This Privacy Policy explains how the digital services developed and operated by the developer SoraBold are managed and how personal information is handled. SoraBold develops and operates the services on behalf of SORABOL Group Limited, a company registered in Hong Kong (HK) with its registered address at Rm 18, 8/F, PETER LEUNG INDL BLDG, 103 WAI YIP ST, Kwun Tong, Hong Kong (HK). The studio practice behind these services is known as DEMORADESIGN.
1. Introduction
This Privacy Policy describes how SORABOL Group Limited, a company based in Hong Kong (HK), and its studio practice DEMORADESIGN handle personal information when you use our website, our services, and the systems we design and operate. The services that this policy covers are developed and operated by the developer SoraBold, who leads the technical work of the studio and who is responsible for the day to day engineering decisions behind every system we deliver.
We respect your privacy and we are committed to protecting the personal information you share with us. This policy explains what we collect, why we collect it, how we use it, and the choices you have over that information. It is written in plain language so that you can make informed decisions about sharing your details with us.
Please read the whole document carefully. By using our website or by using our services, you agree to the practices described here. If you do not agree with any part of this policy, you should not use the website or the services.
2. Scope of This Policy
This Privacy Policy applies to the public website at www.demoradesign.lol, to the online and offline services we provide to clients, and to any other digital product that we operate under the DEMORADESIGN name. It covers information collected when you browse the website, when you submit an enquiry through the contact form, when you email us directly, when you sign a client agreement, and when you use a system that we design, build, or maintain for your organisation.
The policy does not cover the practices of third party websites or services that we do not control. Where a client operates their own separate privacy policy for a system that we build for them, that client policy also applies to the end users of the system, and we support our clients in meeting their own obligations.
3. Information We Collect
We collect several categories of personal information, and each category is limited to what is reasonably needed for our work.
- Contact information, such as your name, email address, phone number, and company name, when you write to us or use the contact form.
- Enquiry information, such as the subject and content of your message and any documents you attach to it.
- Client information, such as billing addresses, tax identification numbers where required, and project records collected under a signed agreement.
- Technical information, such as the type of browser and device you use, the pages you visit, your general location derived from your internet address, and the time and date of each visit.
We collect only the information that is reasonably needed to run the website and to deliver the services you have asked for. We do not ask for sensitive categories of personal data unless a specific project genuinely requires it and you agree in advance.
4. How We Collect Information
We collect personal information directly from you when you submit a form, send an email, attend a meeting, or sign an agreement. This is the most common way we receive information, and it always happens with your knowledge.
We collect technical information automatically through standard web technologies, including server logs and cookies, when you browse the website. These technologies record basic details about each visit so that we can keep the site secure and understand how it is used.
We may also receive information from third parties, for example when a referral introduces you to the studio or when a client provides the contact details of a team member who will work with us. Information received from third parties is treated under the same rules as information we collect ourselves. Where you provide information about another person, you confirm that you have the right to share that information with us.
6. Purposes of Processing
We process personal information for clear and limited purposes, and we never drift outside them. We respond to your enquiries and provide the information you request. We prepare proposals, agreements, and invoices for prospective and current clients. We design, build, deploy, and support the systems and services you engage us to deliver.
We operate and secure our website and our service desk, which includes monitoring traffic and detecting misuse. We communicate about project progress, scheduled work, service notices, and matters that affect your relationship with the studio. We improve our services by studying how systems and the website are used, and we meet our legal and regulatory obligations in Hong Kong and in the other regions where we operate.
We never use your information for purposes that are incompatible with the purposes described in this policy. If we ever wish to use your information for a new purpose, we will explain that purpose to you before we begin, and where required we will ask for fresh consent.
7. Legal Basis for Processing
We process personal information on lawful bases that are recognised under applicable data protection law. We process information with your consent where you have given it, for example when you accept non-essential cookies or subscribe to a communication.
We process information to perform a contract, where processing is necessary to deliver the services you have agreed to receive and to manage the client relationship. We process information to pursue our legitimate interests, such as operating a secure website, preventing misuse, and improving our studio, provided that your rights and freedoms do not override those interests.
We also process information to comply with legal obligations that apply to us, such as accounting, tax, and record keeping rules. Where the law of a particular region requires a specific lawful basis for a particular kind of processing, we rely on the basis that applies in that region and we honour the stricter rules where they apply.
9. International Data Transfers
DEMORADESIGN operates from Hong Kong (HK), and our clients and users are located in many different countries. Personal information may therefore be processed in Hong Kong and in other regions where our hosting and cloud providers operate.
When information is transferred across borders, we take steps to protect it with appropriate safeguards, including standard contractual clauses and technical and organisational security measures. The protections described in this policy apply wherever your information is processed, and we do not transfer information to a location that cannot offer a comparable level of protection.
By using our services, you understand that your information may be processed in Hong Kong and in the locations of our service providers. We keep the list of provider locations under review so that we can tell you honestly where your information sits.
