This website and the service described on it are operated by Lapar Control Valve Co., Limited, a company established in Hong Kong with a working loft at Rm 12 6/F Hang Cheong Centre, 138 Bedford Rd, Tai Kok Tsui, Hong Kong - 999077, Hong Kong (HK). The developer responsible for building and maintaining this website is Lapar Valve. This policy explains what information is collected, why it is collected, how it is kept, and what choices are available to every visitor and client.
1. Who we are
Lapar Control Valve Co., Limited is a control valve supply business working from a loft in Tai Kok Tsui, Hong Kong. The company assembles globe valves, matches actuator kits, prepares trim sets, runs pressure tests and prepares dispatch packages for clients in computer integrated systems design and related professional, scientific and technical services. The company name and address that appear in this policy are the identity that visitors should use when making a data request or a complaint.
The website at laparvalve.buzz exists to describe the six service bays, to publish the company address and to give prospective clients a way to send an enquiry. It is a small, focused site. It does not run an online shop, does not process payments, and does not ask visitors to create an account. That simplicity matters for privacy, because fewer features mean fewer places where personal data can be gathered or lost.
The developer name Lapar Valve is recorded here so that visitors can identify the party that built and maintains the site in the event that a technical question about the website arises. The developer and the company work together under a written arrangement that includes confidentiality and data protection commitments, and the company remains the party responsible for personal data handled through this website.
2. Scope of this policy
This policy applies to all personal data handled through the website laparvalve.buzz and through the direct contact channels published on it, including the enquiry email address, the telephone number and the contact form. It applies to visitors who simply read the pages, to people who send an enquiry, and to client representatives who correspond with the company during a valve supply job.
This policy does not apply to third party websites that are linked from this site, nor to the internal systems of a client organisation. Where a client shares a document that contains personal data of its own staff or contractors, that client remains responsible for the lawful basis on which the data was collected. The company handles such documents only for the purpose of the valve job and for no other reason.
Where a separate written contract between the company and a client covers data handling in more detail, that contract takes priority over this policy to the extent of any conflict. This policy is the general statement for the website and for ordinary enquiry traffic.
3. Information we collect
The company collects only the information that is needed to answer an enquiry, prepare a quotation and complete a valve supply job. The categories are deliberately narrow and are listed below so that visitors can see exactly what is involved.
- Identity and contact data, such as a name, a job title, a company name, an email address and a telephone number.
- Enquiry content, such as the tag list sent by a client, the size and rating range of the valves, the test pressure requested and any notes about delivery or scheduling.
- Transactional records, such as quotation references, dispatch sheet references, crate labels and test dates.
- Technical data, such as the browser type, the approximate region of a visitor and the pages viewed during a session, collected through ordinary server logging.
- Communication data, such as the content of emails and telephone notes that relate to an enquiry or an active job.
The company does not collect payment card numbers through this website. The company does not ask for national identity numbers, health information or any special category data. If a visitor chooses to send such information in a message, the company will delete it where it is not needed for the enquiry and will treat it with extra care until it is deleted.
4. How information is collected
Most personal data reaches the company directly from the person who sends it. The contact form on the contact page is built so that the details entered are turned into a draft message in the visitor mail client and sent to the published address. The company does not store the form contents on a separate database before the message is sent. The message arrives in the same way as any ordinary email, and the company handles it in the same way.
Some data is collected automatically when a page is requested. This includes the internet protocol address, the time of the request, the page requested and the browser identifier. This information is used for security and for understanding which pages are useful. It is not combined with enquiry data to build a profile, and it is not sold or shared for advertising.
A small amount of data may be collected through telephone calls, where the company writes a short note of the subject and the agreed next step. These notes are kept to the minimum needed to serve the client and are stored with the job file.
5. Enquiry and quotation records
When a visitor sends an enquiry, the company creates a record that ties the message to a quotation reference. That record may include the name and contact details of the sender, the company that the sender represents, the valves and test pressures requested, and the correspondence that follows. The purpose of the record is to answer accurately and to avoid asking the same questions twice.
Quotation records are kept while a quotation is live and for a reasonable period afterwards so that the company can answer follow up questions about the quoted scope. The record is not used for unrelated marketing unless the sender has separately agreed to receive such messages. Where a quotation does not turn into a job, the record is closed and later purged under the retention rules in section 13.
Dispatch records that accompany a completed valve supply job may include the name of a contact at the client site who receives the crate. These records are kept together with the test sheet because they form part of the technical evidence for the valve package, and they are retained for the period described in section 13.
