Privacy Policy

1. Who we are and what this policy covers

Splash Lab Hong Kong Limited ("Splash Lab", "we", "us") operates splashlab.ai and is responsible for the personal data described in this policy. This policy covers visits to our company website and enquiries sent to contact@splashlab.ai, including demo requests. We handle personal data with reference to Hong Kong’s Personal Data (Privacy) Ordinance (Cap. 486).

Kenna is in development. This website does not offer user accounts, payment processing, campaign management, or advertising-account connections. Any future product or customer service will require an appropriate privacy notice before collecting additional data.

2. Information we handle

If you email us, we receive your email address, name if provided, message, attachments, and any company, role, or contact details you choose to share. Providing these details is voluntary. We need a reply address and enough information to answer your enquiry; without them, we may be unable to respond.

Website delivery and security providers may process technical information such as your IP address, browser and device information, requested URL, request time, and security events. This website has no account-registration or contact form. Please do not send passwords, advertising-account credentials, identity documents, or unnecessary sensitive personal data.

3. How we use information

We use enquiry information to respond, discuss a requested demo or potential business relationship, and maintain relevant correspondence. Technical information is used to deliver the website, diagnose problems, and protect it against abuse. We may also use necessary records to meet legal obligations or establish, exercise, or defend legal claims.

We do not sell personal data. Sending an enquiry does not subscribe you to a marketing list. We will not use your enquiry information for unrelated direct marketing without the notice and consent required by applicable law.

4. Service providers and disclosures

The publication setup uses Cloudflare for website hosting and delivery and Google Workspace for company email. These providers process relevant information to provide their services. Authorised team members may access enquiries where needed to respond. Professional advisers or authorities may receive information where necessary for advice, legal compliance, or the protection of rights.

We limit disclosures to information needed for the relevant purpose and use appropriate contractual or other safeguards for providers processing data on our behalf. Providers may also handle some technical information under their own privacy notices.

5. Processing outside Hong Kong

Our service providers may process information in locations outside Hong Kong. Where personal data is processed on our behalf, we take practicable steps to protect it through appropriate contractual or other arrangements, including controls on use, retention, and security. Email us if you have questions about a transfer relevant to your enquiry.

6. Cookies and tracking

Our website application does not set analytics or advertising cookies, run advertising pixels, or embed third-party videos or social feeds. Website delivery or security infrastructure may use necessary technologies to operate or protect the site. If we introduce optional analytics or tracking, we will update this policy and provide any choices or consent process required before doing so.

7. Retention and security

We keep personal data only as long as necessary for the purpose for which it was collected, relevant follow-up, and applicable legal or record-keeping requirements. We review whether correspondence is still needed and delete or anonymise information that no longer needs to be retained. Technical records are subject to the hosting and security providers’ applicable retention arrangements.

We take practicable security measures appropriate to the information, including restricting access to authorised people and using access controls for business email and hosting accounts. No internet transmission or storage system can be guaranteed completely secure.

8. Access, correction, and privacy questions

You may ask whether we hold your personal data, request access to it, or request correction of inaccurate data, subject to applicable law. You may also ask us to delete information that is no longer needed or raise a concern about its use. We may request proportionate information to verify your identity and locate the relevant records.

Send requests to contact@splashlab.ai, addressed to the Privacy Contact, Splash Lab Hong Kong Limited. We will handle access and correction requests within the time limits required by Hong Kong law, generally 40 days, subject to applicable exceptions. If a lawful fee applies to an access request, we will explain it first. You may also contact the Office of the Privacy Commissioner for Personal Data, Hong Kong.

9. External links and children

If you follow an external link or use your own email provider to contact us, that provider’s privacy practices apply to its services. Our website is intended for business audiences and is not directed at children. If you believe a child has sent us personal data unnecessarily, contact us so we can review and remove it where appropriate.

10. Updates and contact

We will update this page when relevant practices change and identify the revised date. Where a change requires additional notice or consent, we will provide it as required. Privacy enquiries: contact@splashlab.ai. Website operator and data user: Splash Lab Hong Kong Limited.