Privacy Policy
Last Updated: October 2026
Privacy Policy Statement
You may request access to or correction of personal data held by us, subject to applicable law. To ask a privacy question or submit a data request, contact sales@thoth.hk or write to THOTH Solutions, Room 15, Block B, 21/F, 25–27 Luk Hop Street, San Po Kong, Hong Kong.
1. Introduction
In this Privacy Policy Statement (“Statement”), “we”, “us”, “our” or “Thoth Solutions” refers to Thoth Solutions Limited, its subsidiaries, affiliates, and associated companies. "Ordinance" refers to the Personal Data (Privacy) Ordinance, Chapter 486 of the laws of Hong Kong, and “personal data” refers to personal data as defined in the Ordinance.
We are committed to respecting and protecting the privacy and personal data of individuals such as our customers, visitors, and website users ("Users" or "you"). We fully comply with the obligations and requirements stipulated under the Ordinance. Inspired by industry-leading transparency standards, this Statement provides you with comprehensive, granular details on exactly what data we collect, how it is used, and how we safeguard your information.
2. The Types of Information We Collect
To provide our enterprise-grade IT services, we must process information about you. The types of information we collect depend on how you interact with our website, our IT Helpdesk, and our Managed IT Services (MSP). We collect data in three primary ways:
A. Things You and Your Organization Provide
Account and Contact Information: When you book a consultation, sign up for our services, or fill out a form, we collect your name, job title, company name, corporate email address, phone number, and office address.
Support and Communication Data: When you submit a Helpdesk ticket, chat with our team, or send us emails, we collect the content of those communications, including screenshots, error logs, and issue descriptions.
Billing and Financial Information: For corporate clients, we collect payment details, billing addresses, and tax identification numbers to process transactions.
B. Device, Network, and Infrastructure Information Similar to advanced diagnostic tools, when you utilize our website or install our Remote Monitoring and Management (RMM) agents, we automatically collect information from and about the computers, phones, and corporate networks you use. This includes:
Device Attributes: Information such as the operating system, hardware and software versions, battery level, signal strength, available storage space, and browser type.
Network and Connection Data: Your IP address, Internet Service Provider (ISP), connection speed, MAC addresses, DNS requests, and BGP routing data.
Telemetry and Performance Metrics: CPU usage, memory utilization, bandwidth consumption, and application crash logs (essential for our 24/7 proactive NOC monitoring).
Cookie Data: Data from cookies stored on your device, including cookie IDs and settings (see our Cookies Section below).
C. Information from Partners and Third Parties We may receive information about you from our B2B partners, cloud vendors (e.g., AWS, Microsoft, Fortinet), and security threat intelligence networks. This may include vulnerability reports, compromised credential alerts, or verification information used to prevent fraud and ensure compliance.
3. How We Use Your Information
We use the personal data we collect (subject to your choices) for the following purposes:
A. To Provide, Personalize, and Improve Our Services
To deploy network architecture, cloud infrastructure, and cybersecurity solutions tailored to your company's scale.
To proactively monitor server health and execute automated patching.
To diagnose and troubleshoot Helpdesk tickets efficiently.
To analyze website usage trends and improve user experience.
B. To Promote Safety, Integrity, and Security
We use the data we collect to verify accounts, combat malicious conduct, and detect and prevent spam, malware, and ransomware.
To conduct Penetration Testing and vulnerability scanning as requested by you.
To maintain strict ISO 27001 compliance standards within our own Managed SOC.
C. To Communicate with You
To send you service updates, SLA reports, maintenance schedules, and security alerts.
To respond to your inquiries when you contact us.
4. Direct Marketing
We intend to use your personal data for direct marketing purposes, but we cannot and will not do so without your prior consent (which includes an indication of no objection).
Data Used: We may use your name, job title, company name, email address, and phone number.
Classes of Marketing Subjects: We may market the following services to you: IT Managed Services (MSP), Cloud Solutions, Cybersecurity & Penetration Testing, Software Development, and upcoming IT webinars/events hosted by Thoth Solutions Limited.
Your Right to Opt-Out: You may opt out of receiving direct marketing communications from us at any time, free of charge. You can exercise this right by clicking the "unsubscribe" link in our emails, or by emailing to us.
5. How Your Information is Shared
We do not sell your personal data. Your information is only shared in the following circumstances:
With Third-Party Service Providers: We collaborate with infrastructure partners (e.g., AWS, Microsoft Azure, Cloudflare) and operational tools (e.g., Zendesk, Stripe) who provide infrastructure, process payments, or help us offer customer service. They are bound by strict confidentiality and data protection agreements.
With Law Enforcement or Legal Requests: We may access, preserve, and share your information with regulators, law enforcement, or others in response to a legal request (e.g., a search warrant, court order, or subpoena issued in Hong Kong or other relevant jurisdictions) if we have a good-faith belief that the law requires us to do so.
Change of Ownership: If the ownership or control of all or part of our services or their assets changes, we may transfer your information to the new owner.
6. Data Security and Retention
Security: We protect your data using industry-leading technical and administrative measures, including AES-256 encryption for data at rest, TLS 1.3 for data in transit, strict Role-Based Access Control (RBAC), and Multi-Factor Authentication (MFA) across our internal systems.
Retention: In accordance with Data Protection Principle 2 of the Ordinance, we retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required to comply with our legal, accounting, and tax obligations (typically 7 years under Hong Kong tax laws).
7. Cross-Border Data Transfers
To provide enterprise-grade resilience, Thoth Solutions utilizes global cloud infrastructure. Therefore, your personal data may be transferred to, stored, and processed in secure data centers located outside of Hong Kong (such as AWS/Azure regions in Singapore or Japan). We ensure that any such international transfers are protected by standard contractual clauses and security measures comparable to the requirements of the Ordinance.
8. Cookies and Tracking Technologies
Our website uses cookies, web beacons, local storage, and similar technologies to remember your preferences, track user sessions, and analyze site performance. By continuing to use our website, you consent to our use of cookies. You can manage or disable cookies at any time through your browser settings, though some website features may not function properly if cookies are disabled.
9. Your Rights: Access and Correction
Under the Hong Kong Personal Data (Privacy) Ordinance, you have the right to:
Check whether we hold personal data about you and to access such data.
Require us to correct any personal data relating to you which is inaccurate.
Ascertain our policies and practices in relation to personal data.
In accordance with the Ordinance, we have the right to charge a reasonable administrative fee for the processing of any data access request.
10. Contact Us
If you have any questions about this Privacy Policy Statement, wish to access or correct your personal data, or wish to withdraw your consent for direct marketing, please contact us at sales@thoth.hk
Last Updated: October 2026