Privacy Policy & Personal Information Collection Statement

Effective date: 15 August 2025
Last updated: 6 May 2026

A. WHO WE ARE

I II Concept (Hong Kong) Limited (“we”, “our”, “us”)
Registered in Hong Kong
Registered office: 6/F Vogue Building, 67 Wyndham Street, Central, Hong Kong

B. WHY WE COLLECT YOUR DATA (PURPOSES)

We will not use your data for direct marketing without obtaining your explicit consent under Part VI A PDPO.

C. WHETHER IT IS OBLIGATORY TO PROVIDE DATA

Fields marked “required” on our forms are necessary for us to respond; if you do not provide them we may be unable to assist you. Other fields are voluntary.

D. CLASSES OF TRANSFEREES

We may share data with:

• Service providers – Webflow Inc. (hosting, US), email/IT suppliers, professional advisers.
• Government or regulators when required by law.
• Successors in any corporate transaction affecting our business.

Whenever we transfer personal data outside Hong Kong, we use contractual safeguards equivalent to the PCPD’s Model Clauses.

E. RETENTION

• Enquiry-related data: kept 3 years after final interaction, then erased or anonymised.
• Server logs: 12 months for security review.
• Aggregate analytics: anonymous; retained indefinitely.

F. DATA SECURITY

We employ HTTPS, encryption at rest, access controls, and regular vulnerability patching. Service providers are contractually bound to comparable standards.

G. YOUR RIGHTS (DPP 6)

You may:

• Access a copy of the personal data we hold about you.
• Correct any inaccuracy.
• Withdraw consent to any new purpose we proposed (if applicable).

How to exercise your rights: email info@i-iiconcept.com. We will respond within 40 days. A reasonable fee may be charged for access requests as permitted by s.28 PDPO.

H. COOKIES & ONLINE TRACKING

We use only the cookies/local-storage items listed in our separate Cookie & Online-Tracking Policy. Those items do not identify you personally. If any tracking technology does identify you, this Privacy Policy will apply.

I. THIRD-PARTY API INTEGRATIONS (GOOGLE LIMITED USE DISCLOSURE)

We operate internal marketing-analytics tooling under the OAuth application name i ii concept Marketing Foundation (Google Cloud project i-ii-marketing-foundation, project number 762641702731). This application connects to the following Google APIs on behalf of our authorised personnel:

• Google Ads API — OAuth scope https://www.googleapis.com/auth/adwords
• Google Analytics 4 Data API — service-account based access (no OAuth user scope)
• Google Search Console API — OAuth scope https://www.googleapis.com/auth/webmasters.readonly
• Google Business Profile API — OAuth scope https://www.googleapis.com/auth/business.manage
• YouTube Analytics API — OAuth scope https://www.googleapis.com/auth/yt-analytics.readonly

For APIs that require OAuth authorisation, access is granted only after the relevant authorised user has completed the Google OAuth consent flow and explicitly approved the scopes listed above.

Data Accessed

The data classes accessed through each API are limited to the following:

• Google Ads API: campaign metadata and structure, ad-group configuration, keyword and ad performance metrics (impressions, clicks, cost, conversions, quality scores), and customer-account information for our own Google Ads manager account (168-022-6600) and its linked customer account (565-251-5003). No data belonging to third-party advertisers or end consumers is accessed.
• Google Analytics 4 Data API: aggregate web-traffic and event data from our own GA4 properties only.
• Google Search Console API: search analytics data (queries, impressions, clicks, average position) and sitemap status for our own verified domains only.
• Google Business Profile API: location information, posts, customer reviews, and performance metrics for our own business listings only.
• YouTube Analytics API: aggregate channel and video performance metrics for our own YouTube channels only.

The application does not access end-user personal data, individual user profiles, demographic detail, or any data belonging to third parties outside our own accounts.

