privacy policy

last updated 13 november 2026

we collect as little as we can: only what you send us, so we can reply. this site sets no cookies and runs no tracking.

1. who we are

harbour collective is a web design studio based in hong kong. we decide how the personal data described here is used, so we are its controller under hong kong’s personal data (privacy) ordinance and, for visitors it applies to, the eu and uk gdpr. we apply the same standard to every visitor, wherever you are.

contact us about anything in this policy at enquiries@harbourcollectivestudio.com.

2. what we collect

• when you use the contact form: your business name, your name, your email or whatsapp number, your message, the time you sent it and the country your connection comes from (which our host adds to every request).
• when you message us on whatsapp or by email: what you send us, and your number or address.
• if you become a client: your business details, what you approve and the invoices and payments between us.
• when you visit: our host, cloudflare, processes the technical details every website request carries (ip address, browser, the page asked for) to deliver the site and protect it from attacks. we only ever look at totals, such as how many people visited on a day, and we don’t keep ip addresses.

we don’t ask for anything sensitive, and we never buy data about you.

3. how we use it, and why we’re allowed to

we never use your details for advertising, we never sell them, and we don’t send newsletters.

4. cookies

this site sets no cookies and stores nothing on your device. it loads no analytics, advertising or social media scripts, and its fonts are served from our own host. that is why you don’t see a cookie banner. if that ever changes, we’ll ask for your consent first and update this policy.

the whatsapp links open whatsapp, which is run by meta under its own privacy policy.

5. who we share it with

only the services that run this site and our inbox, each acting on our instructions:

• cloudflare: hosting, security, and storage of form messages.
• google: our email, which is where form messages are delivered.
• meta (whatsapp): only if you choose to message us there.

we share data with authorities only when the law requires it.

6. international transfers

these providers may process data outside hong kong, including in the united states. where your data comes from the eu or uk, we rely on the standard contractual clauses (and the uk addendum) these providers offer.

7. how long we keep it

• form messages are deleted from our message store automatically after 12 months. the email copy is kept only while we need it to talk with you.
• if you don’t become a client, we delete your details whenever you ask.
• client invoices and payment records are kept for 7 years, as hong kong law requires for business records.

8. how we protect it

the site and form are served only over https. access to messages is limited to us, through accounts protected by two-step sign-in. no system is perfectly secure, but we keep what we hold small, and that limits the risk.

9. your rights

you can ask us to:

• show you the data we hold about you, and give you a copy
• correct it
• delete it
• stop or limit how we use it, or object to it
• send it to you or someone else in a usable format
• withdraw your agreement at any time

email enquiries@harbourcollectivestudio.com and we’ll reply within one month. you can also complain to hong kong’s privacy commissioner for personal data, or to the data protection authority where you live (in the eu, your national authority; in the uk, the ico).

10. children, automated decisions and changes

this site isn’t meant for children under 16, and we don’t knowingly collect their data. we make no decisions about you by automated means. if we change this policy, we’ll update the date at the top; if a change matters to you, we’ll tell you before it applies.

11. contact

harbour collective, hong kong. enquiries@harbourcollectivestudio.com or whatsapp.

© 2026 harbour collective