1. Introduction

EnviroTech Group is the environmental engineering practice operated by Environmental Engineering Technology Group Limited. We provide air quality monitoring, water and wastewater treatment design, environmental impact assessments, noise and vibration studies, solid waste management planning and sustainability compliance audits. In delivering those services we handle personal information belonging to clients, site personnel, residents near monitored locations, suppliers, applicants and website visitors.

This document sets out what we collect, why we collect it, how long we keep it and what choices you have. We have written it in direct language so that a reader without a legal background can understand our commitments. We encourage you to read it in full before submitting information to us or using any part of our website.

By contacting us, engaging our services or browsing this website you acknowledge that you understand the practices described here. Where a specific engagement requires additional privacy terms, those terms will be provided in the relevant contract and will take precedence over this general policy for that engagement.

2. Who We Are

The data controller responsible for personal information described in this policy is Environmental Engineering Technology Group Limited, trading as EnviroTech Group. Our registered office and principal place of business is:

Our practice is based in Tsim Sha Tsui and supports projects across Hong Kong and the wider region. The team that manages privacy questions sits within our operations group, and you may reach that team using the details above at any time.

3. Scope Of This Policy

This policy applies to personal information processed through our website, our client engagements, our field monitoring activities, our recruitment processes, our supplier relationships and our general business correspondence. It covers information held in digital systems, in paper field records and in the reports that we prepare for clients.

This policy does not apply to third party websites that we may link to, nor to information that a client collects independently under the terms of the client own privacy arrangements. Where we process information on behalf of a client as a service provider, the client remains responsible for the underlying consent and notice obligations in relation to that information.

4. Information We Collect

The categories of personal information we may collect include the following. Not every category applies to every individual, and we collect only what is appropriate for the purpose at hand.

We do not seek to collect sensitive categories of personal information, and we ask that you do not send us special category information unless it is genuinely required for a specific project and has been requested by our team in writing.

5. How We Collect Information

Most information reaches us directly from you. You may correspond with us by email or telephone, complete our contact form, sign a proposal, attend a site meeting, respond to a monitoring notification or submit a job application. In each case you choose what to provide, and we encourage you to provide only the details that are relevant to your request.

We also receive information indirectly in a small number of situations. A client may pass us the contact details of a site representative or a neighbouring resident in order to arrange access or a survey. A supplier may provide a technical contact for delivery coordination. Our website may record limited technical information when you browse. Public registers such as land and company records may also inform a project file.

6. Why We Use Information

We use personal information for the following purposes, each of which is tied to a legitimate operational need.

We do not sell personal information. We do not use personal information for unrelated advertising, and we do not build behavioural profiles for commercial resale.

7. Lawful Basis For Processing

Where a legal framework requires a lawful basis, we rely on one or more of the following. First, performance of a contract, which covers the information we need to deliver a service you or your organisation has engaged. Second, compliance with a legal obligation, which covers record keeping, tax, safety and regulatory reporting. Third, legitimate interests, which covers the running of our practice, the security of our systems and communication that is reasonably expected in a professional relationship. Fourth, consent, which applies where we ask for a specific permission and you provide it, such as an optional marketing update.

Where we rely on consent you may withdraw it at any time, and withdrawal will not affect processing that already took place on a lawful basis before the withdrawal.

8. Environmental Monitoring Data

Our field monitoring activities generate large volumes of environmental measurements such as air readings, noise levels, vibration records, water quality results and waste transfer records. These measurements are generally not personal information. However, a monitoring record can become linked to an individual when it is associated with a complaint, a site visit note or an access arrangement.

We treat linked field records with the same care as other personal information. Where a report is shared with a regulator or a client, we minimise identifying detail to what the purpose genuinely requires, and we avoid publishing individual names unless there is a clear need and a lawful basis to do so.

Monitoring stations can be located close to homes, schools and workplaces. When we install a station, we may record the name and contact details of a site representative or a building manager so that access can be arranged and so that any question about the equipment can be answered quickly. Those details are used only for coordination and are removed from the active file once the monitoring period ends and the report is issued.

Where a member of the public contacts us about a monitoring programme, we record the substance of the concern and the contact details needed to reply. We do not publish the identity of a complainant, and we do not pass those details to a client unless the individual agrees or a legal obligation requires it. The environmental readings themselves remain the focus of every report we produce.

Field teams sometimes photograph equipment installations and site conditions. Where a photograph might include an identifiable person, we avoid using it in reporting unless consent has been given. Photographs are stored with the project record and are subject to the same retention and security rules as other project material.

We also operate data logging devices that transmit readings to our office systems. These devices collect environmental parameters and diagnostic information about the instrument itself. They do not capture audio, video or personal communications, and they are configured so that the data stream carries only what the monitoring programme requires.

