Privacy policy

The data user is AURORA COGNITIVE TECH LIMITED, a company registered in Hong Kong, at Room 12, 13/F, Telford House, 16 Wang Hoi Road, Kowloon Bay, Kowloon, Hong Kong. This is a registered address for correspondence and filings.

This policy covers this website and the enquiry form on it. It is written under the Hong Kong Personal Data (Privacy) Ordinance, Cap 486.

There are two sources of personal data on this site.

What you type into the enquiry form

Your name, work email address, and the message you write. Company name and website are optional. You also choose the topic of the enquiry, and you tick a consent box before you can send it.

What your browser sends when it requests a page

Your browser sends an IP address and a user agent string with every request. When you submit the form we store the user agent, and we store the IP address only as a salted one way hash. We never write the raw IP address to our records, and the hash cannot be turned back into an address.

• No analytics of any kind. There is no page view tracking, no session recording and no heatmaps.
• No advertising or tracking cookies, and no third party pixels or tags.
• No profiling and no automated decision making. A person reads your enquiry.
• No purchase, sale or exchange of personal data with anyone.
• No phone number, budget or company size fields, because we do not need them to reply.

• To read your enquiry and reply to it.
• To keep a record of the exchange, so that a later conversation starts from what was already said.
• To keep the form usable, by rejecting automated submissions.

We do not use enquiry details for marketing, and we do not add you to a mailing list. There is no marketing opt in on the form because there is nothing to opt into.

Under Hong Kong law we tell you the purpose at the point of collection and we keep the data for that purpose only. The consent box on the form is that point of collection, and the purposes above are the whole list.

If we ever want to use your details for a new purpose, we will ask you first.

We keep enquiry records for 24 months from the last contact with you, then delete them. If the enquiry becomes an engagement, the records of that engagement are held under the signed agreement covering it rather than under this policy.

Enquiry records are stored with our hosting and database providers rather than on a machine in an office. Those providers operate infrastructure in more than one country, so your data may be processed outside Hong Kong.

We use those providers under contract, on terms that require them to process the data only as instructed by us and to keep it secure. We do not hand enquiry data to anyone else.

• Data travels to us over an encrypted connection, and the form does not work without one.
• Access to enquiry records is limited to the people who need it to reply to you, and access is granted by role rather than shared credentials.
• The credentials that reach the database live only on the server. They are never sent to your browser and never appear in the code the site downloads.
• IP addresses are hashed with a secret salt before storage, so a copy of the records does not reveal them.

The Hong Kong Personal Data (Privacy) Ordinance, Cap 486 gives you two rights over data we hold about you, and both are legal rights rather than a courtesy.

The right to request access

You may ask us whether we hold personal data about you, and ask for a copy of it.

The right to request correction

If data we hold about you is wrong, you may ask us to correct it.

To make either request, email privacy@auroracognitive.com and tell us which of the two you are making. Please give us enough detail to find the record, such as the email address you wrote from. We may ask one question back to confirm you are the person the data is about.

We respond to a data access or correction request within 40 days, which is the period the ordinance sets. If we refuse a request, we tell you the reason.

If you are not satisfied with how we handled your request, you may complain to the Privacy Commissioner for Personal Data, Hong Kong, which oversees compliance with the ordinance.

The items in this section are commitments the company chooses to make. They are not statutory rights under the ordinance, and nothing here changes the two rights described above.

We delete an enquiry on request

Ask us to delete your enquiry and we delete the record, unless we need to keep it to meet a legal obligation. We will say so plainly if that happens.

We confirm when it is done

After a deletion we write back to confirm it, so you are not left guessing.

We keep the form short

We ask for the smallest set of fields that lets us give a useful first reply, and we add a field only when there is a reason we can explain.

When we change this policy we change the last updated date at the top of the page, so you can tell at a glance whether the version you are reading is the one you read before. The date on this version is 8 September 2026.

If a change affects how we use data we already hold, we will contact the people affected rather than rely on you noticing a new date.