。

07Accuracy & retention資料的準確性與保留

We take practicable steps to keep personal data accurate. Please let us know if your details change. We keep personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by law (for example, accounting records), after which it is deleted or anonymised. 我們採取切實可行的步驟,確保個人資料準確;如您的資料有變,請通知我們。我們保留個人資料的期間,僅以達成收集目的所需,或法律所要求者(例如會計記錄)為限;其後即予刪除或匿名化處理。

08Your rights — access & correction您的權利——查閱與更正

Under the PDPO you have the right to: 根據《私隱條例》,您有權:

  • ask whether we hold your personal data, and request access to it;查詢我們是否持有您的個人資料,並要求查閱該資料;
  • request correction of any personal data that is inaccurate; and要求更正任何不準確的個人資料;以及
  • ask about our privacy policies and practices and the kinds of personal data we hold.查詢我們的私隱政策及實務,以及我們持有的個人資料種類。

To make a data access or correction request, email [email protected] or write to us at our registered office. We may charge a reasonable fee for complying with a data access request, as permitted by the Ordinance, and we aim to respond within 40 days as required by the PDPO. 如需提出查閱或更正資料要求,請電郵至 [email protected],或以書面寄往我們的註冊辦事處。就處理查閱資料要求,我們可按《私隱條例》所允許,收取合理費用;並會按《私隱條例》的要求,力求在 40 天內回覆。

09Cookies & local storageCookie 與本機儲存

This site stores your language preference in your browser's local storage so the site remembers it on your next visit; this stays on your device. We keep any tracking to a minimum. If analytics or cookies are used, they help us understand how the site is used so we can improve it. You can control or clear cookies and local storage through your browser settings; doing so may affect how the site works. 本網站會將您的語言偏好儲存於您瀏覽器的本機儲存空間,以便下次到訪時記住該設定;此資料留存於您的裝置。我們將任何追蹤保持在最低限度。若使用分析工具或 Cookie,其作用是協助我們了解網站的使用情況以作改善。您可透過瀏覽器設定控制或清除 Cookie 與本機儲存;此舉可能影響網站的運作。

11Children's privacy兒童私隱

Our services are directed at businesses, not at children. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it. 我們的服務以企業為對象,而非兒童。我們不會在知情下收集兒童的個人資料。若您認為有兒童向我們提供了個人資料,請與我們聯絡,以便我們刪除。

12Changes, contact & complaints修訂、聯絡與投訴

We may update this Policy from time to time. The current version is always published on this page with its “last updated” date. For any question or request about your personal data, contact us at [email protected] or +852 6623 5297. 我們可能不時修訂本政策。最新版本連同「最後更新」日期,將一直刊載於本頁。如對您的個人資料有任何疑問或要求,請電郵至 [email protected] 或致電 +852 6623 5297。

If you are not satisfied with how we have handled your personal data, you also have the right to make a complaint to the Office of the Privacy Commissioner for Personal Data, Hong Kong (PCPD)www.pcpd.org.hk. 若您對我們處理您個人資料的方式不滿意,您亦有權向香港個人資料私隱專員公署(PCPD)作出投訴——www.pcpd.org.hk
Looking for the terms of our services?想了解我們的服務條款? Read our Terms & Conditions閱讀服務條款及細則

This page provides general information about how XHealth handles personal data and is not legal advice. It should be read together with any specific privacy notice we give you at the point of collection. 本頁提供有關 XHealth 如何處理個人資料的一般資訊,並不構成法律意見,並應與我們在收集資料時向您提供的任何特定收集個人資料聲明一併閱讀。