1. Introduction
This Privacy Policy explains how XFacil (Hong Kong) Limited (the "Company", "we", "us" or "our") collects, uses and protects personal data in connection with this website (the "Website").
We are committed to handling personal data in accordance with the Personal Data (Privacy) Ordinance (Cap. 486 of the Laws of Hong Kong) ("PDPO").

​

2. Scope of This Privacy Policy
This Privacy Policy applies only to personal data collected through the Website, including personal data provided by visitors who browse the Website or contact us through the Website.
This Privacy Policy does not apply to any personal data processed in connection with any money services any money services or other regulated services, which are subject to separate privacy notices, contractual arrangements and applicable regulatory requirements.

​

3. Personal Data We Collect
Depending on how you interact with the Website, we may collect the following categories of personal data:
• Contact information that you voluntarily provide to us, such as your name, email address and the content of your enquiry, when you contact us via email or other communication channels made available on the Website;
• Technical and usage information, such as IP address, browser type, device information, pages visited and access times, which may be collected automatically when you access or use the Website.
We do not intentionally collect sensitive personal data through the Website.

​

4. Purpose of Collection and Use
Personal data collected through the Website may be used for the following purposes:
• responding to enquiries or communications submitted through the Website;
• operating, maintaining and securing the Website;
• monitoring and improving the functionality and performance of the Website;
• complying with applicable legal or regulatory requirements.
Personal data will not be used for purposes that are incompatible with the purposes stated above.

​

5. Cookies and Similar Technologies
The Website may use basic cookies or similar technologies to support its operation, security and functionality.
These technologies do not collect information that directly identifies you. You may adjust your browser settings to refuse cookies or to alert you when cookies are being used; however, doing so may affect the availability or functionality of certain parts of the Website.

​

6. Disclosure of Personal Data
We do not sell or rent personal data collected through the Website.
Personal data may be disclosed on a need-to-know basis to:
• service providers engaged to support the operation or maintenance of the Website, subject to appropriate confidentiality obligations;
• regulatory authorities, courts or law enforcement agencies, where disclosure is required or permitted by applicable laws or regulations.

​

7. Data Security and Retention
We take reasonable and appropriate technical and organisational measures to protect personal data collected through the Website against unauthorised access, loss, misuse or disclosure.
Personal data will be retained only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by law.

​

8. Your Rights
Under the PDPO, you may have the right to:
• request access to personal data held by us about you;
• request correction of any inaccurate or incomplete personal data;
• requests may be subject to applicable legal requirements and exceptions under the PDPO.

​

9. Contact Us
If you have any questions about this Privacy Policy or our handling of personal data, you may contact us at:
privacy@obita.xyz

​

10. Updates to This Privacy Policy
We may update this Privacy Policy from time to time. Any updates will be published on the Website, and the updated version will take effect upon publication.