Privacy Policy

RESTUD.IO Privacy Policy

Effective date: 8 May 2026. This policy explains how RESTUD.IO Limited handles personal data collected through www.restud.io.

Summary

  • We collect enquiry details that you submit, including your name, email address, project message and any optional attachments.
  • We use this information to respond to your enquiry, prepare quotations, provide support, improve our website and protect our services.
  • We use Firebase services to store enquiries and attachments, and may use Firebase Analytics and Google Analytics to understand website activity.
  • We do not sell your personal data.
  • You may contact us at privacy@restud.io to access, correct or request deletion of your personal data.

1. Who We Are

This Privacy Policy explains how RESTUD.IO Limited, a Hong Kong based software development studio, collects, uses, stores and protects personal data when you visit www.restud.io or submit an enquiry through our website.

For the purposes of the Hong Kong Personal Data (Privacy) Ordinance, RESTUD.IO Limited is the data user responsible for the personal data described in this policy.

2. Personal Data We Collect

When you use the enquiry form, we collect the information you provide directly: your name, email address, project message and any files you choose to attach. Attachments may include documents, PDFs or images that relate to your project enquiry.

Our website may also collect technical and usage information automatically, including your IP address, browser type, device information, pages viewed, approximate location derived from technical data, referring pages, interaction events and timestamps.

Please do not upload confidential, highly sensitive or regulated information unless we have separately agreed suitable handling terms with you.

3. How We Collect Personal Data

We collect personal data directly from you when you submit the enquiry form or contact us by email.

We collect some information automatically through cookies, analytics tools, server logs and similar technologies when you use the website.

We may also receive limited technical information from service providers that help operate, secure and analyze the website.

4. How We Use Personal Data

We use personal data to respond to enquiries, understand your project needs, prepare quotations, communicate with you and provide related customer support.

We use website usage and analytics data to understand how visitors use the website, measure enquiry submissions, diagnose technical issues, improve page content and protect the website from misuse.

We may use personal data where needed to comply with legal obligations, enforce our terms, resolve disputes or protect our rights, users and services.

5. Legal Basis and Purposes

We process personal data because it is necessary to respond to your request, take steps before entering into a contract, operate and secure the website, comply with applicable laws and pursue legitimate business interests such as improving our services.

Where required by applicable law, we will ask for your consent before using non-essential cookies or sending direct marketing communications. You may withdraw consent where processing is based on consent.

6. Cookies and Analytics

Our website may use cookies and similar technologies to make the website work, measure traffic and understand visitor interactions.

We may use Firebase Analytics and Google Analytics. These services may process technical identifiers, usage events and device information to provide aggregated analytics reports. You can control cookies through your browser settings and may use available opt-out tools provided by analytics providers.

If you disable cookies, some website features may not work as intended.

7. Service Providers and Data Sharing

We share personal data only when necessary with service providers that help us operate the website, store enquiry submissions, host files, provide analytics, secure our systems and communicate with you.

Our website uses Firebase services for enquiry storage, file storage and analytics. If Google Analytics is enabled, Google may process analytics data on our behalf. These providers may process data in locations outside Hong Kong.

We may disclose personal data if required by law, regulation, court order or government request, or if disclosure is reasonably necessary to protect our rights, users, systems or business.

8. International Transfers

Because our website and service providers may use cloud infrastructure, your personal data may be stored or processed outside Hong Kong.

Where personal data is transferred outside Hong Kong, we take reasonable steps to use service providers with appropriate security and contractual protections, and to ensure the transfer is consistent with applicable data protection requirements.

9. Data Retention

We keep enquiry information for as long as needed to respond to your request, manage our business relationship, keep business records and comply with legal obligations.

As a general guideline, enquiry records and related attachments are retained for up to 24 months after the last meaningful contact, unless a longer period is required for legal, accounting, dispute resolution or contract purposes.

Analytics data is generally retained in aggregated or event-level form according to the settings of the analytics service we use.

10. Security

We use reasonable technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration and disclosure.

These measures may include encrypted connections, access controls, cloud provider security features, file size limits and operational safeguards. No website or storage system can be guaranteed to be completely secure.

11. Your Rights and Choices

Subject to applicable law, you may request access to personal data we hold about you, ask us to correct inaccurate data, request deletion of your data or object to certain uses of your data.

Hong Kong users have rights to request access to and correction of personal data under the Personal Data (Privacy) Ordinance. If other privacy laws apply to you, such as the GDPR, you may have additional rights including portability, restriction of processing, objection to processing and complaint to a supervisory authority.

To make a privacy request, email privacy@restud.io. We may ask you to verify your identity before completing a request.

12. Direct Marketing

We will not use your personal data for direct marketing unless we have obtained any consent required by applicable law.

If you receive marketing emails from us, you may opt out by following the unsubscribe instructions in the email or contacting privacy@restud.io.

13. Children

Our website and services are intended for businesses and adults. We do not knowingly collect personal data from children. If you believe a child has provided personal data to us, please contact privacy@restud.io so we can take appropriate action.

14. Third-Party Links

Our website may link to third-party websites or services. We are not responsible for the privacy practices, content or security of those third-party services. Please review their privacy policies before providing personal data to them.

15. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the date shown at the top of this page. If changes are material, we will take reasonable steps to provide additional notice.

16. Contact Us

If you have questions about this Privacy Policy or want to exercise your privacy rights, contact us at privacy@restud.io.

RESTUD.IO Limited, Hong Kong