私隱政策 Privacy Policy

Privacy Policy

Last Updated: 2025-08-24
Company: Maverick Consulting Group Limited (LLFA) (“we/us/our”)
Brand: LLFA 念念花藝學院
Website/Platform: [your primary domain] and subdomains (including www, offers, portal, blog)
Contact: [email protected] | Phone/WhatsApp: +852 5185 9015 | Hong Kong (HKSAR)

Overview
We respect your privacy and process personal data in accordance with applicable laws, including Hong Kong’s PDPO and, where applicable, GDPR and CCPA/CPRA. This Policy explains what we collect, how we use/share/retain/secure your data, and your rights.

Data We Collect
Depending on your interactions with us:

Identity & Contact: name, salutation, email, phone, WhatsApp number, address, company/title.

Account & Transaction: login credentials (hashed), preferences, orders, and payment records (processed/stored by third parties such as Stripe).

Marketing Interaction: subscription status, opens/clicks, unsubscribes, conversation logs across email/SMS/WhatsApp.

Forms & UGC: information you submit via forms, surveys, events, communities, including files.

Technical & Usage: IP, device/browser data, cookies, pixels, device IDs, pages viewed, referrers, UTMs, approximate geolocation (IP-based).

Third‑Party Sources: audience, conversion, and measurement data from ad/analytics platforms (Meta, Google, TikTok, LinkedIn, etc.).

How We Use Your Data

Provide/Improve Services: deliver requested content/products/services, support, and UX improvements.

Communications: respond to inquiries, customer support, important notices.

Marketing & Remarketing: Send educational content, free resources, promotions, and event messages via email, SMS, and WhatsApp. Build custom/lookalike audiences, run retargeting and cross‑platform ads using cookies/pixels. A/B testing, attribution, and conversion tracking.

Compliance & Risk: prevent fraud/abuse; comply with legal, tax, and law‑enforcement requests.

Analytics: aggregated or de‑identified usage/performance analysis.

Legal Bases & Consent
We rely on contract necessity, legitimate interests (marketing, product improvement, security), consent where required (e.g., electronic direct marketing or non‑essential cookies), and legal obligations. You may withdraw consent at any time; prior processing remains lawful.

Sharing Your Data
We do not sell personal data. We share only as necessary with:

Service providers: email/SMS platforms, WhatsApp business providers, CRM/automation, hosting, payment processors (e.g., Stripe), support and analytics tools.

Ad/Analytics partners: Meta, Google, TikTok, LinkedIn (may use cookies/pixels/IDs).

Business transfers: mergers, acquisitions, asset sales.

Legal: where required by law or to protect rights, property, or safety.

International Transfers
Your data may be transferred outside your region. We use appropriate safeguards (e.g., Standard Contractual Clauses) where required.

Retention
We retain data as long as necessary for the purposes collected and legal obligations. When no longer needed, we delete or anonymize it.

Your Rights
Subject to applicable law, you may request access, rectification, objection/restriction (including to direct marketing), portability (where applicable), withdrawal of consent, erasure, and lodge a complaint with a supervisory authority. Contact [email protected] with sufficient identity details.

Marketing Choices

Email: unsubscribe via the link in any email.

SMS: reply STOP/UNSUBSCRIBE (or local equivalent).

WhatsApp: type “STOP” or request to end messages anytime.

Cookies: manage non‑essential cookies via browser or our site banner.

Ads preferences: adjust settings on platforms (Facebook/Google) or opt out of interest‑based ads.

Cookies, Pixels, Similar Technologies
We use necessary and non‑essential cookies/pixels for functionality, analytics, and remarketing. Third parties (e.g., Meta/Google) may collect/receive data from our site and combine it with their data to provide ad services. Control cookies via your browser and industry opt‑out tools.

Minors
Our services are not directed to children below the legal age in your locale. If collected inadvertently, we will delete upon notice.

Security
We implement technical and organizational measures (encryption in transit, access controls, audit logs). No method is 100% secure; safeguard your credentials and use strong passwords.

Third‑Party Links
Our site may link to third‑party sites/services with separate privacy policies. We are not responsible for their practices.

Regional Supplements

EU/UK (GDPR): where we serve these regions, we process under GDPR; cross‑border transfers may rely on SCCs. You may complain to your local authority.

California (CCPA/CPRA): if we serve California residents, you have rights to know, delete, correct, limit use of sensitive data, and opt out of “sharing” for cross‑context behavioral advertising. We do not sell personal data; we may “share” for advertising. Exercise rights at https://www.llfa.net/do-not-sell-or-share (if applicable).

Other regions: We will honor local rights where feasible.

Contact Us
For privacy requests/questions: [email protected]. For verification, include the email/phone you used with us.

Changes to This Policy
We may update this Policy. Material changes will be posted here and, where required, notified by email. Effective as of the “Last Updated” date.

Direct Marketing & Messaging Consent
By submitting your information, you consent to receive marketing and service messages from us via email, SMS, and WhatsApp. Messages may be automated, subject to local laws. You can opt out at any time; transactional/service notices may still be sent where necessary.

WhatsApp & Messaging Disclosure
By interacting with us on WhatsApp or similar platforms, you agree to receive promotional and transactional messages. Type “STOP” to opt out at any time. Your data may also be processed under those platforms’ own privacy policies.

Controller/Processor
We act as a data controller for our own marketing and services; when providing client services, we may act as a processor under a separate agreement.

Data Protection Contact
Designated contact: Mr. Sin (Data Protection Contact) | [email protected]