Last updated: August 24, 2026
Jono Craftspace Limited (referred to as the Company, we, us, or our) provides computer systems design and computer integrated systems design services. The services described on this website are developed and operated by the developer JonoCraft. This Privacy Policy explains how we collect, use, store, and protect personal information when you visit this website, contact us, or use our services.
We collect several categories of information depending on how you interact with us. The categories described below cover the full range of our services and this website, but we only ever collect the information that is relevant to the interaction you have with us.
The first category is contact information. When you reach out to us through the contact form, by email, or by telephone, we collect your name, email address, telephone number if you provide it, and the content of your message. This information allows us to respond to your enquiry and to maintain a record of our correspondence with you.
The second category is project information. If you engage us for a project, we collect the business and technical information required to deliver the services, such as details about your systems, requirements, workflows, and any data you share with us during the engagement. This information is processed solely to perform the services you have requested.
The third category is technical information. When you browse this website, our servers and any analytics tools we use may automatically record information such as your internet protocol address, browser type, device type, operating system, referring pages, pages viewed, and the date and time of your visit. This information is used to understand how the website is used and to keep it secure.
We collect information through several straightforward channels. The primary channel is direct interaction: information you provide to us voluntarily when you complete our contact form, send us an email, call us, or communicate with us in any other way. We rely on you to provide accurate information and to keep it up to date where relevant.
We also collect information automatically as you browse the website. This is done through standard web server logs and, where applicable, cookies and similar technologies. Automatic collection is limited to technical and usage information and does not require any active input from you.
Finally, we may receive information from third parties in limited circumstances, such as when a business partner refers you to us or when a service provider shares information necessary to complete a task on our behalf. When we receive information from a third party, we treat it with the same care as information you provide directly.
We do not collect information through deceptive means, and we do not attempt to obtain more information than is necessary for the purpose at hand. If you are ever unsure why a particular piece of information is being requested, you are welcome to ask us before providing it.
We use the information we collect for a clear and limited set of purposes. First, we use contact information to respond to your enquiries, to answer your questions, and to provide you with information about our services when you have requested it. This is the most common use of personal information on our website.
Second, we use project information to deliver the services you have asked us to perform. This includes designing, building, integrating, and supporting computer systems on your behalf. We process this information strictly within the scope of our agreement with you and only for as long as necessary to perform the work.
Third, we use technical information to operate and improve this website, to monitor performance, to diagnose problems, and to protect the website and our systems from misuse. Aggregated and anonymised usage data helps us understand which parts of the site are useful and where we can improve.
Fourth, we may use your information to meet legal and regulatory obligations, such as record keeping, tax, and audit requirements. Where the law requires us to retain or disclose information, we comply with those obligations.
We do not sell personal information, and we do not use it for automated decision making that produces legal or similarly significant effects. Marketing communications, if any, are only sent where you have consented or where we are otherwise permitted to do so, and you may opt out at any time.
Where applicable data protection law, such as the General Data Protection Regulation, applies to our processing, we rely on one or more legal bases to process personal information. The relevant basis depends on the context in which the information is collected and the purpose for which it is used.
The first legal basis is the performance of a contract. When you engage us for services, we process your information because it is necessary to perform the agreement we have with you and to take steps at your request before entering into such an agreement.
The second legal basis is legitimate interests. We may process information where it is necessary for our legitimate business interests or those of a third party, provided those interests are not overridden by your rights and freedoms. Examples include responding to enquiries, improving our website, and maintaining the security of our systems.
The third legal basis is consent. Where we rely on consent, such as for certain optional communications, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
The fourth legal basis is compliance with a legal obligation. We process information where the law requires it, such as for tax, accounting, and regulatory purposes.
We retain personal information only for as long as is necessary to fulfil the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. The specific retention period depends on the type of information and the purpose for which it was collected.
Enquiry and correspondence records are typically retained for a period of up to twenty four months after our last interaction, to allow us to respond to follow up questions and to maintain a record of our communications. Project records are retained for the duration of the engagement and for a reasonable period afterwards to support warranty, maintenance, and legal obligations.
Where the law requires a specific retention period, such as for tax and accounting records, we comply with those requirements. When information is no longer needed, we delete or anonymise it in a secure manner. You may request deletion of your information at any time, subject to our legal obligations to retain certain records.
We take the security of personal information seriously and apply technical and organisational measures to protect it against accidental loss, unauthorised access, alteration, disclosure, and destruction. The measures we apply are proportionate to the sensitivity of the information we handle.
Technical measures include the use of encryption for data in transit and at rest where appropriate, access controls that limit who can view personal information, and monitoring of our systems for unusual activity. Organisational measures include staff training on data handling, restricted access on a need to know basis, and review of our security practices on a regular basis.
While we work hard to protect your information, no method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee absolute security, but we are committed to responding promptly and transparently if a security incident occurs that affects your personal information.
You also play a role in protecting your information. Please use strong passwords where applicable, keep your devices secure, and do not send sensitive information through unsecured channels.
Our business is based in Hong Kong, but the internet is global, and some of our service providers may operate in countries outside your own. When we transfer personal information across borders, we take steps to ensure that the information receives an adequate level of protection in the country where it is processed.
Where required by applicable law, we rely on recognised transfer mechanisms, such as standard contractual clauses, to safeguard cross border transfers. We only transfer personal information where it is necessary for the purposes described in this Privacy Policy and where appropriate safeguards are in place.
By using our website or services and providing your information, you acknowledge that your information may be transferred to and processed in countries other than your own, subject to the safeguards described above.
Depending on your location and the law that applies to you, you may have certain rights regarding your personal information. These rights may include the right to access the information we hold about you, the right to request correction of inaccurate information, and the right to request deletion of your information.
You may also have the right to restrict or object to certain processing, the right to data portability where applicable, and the right to withdraw consent at any time where we rely on consent as a legal basis. You may also have the right to lodge a complaint with a supervisory authority in your jurisdiction.
To exercise any of these rights, please contact us using the details in the Contact Information section below. We will respond to your request within the time period required by applicable law and may ask you to verify your identity before acting on a request.
We will not discriminate against you for exercising your privacy rights. Where a request is manifestly unfounded or excessive, we may charge a reasonable fee or refuse to act, in accordance with applicable law.
Our website and services are intended for businesses and adults and are not directed to children under the age of sixteen. We do not knowingly collect personal information from children, and we do not market our services to children.
If you are a parent or guardian and you believe that your child has provided us with personal information, please contact us using the details below. If we become aware that we have collected personal information from a child without appropriate consent, we will take steps to delete that information promptly.
We encourage parents and guardians to be involved in the online activities of their children and to understand how the websites and services their children use handle personal information.
This website may contain links to third party websites, applications, or services that are not operated by us. This Privacy Policy applies only to our website and services, and we are not responsible for the privacy practices of third parties.
When you follow a link to a third party website, we encourage you to review the privacy policy of that website before providing any personal information. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third party sites or services.
In some cases, our services may interact with third party platforms that you use, such as cloud providers or communication tools. Where we integrate with such platforms, we do so to deliver the services you have requested, and the handling of your information on those platforms is subject to their own terms and policies.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority and, where required, affected individuals, without undue delay and in accordance with applicable law.
Our breach response process includes containing the incident, assessing its scope and impact, notifying the appropriate parties, and taking steps to prevent a recurrence. We document all breaches and the measures taken in response, regardless of whether notification is required.
If you believe you have identified a security vulnerability or data incident affecting our website or services, please report it to us promptly using the contact details below so that we can investigate.
We may update this Privacy Policy from time to time to reflect changes in our practices, our services, or applicable law. When we make changes, we will update the last updated date at the top of this page and, where the changes are material, provide a more prominent notice.
We encourage you to review this Privacy Policy periodically so that you remain informed about how we protect your information. Continued use of our website or services after changes to this policy take effect constitutes acceptance of the revised policy.
If a change materially affects the way we use information we have already collected, we will seek your consent where required by law before applying the change to that information.
If you have any questions about this Privacy Policy, or if you wish to exercise your privacy rights, please contact us using the details below. We are committed to responding to all privacy enquiries in a timely and helpful manner.
Jono Craftspace Limited
Rm J 5/F KINGSWIN IND BLDG PH 1, 32-50 LEI MUK RD, Kwai Chung, Hong Kong (HK)
Email: care@jonocraft.buzz
Phone: +17014145622
Website: https://www.jonocraft.buzz