Datastreamcraft

Privacy notice

How Datastreamcraft collects, uses, and retains personal data in connection with enquiries and engagements.

Last updated: 29 July 2026

This notice explains how Datastreamcraft (“we”) handles personal data when you use datastreamcraft.digital, contact us, or become a client.

Data controller

Datastreamcraft
China Merchants Tower, Shun Tak Centre, Sheung Wan, Hong Kong
Email: info@datastreamcraft.digital
Phone: +852 2859 0888

Data we collect

  • Enquiry data: name, email, optional engagement interest, and message content you submit via the contact form or email.
  • Engagement data: business contact details, role titles, and correspondence needed to deliver audit trail monitoring or related services.
  • Technical data: limited server logs (IP address, browser type, pages viewed) and cookie-related data as described in our cookie notice.

We do not ask for Hong Kong Identity Card numbers, payment card details, or full ledger extracts through the public website.

We use personal data to respond to enquiries, provide contracted services, improve site reliability, and meet legal obligations. Where Hong Kong’s Personal Data (Privacy) Ordinance (PDPO) applies, we process data for purposes directly related to these functions and with your consent where required (for example, non-essential cookies).

Retention

  • Enquiry records: up to 24 months after last correspondence if no engagement follows.
  • Client engagement records: for the period required by the engagement letter and applicable professional retention duties, typically not less than seven years for working papers, then securely destroyed or anonymised.
  • Server logs: ordinarily 90 days unless needed to investigate security incidents.

Sharing

We share personal data only with: hosting and email providers acting on our instructions; professional advisers under confidentiality; or authorities where required by Hong Kong law. We do not sell personal data.

International transfers

Our primary operations and preferred storage are in Hong Kong. If a processor stores data outside Hong Kong, we take steps consistent with the PDPO to protect the data, including contractual safeguards. Engagement materials involving overseas group entities may be shared with those entities at your direction.

Your rights

Subject to the PDPO, you may request access to and correction of your personal data. You may withdraw consent for optional processing (such as analytics cookies) without affecting essential site use. To exercise rights, email info@datastreamcraft.digital. We aim to respond within the timeframes expected under Hong Kong law.

Security

We use access controls, encrypted transport (HTTPS), and least-privilege practices for engagement files. No method of transmission is perfectly secure; please avoid sending highly sensitive extracts via the public form.

Children

Our services are directed to business professionals. We do not knowingly collect data from children.

Changes

We may update this notice by posting a revised version here. Material changes will update the “last updated” date.

Contact

Privacy questions: info@datastreamcraft.digital.