Privacy Policy

01 Who We Are

WAL-NET is an Applied AI consultancy headquartered in Hong Kong, delivering LLM, AI agents, AIoT, and AI strategy solutions to enterprises across Asia Pacific and globally.

For the purposes of this Privacy Policy, WAL-NET is the data controller responsible for personal data collected through this website and our services.

02 Data We Collect

We collect personal data only when you actively provide it to us. We do not use tracking pixels, behavioural profiling, or third-party advertising networks.

Contact Form — when you submit an enquiry via our website, we collect:

• Full Name — to address you correctly in our response
• Work Email Address — to reply to your enquiry
• Company / Organisation (optional) — to understand your context
• Phone / WhatsApp Number (optional) — if you prefer a call
• Area of Interest (optional) — to route your enquiry to the right team
• Subject & Message — the content of your enquiry

Website Usage — we collect standard server logs (IP address, browser type, pages visited, timestamps) for security and performance monitoring. These logs are not linked to individual identities.

We do not collect sensitive personal data (health information, financial data, biometrics, or government ID numbers) through this website.

03 How We Use Your Data

We use personal data collected through the contact form for the following purposes only:

• Responding to your enquiry and scheduling consultations
• Preparing for and conducting the consultation itself
• Following up on proposals or engagements you have requested
• Complying with legal obligations applicable to our business

04 Legal Basis for Processing

Depending on the jurisdiction, our legal basis for processing your personal data is:

• Legitimate Interests — responding to business enquiries you have initiated (GDPR Article 6(1)(f); HK PDPO Principle 3)
• Contractual Necessity — managing an engagement or proposal you have requested
• Legal Obligation — where required by applicable law in Hong Kong or other jurisdictions we operate in
• Consent — where we rely on your explicit consent (e.g., for marketing communications, which you can withdraw at any time)

05 Data Sharing

We do not sell, rent, or trade your personal data to third parties. Period.

We may share your data in the following limited circumstances:

• Service Providers — email and CRM tools used internally to manage enquiries (bound by data processing agreements with equivalent protections)
• Legal Requirements — if required by a court order, regulatory authority, or applicable law in Hong Kong or another jurisdiction
• Business Transfer — in the event of a merger or acquisition, with appropriate notice to you and equivalent privacy protections maintained

Any third-party processors we engage are contractually required to process your data only as instructed, maintain appropriate security, and not use it for their own purposes.

06 Data Retention

We retain personal data for as long as necessary to fulfil the purpose for which it was collected:

• Enquiries that did not proceed to an engagement — deleted or anonymised within 12 months of last contact
• Enquiries that led to an engagement — retained for the duration of the engagement plus 7 years, in accordance with applicable commercial record-keeping requirements
• Server logs — retained for 90 days for security purposes, then automatically purged

You may request deletion of your data at any time (see Section 9 — Your Rights).

07 Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure:

• HTTPS encryption for all data transmitted via this website
• Email header injection prevention on all form submissions
• Access to personal data restricted to authorised WAL-NET staff on a need-to-know basis
• Regular review of security practices as part of our AI governance commitments

No method of electronic transmission or storage is 100% secure. If you become aware of any security concern related to your data, please contact us immediately at info@wal-net.com.

08 Cookies

This website uses no tracking cookies, advertising cookies, or third-party analytics cookies.

The only data stored locally in your browser is session-level state required for page functionality (e.g., scroll position). No persistent identifiers are written to your device by WAL-NET.

Google Fonts is loaded via Google's CDN, which may set its own technical cookies. You can review Google's privacy practices at policies.google.com/privacy.

09 Your Rights

Depending on your jurisdiction, you have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate or incomplete data
• Deletion — request erasure of your data (subject to legal retention requirements)
• Restriction — request that we limit processing of your data in certain circumstances
• Portability — receive your data in a structured, machine-readable format (where applicable)
• Objection — object to processing based on legitimate interests
• Withdraw Consent — where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at info@wal-net.com. We will respond within 30 days. We do not charge a fee for reasonable requests.

If you are unsatisfied with our response, you have the right to lodge a complaint with your relevant data protection authority (e.g., the Office of the Privacy Commissioner for Personal Data in Hong Kong, or the Personal Data Protection Commission in Singapore).

10 International Data Transfers

WAL-NET is headquartered in Hong Kong and serves clients across Asia Pacific and globally. Your personal data may be processed in jurisdictions outside your country of residence.

Where we transfer personal data internationally, we ensure appropriate safeguards are in place, including:

• Contractual protections with processors in other jurisdictions
• Transfer only to countries with adequate data protection standards, or with supplementary safeguards where adequate protections do not exist
• Compliance with applicable cross-border transfer rules under the HK PDPO, Singapore PDPA, and GDPR as relevant

11 Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact us:

12 Policy Changes

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last Updated" date at the top of this page.

We encourage you to review this Policy periodically. Continued use of our website after changes are posted constitutes acceptance of the revised Policy.

For significant changes affecting how we use data you have already provided, we will notify you directly by email where we hold your contact details.