Privacy Policy

Introduction

This Privacy Policy explains how E CONS LIMITED collects, uses, stores and protects information when you visit our website, contact our team, or engage us for computer integrated systems design and related engineering work. The policy is written for plant and process operators, for their employees and contractors, and for any visitor who reaches us through huadantech.autos.

E CONS LIMITED takes the handling of information seriously because the nature of our work places us close to the operating heart of a facility. This policy describes, in plain language, what we do with the information entrusted to us and the choices that remain available to you. The developer of this website is E Cons, and the operating company is E CONS LIMITED, whose registered place of business is Room 1123, 11/F, Star House, 3 Salisbury Road, Tsim Sha Tsui, Hong Kong (HK).

Who We Are

E CONS LIMITED is a computer integrated systems design practice serving plant and process operators. We engineer the control and data layer of modern facilities, including valve level control loops, sensor and actuator networks, SCADA and reporting pipelines, retrofit and cutover programs, compliance and audit tooling, and supervised maintenance systems.

For the purposes of applicable data protection law, E CONS LIMITED is the organisation responsible for the personal data described in this policy. Our principal place of business is Room 1123, 11/F, Star House, 3 Salisbury Road, Tsim Sha Tsui, Hong Kong (HK). The developer of this website is E Cons, who works on the presentation, structure and content of the pages you are reading.

Scope of This Policy

This policy covers personal data that we collect through this website, through direct correspondence by email or telephone, through business meetings, and through the delivery of our engineering services. It applies to enquiries, proposals, contracts, support requests and any other interaction where a person shares information with our team.

This policy does not cover the practices of any third party that operates an independent website or service, even where we link to it. Where our website contains a link to an external resource, that resource operates under its own privacy terms and you should review them separately. This policy also does not address the internal records that a client organisation keeps about its own workforce.

Information We Collect

We collect information that you choose to provide and information that arises naturally from the use of our website and services. The categories below describe the kinds of information we may hold.

Information you give us directly

• Your name, job title, employer and role in a project.
• Your email address, telephone number and preferred contact method.
• The content of your enquiries, including technical descriptions of a plant or process.
• Contract, purchase order, invoicing and payment reference details.
• Site access requirements, safety training records and attendance confirmations.

Information created during delivery

• Meeting notes, survey observations and loop registers that name individuals.
• Correspondence records, change requests and approval decisions.
• Support tickets and the resolution history associated with them.

Information collected automatically

• Server logs that record the time of a request and the page requested.
• General technical data such as browser family and approximate region.
• Records of how you reached our site, where a referring link is available.

We do not seek to collect more personal data than is necessary to answer an enquiry, to perform a contract, or to meet a legal or safety obligation. Where we ask for information, we will explain the purpose at the point of collection.

How We Collect Information

Most of the information we hold arrives through ordinary professional contact. You may contact us by email, by telephone, through the form on our contact page, at a trade gathering, or during a site visit that we carry out at your request. In each case, you decide what to share.

We also receive information from the organisation that employs you, where that organisation engages us and names individuals as project contacts, approvers or site escorts. Service providers such as hosting platforms and email services may pass limited technical information to us as part of operating the website and the mailbox that receives your messages.

Why We Use Information

We use personal data for purposes that are connected to our engineering practice and to the relationship you have with us. The principal purposes are set out below.

• To respond to enquiries, quotations and requests for information.
• To prepare proposals and to negotiate and perform engineering contracts.
• To plan, deliver and commission control, sensor, reporting and retrofit work.
• To provide support, to investigate faults and to maintain accurate records.
• To meet health, safety, environmental and regulatory obligations.
• To invoice, collect payment and maintain proper accounting records.
• To improve the quality, safety and reliability of our services.
• To send relevant business updates where you have asked to receive them.

We do not use personal data for automated decision making that produces legal effects, and we do not sell personal data to any party.

Legal Bases for Processing

Where the law requires us to identify a legal basis, we rely on one or more of the following grounds. We rely on performance of a contract when processing is necessary to deliver services you or your organisation have engaged us for. We rely on legitimate interests when we process information to run our practice safely and efficiently, provided those interests are not outweighed by your rights.

We rely on legal obligation when we must keep records for tax, accounting, health and safety, or regulatory reasons. We rely on consent where we send marketing communications to individuals and where the law requires an opt in. Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

Client Site and Process Data

Our engineering work often involves access to operational data from a client facility, including control tags, sensor readings, alarm histories and maintenance records. Most of this is technical data rather than personal data. Where such data does contain information about an identifiable person, for example an operator login or a maintenance sign off, we handle it with the same care described in this policy.

When we work inside a client environment, we act under the instructions of that client and we follow the access controls and confidentiality terms agreed for the engagement. We do not use client process data for our own marketing, and we do not repurpose it for another client. On completion of an engagement, client data is returned or deleted according to the agreed contract terms and the retention rules described later in this policy.

Cookies and Similar Technologies

This website is built to be light and direct. We use only the minimal technical means required to serve the pages and to keep the site working reliably. Any cookie or local storage that is strictly necessary for the operation of the site may be set by the platform that hosts us.

We do not operate advertising cookies on this site, and we do not build cross site tracking profiles of visitors. If our practices change in future, we will update this policy and, where required, present a clear choice before any non essential cookie is set. You can also control cookies through the settings of your own browser.

