1. Introduction
CENTAURUS TECHNOLOGY LIMITED, developed by Buccellapu Limited and headquartered at Rm 701(108) 7/F New Mandarin Plaza Tower B, 14 Science Museum Road, Tsim Sha Tsui East, Kowloon, Hong Kong, is committed to protecting the privacy and security of all individuals who interact with our website, our services, and our organisation. This Privacy Policy describes how we collect, use, store, and share your personal information when you visit our website at www.centaurus.autos or engage with our computer systems design and related professional services.
We take your privacy seriously. This policy explains the types of personal data we may collect from you or that you may provide when you visit our website, and our practices for collecting, using, maintaining, protecting, and disclosing that information. By accessing or using our website, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, you should discontinue use of our website immediately.
CENTAURUS TECHNOLOGY LIMITED acts as the data controller for the personal information we collect through our website and services. Our registered address is in Hong Kong, and we operate in full compliance with the Personal Data (Privacy) Ordinance of the Hong Kong Special Administrative Region as well as applicable international data protection regulations where our services are provided. We have appointed Buccellapu Limited as the developer responsible for the technical implementation of our data protection measures.
2. Information We Collect
2.1 Information You Provide Directly
We collect personal information that you voluntarily provide when using our website or engaging our services. This includes your full name, business email address, telephone number, company name, job title, and any additional information you choose to share through our contact forms, consultation requests, email correspondence, or service engagement documentation. The specific categories of information we collect depend on the nature of your interaction with us.
2.2 Automatically Collected Information
When you access our website, we automatically collect certain technical information through server logs and analytics tools. This includes your IP address, browser type and version, operating system, device type, referring URLs, pages visited, time and date of access, and other diagnostic data. This information helps us understand how our website is used and improve its performance and security.
2.3 Cookies and Similar Technologies
Our website uses cookies, web beacons, and similar tracking technologies to enhance your browsing experience, analyse site traffic, and support our marketing efforts. Cookies are small text files stored on your device by your web browser. We use both session cookies which expire when you close your browser, and persistent cookies which remain on your device for a set period. Essential cookies are necessary for the website to function correctly. Analytical cookies help us understand usage patterns. Functional cookies remember your preferences for future visits.
3. How We Use Your Information
To provide our services. We process your personal information to respond to your enquiries, prepare proposals, deliver the computer systems design, integration, and consulting services you have requested, and communicate with you throughout the project lifecycle. This processing is necessary for the performance of our contract with you.
To improve our website and services. We analyse aggregated usage data to understand how visitors interact with our website, identify areas for improvement, optimise our content and service offerings, and enhance the overall user experience. This processing is based on our legitimate interest in continuously improving our business.
For marketing communications. With your express consent where required by applicable law, we may use your contact information to send you industry insights, technical resources, company updates, and information about our services. You can withdraw your consent or opt out of these communications at any time by using the unsubscribe link in any email or by contacting us directly at info@centaurus.autos.
For legal compliance and security. We may process your information to comply with applicable laws, regulations, legal processes, or enforceable governmental requests; to detect, investigate, and prevent fraudulent, unauthorised, or illegal activities; and to protect the rights, property, and safety of CENTAURUS TECHNOLOGY LIMITED, our clients, employees, or others. This processing is necessary for compliance with legal obligations to which we are subject.
4. Information Sharing and Disclosure
With service providers. We may share your personal information with trusted third-party service providers who assist us in operating our website, conducting our business, or providing services to you. These providers include cloud hosting services, email delivery platforms, analytics providers, and professional advisors. All such providers are contractually bound to protect your information and may use it only for the specific purposes we specify.
For legal purposes. We may disclose your personal information if required to do so by law, regulation, or legal process, including in response to a court order, subpoena, or lawful request by a Hong Kong government authority. We will notify you of such disclosure where permitted by law.
In business transactions. If CENTAURUS TECHNOLOGY LIMITED is involved in a merger, acquisition, restructuring, or sale of assets, your personal information may be transferred as part of that transaction. We will provide notice before your information is transferred and becomes subject to a different privacy policy.
With your consent. We may share your information for any other purpose with your explicit and informed consent obtained in advance.
5. Data Retention and Security
We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. When determining appropriate retention periods, we consider the nature and sensitivity of the information, the potential risk of harm from unauthorised use or disclosure, and applicable legal requirements. Generally, we retain client data for the duration of our engagement plus five years, and marketing data until you opt out or for two years after last contact, whichever is earlier.
Our data retention schedules are documented in our Data Retention Policy, which classifies all personal information into defined retention categories with specific deletion schedules. Upon expiration of the applicable retention period, we securely delete or anonymise the information using industry standard techniques. We conduct periodic audits of our data stores to ensure compliance with our retention schedules and to identify any information that may no longer be necessary for the purposes for which it was collected.