Data Usage

All data retrieved through these APIs is used exclusively for internal back-office purposes by i ii concept staff. Specific uses are:

• internal performance reporting and trend analysis across our own marketing channels;
• operational reconciliation of marketing spend and outcomes;
• back-office analytics informing internal commercial and planning decisions;
• subject to roadmap: automated optimisation of our own paid-search campaigns (Google Ads only).

This data is not displayed to end users of our website, is not used to make automated decisions that affect any individual user, is not used for serving advertising to any party, and is not used to build user profiles or audience segments for advertising purposes.

Data Sharing

i ii concept does not sell, transfer, or disclose Google user data to any third party, with the following narrow exceptions:

• Infrastructure sub-processors: data resides on our self-hosted servers in Hong Kong. We do not transmit it to third-party data warehouses, analytics-as-a-service providers, or any external cloud-storage product.
• Legal compliance: we may disclose data if required to do so by applicable law, regulation, or court order.
• Business transfer: in the event of a merger, acquisition, or sale of assets, Google user data may transfer to a successor entity; we will give affected authorised users prior notice.

Under no circumstance is Google user data transferred to advertising platforms, data brokers, or information resellers.

Data Storage and Protection

OAuth refresh tokens and any cached API responses are stored on our self-hosted server located in Hong Kong. Storage is restricted to permission-controlled filesystem locations (mode 600, accessible only to a single named administrator). No copies are maintained in third-party cloud storage services. All communication with Google API endpoints is conducted over TLS. Cached data is not publicly accessible and is reachable only by the named administrator on the host machine.

Data Retention and Deletion

Cached Google API data is retained for up to 90 days for trend-analysis purposes and is then purged automatically. OAuth tokens are retained only for as long as the authorised user's consent remains active.

The authorised user may revoke our application's access at any time via Google's account permissions page at myaccount.google.com/permissions. Revoking access causes all subsequent API calls to fail immediately; we do not re-acquire tokens without a fresh OAuth consent.

To request deletion of any cached data attributable to a specific user or account, please contact homan@i-iiconcept.com. We will purge the relevant data within 30 days of receiving a verifiable request.

Limited Use of Google User Data

i ii concept's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We limit our use of this data to providing or improving the internal-tools features described in the Data Usage section above.
• We transfer this data only as described in the Data Sharing section above.
• We do not allow humans to read this data except by the authorised user who granted consent (i.e. our own staff operating on data they themselves consented to share), or where required for security investigations, abuse prevention, or legal compliance, or where data has been aggregated and anonymised for internal operational purposes.
• We do not transfer or sell this data to third parties for serving advertising, and we do not use it for serving advertising of any kind, including personalised or retargeted advertising.

AI and Machine Learning Model Training

Google user data obtained through these APIs is not used to train or fine-tune generalised artificial-intelligence or machine-learning models, whether ours or any third party's. Where we use AI assistants for analytical insights on this data (for example, summarising campaign performance trends), the data is processed transiently per request and is not retained for model training by us or by our AI service providers.

J. CHANGES TO THIS POLICY

We review this statement annually. The “Last updated” date reflects the most recent revisions. Material changes will be announced on this page.

Terms of Service

Effective date: 30 April 2026
Last updated: 30 April 2026

These Terms of Service ("Terms") govern your access to and use of the website at i-iiconcept.com and any related services, applications, or tools provided by I II Concept (Hong Kong) Limited ("we", "our", "us"). By accessing or using our services, you agree to be bound by these Terms. If you do not agree, do not access or use the services.

1. THE SERVICES

We are a Hong Kong-registered interior and brand design consultancy. Our services include design consultation, brand strategy, retail and F&B interior design, related project work, and internal marketing-analytics tooling used by our authorised personnel.

The website provides public information about our work and services. Engagement of paid services is governed by separate written project agreements between us and our clients; in the event of conflict between these Terms and a signed project agreement, the project agreement prevails for that engagement.

2. ELIGIBILITY AND ACCOUNTS

The website is intended for users aged 18 or over and for representatives of organisations with capacity to engage professional services. Internal tools that access third-party APIs (including Google APIs) are restricted to our authorised personnel and any persons we expressly invite as test users; unauthorised access is prohibited.

