eHeading

Privacy policy

Effective date: 11 October 2026

1. Who we are

eHeading Creation Technology Limited ("eHeading", "we" or "us") operates this website and is the data user under the Personal Data (Privacy) Ordinance (Cap. 486). Address: 17/F, 80 Gloucester Road, Wan Chai, Hong Kong.

2. What we collect

  • What you give us in the contact form: name, company (optional), WhatsApp number or email, the service you need, a short description, and whether you agreed to this policy.
  • Messages and contact details you send us by WhatsApp or email.
  • The page language and address when the form is sent, so we know where an enquiry came from.
  • Technical data that hosting and network providers normally log, such as IP address and browser type.

3. Why we collect it

  • To reply to your enquiry, give a quote and follow up on a project.
  • To provide and improve our services.
  • To keep the website and our systems secure and working.
  • To meet legal requirements.

4. WhatsApp enquiries and our AI assistant

We accept enquiries 24/7. WhatsApp is operated by Meta and its own terms and privacy policy apply to its handling of data.

5. Who we share it with

We do not sell your personal data. To run this website and reply to enquiries, we use the following service providers, whose servers may be outside Hong Kong:

  • Supabase: stores contact form submissions (data region to be confirmed).
  • Amazon Web Services (AWS Amplify): website hosting.
  • Google Fonts: when fonts load, your browser requests them from Google, which therefore receives your IP address.
  • Meta (WhatsApp): when you contact us on WhatsApp.

6. Cookies and local storage

This website uses Google Analytics to collect anonymised or de-identified browsing statistics (such as the pages visited and time spent), which helps us improve the site. We also use your browser’s local storage to remember your language and reduced-motion choices; this is not sent to us.

7. How long we keep it

We keep personal data only as long as needed for the purposes above, then delete it. The specific retention period is to be confirmed.

8. Direct marketing

We will not use your personal data for direct marketing without your consent (Part 6A of the Ordinance). If you have consented, you can tell us to stop at any time.

9. Security

We take reasonable technical and organisational measures to protect personal data, such as encrypted connections (HTTPS) and database access controls; the public website can submit enquiries but cannot read submitted data.

10. Access and correction

You have the right to request access to, and correction of, the personal data we hold about you. Email cs@eheading.com with the subject "Personal data request". We may charge a reasonable fee for access requests.

11. Changes

We may update this policy from time to time; the updated version will be posted on this page with its effective date. If the Chinese and English versions differ, the Traditional Chinese version prevails.