Privacy Policy

1. Introduction

Kvmcloud Network CO., LIMITED ("Kvmcloud," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services, website (kvm.hk), and related platforms (collectively, the "Services").

We are a company incorporated under the laws of Hong Kong (AS210110). By using our Services, you consent to the practices described in this Privacy Policy.

2. Information We Collect

We collect the following types of information:

2.1 Information You Provide

• Account Information: Name, email address, company name, phone number, billing address
• Payment Information: Credit card details, billing information (processed securely through third-party payment providers)
• Communication Data: Support tickets, emails, and other communications with our team
• Technical Configuration: Server configurations, IP addresses, and technical settings you choose

2.2 Information Collected Automatically

• Usage Data: Bandwidth usage, resource consumption, login history
• Device Information: IP addresses, browser type, operating system
• Log Data: Server access logs, error logs, and performance metrics

2.3 Information from Third Parties

We may receive information from payment processors, credit bureaus, or other service providers to verify your identity or process payments.

3. How We Use Your Information

We use collected information for the following purposes:

4. Data Storage & Security

We implement comprehensive security measures to protect your data:

4.1 Technical Safeguards

• Industry-standard encryption (TLS 1.2+) for data in transit
• Encrypted storage for sensitive data at rest
• Regular security assessments and penetration testing
• Network firewalls and intrusion detection systems
• Multi-factor authentication for administrative access

4.2 Organizational Measures

• Access controls with principle of least privilege
• Employee training on data protection
• Background checks for employees with data access
• Regular security audits and compliance reviews

4.3 Data Center Security

Our infrastructure is hosted in secure, SOC 2 compliant data centers with 24/7 monitoring, biometric access controls, and redundant power systems.

5. Cookies & Tracking

We use cookies and similar technologies to enhance your experience:

5.1 Types of Cookies We Use

• Essential Cookies: Required for basic site functionality, authentication, and security
• Analytics Cookies: Help us understand how visitors use our website (e.g., Google Analytics)
• Preference Cookies: Remember your settings and preferences

5.2 Managing Cookies

You can control cookie preferences through your browser settings. Disabling essential cookies may affect site functionality.

5.3 Tracking Technologies

We may use pixel tags, web beacons, and similar technologies for analytics and marketing purposes. These are used with your consent where required by law.

6. Third-Party Services

We work with trusted third-party service providers:

6.1 Payment Processing

Payment transactions are processed by certified payment processors (e.g., Stripe, PayPal). We do not store complete credit card information on our servers.

6.2 Cloud Infrastructure

Some services may be hosted on third-party cloud infrastructure providers. These providers are contractually bound to maintain appropriate security measures.

6.3 Analytics Services

We use analytics services to understand website usage patterns. These services may collect anonymized data about your visit.

6.4 Legal Disclosure

We may disclose information if required by law, court order, or governmental regulation, or if we believe disclosure is necessary to protect our rights or prevent illegal activity.

7. Your Rights

You have the following rights regarding your personal data:

7.1 Access & Portability

You may request a copy of your personal data in a commonly used, machine-readable format.

7.2 Correction

You may request correction of inaccurate or incomplete personal data.

7.3 Deletion

You may request deletion of your personal data, subject to legal retention requirements and outstanding obligations.

7.4 Restriction

You may request restriction of processing in certain circumstances.

7.5 Objection

You may object to processing based on legitimate interests, including direct marketing.

7.6 Withdrawal of Consent

Where processing is based on consent, you may withdraw consent at any time.

7.7 Complaints

If you have concerns about our data practices, you have the right to file a complaint with the relevant data protection authority.

8. Data Retention

We retain your personal data only for as long as necessary:

• Account Data: Retained while your account is active and for 3 years after termination
• Usage Logs: Retained for 12 months for security and operational purposes
• Billing Records: Retained for 7 years to comply with legal and tax obligations
• Support Communications: Retained for 3 years after resolution

After these periods, data is securely deleted or anonymized.

9. Cross-Border Data Transfer

We may transfer your personal data to jurisdictions outside Hong Kong for service delivery, technical operations, or other legitimate purposes. In compliance with PDPO requirements:

9.1 Transfer Safeguards

• We conduct adequacy assessments for destination jurisdictions
• We implement standard contractual clauses where required
• We ensure third-party recipients maintain equivalent data protection standards

9.2 Data Processing Locations

Your data may be processed in Hong Kong and other jurisdictions where our infrastructure or service providers operate. We take reasonable steps to ensure your data receives adequate protection regardless of processing location.

9.3 Your Consent

By using our Services, you acknowledge and consent to the cross-border transfer of your personal data as described in this policy.

10. Contact Information

For privacy-related inquiries or to exercise your rights:

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last Updated" date.