6. Technical and log data
The web server that delivers this site writes a standard access log. The log records the internet protocol address of the requesting device, the date and time, the page and file requested, the response status and the browser user agent string. These fields are necessary to operate the site, to diagnose faults and to detect abusive traffic such as automated scanning.
Access logs are rotated regularly and are kept for a short period. The company does not attempt to identify individual visitors from log data unless there is a security incident that requires investigation. In that case, the relevant log entries may be reviewed by the hosting provider and by the company, and the findings may be shared with a legal adviser or a law enforcement body where the law requires it.
The site does not embed third party advertising scripts, social plugins or cross site tracking pixels. Fonts and styles are served from the same domain, so a page load does not create a request to an external font or analytics network.
8. Purposes of processing
Personal data is processed for a short and clear list of purposes. Each purpose is tied to a service that a visitor or client has asked for, or to a legal duty that the company must meet.
- To answer an enquiry and to prepare a quotation for valve supply services.
- To schedule bay time, test windows and dispatch sittings for an agreed job.
- To keep technical and commercial records that support a delivered valve package.
- To maintain the security and availability of the website and its email channel.
- To meet accounting, tax and record keeping duties that apply in Hong Kong.
- To respond to a complaint, a data request or a legal claim.
The company does not process personal data for profiling, for automated scoring or for the sale of advertising. Where a new purpose is proposed, the company will consider whether this policy needs an update before the new purpose begins.
9. Legal basis for processing
Where the law requires a legal basis, the company relies on one of the following. The first is the performance of a contract or the steps taken before a contract, such as answering an enquiry and preparing a quotation. The second is a legitimate interest in running a safe and reliable valve supply business, which covers ordinary correspondence, record keeping and website security. The third is compliance with a legal obligation, such as tax and accounting rules. The fourth is consent, which is used only where the company asks for it explicitly, for example before sending occasional service updates.
Where consent is the basis, a person may withdraw it at any time by writing to the published email address. Withdrawal does not affect processing that took place before the withdrawal, and it does not affect processing that relies on another basis.
The company reviews its legal bases when a service changes or when guidance from a regulator changes. If a review shows that a different basis is more appropriate, the company will update this policy and, where consent is needed, will ask for it before the new processing starts.
11. Suppliers and logistics partners
Valve supply depends on a chain of partners. The company works with casting suppliers, machining shops, packing suppliers, testing partners and freight forwarders. Each partner receives only the information that its task requires. A forwarder, for example, receives a crate reference and a delivery address, but does not receive the content of an enquiry or the history of a quotation.
The company prefers partners that can describe their own security measures in plain terms. Where a partner handles personal data on behalf of the company, the arrangement is set out in writing and includes a duty to keep the data confidential, to use it only for the agreed task and to return or delete it when the task ends.
If a partner suffers an incident that affects company data, the company expects to be told promptly so that it can assess the effect on clients and, where required, notify the relevant authority and the affected people.
12. International transfers
The company is based in Hong Kong and most data stays within Hong Kong. Some service providers, such as email hosting or freight tracking systems, may store data in another region. Where that happens, the company takes reasonable steps to ensure that the data remains protected to a standard comparable to the one described in this policy.
These steps may include choosing providers that publish clear security commitments, limiting the categories of data sent to a provider, and requiring confidentiality in the written arrangement with the provider. The company does not transfer personal data to a region for the purpose of advertising or resale.
A client who needs to know where a particular category of data is stored may ask the company in writing. The company will answer with the information it holds about the relevant provider and will explain any limit on what it can confirm.
13. Retention periods
Personal data is kept only for as long as it is needed for the purpose for which it was collected, or for as long as the law requires. The company applies the following general periods and reviews them each year.
- General enquiries that do not lead to a quotation are kept for up to twelve months and then deleted.
- Quotation records are kept for up to three years after the quotation is closed, so that follow up questions can be answered.
- Dispatch and test records for a delivered valve package are kept for up to seven years to support technical and commercial questions and to meet accounting duties.
- Access logs are kept for a short rolling period, normally measured in weeks rather than months.
- Complaint files are kept until the complaint is resolved and for a reasonable period afterwards to show how it was handled.
When a period ends, the data is deleted or anonymised. Where deletion is not immediately possible because of a backup cycle, the data is isolated and is not used for any purpose until the backup is overwritten in the ordinary course.
14. Security measures
The company protects personal data with a combination of technical and organisational measures. On the technical side, the website is served over an encrypted connection, access to company email requires a password and a second factor, and the loft network is separated from guest traffic. On the organisational side, the small team follows written steps for handling an enquiry and for closing a job file.
