1. Introduction
E A H Services Limited, operating under the developer name EAH Serve, is committed to protecting the privacy and security of every individual who interacts with our website, services, and digital platforms. This Privacy Policy explains in detail how we collect, use, store, disclose, and safeguard your personal information when you visit our website at https://www.eahserve.buzz or engage with any of our computer systems design and integration services.
We encourage you to read this policy in its entirety to understand our data handling practices fully. By accessing our website or using our services, you acknowledge that you have read and understood the terms described herein. If you do not agree with any part of this policy, you should discontinue use of our website and services immediately.
E A H Services Limited operates within the Professional, Scientific, and Technical Services sector, specifically under the Computer Systems Design and Related Services industry classification. Our principal place of business is located at Rm 1501 15/F Fu Lee Commercial Building, 14-20 Pilkem Street, Jordan, Hong Kong (HK). As a global technology services provider, we process data in accordance with applicable data protection laws, including the General Data Protection Regulation where relevant, the California Consumer Privacy Act, and other regional privacy frameworks.
This Privacy Policy applies to all information collected through our website, email communications, telephone calls, in person meetings, and any other channel through which you may provide personal data to us. It also covers information we may receive from third party partners, public databases, and professional networking platforms as part of our business development activities.
2. Information We Collect
In the course of operating our business and providing computer systems design and integration services, we may collect several categories of information. The specific data points we collect depend on the nature of your interaction with us and the services you request. We collect information in the following broad categories.
Personal Identification Information: This includes your full name, email address, telephone number, job title, company name, physical mailing address, and any other identifiers you voluntarily provide when you fill out our contact form, subscribe to communications, or request a consultation. We collect this information so that we can respond to your inquiries, provide service proposals, and maintain business relationships.
Technical and Usage Data: When you visit our website, we automatically collect certain technical information from your device and browser. This includes your Internet Protocol address, browser type and version, operating system, device type, screen resolution, referring website addresses, pages visited on our website, time spent on each page, and the date and time of your visit. This information helps us understand how visitors interact with our website and identify areas for improvement.
Communication Data: If you contact us via email, telephone, or our website contact form, we collect and store the content of your messages, including any attachments you send. We retain copies of our correspondence to ensure quality of service and to maintain accurate records of business communications.
Business Information: In the context of service delivery, we may collect and process information about your organization, including technical specifications, system architecture diagrams, infrastructure documentation, business process descriptions, and other proprietary data that you share with us for the purpose of project scoping, implementation, or support. This information is treated with the highest level of confidentiality.
3. How We Collect Your Information
We employ multiple methods to collect information, each designed to be transparent and proportional to the purpose for which the data is gathered. Understanding these collection methods helps you make informed decisions about when and how you share data with us.
Direct Collection from You: The majority of the personal information we process is provided directly by you. This occurs when you complete our contact form, send us an email, speak with us by telephone, attend a meeting or video conference, subscribe to our newsletter, download a resource from our website, or register for an event. In each case, you are in control of the information you choose to share.
Automated Collection through Technology: As you navigate our website, we use cookies, web beacons, server logs, and similar tracking technologies to automatically gather technical and usage data. These technologies operate in the background and do not require any action on your part. Details about the specific cookies we use and how you can manage your preferences are provided in Section 11 of this policy.
Collection from Third Party Sources: In limited circumstances, we may receive information about you from third party sources. This includes data from business intelligence platforms, professional networking sites, publicly available databases, and referral partners. We only use such information where it is relevant to our legitimate business interests and where we have verified that the source obtained the data lawfully.
Collection During Service Delivery: When we are engaged to provide computer systems design or integration services, we may gain access to systems, databases, and environments that contain personal data controlled by your organization. In these situations, we act as a data processor and handle such information strictly in accordance with the data processing agreement executed between our organizations.
4. How We Use Your Information
We use the information we collect for a range of purposes that are necessary to operate our business, deliver our services, and comply with legal obligations. Below we describe each purpose in detail so that you understand exactly how your data serves our business operations and your experience with EAH Serve.
Service Delivery and Client Engagement: The primary use of your information is to deliver the services you have requested. This includes responding to inquiries, preparing proposals and statements of work, conducting technical assessments, designing system architectures, implementing integrations, and providing ongoing support and maintenance. Without this information, we would be unable to fulfill our contractual obligations to you.
Communication and Customer Support: We use your contact information to communicate with you about your projects, provide status updates, send invoices and payment confirmations, notify you of service changes, and respond to your support requests. We may also use your email address to send you relevant educational content, case studies, and updates about our services, but only where you have consented to receive such communications.
Website Improvement and Analytics: The technical and usage data we collect helps us analyze website performance, identify popular content, detect and fix technical issues, and improve the overall user experience. We use aggregated and anonymized data for these purposes, and we do not attempt to re-identify individuals from analytical datasets.
Legal Compliance and Security: We process certain information to comply with applicable laws, regulations, and legal processes. This includes maintaining required business records, responding to lawful requests from government authorities, enforcing our Terms of Service, and protecting the rights, property, and safety of E A H Services Limited, our clients, and the public.
Marketing and Business Development: With your consent where required, we may use your contact information to send you information about services that we believe may be relevant to your business needs. You may opt out of marketing communications at any time by using the unsubscribe link included in each email or by contacting us directly.
5. Legal Basis for Processing
Under applicable data protection laws, including the General Data Protection Regulation, we are required to identify the legal basis on which we process your personal information. We rely on the following legal bases.
Contractual Necessity: Where we process your data to deliver services you have requested or to take steps prior to entering into a contract with you, the legal basis is contractual necessity. This includes responding to your inquiries and performing our obligations under a service agreement.
Legitimate Interests: In certain cases, we process your information based on our legitimate business interests, provided these interests are not overridden by your data protection rights. Legitimate interests include improving our website, developing new services, securing our network infrastructure, and conducting business analytics.
Consent: Where we rely on your consent as the legal basis for processing, such as sending marketing communications or placing non essential cookies on your device, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to withdrawal.
Legal Obligation: In limited circumstances, we may need to process your information to comply with a legal obligation, such as tax reporting, regulatory filings, or responding to a court order or subpoena. We will only process the minimum amount of data necessary to satisfy the legal requirement.
7. Data Storage and Security
Protecting your information is a fundamental priority for EAH Serve. We have implemented a comprehensive suite of technical, administrative, and physical safeguards designed to protect your data against unauthorized access, alteration, disclosure, or destruction.
Technical Safeguards: We employ industry standard encryption protocols for data in transit and at rest. Access to production systems is restricted through multi factor authentication, role based access controls, and VPN tunneling. Our infrastructure is monitored continuously for suspicious activity, and we conduct regular vulnerability assessments and penetration testing to identify and remediate potential weaknesses.
Administrative Safeguards: Our team members receive mandatory training on data protection and privacy practices. Access to personal data is limited to personnel who have a legitimate business need. We maintain detailed access logs and conduct periodic audits of data access patterns to detect anomalies.
Physical Safeguards: Our servers are hosted in secure data center facilities with biometric access controls, 24 hour surveillance, redundant power supplies, and environmental monitoring. Physical access is restricted to authorized personnel only.
While we implement robust security measures, no method of electronic storage or transmission over the Internet is absolutely secure. We therefore cannot guarantee the absolute security of your information, but we commit to notifying you promptly in the event of a data breach that affects your personal data, as described in Section 14.
8. Data Retention Policies
We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, and regulatory requirements. Our retention periods are determined based on the nature of the data, the purpose of collection, and applicable legal obligations.
Client and Project Data: Information related to active client engagements is retained for the duration of the project plus an additional period of five years following project completion. This allows us to address any post delivery issues, maintain accurate business records, and comply with contractual obligations.
Inquiry and Prospect Data: Contact information provided through our website or other inquiry channels is retained for a period of two years from the date of last communication. If no business relationship materializes within that period, the data is securely deleted.
Website Analytics Data: Usage data collected through cookies and analytics tools is retained in aggregated and anonymized form for a maximum of twenty six months. After this period, the data is either deleted or irreversibly anonymized.
Legal and Financial Records: Records required for tax, accounting, and legal compliance purposes are retained for the period mandated by applicable law, typically seven years. Once the retention period expires, the data is securely disposed of through certified data destruction processes.
9. Your Data Protection Rights
Depending on your jurisdiction, you may have certain rights regarding the personal information we hold about you. We are committed to honoring these rights and will respond to verified requests within the timeframes required by applicable law.
Right of Access: You have the right to request confirmation of whether we process your personal data and, if so, to receive a copy of that data along with information about how it is used.
Right of Rectification: If you believe that the personal information we hold about you is inaccurate or incomplete, you have the right to request that we correct or supplement it.
Right of Erasure: In certain circumstances, such as when the data is no longer necessary for the purpose for which it was collected or when you withdraw consent, you may request that we delete your personal information.
Right to Restrict Processing: You may request that we limit the processing of your personal data under specific conditions, such as when you contest the accuracy of the data or object to its processing.
Right to Data Portability: Where processing is based on consent or contract and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine readable format and to have it transmitted to another controller.
Right to Object: You have the right to object to the processing of your personal data based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests.
To exercise any of these rights, please contact us using the details provided in Section 16. We may need to verify your identity before processing your request and will respond within thirty calendar days or as otherwise required by applicable law.
10. Privacy for Children
Our website and services are not directed to individuals under the age of eighteen. We do not knowingly collect, use, or disclose personal information from children. If we become aware that a person under the age of eighteen has provided us with personal data without verifiable parental consent, we will take immediate steps to delete that information from our systems.
If you are a parent or legal guardian and believe that your child has provided us with personal information, please contact us immediately using the contact details in Section 16. We will investigate the matter promptly and remove any such data upon verification.
We encourage parents and guardians to monitor the online activities of the children in their care and to instruct them never to provide personal information on any website without permission. Our commitment to protecting the privacy of children extends to all jurisdictions in which we operate, and we comply with the relevant provisions of laws such as the Childrens Online Privacy Protection Act in the United States and equivalent regulations in other territories.
12. Third Party Services and Links
Our website may contain links to third party websites, plugins, and applications that are not owned or controlled by E A H Services Limited. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third party websites and are not responsible for their privacy practices.
When you leave our website, we encourage you to read the privacy policy of every website you visit. This Privacy Policy applies solely to information collected by EAH Serve through our website and services. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third party website or service.
We may use third party service providers for specific functions such as hosting, email delivery, analytics, and customer relationship management. These providers have their own privacy policies governing the use of your personal information. We select service providers who demonstrate a commitment to data protection and who provide sufficient guarantees to implement appropriate technical and organizational measures.
13. International Data Transfers
E A H Services Limited is headquartered in Hong Kong, but we serve clients worldwide. As a result, your personal information may be transferred to, stored in, and processed in countries other than the country in which you reside. These countries may have data protection laws that differ from the laws in your jurisdiction.
When we transfer personal data across international borders, we implement appropriate safeguards to ensure that the data receives an adequate level of protection. These safeguards include executing standard contractual clauses approved by relevant regulatory authorities, assessing the data protection regime of the destination country, and implementing supplementary technical and organizational measures where necessary.
If you are located in the European Economic Area, the United Kingdom, or Switzerland, and we transfer your personal data to a country that has not been deemed to provide an adequate level of data protection, we will rely on one of the legal transfer mechanisms recognized under applicable data protection law. You may request details of the specific safeguards we have implemented by contacting us using the information in Section 16.
14. Data Breach Notification
In the event of a data breach that compromises the confidentiality, integrity, or availability of your personal information, we have established procedures to respond swiftly and transparently. Our incident response plan is designed to contain the breach, assess the scope and impact, notify affected individuals and regulatory authorities as required by law, and implement corrective measures to prevent recurrence.
We will notify you without undue delay if we determine that a breach poses a risk to your rights and freedoms. Our notification will describe the nature of the breach, the categories and approximate number of data records affected, the likely consequences, and the measures we have taken or propose to take to address the breach. We will also provide recommendations for steps you can take to protect yourself.
We maintain a detailed incident log that records all data breaches regardless of severity. This log is reviewed periodically to identify trends and strengthen our security posture. We continuously invest in threat detection systems, security monitoring, and staff training to minimize the likelihood of a breach occurring.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or service offerings. When we make material changes, we will notify you by posting a prominent notice on our website at least thirty calendar days before the changes take effect, or by sending you an email if we have your contact information on file.
The date at the top of this policy indicates when it was last revised. We encourage you to review this policy periodically to stay informed about how we protect your information. Your continued use of our website and services after any changes to this policy take effect constitutes your acceptance of the revised terms, to the extent permitted by law.
If we make changes that materially alter the way we use previously collected personal data, we will seek your consent before applying those changes retroactively where required by applicable law. We maintain an archive of previous versions of this policy for reference, which you may request by contacting us.
16. Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact us using the details below. We take every privacy inquiry seriously and will respond as quickly as possible.
Data Controller:
E A H Services Limited
Rm 1501 15/F Fu Lee Commercial Building
14-20 Pilkem Street
Jordan, Hong Kong (HK)
Email: contact@eahserve.buzz
Phone: +15075490342
Website: https://www.eahserve.buzz
17. Governing Law
This Privacy Policy and any disputes arising out of or relating to it shall be governed by and construed in accordance with the laws of the Hong Kong Special Administrative Region, without giving effect to any principles of conflicts of law. Any legal action or proceeding arising under this policy shall be brought exclusively in the courts of Hong Kong.
For individuals located in jurisdictions with specific privacy laws, such as the European Economic Area, the United Kingdom, or the State of California, we will comply with the applicable provisions of those laws as they pertain to your data. In the event of any conflict between this policy and mandatory provisions of applicable data protection law, the mandatory provisions shall prevail.
18. Your California Privacy Rights
If you are a resident of the State of California, the California Consumer Privacy Act provides you with specific rights regarding your personal information. This section describes those rights and explains how you can exercise them.
Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you in the twelve months preceding your request, along with the categories of sources from which the information was collected, the business purpose for collection, and the categories of third parties with whom we have shared your information.
Right to Delete: You may request that we delete any personal information we have collected from you, subject to certain exceptions such as when the information is necessary to complete a transaction, detect security incidents, or comply with a legal obligation.
Right to Non Discrimination: We will not discriminate against you for exercising any of your CCPA rights. This means we will not deny you services, charge you different prices, or provide a different level of service quality because you exercised a privacy right.
To submit a request under the CCPA, please contact us at contact@eahserve.buzz or call +15075490342. We will verify your identity before processing your request, which may require you to provide information that matches what we have on file.