Privacy and Cookie Policy

The Chinese version is for reference only. In the event of any discrepancy or conflict between the Chinese and English versions, the English version shall prevail.

Effective Date: 9 October 2026 Version: 1

Cardy Tech Limited (“we”, “us” or “our”) respects your privacy. This Policy explains how we collect, use and protect personal data on our website cardytech.com (the “Website”) and in our related trial application form, and how we use cookies. We handle personal data in accordance with the Personal Data (Privacy) Ordinance of Hong Kong.

This Policy covers the Website and the application form above. Handling of data within the AI Education Platform (including teacher and student accounts and in-platform data) is governed by the platform’s own terms of use and privacy notice.

1. Personal Data We Collect

(a) Trial application form (Google Form)

We use Google Forms to collect trial applications. The form “Apply for an AI Education Platform Trial Account” collects:

School name (required)
Name of the responsible teacher (required)
Contact phone number (required)
Contact email (required)
Teacher’s subject(s) / position (optional)

(b) Browsing statistics (only with your consent)

If you click “Accept analytics”, we use Google Analytics 4 to collect anonymous browsing statistics (such as pages viewed and time spent). See Section 8.

(c) When you contact us

If you contact us by email or phone, we receive the contact details and content you provide.

You may choose not to provide data, but if you do not provide the required fields in the form, we may be unable to process your trial application.

2. Purposes of Use

We use personal data to:

process your AI Education Platform trial application or contact request, and create and manage trial accounts (including teacher and student accounts);
contact you, including sending trial account details, the user manual and tutorial videos by Gmail;
collect your feedback on the trial so that we can improve the platform;
contact you, follow up on your trial and provide support;
respond to your enquiries;
with your consent, analyse how the Website is used so that we can improve it; and
comply with legal requirements.

3. Disclosure and Transfer

We do not sell your personal data.
The data you provide is given to Cardy Tech Limited and to the YouTube channel that works with us and shared this application link with you (the “Partner Channel”). The Partner Channel can only view application records in the form (it cannot edit them), only through shared Google access limited to necessary persons we authorise, and only for purposes related to the trial programme. We (Cardy Tech Limited) are the ones who contact you and send the account details and user manual. Neither we nor the Partner Channel will use your data to promote other products or services.
Form data is stored and processed by Google (Google Forms); we send emails through Gmail (Google); Google Analytics is also operated by Google (only after you consent). Your data may be stored on servers outside Hong Kong.
We may disclose data where required by law, a court order or a government authority.

4. Retention

We keep contact data collected through the form for no more than 2 years from the date of collection, after which it is deleted or anonymised. For users who have been given a trial account, their data is kept while the account is in use and is deleted or anonymised at the next review after the account ends.

5. Security

We take the following steps to protect the form data:

The Google accounts that manage the form have two-step verification enabled;
Only designated persons can edit the data; shared access is granted only to necessary persons, and downloading, printing and copying are restricted;
Trial account details are sent from a dedicated company email account;
Access is removed on the same day when a person leaves or a partnership ends;
This Website uses HTTPS encrypted connections.

We review the data at least once a year and delete or anonymise data that has passed its retention period. The Partner Channel can only view the form, not edit it.

6. Access and Correction

You have the right to request access to, and correction of, your personal data we hold. Please email us at [email protected] (we may need to verify your identity first).

7. Direct Marketing

We contact you only to process your application, provide your trial account and collect trial feedback. We will not use your personal data to promote other products or services. If we want to do so in future, we will inform you and obtain your consent first, and you may refuse at any time.

8.1 What are cookies? Cookies are small text files stored on your computer, smartphone or other device when you visit a website. They allow a website to recognise your device, remember your preferences or measure how the site is used.

8.2 How do we use them? The Website uses cookies and similar storage for two purposes only:

Remembering your choice (necessary): we remember your decision on the cookie banner for 6 months. This does not track you. This information is stored only in your browser (localStorage, name cardytech-consent) and is not sent to us or to any third party.
Statistics and traffic analysis (only with your consent): we use Google Analytics 4, loaded through Google Tag Manager, to understand which pages are viewed so that we can improve the Website.

The Website does not use advertising or remarketing cookies.

To display fonts and videos, the pages load Google Fonts and YouTube content.

Category	Purpose	Source	Name	Retention	Consent required?
Remembering your choice	Remember your banner decision	This Website	`cardytech-consent` (localStorage)	6 months	No
Statistics and analytics	Count visits and browsing paths	Google Analytics 4	`_ga`, `_ga_*`	Up to 2 years (Google Analytics default)	Yes

8.3 Consent first, tracking second. When you first visit the Website, a cookie banner is displayed with three options: “Accept analytics”, “Reject analytics” and “Cookie Settings”:

Before you make a choice, we do not load Google Tag Manager or GA4, set any analytics cookies, or send any analytics signals to Google.
After you click “Accept analytics”, the analytics tools are loaded. If you click “Reject analytics”, they are not loaded.
“Cookie Settings” lets you read about each type of cookie and choose whether to turn on analytics, which is off by default.
We do not treat continued browsing as consent.
We remember your choice for 6 months and will then ask you again.

8.4 Managing your choices. Click “Cookie Settings” in the footer of any page to choose again at any time. You can also block, restrict or delete cookies in your browser, although some features may be affected (see the official help of Google Chrome, Apple Safari, Microsoft Edge or Mozilla Firefox).

9. Changes and Enquiries

We review this Policy at least once a year and amend it when necessary. Amendments take effect once published on the Website, so please check this page regularly.

If you have any questions about this Policy or your personal data, please contact us by email at [email protected] or by phone at +852 9507 9406.