Lingxi Privacy Policy

Lingxi (HK) Tech Limited ("Lingxi", "we", "our", or "us") respects and protects your personal data and privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use Lingxi products, services, and websites (collectively, the "Services").

By using our Services, you acknowledge and agree to the terms of this Privacy Policy and consent to the processing of your personal data as described below.

1. Data Controller / Data Processor Roles

Depending on how our Services are used:

1.1 Lingxi acts as a "Data User" (under the Personal Data (Privacy) Ordinance, "PDPO") for personal data collected directly from you (e.g., for account registration, billing, or support).

1.2 Lingxi acts as a "Data Processor" for customer data that you or your organization upload or input into Lingxi systems (e.g., donor, volunteer, or event records).

1.3 When acting as a processor, Lingxi processes such data only under your organization's documented instructions and does not use such data for its own purposes.

2. Information We Collect

We may collect and process the following categories of personal data:

2.1 Account Information – name, email address, phone number, organization name, and login credentials.

2.2 Usage Information – login logs, browser type, IP address, device information, and access time.

2.3 Payment Information – transaction details processed securely via third-party providers (e.g., Stripe, Alipay, WeChat Pay).

2.4 Support Information – communications with our support team and related correspondence.

2.5 Customer Data – data uploaded or entered into Lingxi systems by you or your organization (e.g., donor or volunteer information).

We do not intentionally collect sensitive personal data such as race, religion, or medical information.

3. How We Use Personal Data

We process personal data for the following purposes:

3.1 To provide, operate, and improve our Services;

3.2 To manage registration, authentication, and account security;

3.3 To process payments and issue invoices;

3.4 To deliver technical support and respond to inquiries;

3.5 To send service notifications, system updates, and renewal reminders;

3.6 To comply with applicable legal or regulatory obligations.

We may also use aggregated, non-identifiable data for analytics and product improvement.

4. Direct Marketing and Communication

4.1 Lingxi complies with the Unsolicited Electronic Messages Ordinance (Cap. 593) and relevant PDPO requirements. We will not use your personal data for direct marketing without your explicit consent.

4.2 If you have opted in to receive marketing messages, you may withdraw consent at any time by clicking "unsubscribe" in our emails or contacting hi@lingxi360.cn.

5. Data Disclosure

We may disclose personal data under the following circumstances:

5.1 With your consent, to third-party service providers acting on our behalf;

5.2 To legal or regulatory authorities, when required by law or court order;

5.3 To prevent fraud or ensure security, where necessary;

5.4 To partners or affiliates assisting with service delivery (e.g., hosting, messaging, payment processing).

Our key subprocessors include but are not limited to Alibaba Cloud (Hong Kong region), Stripe, SendGrid, Alipay, WeChat Pay, and other providers as applicable. All subprocessors are required to implement appropriate data protection and security measures.

6. Cross-Border Data Transfers

Lingxi primarily stores and processes data on Alibaba Cloud (Hong Kong region). If personal data must be transferred outside Hong Kong, we ensure that the recipient provides protection standards equivalent to those required under DPP3 and DPP4 of the PDPO.

7. Data Retention

7.1 We retain personal data only as long as necessary for the purposes for which it was collected or as required by law.

7.2 Upon service termination, customer data will be retained for 30 days to allow data export, after which it will be permanently deleted from all active systems and backups in accordance with Lingxi's data retention policy.

8. Data Security

We apply reasonable technical and organizational measures to protect personal data from unauthorized access, loss, or alteration, including:

8.1 Encryption of data in transit and at rest;

8.2 Access control and multi-factor authentication;

8.3 Network firewalls and intrusion detection;

8.4 Regular security audits and system monitoring.

However, no system is completely immune to risks. Users are responsible for safeguarding their own account credentials.

9. Your Rights

Under the Personal Data (Privacy) Ordinance (Cap. 486), you have the right to:

9.1 Request access to personal data held about you;

9.2 Request correction of inaccurate or incomplete data;

9.3 Withdraw consent for direct marketing at any time.

Requests should be sent to hi@lingxi360.cn. We may need to verify your identity before processing such requests.

10. Cookies and Analytics

We use cookies and similar technologies to:

10.1 Maintain session authentication;

10.2 Enhance user experience and service performance;

10.3 Conduct aggregated and anonymized analytics.

You may disable cookies in your browser, but some features of the Services may not function properly as a result.

11. Updates to This Policy

We may update this Privacy Policy periodically. Material changes will be announced on our website at least 30 days in advance. Continued use of the Services after such date constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or Lingxi's data protection practices, please contact: