Firefly Visual (“we,” “us,” “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website, contact us, or subscribe to our communications. It is written to align with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
1. Information We Collect
- Contact information — name, company name, email address, phone number, country or region, provided when you submit a contact form, request a quotation, or subscribe to our emails.
- Project information — product interests, project details and installation requirements, provided when you request a quotation or a technical consultation.
- Technical data — IP address, browser type, device information, pages visited and time spent on site, collected automatically through cookies and server logs.
- Communication data — records of your correspondence with us, including emails, chat logs and call notes.
- Transaction data — order history, payment records and shipping details, collected when you place an order.
2. How We Use Your Information
We use your information to:
- Respond to your inquiries and provide quotations and technical support
- Process and fulfil your orders, including production coordination and shipping
- Send product updates, industry insights and promotional communications, only where you have opted in
- Improve our website, products and customer service based on your feedback and usage patterns
- Comply with legal obligations, including tax, customs and export control requirements
- Detect and prevent fraud, security breaches and unauthorised access
3. Legal Basis for Processing
Where the GDPR applies, we rely on one or more of the following legal grounds:
- Consent — you have given explicit consent for a specific purpose, for example email marketing
- Contract — processing is necessary to perform a contract with you, for example fulfilling an order
- Legitimate interest — processing supports our legitimate business interests such as improving our services and preventing fraud, provided these do not override your rights
- Legal obligation — processing is necessary to comply with a legal obligation, for example tax records and customs documentation
4. Data Sharing and Third Parties
We do not sell your personal data. We may share your information with:
- Service providers — shipping companies, freight forwarders, payment processors and IT service providers who assist us in operating our business, under data protection agreements
- Manufacturing partners — our contract manufacturing facilities, who need order and specification details to produce your products, under confidentiality agreements
- Legal authorities — where required by law, court order or government regulation
- Business transfers — in the event of a merger, acquisition or sale of assets, your data may be transferred as part of the transaction. We will notify you before your data becomes subject to a different privacy policy.
5. Data Storage and Security
Your personal data is stored on secure servers located in Hong Kong and protected by industry-standard security measures, including:
- Encryption of data in transit (SSL/TLS)
- Access controls, so that only authorised personnel with a legitimate business need can access your data
- Regular security audits and vulnerability assessments
- Employee data protection training and confidentiality agreements
We retain personal data only as long as necessary to fulfil the purposes for which it was collected, including legal, accounting and reporting requirements. Typically:
- Inquiry and contact data — 3 years from last contact
- Customer and order data — 7 years, for tax and legal compliance
- Marketing subscription data — until you unsubscribe or we cease marketing activities
6. Cookies and Similar Technologies
Our website uses cookies and similar technologies to support basic functionality, remember your preferences and understand how visitors use the site. Cookies are small text files stored on your device. We use:
- Essential cookies — required for basic website functionality such as form submission and session management
- Analytics cookies — help us understand how visitors use our website
- Preference cookies — remember your settings and preferences such as language and region
You can control or disable cookies through your browser settings. Disabling essential cookies may affect website functionality. For full detail, see our Cookie Policy.
7. Your Rights Under the GDPR
If you are a resident of the European Economic Area, you have the following rights:
- Right of access — request a copy of the personal data we hold about you
- Right to rectification — request correction of inaccurate or incomplete data
- Right to erasure — request deletion of your personal data, subject to legal exceptions
- Right to restrict processing — request that we limit how we process your data
- Right to data portability — request transfer of your data to another organisation in a structured, commonly used format
- Right to object — object to processing based on legitimate interests, or to direct marketing
- Right to withdraw consent — withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal
To exercise any of these rights, contact us at info@firefly-visual.com. We will respond within 30 calendar days. There is no fee, unless your request is clearly excessive or repetitive, in which case we may charge a reasonable administrative fee.
8. Unsubscribe and Opt-Out
If you no longer wish to receive marketing communications from Firefly Visual, you can unsubscribe at any time by:
- Clicking the “Unsubscribe” link at the bottom of any marketing email
- Replying to any marketing email with “UNSUBSCRIBE” in the subject line
- Contacting us at info@firefly-visual.com
We process unsubscribe requests within 5 business days. Unsubscribing from marketing communications does not affect transactional messages related to your orders, inquiries or support requests, which we will continue to send as necessary.
9. Children’s Privacy
Our website and services are not directed to children under 16. We do not knowingly collect personal data from children under 16. If you believe we have collected information from a child under 16, please contact us and we will take steps to delete that information.
10. International Data Transfers
Your personal data may be transferred to and processed in countries outside the European Economic Area, including China, where our headquarters and manufacturing facilities are located. These countries may have data protection laws that differ from those in your jurisdiction. When we transfer your data internationally, we apply appropriate safeguards, including:
- Standard Contractual Clauses approved by the European Commission
- Data processing agreements with all recipients
- Technical and organisational security measures
11. Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices, legal requirements or business operations. We will notify you of material changes by posting the updated policy on this page and, where appropriate, by email. The date of the latest revision appears at the top of this page. Your continued use of our website and services after changes are posted constitutes acceptance of the updated policy.
12. Contact Us
For questions, concerns or requests regarding this Privacy Policy or our data protection practices, please contact us:
If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.
Last updated: 2026-10-22 · Version 1.0
