Privacy Policy

1. Introduction

Sherpa Lab Limited, a company incorporated in Hong Kong ("we", "our", or "us"), is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at sherpalab.netand use our services.

This policy is designed to comply with:

• The General Data Protection Regulation (GDPR) (EU) 2016/679
• The California Consumer Privacy Act (CCPA) and other applicable US state privacy laws
• Hong Kong Personal Data (Privacy) Ordinance (Cap. 486)

2. Data Controller

The data controller responsible for your personal data is:

3. Information We Collect

We collect information that you provide directly to us when you:

• Contact us through our contact form
• Request information about our services
• Communicate with us via email

The personal information we collect may include:

• Name: Your full name
• Email Address: Your email address for communication
• Company Name: The name of your company (optional)
• Message Content: Any information you choose to provide in your message

We do not collect: Phone numbers, physical addresses, payment information, or any other sensitive personal data through our website contact form.

4. Legal Basis for Processing (GDPR)

We process your personal data based on the following legal grounds:

• Consent: You have given explicit consent to the processing of your personal data for the purpose of responding to your inquiry
• Legitimate Interest: Processing is necessary for our legitimate interest in providing customer service and responding to business inquiries
• Contractual Necessity: Processing is necessary for the performance of a contract or to take steps at your request before entering into a contract

5. How We Use Your Information

We use the information we collect solely for the following purposes:

• To respond to your inquiries and provide customer service
• To send you information about our services that you have requested
• To communicate with you regarding your inquiry
• To comply with legal obligations and regulatory requirements
• To protect our legal rights and prevent fraud

We do not: Use your information for marketing purposes without your explicit consent, sell your personal data to third parties, or use automated decision-making processes.

6. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: We may share information with trusted service providers who assist us in operating our website and conducting our business, subject to strict confidentiality agreements
• Legal Requirements: We may disclose information if required by law, court order, or governmental authority
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Generally:

• Contact form submissions are retained for up to 3 years from the date of submission
• Email correspondence is retained for up to 7 years for legal and business record-keeping purposes
• Data may be retained longer if required by applicable laws or legal proceedings

8. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using SSL/TLS protocols
• Secure hosting infrastructure with regular security updates
• Access controls and authentication procedures
• Regular security assessments and monitoring

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security.

9. Your Rights (GDPR & CCPA)

Under applicable data protection laws, you have the following rights:

GDPR Rights (EU Residents):

• Right of Access: You have the right to request copies of your personal data
• Right to Rectification: You have the right to request correction of inaccurate or incomplete data
• Right to Erasure ("Right to be Forgotten"): You have the right to request deletion of your personal data
• Right to Restrict Processing: You have the right to request restriction of processing of your personal data
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used format
• Right to Object: You have the right to object to processing of your personal data
• Right to Withdraw Consent: You have the right to withdraw your consent at any time

CCPA Rights (California Residents):

• Right to Know: You have the right to know what personal information we collect, use, and disclose
• Right to Delete: You have the right to request deletion of your personal information
• Right to Opt-Out: You have the right to opt-out of the sale of personal information (we do not sell personal information)
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

To exercise any of these rights, please contact us at info@sherpalab.net. We will respond to your request within 30 days (or as required by applicable law).

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. We ensure that appropriate safeguards are in place to protect your personal data in accordance with this Privacy Policy and applicable data protection laws.

11. Children's Privacy

Our website is not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child under 16, please contact us immediately and we will take steps to delete such information.

12. Cookies and Tracking Technologies

Our website does not use cookies for tracking or analytics purposes. We do not use third-party analytics services, advertising networks, or tracking pixels. For more information, please see our Cookie Policy.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

You also have the right to lodge a complaint with a supervisory authority if you believe that our processing of your personal data violates applicable data protection laws.