Paper records, such as dispatch sheets and test notes, are kept in a locked cabinet at the loft and are released only to the person handling the job. Electronic records are stored in folders that are limited to the people who need them. Staff are reminded that a valve job can contain a client contact name and that such a name is personal data even when it appears on a technical form.
No system is perfectly secure. If an incident occurs, the company will act quickly to contain it, will record what happened and will notify the relevant authority and affected people where the law requires it.
15. Your rights
Depending on the law that applies, a person may have the right to ask for a copy of the personal data that the company holds, to ask for a correction, to ask for deletion, to ask for a restriction on processing, to object to processing and to ask for the data in a portable format. A person may also have the right to withdraw consent where consent is the basis for processing.
To make a request, write to notify@laparvalve.buzz with the subject line Data Request and describe what is needed. The company may ask for enough information to confirm identity before acting, because releasing data to the wrong person would itself be a privacy failure. A response is normally provided within one month.
There is no charge for a reasonable request. Where a request is clearly unfounded or excessive, the company may explain why it cannot be met or may ask for a reasonable fee to cover the work involved. In every case the company will explain the decision in writing.
16. Privacy for Children
This website is intended for business visitors. It describes industrial valve supply and is not directed at children. The company does not knowingly collect personal data from a child and does not design any feature to attract a child audience.
If the company learns that personal data of a child has been sent through the enquiry channel, it will delete the data promptly unless there is a legal reason to keep it. A parent or guardian who believes that a child has sent data to the company may write to notify@laparvalve.buzz and ask for it to be removed.
Where a client site sends a contact name for a crate delivery, the company expects that the contact is an adult working at that site. The company does not ask for the age of a contact and does not store age data.
17. Marketing and opt out
The company sends service updates only to people who have asked for them or who have an active commercial relationship and have not objected. Every update includes a simple way to stop future messages. A request to stop marketing is recorded so that it continues to apply even if the company later changes its mailing tool.
A person who asks to stop marketing will still receive messages that are necessary to deliver a job, such as a test date change or a dispatch notice. These messages are not marketing, and stopping them would prevent the company from meeting its commitments to the client.
The company does not buy mailing lists and does not add an enquiry address to a marketing list without a clear opt in. If a visitor sends an enquiry, that address is used to answer the enquiry and not treated as consent to receive unrelated messages.
18. Third party links
This website may link to a partner site, a map service or a standards body for the convenience of visitors. The company does not control the privacy practices of those sites and cannot promise that they follow the same rules. A visitor who follows such a link should read the privacy notice of the site that is reached.
Where the company links to a document, such as a technical standard, the link is provided so that the visitor can read the source material. The company does not receive personal data about a visitor simply because the visitor follows that link, unless the linked site sets its own cookies.
If a linked site is found to be misleading or unsafe, the company will remove the link when it is told about the problem. Reports about a broken or unsuitable link can be sent to notify@laparvalve.buzz.
19. Automated decisions
The company does not make automated decisions that have a legal or similarly significant effect on a person. Quotations, dispatch windows and test bookings are prepared by the team after reading the enquiry, not by a scoring system. The website does not run a chatbot that collects personal data and does not use any hidden form of profiling.
Simple sorting of emails by subject line or by sender domain may be used to route a message to the right person. This sorting does not decide whether an enquiry is accepted and does not change the terms that are offered. A person who sends an enquiry always receives a human reply.
If the company later introduces an automated tool that affects a person in a meaningful way, this policy will be updated and the tool will be described in plain language before it is used.
20. Changes to this policy
The company reviews this policy at least once a year and whenever a new service or a new provider changes the way data is handled. A change that affects a person rights will be highlighted at the top of the page for a reasonable period after it is made.
The date at the top of this page shows when the current version was published. Earlier versions can be requested by writing to notify@laparvalve.buzz, and the company will keep a record of the main changes so that a visitor can see what has moved.
Continuing to use the site after a change does not remove any right that a person has under the law. If a change needs consent, the company will ask for that consent rather than relying on continued use.
21. Complaints and contact
A person who is unhappy with the way personal data has been handled may send a complaint to notify@laparvalve.buzz or call +14587463542. The company will acknowledge the complaint, investigate what happened and reply in writing with the outcome and with any step that will be taken to correct the matter.
A complaint may also be sent by post to Lapar Control Valve Co., Limited, Rm 12 6/F Hang Cheong Centre, 138 Bedford Rd, Tai Kok Tsui, Hong Kong - 999077, Hong Kong (HK). The company asks that the envelope is marked for the attention of the privacy contact.
If a person is not satisfied with the reply, that person may complain to the privacy regulator in the region where the person lives or works. The company will cooperate with any lawful investigation and will provide the records that are needed to resolve the matter.