We implement comprehensive security measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit using TLS 1.2 and 1.3 protocols for all communications with our website, email systems, and client-facing portals
- Encryption of data at rest using AES-256 for all stored personal information across our infrastructure
- Multi-factor authentication enforced for all administrative access to systems and databases containing personal data
- Role-based access controls implementing the principle of least privilege, with regular access reviews and immediate revocation upon role changes
- Quarterly security assessments and penetration testing conducted by independent third-party security firms
- Comprehensive employee training programme covering data protection principles, privacy obligations, breach response procedures, and secure handling of personal information
- Formal incident response plan with defined escalation procedures, notification timelines, and post-incident review processes
- Physical security controls at our New Mandarin Plaza headquarters including biometric access control, 24-hour surveillance, and visitor management protocols
6. International Data Transfers
As a Hong Kong based company serving clients across the Asia Pacific region and beyond, we may transfer your personal information to countries other than your country of residence. These countries may have data protection laws that differ from those in your jurisdiction. When we transfer your data internationally, we ensure appropriate safeguards are in place, including standard contractual clauses approved by relevant data protection authorities, binding corporate rules, or other lawful transfer mechanisms recognised under applicable data protection frameworks. Our primary data processing facilities are located in Hong Kong, with secondary processing in Singapore and Japan through our cloud service providers. All such providers are subject to contractual obligations ensuring equivalent levels of data protection. We conduct due diligence assessments on all international data processors and maintain documentation of all cross-border data transfers to demonstrate compliance with applicable regulatory requirements and accountability obligations.
7. Your Rights and Choices
Depending on your jurisdiction, you may have the following rights regarding your personal information. We will respond to all legitimate requests within the timeframes required by applicable law, typically within 30 calendar days.
Right of access. You have the right to request confirmation of whether we process your personal information and, if so, to obtain a copy of that information along with details about the purposes of processing, the categories of data involved, and any third parties with whom we share it.
Right to rectification. You have the right to request that we correct any inaccurate or incomplete personal information we hold about you. We will make the correction promptly and notify any third parties with whom we have shared the inaccurate information.
Right to erasure. You have the right to request deletion of your personal information in certain circumstances, including when the information is no longer necessary for the purposes for which it was collected, when you withdraw consent, or when the information has been unlawfully processed.
Right to restrict processing. You have the right to request that we restrict the processing of your personal information in certain circumstances, such as when you contest the accuracy of the information or object to our processing while we verify your request.
Right to data portability. You have the right to request that we provide your personal information to you in a structured, commonly used, machine-readable format and, where technically feasible, to transmit that data directly to another data controller.
Right to object. You have the right to object to our processing of your personal information for direct marketing purposes at any time. You also have the right to object to processing based on legitimate interests on grounds relating to your particular situation.
Right to withdraw consent. Where we rely on your consent as the legal basis for processing, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
8. Children's Privacy
Our website and services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at info@centaurus.autos. If we become aware that we have collected personal information from a child without verification of parental consent, we will take prompt steps to delete that information from our systems.
9. Third-Party Services and Links
Our website may contain links to third-party websites, plug-ins, services, social media platforms, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy practices, content, or security. We encourage you to read the privacy policies of any third-party websites you visit or services you interact with through links from our website. This Privacy Policy applies solely to information collected by CENTAURUS TECHNOLOGY LIMITED through our own website and services.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or operational considerations. When we make material changes, we will update the Last Updated date at the top of this policy and may notify you by email or through a prominent notice on our website. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website after any changes take effect constitutes your acceptance of the updated policy.
11. Contact Information
If you have any questions, concerns, complaints, or requests regarding this Privacy Policy or our data handling practices, or if you wish to exercise any of your rights described in this policy, please do not hesitate to reach out to us using the contact details provided below. We are committed to addressing all enquiries promptly and thoroughly:
CENTAURUS TECHNOLOGY LIMITED
Rm 701(108) 7/F New Mandarin Plaza Tower B
14 Science Museum Road
Tsim Sha Tsui East, Kowloon, Hong Kong
Email: info@centaurus.autos
Phone: +1 272 377 1332
Developer: Buccellapu Limited
12. California Privacy Rights
Under the California Consumer Privacy Act (CCPA), California residents have additional rights regarding their personal information. If you are a California resident, you have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, the categories of sources from which the information is collected, the business or commercial purpose for collecting the information, and the categories of third parties with whom we share that information. You also have the right to request deletion of your personal information and the right to opt out of the sale of your personal information. We do not sell personal information as defined under the CCPA. We will not discriminate against you for exercising any of your CCPA rights by denying services, charging different prices, or providing a different quality of service.
13. Data Protection Officer
CENTAURUS TECHNOLOGY LIMITED has appointed a Data Protection Officer to oversee compliance with this Privacy Policy and applicable data protection laws. The DPO is responsible for monitoring our data protection practices, conducting privacy impact assessments, maintaining records of processing activities, and serving as a contact point for data subjects and regulatory authorities. You may reach our Data Protection Officer by emailing info@centaurus.autos with the subject line Attention: Data Protection Officer. All communications addressed to the DPO will be handled with appropriate confidentiality and responded to within the statutory timeframe.
14. Cookie Policy Details
Our website uses the following categories of cookies: Essential cookies are strictly necessary for the website to function correctly and cannot be disabled in our systems. They enable core functionality such as page navigation, form submission, and access to secure areas. Analytical cookies help us understand how visitors interact with our website by collecting and reporting information anonymously. We use this data to improve website performance, identify technical issues, and optimise content. Functional cookies enable the website to provide enhanced functionality and personalisation, such as remembering your preferences and settings for future visits. When you first visit our website, we display a cookie consent notice that allows you to accept or decline non-essential cookies. You can also manage cookie preferences through your browser settings. Most web browsers allow you to control cookies through their settings, but limiting cookies may affect website functionality.