9. How We Share Information

We share personal information only where it is necessary and only with parties who are bound to protect it. The recipients may include the following groups. Our own project engineers and support staff who need the information to deliver a service. Accredited laboratories and specialist survey partners who carry out analysis or fieldwork on our instruction. Professional advisers such as auditors, insurers and legal counsel. Regulators and public authorities where a legal obligation or a valid request requires disclosure. Service providers who host our email, manage our documents or maintain our website under contract.

Every supplier that processes personal information on our behalf is selected with care and is required to act only on our documented instructions. We do not permit a supplier to use our information for its own independent purposes.

10. Cookies And Site Technology

Our website is deliberately simple. It is built from static pages designed to load quickly and to explain our services without intrusive tracking. We do not use advertising cookies and we do not embed third party behavioural tracking pixels. Any technical information recorded when you browse is limited to what is needed for the site to function, to keep it secure and to understand aggregate visit patterns.

If your browser settings block cookies, the website will continue to work. Should we introduce an analytics tool in future that relies on cookies, we will update this policy and, where required, ask for your agreement before the tool is activated.

11. How Long We Keep Information

We keep personal information only for as long as it is needed for the purpose that justified its collection, plus any period required by law, regulation or professional standards. Retention periods are set by the nature of the record rather than a single blanket rule.

When a retention period ends, information is securely deleted or anonymised so that it can no longer be connected to an identifiable person.

12. How We Protect Information

Security is treated as an operational discipline rather than a one time project. We apply access controls so that team members see only the information their role requires, we use authenticated systems for document storage and correspondence, and we keep software patched and monitored. Field records are reconciled with the office database promptly so that loose copies do not accumulate.

Physical documents are stored in locked areas and destroyed by shredding when no longer needed. Staff receive guidance on handling personal information, recognising fraudulent requests and reporting an incident. If a security incident affecting personal information occurs, we investigate promptly, take steps to contain the impact, and notify affected individuals and any relevant authority where the law requires it.

Access to monitoring platforms is limited to named engineers and analysts, and credentials are managed through a controlled process rather than shared informally. When a team member leaves, access is removed as part of the departure checklist. Portable devices that hold project data are encrypted, and field laptops are configured so that a lost device does not expose the project record.

We test our backup and recovery arrangements so that a system failure does not destroy records that a client or a regulator may need. Backups are stored separately from live systems and are protected by the same access rules as the originals.

13. International Transfers

Environmental Engineering Technology Group Limited is based in Hong Kong and delivers most of its work locally. Some specialist laboratory analysis or cloud based document services may involve processing outside Hong Kong. Where that happens we take reasonable steps to ensure the receiving party is bound by confidentiality and security obligations that provide protection comparable to the standards described in this policy.

If you would like to know whether your information may be transferred outside Hong Kong for a particular engagement, contact us and we will explain the arrangement in plain terms.

14. Your Rights

Depending on the laws that apply to you, you may have some or all of the following rights in relation to your personal information.

To exercise any right, write to privacy@envirotechgroup.buzz with enough detail for us to identify you and understand your request. We may ask for proof of identity to protect against fraudulent requests, and we will respond within a reasonable period. There is normally no charge, although a reasonable fee may apply where a request is manifestly unfounded or repetitive.

15. Privacy For Children

Our services are provided to organisations, project owners and professionals. We do not knowingly collect personal information from children, and our website is not directed at children. If you believe that a child has provided personal information to us, please contact us at privacy@envirotechgroup.buzz and we will take prompt steps to remove the information and to prevent any further processing.

Where a community engagement activity might involve younger residents, we work through a parent, a guardian or a responsible organisation and we keep the information collected to the minimum required.

17. Changes To This Policy

We review this policy periodically and update it when our practices, our services or the applicable law change. When a revision is made, the updated version is published on this page with a revised update label. Where a change is material, we will take reasonable steps to bring it to the attention of individuals who have an active relationship with us.

We encourage you to revisit this page from time to time so that you remain aware of how your information is handled. Continued use of our website or services after an update indicates that you accept the revised policy.

18. Complaints And Escalation

If you are unhappy with the way we have handled your personal information, please tell us first. Write to privacy@envirotechgroup.buzz or call +18287998975 and set out the concern. We will acknowledge your message, investigate the circumstances and explain what we find. Many issues can be resolved quickly once the facts are clear.

If you remain dissatisfied after our response, you may escalate the matter to the relevant supervisory authority in your jurisdiction. We will cooperate fully with any such review and will provide the information that the authority reasonably requires.

19. How To Contact Us

For any question about this policy, any request relating to your personal information, or any concern about how we handle data, please use the details below. The privacy team at Environmental Engineering Technology Group Limited monitors this inbox and aims to respond promptly.