How We Share Information

We share personal data only where there is a clear reason and a suitable safeguard. The situations in which sharing may occur are limited and are described below.

• With colleagues and contracted engineers who need the information to do the work.
• With a client organisation where you are a contact for that client.
• With service providers who host, secure or support our systems under contract.
• With professional advisers such as accountants and legal counsel.
• With authorities where the law requires disclosure or where safety demands it.
• With a successor organisation in the event of a business reorganisation.

We do not sell personal data. We do not rent contact lists. Where we share information with a provider, we require that provider to protect it and to use it only for the purpose we have agreed.

Service Providers

Like most practices, we depend on a small number of suppliers to operate. These may include a hosting provider that serves this website, an email provider that handles our mailbox, an accounting platform, and providers of engineering software used to produce designs and reports. Each supplier receives only the information necessary to perform its function.

We select suppliers with care and we review their security and privacy commitments. Where a supplier processes personal data on our behalf, we put a written agreement in place that limits the use of the data to our instructions, requires appropriate security, and requires the data to be returned or deleted when the relationship ends.

International Transfers

E CONS LIMITED works from Hong Kong and may collaborate with engineers, clients and suppliers in other places. As a result, personal data may be transferred to, stored in, or accessed from a location outside the place where it was first collected.

Where we transfer personal data across borders, we take steps to ensure that it remains protected. These steps may include contractual commitments that require an equivalent standard of protection, a review of the destination environment, and technical measures such as encryption in transit. You may contact us for more information about the safeguards that apply to a particular transfer.

Data Retention

We keep personal data only for as long as it is needed for the purpose it was collected, or for as long as the law requires. Retention periods differ according to the type of record and the context of the engagement.

• Enquiries that do not lead to an engagement are kept for a short period and then removed.
• Contract and project records are kept for the duration of the relationship and afterwards.
• Financial and tax records are kept for the period required by accounting law.
• Health and safety records are kept for the period required for site accountability.
• Technical logs are kept for a limited operational window and then rotated out.

When a retention period ends, we delete or anonymise the information in a secure manner. Where a legal hold applies, we retain the relevant records until the hold is lifted.

How We Protect Information

We apply administrative, technical and physical safeguards to protect personal data against loss, misuse, unauthorised access and disclosure. Our measures are proportionate to the sensitivity of the information and to the risk that a failure would create for the people concerned.

• Access to systems is limited to those who need it for a defined role.
• Accounts are individually named and protected with strong authentication.
• Data in transit is protected with encryption where the service supports it.
• Devices are kept patched and protected against malicious software.
• Staff and contractors receive guidance on handling information safely.
• Incidents are logged, investigated and corrected without delay.

No method of storage or transmission is completely secure. We work continuously to reduce risk, and in the event of a breach that is likely to affect your rights, we will notify you and the relevant authority as required by law.

Your Rights

Depending on where you live, you may have rights in relation to the personal data that we hold about you. These rights commonly include the following.

• The right to be informed about how your data is used.
• The right to request access to the personal data we hold about you.
• The right to ask us to correct information that is inaccurate or incomplete.
• The right to ask us to delete information in certain circumstances.
• The right to restrict or object to certain processing activities.
• The right to receive certain data in a portable, machine readable form.
• The right to withdraw consent where our processing relies on consent.

These rights are not absolute. They are balanced against other obligations, such as our duty to keep accurate business records and to comply with safety and tax law. If we cannot act on a request, we will explain the reason.

Access and Correction Requests

To make an access or correction request, write to hello@huadantech.autos and describe the information you are asking about. So that we can protect the data from improper disclosure, we may ask you to verify your identity and to provide enough detail for us to locate the relevant records.

We aim to respond within the period allowed by applicable law. Where a request is complex or covers a large volume of material, we may need additional time and will explain the delay. There is normally no charge for a reasonable request, although a fee may apply where the law permits it for excessive or repetitive requests.

Privacy for Children

Our website and services are intended for businesses and for adults acting in a professional capacity. We do not knowingly collect personal data from children, and we do not direct our marketing at children. If you believe that a child has provided information to us, please contact us and we will take appropriate steps to remove it.

Marketing Communications

We may send occasional business updates, such as invitations to our quarterly blowdown hour or notices about a new engineering capability. We send these communications in line with applicable law, and where required we ask for consent first.

Every marketing message explains how to opt out. You can also write to hello@huadantech.autos at any time and ask us to stop sending marketing communications. Opting out does not affect messages that we must send in order to deliver a service you have engaged, such as a cutover schedule or a support update.

Third Party Links

This website may contain links to external sites that we consider useful to visitors. We do not control those sites and we are not responsible for their content or their privacy practices. When you follow a link away from huadantech.autos, we encourage you to read the privacy notice of the site you reach.

Changes to This Policy

We review this policy from time to time so that it continues to reflect our practices and the law. When we make a material change, we will update the date at the top of this page and, where appropriate, provide a more prominent notice on the site.

We encourage you to return to this page occasionally so that you remain aware of how we protect information. Continued use of our website after an update indicates that you have had the opportunity to review the current version.

How to Contact Us

If you have a question about this policy, a concern about how your information has been handled, or a request to exercise a right, please contact E CONS LIMITED using the details below.

This Privacy Policy forms part of the terms on which we offer our website and services. It should be read together with our Terms of Service, which explain the contractual rules that apply to engagements with E CONS LIMITED.