Privacy Policy
1. Introduction and Scope
Green Life Science Co., Limited respects the privacy of every person who visits the website at greenlifesci.buzz, contacts our studio, or engages our environmental monitoring and green facility systems engineering services. This Privacy Policy explains what information we collect, why we collect it, how we handle it, how long we keep it, and the choices and rights that belong to you. It applies to the website, to enquiries you send us, and to the data that our monitoring installations produce on behalf of our clients.
This policy is written to be read. We avoid dense legal phrasing wherever a plain sentence will do, because a privacy statement that nobody understands does not protect anybody. If any part of this policy is unclear, please write to us using the contact details in the final section and we will explain it further. We would rather answer a question than leave a person uncertain about how their information is treated.
The developer of this website is GreenLife Science, working under the company Green Life Science Co., Limited. Throughout this policy, the words we, us, our and the Company all refer to Green Life Science Co., Limited. The words you and your refer to any visitor, enquirer or client. By using this website you confirm that you have read and understood this policy. If you do not agree with it, please do not use the website or send us personal information through it.
2. Who We Are
The data controller responsible for the information described in this policy is Green Life Science Co., Limited, whose registered place of business is Rm A5 7/F ASTORIA BLDG, 34 ASHLEY RD, Tsim Sha Tsui, Hong Kong (HK). Our team designs sealed environmental monitoring installations and green facility systems for clients who need dependable, documented readings from controlled spaces.
We operate as a small, focused practice. That means the people who handle an enquiry are the same people who design the system that follows it. We do not route personal information through a large call centre, and we do not sell it onward to anyone. If you have a privacy question, the fastest route is to write directly to our studio email address, which is monitored by a member of our team during business hours.
For the purposes of applicable data protection law, we act as a controller when we decide why and how your information is used for our own website and business purposes. When we process monitoring data on behalf of a client under that client instructions, we act as a processor, and the client remains the controller of that data.
3. Information We Collect
We collect information in three broad ways. First, information that you give us directly. Second, information that is generated automatically as you use the website. Third, information that our monitoring systems produce when they are installed at a client site.
Information you give us directly includes your name, your email address, your telephone number if you provide one, the subject and content of any message you send through our contact form, and any documents or details you choose to share during a project brief. If you become a client, we also hold the correspondence, drawings and records that are necessary to deliver and support the installation.
Information generated automatically includes the internet protocol address from which you reach the website, the type of browser and device you use, the pages you view, the time of your visit and the referring address that led you here. This information is used in aggregate to understand how the website performs and to keep it secure. We do not use it to build a personal profile of you for advertising purposes.
Information produced by monitoring systems includes readings such as temperature, humidity, water chemistry, air quality and similar measurements. Much of this is environmental rather than personal. Where a monitoring system could record information about individuals, such as a badge reading or a camera feed, we treat that information with heightened care and only process it where the client has a lawful basis to collect it and has instructed us accordingly.
4. How We Use Information
We use the information we collect for specific and limited purposes. We use contact details to answer your enquiry, to arrange a survey, to prepare a proposal and to manage an ongoing project. We use project records to design, install, calibrate and support the systems we deliver, and to keep the documentation that a future technician may need.
We use website usage information to keep the site available, to understand which pages are useful and which are not, and to protect the site against abuse, spam and malicious traffic. We use billing and administrative information to issue invoices, meet our accounting obligations and maintain the business records that our professional advisors require.
We do not use your personal information to make automated decisions that produce legal or similarly significant effects, and we do not use it to train advertising profiles. If we ever wish to use information for a purpose that is genuinely new, we will tell you what that purpose is and, where the law requires it, ask for your agreement before we proceed. You may always decline.
5. Lawful Basis for Processing
Where data protection law requires us to identify a lawful basis, we rely on the following. We process information to take steps at your request before entering a contract, and to perform a contract once it exists, for example when we prepare a proposal or deliver an installation. We process information for our legitimate interests in running a professional studio, responding to enquiries, securing our website and improving our services, provided those interests are not outweighed by your rights.
We process information to comply with legal obligations, such as accounting, tax and record keeping duties that apply to businesses in Hong Kong. Where we process special category information, or where the law otherwise requires consent, we rely on your consent, which you may withdraw at any time. When we act as a processor for a client monitoring project, our lawful basis is the contract we hold with that client, and any enquiries about that data should in the first instance be directed to the client as controller.
7. Monitoring Data and Sensor Records
Our core service is environmental monitoring, and this section explains how we handle the records that monitoring produces. Sensor readings such as temperature, humidity, water chemistry and air quality are generally environmental measurements rather than personal information. They are stored so that trends can be reviewed, thresholds can be tuned and maintenance can be scheduled.
When a monitoring system is installed, the data it generates belongs to the client who commissioned it. We access that data in order to configure the system, verify that it is working, diagnose faults and provide support. We document every interface so that the client is never locked out of their own data, and we return or transfer monitoring records on request at the end of an engagement. Where a monitoring system is capable of capturing information about identifiable individuals, we require a clear lawful basis from the client before that capability is enabled.
We keep monitoring records only for as long as they are useful for the client purpose and any contractual or legal requirement that applies. After that, records are deleted or anonymised so that they can no longer be linked to a person or a site.
