1. Introduction

This Privacy & Cookie Policy (the "Policy") explains how STT Drainage Limited ("we", "us", "our") collects, uses, stores, discloses and protects your personal data when you visit www.stt.com.hk (the "Website"), and how we use cookies and similar technologies.

We are a company registered in the Hong Kong Special Administrative Region, with our operating address at Unit 60, 4/F Sze Hing Lung Industrial Building, 44 Lee Chung Street, Chai Wan, Hong Kong. We are the data controller of the personal data collected through this Website and process it in accordance with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong ("PDPO").

By browsing this Website, using our services or submitting an enquiry, you acknowledge that you have read and agree to this Policy. You may contact us at any time under Section 12, or exercise your rights under Section 8.

2. Personal Data We Collect

2.1 Information you provide

• Contact, enquiry and quotation forms: name, phone number, email address, service address or district, type of service required, message content, and any photos or files you choose to upload;
• Phone, WhatsApp or email enquiries: the name you use, contact details, and information contained in our correspondence;
• Service-related information: on-site details required to provide drainage clearing, CCTV pipeline inspection and repair services.

2.2 Information collected automatically

• Technical data: IP address, browser type and version, operating system, device type, language and screen resolution;
• Usage data: pages viewed, time on page, click activity, referring URL, entry keywords (where available) and approximate location (city level);
• Identifiers generated by cookies and similar technologies.

We do not intentionally collect identity card numbers, bank account details, full credit card numbers or biometric data, and this Website does not ask you to provide such sensitive data.

3. Purposes and Legal Bases

4. Cookie Policy

4.1 What are cookies

Cookies are small text files stored on your browser or device by a website. They help remember your preferences, keep sessions working, measure traffic and support advertising. This Website may also use pixel tags and local storage; we refer to all of these as "cookies" in this Policy.

4.2 Categories of cookies we use

4.3 Managing or withdrawing consent

• You can accept the cookie notice at the bottom of the Website ("Continue"), or delete or block cookies at any time through your browser settings;
• Chrome, Safari, Edge and Firefox all allow you to view and manage cookies under their privacy settings;
• You can opt out of personalised advertising via Google Ad Settings, and manage third-party advertising cookies via aboutads.info or Your Online Choices;
• You can install the Google Analytics Opt-out Browser Add-on.

Please note that blocking essential cookies may prevent some website features (such as form submission) from working properly.

5. Third-Party Services and External Links

This Website uses the following third-party services. These providers may set cookies on their own domains or receive technical data about your visit. We do not sell your personal data to them, and their processing is governed by their own privacy policies:

• Google Tag Manager / Google Analytics / Google Ads (Google LLC, USA) — policies.google.com/privacy
• Google Fonts (Google LLC) — web font delivery
• Meta / Facebook (Meta Platforms, Inc., USA) — facebook.com/privacy/policy
• YouTube (Google LLC) — embedded video playback
• Instagram (Meta Platforms, Inc.) — embedded social content
• X / Twitter (X Corp.) — embedded social content

This Website may contain links to third-party websites. We are not responsible for their content or privacy practices, and we encourage you to review their privacy policies.

6. Sharing and Cross-Border Transfer

We share your personal data only where necessary, including with:

• Subcontractors, technicians or engineers engaged to deliver the requested service (limited to what is needed to complete the work);
• Technology providers for website hosting, email, analytics and advertising;
• Law enforcement, courts or regulators where required by law;
• A successor entity in the event of a merger, acquisition or transfer of assets.

Some providers (for example Google and Meta) host data outside Hong Kong. Where we transfer data outside Hong Kong, we take reasonable steps to ensure a level of protection comparable to the PDPO. If you are located in the European Economic Area or the United Kingdom, we rely on lawful bases under the GDPR and use safeguards such as standard contractual clauses.

7. Data Retention

• Enquiries and quotations: generally 24 months, for follow-up and dispute handling;
• Customer service and contract records (including invoices and warranties): 7 years in line with Hong Kong tax and business practice;
• Website analytics: Google Analytics retention set to 14 months;
• Cookies: as described in Section 4.2, or until you delete them.

When data is no longer needed for the purposes above, we securely delete or anonymise it.

8. Your Rights

Under the PDPO (and, where applicable to you, the GDPR / UK GDPR), you have the right to:

• access the personal data we hold about you;
• request correction of inaccurate data;
• request erasure of your data (subject to our legal obligations);
• object to or restrict our processing, including direct marketing;
• withdraw consent you previously gave (without affecting processing carried out before withdrawal);
• receive a copy of the data you provided in a commonly used format (data portability, where applicable).

If you are a California resident, the CCPA/CPRA gives you the right to know, delete and correct personal information, and to exercise your rights without discrimination. We do not sell your personal information.

To exercise these rights, email cs@stt.com.hk or call 5271 5858. We will respond within a reasonable period (normally within 40 days) and may ask for proof of identity to protect your data.

If you believe we have not handled your data properly, you may complain to the Office of the Privacy Commissioner for Personal Data (PCPD), Hong Kong: www.pcpd.org.hk.

9. Children and Minors

This Website and our services are intended for adults. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently collected a child's data, please contact us and we will delete it promptly.

10. Data Security

We apply reasonable technical and organisational measures to protect your data, including HTTPS encrypted transmission, access controls, account password protection, log monitoring and regular backups. However, no internet transmission can be guaranteed to be completely secure; please avoid sending sensitive information over public networks.

11. Changes to This Policy

We may update this Policy from time to time to reflect legal requirements or business changes. The latest version will be published on this page with an updated "Last updated" date. We will highlight material changes on the Website.

12. Contact Us

If you have any questions about this Policy, or wish to access or correct your personal data, please contact us:

• Company: STT Drainage Limited
• Address: Unit 60, 4/F Sze Hing Lung Industrial Building, 44 Lee Chung Street, Chai Wan, Hong Kong
• Phone: 5271 5858
• Email: cs@stt.com.hk