Privacy Policy

1. Who We Are

This website is operated by Impala Services Ltd., a company registered in Hong Kong with its registered office at Unit 501, 5/F, Lu Plaza, 2 Wing Yip Street, Kwun Tong, Hong Kong S.A.R.

When we refer to “we”, “us”, or “our” in this policy, we mean Impala Services Ltd.

2. What Data We Collect

We may collect the following personal data:

Information You Provide Directly

• Full name
• Company name
• Work email address
• Phone number (optional)
• Project details and any other information you include in your enquiry

Information Collected Automatically

• IP address and approximate location
• Browser type and operating system
• Pages visited, time spent, and referral source
• Device type and screen resolution

3. How We Use Your Data

We use the data we collect to:

• Respond to your enquiries and provide quotes
• Deliver the services you have engaged us for
• Improve our website and user experience
• Send you updates about our services (only with your explicit consent)
• Comply with our legal obligations

We do not sell your personal data to third parties. We do not use your data for automated decision-making or profiling.

4. Legal Basis for Processing

We process personal data in accordance with the Hong Kong Personal Data (Privacy) Ordinance (PDPO), Cap. 486. For visitors from the European Union and European Economic Area, we also comply with the General Data Protection Regulation (GDPR).

Our legal bases for processing include:

• Legitimate interest: responding to business enquiries and improving our services
• Consent: sending marketing communications
• Contractual necessity: processing data required to deliver our services
• Legal obligation: compliance with applicable laws and regulations

5. Cookies and Tracking

This website uses cookies, small text files stored on your device, to operate the site, measure usage, and support our marketing. We group cookies into four categories:

Strictly Necessary

Required for security, session management, and basic site functionality. These cookies are always active and cannot be disabled. We rely on legitimate interest (GDPR Art. 6(1)(f)) as the legal basis for these cookies.

Analytics

Help us understand how visitors interact with the site so we can improve it. Providers may include Google Analytics and Vercel Analytics. Analytics cookies are only placed after you give explicit consent (GDPR Art. 6(1)(a)).

Marketing

Used to deliver relevant advertising and measure campaign performance. Providers may include LinkedIn Insight Tag and Meta Pixel. Marketing cookies are only placed after you give explicit consent (GDPR Art. 6(1)(a)).

Functional

Enable enhanced features such as chat widgets, embedded videos, and personalisation. Functional cookies are only placed after you give explicit consent (GDPR Art. 6(1)(a)).

How We Manage Consent

When you first visit our website, a cookie banner gives you three options: accept all cookies, reject all non-essential cookies, or manage your preferences by category. Your choice is stored in a first-party cookie (impala-consent) for 12 months, after which you will be asked again.

No analytics, marketing, or functional cookies are placed until you make an active choice. Non-essential tracking scripts are not loaded until the relevant category is accepted.

Changing or Withdrawing Consent

You can change your cookie preferences at any time by clicking the “Cookie Settings” link in the website footer. You may also clear cookies through your browser settings, which will cause the consent banner to reappear on your next visit.

6. Third-Party Services

We use the following third-party services that may process your data:

• Vercel, website hosting and deployment
• Sanity, content management system for blog and case studies
• Resend, delivery of contact form submissions via email
• Google Analytics, website usage analytics (loaded only with your consent)
• LinkedIn, campaign measurement via Insight Tag (loaded only with your consent)
• Meta, campaign measurement via Meta Pixel (loaded only with your consent)

Each of these providers has their own privacy policy. We recommend reviewing their policies if you have concerns about how your data is handled.

7. Data Retention

We retain enquiry data (contact form submissions) for a maximum of 24 months from the date of submission, unless a business relationship is established, in which case data is retained for the duration of the relationship and a reasonable period thereafter.

Analytics data is retained in aggregated form and is not linked to identifiable individuals.

8. Your Rights

Depending on your location, you may have the following rights:

• Right of access: request a copy of the personal data we hold about you
• Right of correction: request correction of inaccurate data
• Right of erasure: request deletion of your personal data
• Right to withdraw consent: withdraw previously given consent at any time
• Right to lodge a complaint: contact the Office of the Privacy Commissioner for Personal Data in Hong Kong, or your local data protection authority

To exercise any of these rights, please email sales@impala-tech.com.

9. International Transfers

Your data may be processed outside of Hong Kong, including in the Philippines (Manila office), Mainland China (Beijing and Shenzhen offices), and by our third-party service providers in other jurisdictions.

Where data is transferred internationally, we take appropriate safeguards to ensure your data is protected in accordance with this policy and applicable data protection laws.

10. Contact

For any questions about this privacy policy or how we handle your data, please contact us: