Your privacy is important to us. It is BBPOS’s policy to respect your privacy and comply with any applicable laws and regulations, including the Hong Kong Personal Data Privacy Ordinance (“PDPO”), regarding any personal data we may collect about you, including across our website, https://bbpos.com, and other sites we own and operate.
This policy was last updated on 1 July 2024.
BBPOS designs and manufactures a range of mPOS devices together with the management tools to control them, but does not operate or manage these devices, nor does it manage the sales and marketing process for such devices. As such, BBPOS only processes very limited personal data:
When you visit our website, our servers may automatically log the standard data provided by your web browser. This may include your device’s Internet Protocol (IP) address, your browser type and version, the pages you visit, the time and date of your visit, the time spent on each page, other details about your visit, and technical details that occur in conjunction with any errors you may encounter. We use this information for error logging and diagnostics only.
Please be aware that while this information may not be personally identifying by itself, it may be possible to combine it with other data to personally identify individual persons.
A cookie is a small text file stored on your computer or mobile device and retrieved from there on subsequent visits. BBPOS uses cookies to enhance and facilitate your visit. We only use essential technical cookies, and do not use advertising cookies or any other cookies to store personal data or to provide data to third parties. You can always delete cookies from your computer or mobile device using the browser, or via the cookie manager linked to in the cookie banner.
We may drop the following cookies when you visit our websites:
| Site | Cookie Name | Description | Personal data stored? | Expiration |
| BBPOS | Elementor | Used by the website’s WordPress theme. It allows the website owner to implement or change the website’s content in real time. | No | When browsing session ends |
| BBPOS | wpEmojiSettingsSupports | This cookie is required for WordPress normally. | No | When browsing session ends |
| BBPOS | show_preloader_once | This cookie is required for WordPress normally. | No | When browsing session ends |
| BBPOS | wp_wpfileupload_0 | This cookie is required for the plugin to operate normally. | No | Expires after 2 days |
| Developer Portal | ASP.NET_SessionId | Used for login session. | No | Expires when browsing session ends |
| TMS | JSESSIONID | Used for the session. | No | Expires when the browsing session ends |
When collecting your personal data directly from you, we rely on notice and consent as the legal basis.
When we collect personal data about you, we generally rely on notice and/or consent, or when collecting data for security-related purposes, the corresponding legal bases set forth in the PDPO or other applicable privacy laws to protect our legitimate interests.
We only collect and use your personal data when we have a legitimate reason for doing so, and only collect the minimum amount of data needed to fulfill this purpose or reason.
We may collect personal data from you when you do any of the following:
We may collect, hold, use, and disclose information for the following purposes, and personal data will not be further processed in a manner that is incompatible with these purposes:
We may share your personal data with the following parties and for the following purposes:
When we collect and process personal data, and while we retain this information, we will take appropriate measures to prevent loss and theft, as well as unauthorized access, disclosure, copying, use, or modification.
We will comply with the laws applicable to us in respect of any data breach.
If you use the Developer Portal, or the TMS service, you are responsible for selecting any password and its overall security strength, ensuring the security of your own information within the bounds of our services.
We keep your personal data only for as long as necessary for the carrying out of the purposes referred to in this privacy policy. This time period may depend on what we are using your information for, in accordance with this privacy policy. If your personal data is no longer required, we will delete it or make it anonymous by removing all details that can directly or indirectly identify you.
If required by law or regulation, we may retain your personal data for our compliance with a legal, accounting, or reporting obligation or for archiving purposes in the public interest, scientific, or historical research purposes or statistical purposes.
We do not aim any of our products or services directly at children under the age of 18, and we do not knowingly collect personal data about children under 18.
We may transfer your personal data to jurisdictions other than your own. These jurisdictions may have data protection rules that are different from your jurisdiction. When transferring data across borders, we take measures to comply with applicable data protection laws related to such transfer and we ensure that we protect the transferred personal data in accordance with this privacy policy.
You retain the right to withhold personal data from us, with the understanding that your experience of our website may be affected. We will not discriminate against you for exercising any of your rights over your personal data. If you do provide us with personal data, you understand that we will collect, hold, use, and disclose it in accordance with this privacy policy. You retain the right to request details of any personal data we hold about you.
If we receive personal data about you from a third party, we will protect it as set out in this privacy policy. If you are a third party providing personal data about somebody else, you represent and warrant that you have such person’s consent to provide the personal data to us.
If you have previously agreed to us using your personal data for direct marketing purposes, you may change your mind at any time. We will provide you with the ability to unsubscribe from our email database or opt out of communications.
If you believe that any information we hold about you is inaccurate, out of date, incomplete, irrelevant, or misleading, or if you wish to exercise other data subject rights you have under applicable law, please contact us using the details provided in this privacy policy. We will take the steps required under applicable law to respond to your request within the timeframes prescribed by such law.
If you believe that we have breached a relevant data protection law and wish to make a complaint, please contact us using the details below and provide us with full details of the alleged breach. We will promptly investigate your complaint and respond to you, in writing, setting out the outcome of our investigation and the steps we will take to deal with your complaint. You also have the right to contact a relevant regulatory body or data protection authority in relation to your complaint.
Our website may link to external sites that are not operated by us. Please be aware that we have no control over the content and policies of those sites and cannot accept responsibility or liability for their respective privacy practices.
At our discretion, we may change our privacy policy to reflect updates to our business processes, current acceptable practices, or legislative or regulatory changes. If we decide to change this privacy policy, we will post any material changes here at the same link by which you are accessing this privacy policy.
If required by law, we will get your permission or give you the opportunity to opt in to or opt out of, as applicable, any new uses of your personal data.
For any questions or concerns regarding your privacy or our processing of your personal data, you may contact us using the following email address:
privacy@bbpos.com
