Privacy Policy

1. Who we are

This Privacy Policy explains how Aniran Marine Maintenance Limited (“Aniran,” “we,” “us”) collects, holds, processes, and uses personal data submitted through the contact form and email address on amm.hk, in accordance with Hong Kong’s Personal Data (Privacy) Ordinance (Cap. 486, “PDPO”).

Data user (controller):
Aniran Marine Maintenance Limited
Hong Kong
Phone: +852 6573 5817
Email: [email protected]
Website: www.amm.hk

For any question about this policy or how we handle your data, contact us at [email protected].

This policy applies to:

The contact form on amm.hk
Direct emails sent to [email protected]
Any other way you voluntarily submit personal data to us through the website

It does not apply to third-party websites we may link to.

2. What personal data we collect

When you use the contact form on amm.hk, we collect the information you enter, which currently includes:

Your Name
Your Email
Subject
Your Message

If you contact us directly by email instead of using the form, we collect whatever personal data is contained in that email and its attachments (e.g., your name, email address, signature details, and message content).

We may also automatically collect limited technical data when you visit the site (e.g., IP address, browser type, device type, pages visited), generated in the ordinary course of operating the site by our hosting and any analytics tools we use.

We do not knowingly collect any sensitive personal data (health, biometric, financial account data, etc.) through this form, and we ask that you do not include such information in your messages.

3. Why we collect and use your data

In line with Data Protection Principle 1 (purpose and manner of collection) under the PDPO, we collect your data only for the following purposes, and you are informed of them here at the point of collection:

Responding to your inquiry — reviewing your message and getting back to you with next steps, including part quotes, service scheduling, or technical support.
Managing the business relationship — if your inquiry becomes an order or service engagement, using your contact details to deliver it.
Internal record-keeping — keeping a record of past inquiries and communications for quality, continuity, and accounting purposes.
Preventing misuse — basic spam/abuse filtering on form submissions.

Under Data Protection Principle 3, we will not use your data for any purpose beyond these (or a directly related purpose) without your prescribed consent. In particular, we do not currently use your data for direct marketing (e.g., adding you to a newsletter) unless you separately and explicitly opt in to that. If this changes, we will notify you and obtain your consent before doing so, as required for direct marketing under the PDPO.

We do not carry out automated decision-making or profiling based on the data collected through this form.

4. Who we share your data with

Your data is accessible to Aniran staff handling inquiries, on a need-to-know basis.

We also share data with service providers who process it on our behalf, strictly to operate our website and communications — for example, our website hosting provider, our contact form plugin (Contact Form 7), and any spam-filtering or email-delivery tools used to run the site. [To confirm and finalize this section: does amm.hk run on the same hosting/plugin stack as Nordast and Melbridge — Namecheap EasyWP, Akismet, WP Mail SMTP — or a different setup? This determines the exact names to list here and in Section 5.]

We do not sell personal data, and we do not share it with third parties for their own marketing purposes.

We may disclose data where required by law, or to a court, regulator, or law enforcement agency in Hong Kong or elsewhere with a valid request.

5. Cross-border data transfers

Section 33 of the PDPO (which would restrict transferring personal data outside Hong Kong) has been enacted but not yet brought into force, so there is currently no statutory restriction on transferring data from Hong Kong to other jurisdictions. As good practice, we still take reasonable steps to ensure any processor handling your data outside Hong Kong maintains a comparable standard of data protection, in line with the PCPD’s non-binding guidance on cross-border transfers.

Some of our service providers may be based outside Hong Kong, including in the EU/EEA or the United States, depending on which hosting, email, and analytics tools are in use. [To finalize once Section 4 is confirmed.]

6. How long we keep your data

In line with Data Protection Principle 2 (accuracy and retention), we do not keep personal data longer than necessary to fulfil the purpose for which it was collected:

Inquiries that do not lead to a business relationship: kept for up to 24 months from your last contact with us, then deleted, unless you ask us to delete it sooner.
Inquiries that lead to an order or ongoing client relationship: kept for the duration of that relationship, plus any period required afterward under Hong Kong’s Inland Revenue Ordinance and Companies Ordinance recordkeeping requirements (generally 7 years for business records).
Direct emails to [email protected]: retained in line with the same principles above, as part of normal business correspondence records.

7. Your rights

Under the PDPO, you have the right to:

Data Access Request (DAR): ask us to confirm whether we hold your personal data, and request a copy of it.
Data Correction Request (DCR): ask us to correct any of your personal data that is inaccurate.
Withdraw consent at any time, where our processing is based on your consent (e.g., direct marketing), without affecting the lawfulness of processing before withdrawal.

Note: unlike the EU’s GDPR, the PDPO does not include a general right to erasure (“right to be forgotten”) or a right to data portability.

To exercise any of these rights, email [email protected]. We will respond within 40 days, as required by the PDPO. We may charge a fee for complying with a Data Access Request, which will not exceed the cost of compliance.

If you believe we have not handled your data properly, you have the right to lodge a complaint with:

Office of the Privacy Commissioner for Personal Data (PCPD)
Hong Kong
Web: https://www.pcpd.org.hk

8. Cookies

[To confirm: does amm.hk currently run any analytics or tracking tools, e.g. Google Analytics? If non-essential cookies are used, we recommend a Cookie Banner and separate Cookie Policy as good practice — the PDPO does not have the EU’s strict prior-consent cookie rule, but transparency about tracking is expected under Data Protection Principle 1, and a banner protects you if EU-based visitors are covered by GDPR’s cookie consent rules.]

9. Security

In line with Data Protection Principle 4, we take reasonable technical and organizational measures to protect the personal data you submit, including access restrictions and secure handling of email and form data. No system is 100% secure, but we work to keep your data protected against unauthorized or accidental access, processing, erasure, loss, or misuse.

10. Children

Our services are directed at businesses and professionals in the maritime industry. We do not knowingly collect personal data from children, and our form is not intended for use by anyone under 18.

11. Changes to this policy

We may update this policy from time to time, for example if we change our tools, add new forms, or as required by law. The “Last updated” date at the top will reflect the latest version.