Privacy Policy

01Scope and data controller

Maxen Tech Limited is the operator of maxentech.com and the controller of personal data collected through this website and our own business administration. Where we process personal data solely on a customer’s documented instructions as part of a contracted service, the customer is generally the controller and Maxen acts as its processor or service provider.

This Policy does not govern independent third-party websites, platforms or cloud services, which operate under their own privacy notices.

02Personal data we collect

Depending on how you interact with us, we may collect:

• Contact and business data: name, employer, role, business email address, telephone number and correspondence.
• Enquiry and project data: requirements, systems information, proposals, statements of work, meeting notes, support requests and feedback.
• Contract and transaction data: contracting entity, billing contact, invoice details, payment status and business records. We do not intentionally collect complete payment-card credentials through this website.
• Technical and usage data: IP address, browser and device type, requested pages, timestamps, referring page, security logs and basic cookie data.
• Recruitment or supplier data: professional history, qualifications, due-diligence information and payment details where relevant to a business relationship.

Please do not send confidential credentials, production secrets, payment-card information or sensitive personal data through an initial email enquiry.

03How we use personal data

We use personal data to:

• respond to enquiries and prepare proposals or statements of work;
• enter into, administer and perform service agreements;
• deliver support, communicate project status and maintain business relationships;
• issue invoices, receive payment for our services and maintain accounting records;
• operate, secure, troubleshoot and improve this website and our internal systems;
• prevent fraud, misuse and security incidents;
• comply with legal, tax, audit, regulatory and due-diligence obligations; and
• send relevant business updates where permitted, with an option to opt out.

We do not sell personal data and do not use personal data for third-party behavioural advertising.

04Legal bases

Where a legal basis is required, we process personal data because it is necessary to take steps at your request or perform a contract; to comply with a legal obligation; for our legitimate interests in operating, securing and improving a business-to-business technology company; or with consent where consent is the appropriate basis.

Our legitimate-interest processing is limited to purposes that we consider proportionate and that do not override applicable individual rights. You may withdraw consent at any time, without affecting prior lawful processing.

05Sharing and international transfers

We may share relevant personal data with personnel and contractors who need it to perform their duties; hosting, communications, security, accounting and professional-service providers; customer-approved technology vendors; and regulators, courts, law-enforcement bodies or other parties where required by law or necessary to protect rights and security.

We require service providers to use personal data only for authorised purposes and protect it appropriately. We may also disclose data in connection with a genuine merger, financing, acquisition or sale of business assets, subject to appropriate confidentiality.

Because technology services can involve providers in multiple jurisdictions, data may be processed outside the jurisdiction where it was collected. Where required, we use contractual safeguards or another lawful transfer mechanism and assess relevant protections.

06Retention

We retain personal data only as long as reasonably necessary for the purpose collected, including to perform contracts, maintain business and accounting records, resolve disputes, enforce agreements and meet legal obligations.

Retention periods vary by record type. Enquiry records that do not lead to an engagement are reviewed periodically; contract, invoice and tax records are kept for the period required by applicable law; security logs are generally retained for a shorter period unless needed to investigate an incident. Data is deleted or anonymised when no longer required.

07Security

We use reasonable administrative, technical and organisational safeguards appropriate to the nature of the data and risk, which may include access controls, authentication, encryption where appropriate, backups, logging and supplier review.

No internet transmission or storage system is completely secure. If you believe personal data or a Maxen-related account has been compromised, contact us promptly at admin@maxentech.com.

08Your rights and choices

Subject to applicable law, you may have rights to request access to personal data, correction of inaccurate data, deletion, restriction or objection to processing, portability, and withdrawal of consent. You may also opt out of marketing communications at any time.

To exercise a right, email admin@maxentech.com with enough information for us to identify the relevant records. We may need to verify identity and authority before responding. Some rights are subject to lawful exceptions, including record-retention and legal-claim requirements.

You may also complain to the data-protection regulator that applies in your jurisdiction. In Hong Kong, this is the Office of the Privacy Commissioner for Personal Data.

09Cookies and website technology

Our website may use essential cookies or similar storage needed for security, navigation and core operation. If optional analytics or other non-essential technologies are introduced, we will provide any notice or choice required by applicable law.

You can control cookies through browser settings, but blocking essential cookies may affect website functionality. We do not respond to “Do Not Track” signals where no common legal or technical standard applies.

10Children, changes and third-party links

Our website and services are directed to businesses and are not intended for children. We do not knowingly collect personal data from children through this website.

This website may link to independent third-party services. Maxen is not responsible for their privacy practices, and you should review their notices.

We may update this Policy to reflect changes in law, technology or our operations. The updated version will be posted here with a revised effective date. Where required, we will provide additional notice of material changes.

11Contact

For privacy questions or requests, contact the website operator and data controller: