Privacy Policy

The website is operated by KUNDALINI SERVICES LIMITED (trading as Kundalini), which is responsible for the personal information collected and used for the operation of this website and the handling of website inquiries.

KUNDALINI SERVICES LIMITED
Suite C, Level 7, World Trust Tower
50 Stanley Street
Central
Hong Kong

In this notice, Kundalini, we, us and our refer to KUNDALINI SERVICES LIMITED. If a separate group entity takes responsibility for an ensuing business relationship, we will provide appropriate additional information where required.

For privacy questions or requests to access or correct personal information, write to Privacy Requests — KUNDALINI SERVICES LIMITED at the address above. You can also initiate a general inquiry through Let’s Explore, but please do not submit sensitive personal data through that form.

We use personal information to:

1. Deliver, operate, maintain and protect our website; detect and respond to abuse or technical incidents.
2. Receive, evaluate, route and respond to inquiries about brands, partnerships, strategic opportunities and related business matters.
3. Maintain appropriate records of business correspondence, decisions and potential relationships.
4. Understand website usage and improve its clarity and performance only where you have agreed to optional analytics.
5. Meet applicable legal obligations, respond to lawful requests and protect legitimate legal interests.

We do not use a website inquiry as an automatic subscription to newsletters, promotional messages or unrelated direct marketing. Any future direct-marketing program would require its own disclosures and consent or other lawful basis as applicable.

Where the EU or UK GDPR applies, the corresponding legal bases may include:

You may withdraw analytics consent at any time through Cookie Settings in the footer; withdrawing consent does not affect processing that occurred lawfully beforehand.

We limit access to people and providers who need information for the purposes described above. This may include:

• Authorized personnel of KUNDALINI SERVICES LIMITED handling the website and inquiries.
• Relevant Kundalini group entities when a particular inquiry requires their expertise or involvement; information is not automatically circulated to all companies in the group.
• Vercel, providing website hosting, deployment and associated technical/security infrastructure.
• Resend, providing transactional email delivery for form submissions and related delivery records.
• Google, providing Google Analytics 4 only if you opt in.
• IT and communications suppliers supporting the actual website, where appointed under appropriate arrangements.
• Professional advisers or competent authorities where appropriate or legally required.

We do not sell inquiry information or provide it to third parties for their independent direct marketing.

Kundalini is headquartered in Hong Kong, and its website involves international technology providers and potentially cross-border business inquiries. Information may be processed in Hong Kong, the United States and other jurisdictions where our service providers or legitimately involved personnel operate.

In particular, Resend stores its customer service data, including email content and delivery records, in the United States, even if a different outbound sending region is selected. Google Analytics and the hosting infrastructure may involve processing across jurisdictions according to the applicable service configuration and contractual arrangements.

Where international transfers are subject to legal safeguards, we use an appropriate lawful mechanism or protection required for the transfer, such as applicable contractual protections. Privacy protections and rights may differ by country. We review the roles, locations and safeguards of relevant providers as our service configuration changes.

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, subject to applicable legal obligations and legitimate disputes.

• General inquiries that do not become an ongoing relationship: normally up to 24 months after the last substantive interaction, unless a shorter period is appropriate or a legal reason requires longer retention.
• Business relationships: correspondence relevant to an active relationship is managed under that relationship’s applicable business-record and legal-retention requirements.
• Analytics preferences: normally retained for six months, after which we ask for a renewed preference.
• Google Analytics: user-level and event-level retention is configured for 14 months, subject to Google’s separate treatment of aggregate reports and other applicable service settings.
• Hosting and security logs: retained only for a proportionate period consistent with operational security, troubleshooting, provider configuration and legal requirements.
• Provider transmission records: retained in accordance with the relevant provider’s technical retention policies and our agreements.

Where feasible, records are deleted or anonymized once the applicable period ends. Legal holds or legitimate claims may require limited extended retention.

Depending on where you live and the applicable law, you may have the right to:

• Request access to personal data held about you and correction of inaccurate information.
• Ask for deletion, restriction of processing or data portability where available under applicable law.
• Object to certain processing, including processing based on legitimate interests where the relevant law provides that right.
• Withdraw consent for optional analytics without affecting your ability to use the website or submit an inquiry.
• Raise concerns with an appropriate data protection regulator, including the Privacy Commissioner for Personal Data in Hong Kong or another competent authority where applicable.

To submit a request, write to Privacy Requests — KUNDALINI SERVICES LIMITED at the postal address in Section 1. We may request reasonable proof of identity before disclosing personal information and will respond in accordance with applicable timeframes and law.

You may also remove browser cookies or use Cookie Settings to change your analytics preference.

We take proportionate technical and organizational measures designed to protect personal information against unauthorized access, alteration, disclosure or loss. Access to inquiry records is limited to those with a legitimate business need, and external service providers are engaged with appropriate safeguards where applicable.

No internet transmission or storage system is completely risk-free. Do not send confidential business materials before appropriate arrangements are in place.

Our website may link to third-party sites. Their content and privacy practices are governed by their own policies. We encourage you to review them before providing personal information.

This is a corporate website intended for business audiences, not for children. We do not knowingly solicit personal information from children through this website. If you believe a child has provided personal information, contact us using the details above.

We may update this Privacy Policy to reflect developments in our website, practices, service providers or legal requirements. A revised policy will be published here with an appropriate publication or revision date. Material changes may be communicated through additional notice where appropriate.

Privacy Requests — KUNDALINI SERVICES LIMITED
Suite C, Level 7, World Trust Tower
50 Stanley Street
Central
Hong Kong

For information about optional analytics and cookies, please also see the Cookie Policy.