Legal
Privacy Policy
Last updated: 27 June 2026
Who we are
White Space Labs Limited is an AI company registered in Hong Kong (CR No. 80542163). We help small and medium-sized businesses adopt AI tools and workflows.
Contact: [email protected]
What data we collect
- Contact information— name, email, phone number, company name, provided when you reach out to us via our website, WhatsApp, WeChat, or email.
- Messaging content— messages you send us through WhatsApp, WeChat, or other communication channels in the course of receiving our services.
- Booking information— appointment dates, times, and preferences when you schedule a consultation.
- Payment information— processed securely through Stripe. We do not store your card details.
- Website usage data— pages visited, referral source, and browser type, collected through Cloudflare analytics.
How we use your data
- Service delivery— to provide AI deployment, consulting, and support services you have requested.
- AI-assisted processing— messages and service-related content may be processed by AI systems (including third-party AI language model providers) to provide automated responses, client management, and service improvements. AI processing is used to support our services, not for independent decision-making about you.
- Communication— to respond to your inquiries, send appointment confirmations, and provide service updates.
- Improvement— to understand how our services are used and make them better.
Third-party services
We use the following third-party services that may process your data:
- AI language model providers— AI processing of messages and content
- Stripe— payment processing
- Cal.com— appointment scheduling
- Cloudflare— website hosting and analytics
- Meta (WhatsApp Business API)— business messaging
Each provider operates under its own privacy policy. We only share the minimum data necessary for each service to function.
Data retention
We retain your personal data for as long as necessary to provide our services and fulfill the purposes described in this policy. Client records are maintained for the duration of our business relationship and for a reasonable period afterward for follow-up and legal compliance.
Data security
We protect your data through encrypted connections (TLS), access controls, and secure infrastructure. While no system is perfectly secure, we take reasonable measures appropriate to the sensitivity of the data we handle.
Your rights
Under the Hong Kong Personal Data (Privacy) Ordinance (PDPO), you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data (subject to legal obligations)
- Withdraw consent for marketing communications
To exercise any of these rights, contact us at [email protected].
Cookies
Our website uses essential cookies for basic functionality. We use Cloudflare analytics which may set cookies to understand site usage. We do not use advertising cookies or trackers.
Changes to this policy
We may update this policy from time to time. Changes will be posted on this page with an updated date. For significant changes, we will make reasonable efforts to notify you.
Contact
If you have questions about this policy or how we handle your data, contact us at [email protected].