9. Service Providers and Processors
We choose our service providers with care and we expect them to protect information to a standard consistent with this policy. Each provider is bound by a written agreement that limits what they may do with the information we share and requires appropriate security measures. Providers are permitted to use the information only for the service they provide to us, and only on our instructions.
Typical providers include website hosting, email delivery, cloud storage and accounting services. We review our providers periodically and we replace any provider whose safeguards or practices no longer meet our expectations. If a provider needs to engage its own sub processors, we require that the same standards flow down to them through contract.
10. International Data Transfers
Our studio is based in Hong Kong, and some of the service providers we use may store or process information in other countries. Where information moves across borders, we take steps to ensure it continues to receive an appropriate level of protection. Those steps may include contractual safeguards, an assessment of the legal environment in the destination, or reliance on a recognised transfer mechanism where one applies.
By using our website or engaging our services, you understand that information may be processed in a location outside your own country. If you would like more detail about the safeguards that apply to a particular transfer, please contact us and we will provide it.
11. Data Retention
We keep personal information only for as long as we need it for the purpose for which it was collected, and for any period that a contract or the law requires. Enquiries that do not become projects are kept for a reasonable period so that we can follow up and keep a record of the conversation, after which they are deleted. Project records are kept for the life of the relationship and for a period afterwards, so that we can support the installation and meet our legal and accounting obligations.
When information is no longer needed, we delete it or make it anonymous so that it can no longer be linked to a person. If deletion is not immediately possible, for example because information is held in a backup archive, we isolate it and keep it out of active use until deletion is complete. We review our retention practices periodically to make sure they remain sensible.
12. How We Protect Information
We protect information with a combination of technical and organisational measures. These include access controls that limit who can see information, encryption of data in transit where appropriate, secure configuration of the systems we use, and regular review of who holds access to what. Only team members who need information to do their work are given access to it.
We also train our team to recognise common threats such as fraudulent email and unsafe links, and we keep our software up to date so that known vulnerabilities are closed. No system can promise perfect security, and we do not claim that. What we do promise is that we take the protection of information seriously, that we respond promptly if we become aware of a problem, and that we will notify you and any relevant authority as required by law if a breach affects your rights.
13. Your Privacy Rights
Depending on where you live, you may have a range of rights over the personal information we hold about you. These typically include the right to be told what information we hold and why, the right to receive a copy, the right to have inaccurate information corrected, the right to have information deleted in certain circumstances, the right to restrict or object to certain processing, and the right to receive information in a portable format.
To exercise any of these rights, please contact us using the details in the final section. We will respond within the timeframe required by applicable law. We may need to confirm your identity before we act, so that we do not disclose information to the wrong person. We will not charge a fee unless the law allows it and the request is clearly excessive. If we are unable to comply with a request, we will explain why.
Where we process monitoring data on behalf of a client, please direct your request to that client in the first instance, as they are the controller of that data. We will support them in responding, as our contract requires.
14. Privacy for Children
The website and our services are intended for businesses and professional users. We do not knowingly collect personal information from children. If you believe that a child has provided information to us without appropriate consent, please contact us and we will take reasonable steps to remove it.
Where a client project might involve information about minors, we require the client to confirm that it has a lawful basis and any necessary consent before such information is processed through our systems. We will assist the client in designing the installation so that unnecessary personal information is not captured in the first place.
15. Marketing and Communications
We may use your contact details to respond to your enquiry and, where the law allows, to send you occasional updates about our services that are relevant to the conversation we have had. We do not send bulk marketing to people who have not interacted with us, and we do not buy contact lists. Every marketing message we send includes a clear way to stop receiving it.
If you ask us to stop sending marketing, we will keep a minimal record of that request so that we can honour it, but we will not continue to contact you for promotional purposes. Service messages, such as project updates or important notices about a system we support, are not marketing and will continue to be sent while the relevant relationship is active.
16. Third Party Links
The website may contain links to other websites that we do not control. This policy does not apply to those sites, and we are not responsible for their privacy practices or content. We encourage you to read the privacy statement of any website you visit after leaving ours, so that you understand how it handles your information.
Where we link to a third party tool that we use to run our business, we choose it with care, but the responsibility for its privacy practices remains with that third party. If you have a concern about a link we provide, please tell us so that we can review it.
17. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, our services or the law. When we make a material change, we will update the date at the top of this page and, where appropriate, provide a more prominent notice. We encourage you to review this page periodically so that you always know how we handle information.
Continuing to use the website after an update takes effect means that you accept the revised policy. If you do not agree with a change, you may stop using the website and, if you are a client, contact us to discuss how it affects your project.
18. How to Contact Us
If you have a question about this Privacy Policy, a request about your information, or a concern about how we have handled data, please contact our studio. We take every privacy question seriously and we will respond as quickly as we can.
Postal address: Green Life Science Co., Limited, Rm A5 7/F ASTORIA BLDG, 34 ASHLEY RD, Tsim Sha Tsui, Hong Kong (HK).
Email: hello@greenlifesci.buzz. Phone: +14198449720.
If you are not satisfied with our response, you may have the right to complain to a data protection authority in your jurisdiction. We would appreciate the chance to resolve your concern directly before you take that step.