3. ACCEPTABLE USE

You agree not to:

• use the services for any unlawful purpose, or in a manner that infringes any person's rights;
• attempt to access, scan, or probe areas of our infrastructure not made publicly available;
• reverse-engineer, decompile, or otherwise attempt to derive source code from any of our tools;
• submit content that is infringing, defamatory, obscene, or otherwise harmful;
• use automated means to access the services in a way that places undue load on our infrastructure or that violates the terms of any third party (including Google) whose APIs we depend on.

4. INTELLECTUAL PROPERTY

All content on the website — including design work, photography, copy, layout, and trademarks — is owned by I II Concept (Hong Kong) Limited or its licensors and is protected by Hong Kong and international copyright and trademark laws. You may view content for personal, non-commercial reference. Any other use, including reproduction, public display, modification, or distribution, requires our prior written consent.

Materials produced under a paid engagement are governed by the intellectual-property provisions of the relevant project agreement.

5. THIRD-PARTY SERVICES

We integrate with third-party platforms (including but not limited to Google, Webflow, and Microsoft 365) to provide our services. Your use of those third-party platforms is governed by their own terms and policies, which we do not control. We take reasonable steps to use those platforms in accordance with their published policies; however, we are not responsible for the acts or omissions of third-party providers.

6. DISCLAIMERS

The website and any internal tools are provided "as is" and "as available". To the maximum extent permitted by law, we disclaim all warranties of any kind, whether express or implied, including but not limited to warranties of merchantability, fitness for a particular purpose, and non-infringement. We do not warrant that the services will be uninterrupted, error-free, or free of harmful components.

Information on the website is provided for general informational purposes and does not constitute professional advice. Engagement of our design services creates the only professional advisory relationship between you and us, and is governed by a written project agreement.

7. LIMITATION OF LIABILITY

To the maximum extent permitted by law, in no event shall I II Concept (Hong Kong) Limited, its directors, employees, or agents be liable for any indirect, incidental, special, consequential, or punitive damages, or any loss of profits or revenues, whether incurred directly or indirectly, or any loss of data, use, goodwill, or other intangible losses, resulting from (a) your access to or use of, or inability to access or use, the services; (b) any conduct or content of any third party on the services; or (c) unauthorised access, use, or alteration of your transmissions or content.

In any event, our aggregate liability arising out of or relating to the services and these Terms shall not exceed the amount paid by you to us, if any, for use of the services in the twelve (12) months preceding the event giving rise to the liability, or HKD 1,000, whichever is greater.

Nothing in these Terms excludes or limits our liability for fraud, fraudulent misrepresentation, death or personal injury caused by negligence, or any other liability that cannot be excluded under applicable law.

8. INDEMNIFICATION

You agree to indemnify and hold harmless I II Concept (Hong Kong) Limited and its directors, employees, and agents from any claim, demand, loss, or damage, including reasonable legal fees, arising out of or related to your breach of these Terms or your violation of any law or third-party rights.

9. TERMINATION

We may suspend or terminate your access to the services at any time, with or without cause and with or without notice. Upon termination, the rights granted to you under these Terms will immediately cease; sections that by their nature should survive (including Intellectual Property, Disclaimers, Limitation of Liability, Indemnification, and Governing Law) will survive termination.

10. CHANGES TO THESE TERMS

We may revise these Terms from time to time. Material changes will be reflected by an updated "Last updated" date and, where reasonably practicable, by a notice on this page. Continued use of the services after changes take effect constitutes acceptance of the revised Terms.

11. GOVERNING LAW AND JURISDICTION

These Terms are governed by the laws of the Hong Kong Special Administrative Region. Any dispute arising out of or in connection with these Terms shall be subject to the exclusive jurisdiction of the courts of Hong Kong.

12. CONTACT

I II Concept (Hong Kong) Limited
6/F Vogue Building, 67 Wyndham Street, Central, Hong Kong
General inquiries: info@i-iiconcept.com
+852 2370 1630