1. Introduction

This Policy provides an overview of how our Company protects the personal data and privacy of individuals who register to use our services (hereinafter referred to as the “Services”).

The Company is committed to protecting your privacy and handling your data in an open and transparent manner and in accordance with the relevant data protection legislation applicable in Hong Kong. The personal data that we collect and process depends on the product or service requested and agreed upon in each individual case.

Effective as of January 04, 2026, CARFOLISIA LIMITED has updated this Privacy Policy (hereinafter referred to as the “Policy”).

2. What we need

Our Personal Data Protection Policy governs the use and storage of your data. CARFOLISIA LIMITED acts as a Controller of the personal data you provide to us. We only collect basic personal data about you.

Subscriber’s personal data (meaning any information about You from which You can be personally identified, such as Your name, telephone number, or email address, and which is referred to in this Privacy Policy as “Your Information”) will be processed by CARFOLISIA LIMITED (which includes its agents and employees), and, where appropriate, our partners and subcontractors, in order to provide the full range of Services to the Subscriber.

The Subscriber’s information is collected when the Subscriber submits a contact or enquiry form or communicates with us through the website https://www.carfolisia.com/

3. Why we need It

We require personal data for the following purposes:

Contacting individuals – collection of identification and contact details such as name, email address, and telephone number for communication purposes.

Communicating with individuals – use of email addresses to respond to enquiries and maintain communication.

Legal basis:

Processing of personal data is based on the data subject’s consent and, where applicable, the performance or conclusion of a contract.

4. Who receives your personal data

Personal data may be transferred to third countries outside Hong Kong where necessary for operational purposes, in accordance with applicable data protection requirements.

Where such transfers occur, appropriate safeguards are applied to ensure that personal data remains protected in line with relevant data protection standards.

5. Transfer of personal data to third countries

Personal data may be transferred to third countries outside Hong Kong where necessary for operational purposes, in accordance with applicable data protection requirements.

Where such transfers occur, appropriate safeguards are applied to ensure that personal data remains protected in line with relevant data protection standards.

6. How Long We Keep Your Personal Data

Personal data is stored in a form that allows identification of data subjects only for as long as necessary to fulfil the purposes for which the data was collected.

Personal data may be retained for longer periods where required for legal, regulatory, archiving, statistical, or defence of legal rights purposes.

7. Your data protection rights

You have the following rights in relation to your personal data held by us:

• The right to access your personal data
• The right to request correction of inaccurate or incomplete data
• The right to request erasure of your personal data where there is no lawful reason for continued processing
• The right to object to the processing of personal data in certain circumstances
• The right to withdraw consent to processing at any time, where processing is based on consent

To exercise any of these rights or to raise concerns, you may contact us using the details below.

8. Right to lodge a complaint

If you believe that your personal data has not been handled appropriately, you may contact us at:

Email: [email protected]

If you remain dissatisfied, you have the right to lodge a complaint with the relevant authority in Hong Kong:

Privacy Commissioner for Personal Data
Room 1303, 13/F, Dah Sing Financial Centre
248 Queen's Road East, Wan Chai, Hong Kong

Email: [email protected]

9. Changes to this privacy policy

Carfolisia Limited may amend this Privacy Policy from time to time. Any updates will be reflected by revising the effective date at the top of this page.

We encourage users to review this Policy periodically to remain informed about how personal data is processed and protected.