Privacy & cookies

Who is responsible?

Kris, trading as KrisX Works, is an independent website design business based in Hong Kong and serving clients worldwide. For privacy questions or requests, contact hello@krisxworks.com.

Your enquiry and information

When you choose Send enquiry, we receive your name, email address, optional phone number, company or project name, selected services and project details. We use this information to respond and prepare a quotation, and to provide services if agreed. Merely typing does not submit your form contents. Download project brief saves a file on your device without sending the enquiry.

Form delivery uses a security check and an email service. An enquiry is not a newsletter subscription. Please avoid sensitive personal information or other people’s information you are not entitled to share. If sending is unavailable, you can download your brief or contact us by email.

Why we use information

We use correspondence to answer your request and take steps towards an agreement, deliver agreed work, maintain necessary business records and meet legal obligations. Where EU or UK data protection law applies, the relevant grounds may be steps at your request before a contract, contract performance, legal obligations, or legitimate interests in managing business correspondence and security. You may object to processing based on legitimate interests. We will explain the grounds relevant to your request.

If we introduce an optional use that requires consent, we will explain it and ask first. You can withdraw that consent without affecting earlier lawful processing.

Cookies and your choices

Optional Google Analytics 4 starts only after you choose “Allow analytics”. Choosing “Keep essential only”, dismissing settings or ignoring the banner leaves it off. Both choices are available in the banner and footer Cookie settings. You can withdraw permission there at any time. No Google Analytics requests are sent before permission. We also keep analytics off when your browser sends a Global Privacy Control signal.

The site works without analytics. Withdrawing permission stops our analytics tag and removes its cookies from this site; it does not undo data previously processed. The language selector uses page URLs. We do not use advertising pixels, Google signals or advertising personalisation, and do not sell personal information or share it for targeted advertising through this website.

Optional audience measurement

With permission, Google Analytics measures page visits, language, referral website, contact-link clicks, starting the enquiry form, brief downloads and enquiries accepted by the sending service. Acceptance does not prove inbox delivery, a qualified lead or a sale. It helps us understand useful content and improve the enquiry journey. Consent is the basis for this optional measurement.

Google processes technical information such as browser/device information, identifiers, interaction times and approximate geographic information derived from your connection. We omit page query strings and fragments and reduce referring URLs to the website origin. We do not send your name, email, phone, company, enquiry text or downloaded brief to Analytics. Automatic form and outbound-link measurement are disabled. Event-level data retention is set to two months; aggregate reports can remain longer.

Google may process data outside Hong Kong. Read how Google uses information from sites using its services and the Google Privacy Policy. You can also use the Google Analytics browser opt-out. For questions about earlier data or international transfer safeguards, contact us.

Hosting, security and other providers

Cloudflare hosts the website and provides security, including Turnstile spam checks when you interact with the enquiry form. These services process technical information such as IP address, browser and device signals, request times and security-verification results. See the Cloudflare Privacy Policy, including the Turnstile addendum. Our cookie controls manage the saved preference and optional analytics. Turnstile is configured without pre-clearance; other platform security features may use necessary cookies.

Resend processes the enquiry content and email addresses to send a notification to KrisX Works. Cloudflare Email Routing forwards incoming email to our Google Gmail inbox; both services process the message and addressing information for delivery and correspondence. See the Resend Privacy Policy and Google Privacy Policy. We do not use these services for visitor advertising. Access is limited to the purposes of security, handling requests and providing agreed services. Information may also be disclosed when legally required.

Retention and international handling

We do not keep a separate website enquiry database or log form contents in the website application. Submitted information is processed by the sending service and retained in email correspondence. Downloaded files and browser restoration are controlled by you. Our saved preference cookie lasts up to 180 days.

We retain correspondence only as needed to respond, provide agreed work, keep required business records or resolve disputes. You can request deletion or ask about the period relevant to your enquiry. Providers apply their own operational, security and backup retention periods. Information may be processed outside Hong Kong, including by providers in the United States and their international infrastructure. Contact us for the provider and transfer safeguards relevant to your information.

Your rights and requests

You may request access to and correction of personal data under Hong Kong law. Depending on applicable law and circumstances, you may also have rights to deletion, restriction, portability, objection, withdrawal of consent and a complaint to your local data protection authority. These rights are subject to applicable conditions and exemptions.

Email hello@krisxworks.com with your request. We may ask for proportionate information to verify your identity and will respond within the period required by applicable law. In Hong Kong, you may contact the Privacy Commissioner for Personal Data. We do not use this website to make automated decisions with legal or similarly significant effects.

Children and changes to this notice

Our services are intended for professional and business enquiries, not for collecting children’s information. Contact us if you believe a child has provided personal data. We will update this page when data practices change, including before adding optional tracking. The date above identifies this notice’s revision.