10. Data Retention
We keep personal information only for as long as it is needed for the purposes described in this policy or for as long as the law requires. Retention is reviewed on a regular basis and is tied to the reason the information was collected in the first place.
Enquiry messages are kept for a reasonable period after the enquiry is resolved, usually no longer than two years. Client records, agreements, and tax documents are kept for the period required by accounting and tax law in Hong Kong, which is typically seven years. System logs and technical records are kept for a limited time, usually not more than twelve months, unless they are needed for a longer investigation.
When information is no longer needed, we delete it or remove identifiers so that it can no longer be linked to you. Where deletion is not technically possible, for example in a backup that is due to expire, we restrict access to that information until it can be removed.
11. Data Security
We protect personal information with a combination of technical, organisational, and physical measures. Technical controls include encryption in transit and at rest, access controls, firewalls, and regular security testing of the systems we operate.
Organisational controls include staff training, written procedures, and the principle of least privilege, under which each person can reach only the information they need for their work. Physical controls protect the offices and equipment where data is handled, and we also require our service providers to maintain reasonable security.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security. We work continuously to reduce risk, we monitor our systems for unusual activity, and we respond promptly to any incident that we detect, including notifying the people affected where the law requires it.
12. Your Data Protection Rights
You have rights over the personal information we hold about you, subject to the law of your region. You have the right to access the information we hold and to ask for a copy of it. You have the right to request correction of inaccurate or incomplete information.
You have the right to request deletion of information where the legal conditions are met. You have the right to object to processing that is based on legitimate interests, and the right to restrict processing in certain circumstances. You have the right to data portability where that right applies to the specific kind of processing.
Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of earlier processing. To exercise any of these rights, contact us at info@demoradesign.lol. We respond to verified requests within a reasonable time, and we never charge a fee for a simple request.
13. Privacy for Children
Our website and services are designed for businesses and professional users, and we do not knowingly collect personal information from children. We do not direct our services at children, and we do not build systems that intentionally target children as users.
If you believe that a child has provided us with personal information, please contact us at info@demoradesign.lol and we will delete the information as soon as we can verify the request. Where a client system is used by children, the client is responsible for obtaining any consent required by law and for operating their own privacy practices in line with the applicable regulations.
We encourage parents and guardians to supervise the online activity of children under their care and to contact us with any concern about the way a child may have interacted with our website.
14. Third Party Links
Our website and the systems we build may contain links to third party websites, tools, and services that we do not operate. When you follow a link, you leave the environment that this policy covers, and the privacy practices of the destination site are governed by that site.
We recommend that you read the privacy policy of any site you visit. We are not responsible for the content or the data practices of third party websites, and this policy does not apply to them.
The inclusion of a link does not imply that we endorse the linked site. We review the links we publish from time to time and we remove any that no longer serve our visitors or that appear to have changed their standards.
15. Your Choices and Controls
You control several aspects of how your information is used. You may choose not to provide information, although some fields are needed for us to respond to your enquiry. You may limit cookies through the website settings or through your browser.
You may ask us to update or correct your contact details at any time. You may withdraw consent for any optional processing and you may object to processing based on legitimate interests. If you receive email from us that you no longer want, you may ask to be removed from the mailing list at any time.
We respect your choices and we design our systems so that your preferences are honoured consistently. Contact us at info@demoradesign.lol for help with any of these controls, and we will confirm the outcome of your request in writing.
16. Automated Decision Making
We do not use personal information for automated decision making that produces legal or similarly significant effects. Our studio does not rely on algorithms to make hiring, pricing, or contractual decisions about individuals.
Where we use analytics tools, the output is aggregated and used to improve the website and the services, and it does not lead to automated decisions about you. The analytics we rely on are statistical and anonymous at the point of use.
If the studio ever introduces automated processing that could have a significant effect on an individual, we will update this policy and provide transparency about how the processing works and how you can seek human review. For now, every decision that touches you as a person is reviewed by a person.
17. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our services, in technology, or in the law. When we make a material change, we revise the date at the top of this page and we take reasonable steps to notify you, for example by posting a notice on the website or by contacting you through the details we hold.
We encourage you to review this page periodically so that you stay informed about how we protect your information. The version of the policy in effect at the time of your use of the services is the version that applies to that use.
Continued use of the website or the services after a change takes effect means that you accept the updated policy. If you do not agree with an update, you should stop using the website and the services and contact us with any questions.
18. Contact Information
If you have questions, concerns, or requests about this Privacy Policy or about how we handle personal information, you are welcome to contact us at any time. You may write to our data protection contact at info@demoradesign.lol.
You may also reach us by post at SORABOL Group Limited, Rm 18, 8/F, PETER LEUNG INDL BLDG, 103 WAI YIP ST, Kwun Tong, Hong Kong (HK), or by phone at +16816448596.
We will acknowledge your message within a reasonable time and we will do our best to resolve any concern. If you are not satisfied with our response, you may have the right to raise the matter with the data protection authority in your region.