Privacy Policy

Who we are

BayKolm Limited is a company registered in Hong Kong, China. We are the organisation responsible for the personal data described in this policy. You can reach us at hello@baykolm.com.

What this policy covers

This policy covers the website at baykolm.com and any correspondence you send us. It does not cover personal data handled within a client engagement, which is governed by the agreement for that engagement.

What we collect when you browse

Nothing. The site does not ask you to register, sign in, or complete a form, and it does not build a profile of you. There is no analytics service, no advertising, no tracking pixel, and no social media embed on any page.

Cookies and local storage

The site sets no cookies and stores nothing in your browser’s local storage. English and Chinese have separate page addresses, so your language choice is represented by the page you visit rather than by an identifier stored on your device.

Third-party requests

Loading any page on this site contacts no domain other than baykolm.com. No fonts, scripts, or images are fetched from anywhere else, so no third party observes your visit. Our hosting provider necessarily processes the request in order to serve the page — see “Service providers” below.

When you email us

Emailing hello@baykolm.com is the only way to send us anything through this site; there is no contact form. We then hold whatever you chose to include — normally your email address, your name if you give it, and the content of your message — and use it only to reply to you and to keep a record of the enquiry.

Service providers

We rely on a small number of providers to run the site and to handle email. They act on our instructions and are not permitted to use your personal data for their own purposes.

• Cloudflare — website hosting and content delivery, and routing of email addressed to @baykolm.com.
• Brevo — sending email from our domain.

Why we use your data

We use personal data for two purposes only: to reply to you when you contact us, and to keep a record of that correspondence. We do not use it for advertising, profiling, or automated decision-making of any kind. Where the law requires us to identify a basis for processing, we rely on our legitimate interest in responding to enquiries addressed to us, and on your consent where you have given it.

How long we keep it

Correspondence is kept for up to 24 months from our last exchange, after which it is deleted. Data held in connection with a client engagement is kept for the period set out in the agreement for that engagement. We do not operate a mailing list, so there is nothing to unsubscribe from.

When we share it

We do not sell, rent, or trade personal data. We share it only with the service providers listed above, and only so far as is necessary to run the site and answer your message. We may also disclose data where we are legally required to do so.

Where your data is held

Our hosting and email routing are provided through Cloudflare’s global network, so a message you send us may be processed on servers outside Hong Kong, China, including in the European Union and the United States. Where data is transferred internationally, we take reasonable steps to ensure it remains protected to a standard comparable to that in Hong Kong, China.

Your rights

Subject to the law that applies to you, you have the right to:

• ask whether we hold personal data about you, and request a copy of it;
• ask us to correct anything that is inaccurate;
• ask us to delete data we no longer have a reason to keep;
• object to, or ask us to restrict, how we use your data;
• withdraw consent at any time, where we relied on consent.

How to exercise these rights, or complain

Write to hello@baykolm.com and we will respond within 30 days. If you are in Hong Kong, China and are not satisfied with our response, you may complain to the Office of the Privacy Commissioner for Personal Data. If you are elsewhere, you may complain to your local data protection authority.

Security

The site is served over HTTPS only, with HTTP Strict Transport Security enabled, and it is protected by a restrictive Content-Security-Policy that permits no third-party scripts. Because the site collects nothing, the amount of personal data at risk through it is minimal by design.

Children

This site is intended for businesses and professional users. It is not directed at children, and we do not knowingly collect personal data from them.

Changes to this policy

If we change how we handle personal data, we will update this page and revise the date shown above. We will not apply a new policy retrospectively to data we already hold.