This Privacy Policy explains how OceanVast, a systems design and integration studio operated by IMMENSE OCEAN INVESTMENTS LIMITED, collects, uses, stores, and protects personal information when you visit our website or use our services. We are committed to handling your information with care and transparency.
01Introduction
Welcome to the Privacy Policy of OceanVast. OceanVast is a specialized team focused on computer systems design and integrated systems engineering. Our work spans systems architecture, cloud and on-premises infrastructure, data engineering, and security. This policy describes the kinds of information we may collect from you, the reasons we collect it, and the choices you have about how it is used.
We believe privacy is a foundational part of good engineering, not an afterthought. The systems we build for our clients are designed with security and data protection in mind from the very first architecture diagram, and we apply the same standards to our own website and business operations.
By accessing or using the OceanVast website or otherwise engaging our services, you acknowledge that you have read and understood this policy. If you do not agree with any part of this policy, please discontinue use of the website and contact us using the details at the end of this page so we can address your concerns.
This policy applies to information we collect through our website and, where relevant, through our client engagements. It covers visitors to the website, individuals who contact us with inquiries, prospective and current clients, and individuals who represent those clients. It does not, however, apply to third party websites that may be linked from our pages, which are governed by their own privacy policies.
We review and refine this policy on a regular basis. Because our field changes quickly, we encourage you to revisit this page whenever you share new information with us, so that you always understand how that information will be handled and what choices are available to you.
02Who We Are
OceanVast is operated by IMMENSE OCEAN INVESTMENTS LIMITED, a company providing computer systems design and related services within the Professional, Scientific, and Technical Services sector. Our focus areas include computer integrated systems design, cloud infrastructure engineering, data platform development, and information security.
Our registered address is 27/F CEO TWR, 77 WING HONG ST, Cheung Sha Wan, Hong Kong (HK). Our website is available at www.oceanvast.mom. You can reach our team by email at service@oceanvast.mom or by telephone at +1 814 904 2604.
For the purposes of applicable data protection laws, IMMENSE OCEAN INVESTMENTS LIMITED acts as the data controller of the personal information described in this policy. This means we determine the purposes and means of processing that information.
03Information We Collect
We collect several categories of information, each described below. We only collect information that is reasonably necessary to operate our website, respond to your inquiries, and deliver our services.
Information You Provide Directly
When you contact us through our website, send us an email, or speak with our team, you may provide personal information such as your name, email address, telephone number, company name, job title, and the contents of your message. If you engage us for a project, you may also provide business information related to your systems, requirements, and objectives.
Information Collected Automatically
When you visit our website, our systems may automatically record technical information about your device and your visit, including your internet protocol address, browser type and version, operating system, referring pages, the pages you view, and the date and time of each request. This information is used to understand how the site is used and to keep it secure and reliable.
Business and Client Information
In the course of providing services, we may receive information about your organization, your employees, your infrastructure, and your data. This information is processed under the terms of our client agreements and is used solely to deliver, support, and improve the services we provide to you.
Sensitive Information
We do not seek to collect sensitive or special categories of personal information, such as health data, biometric data, or information about political or religious views, through our website. If it becomes necessary to handle such information in the course of a client engagement, we will only do so under the terms of a specific agreement and with appropriate safeguards in place.
Where possible, we collect information in aggregated or de-identified form so that it does not identify any individual. Aggregated information is used for analytical and improvement purposes and is not treated as personal information under this policy.
04How We Collect Information
We collect information through several channels. First, we collect information you provide directly when you fill out a contact form, send an email, call us, or engage in business discussions with our team.
Second, we collect information automatically through standard web technologies, including server logs and, where permitted, cookies and similar tracking technologies. This automatic collection helps us maintain the security of the site and measure basic usage patterns.
Third, we may receive information from third parties, such as analytics providers, business partners, or public sources, where doing so is lawful and consistent with the purposes described in this policy. When we receive information from third parties, we take reasonable steps to confirm those parties collected it lawfully.
We practice data minimization. This means we only collect information that is genuinely needed for the purposes described in this policy, and we do not accumulate personal information simply because we can. When a particular piece of information is not necessary, we avoid collecting it in the first place.
05How We Use Information
We use the information we collect for a limited set of purposes, all of which support the operation of our business and the delivery of our services. These purposes include the following.
- Responding to your inquiries, requests, and messages in a timely and helpful manner.
- Providing, maintaining, and improving our systems design and integration services.
- Communicating with you about projects, proposals, and service updates.
- Managing our client relationships and fulfilling our contractual obligations.
- Improving the content, functionality, and usability of our website.
- Detecting, preventing, and addressing security incidents and technical issues.
- Complying with applicable laws, regulations, and legal processes.
We do not sell your personal information, and we do not use it to make automated decisions that produce legal or similarly significant effects on you without appropriate safeguards.
If we ever wish to use your personal information for a purpose that is materially different from the purposes described in this policy, we will notify you and, where required by law, obtain your consent before doing so. You may opt out of non-essential communications, such as newsletters and service announcements, at any time by following the unsubscribe instructions in those messages or by contacting us directly.
06Legal Bases for Processing
Where data protection law requires a legal basis for processing personal information, we rely on one or more of the following grounds.
- Contractual necessity: processing is required to perform a contract with you or to take steps at your request before entering into a contract.
- Legitimate interests: processing is necessary for our legitimate business interests, such as operating and securing our website, provided those interests are not overridden by your rights and freedoms.
- Consent: where you have given clear consent for a specific purpose, such as optional communications.
- Legal obligation: processing is necessary to comply with a legal or regulatory requirement that applies to us.
Where we rely on consent, you may withdraw it at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
07Cookies and Tracking Technologies
Our website may use cookies and similar technologies such as pixels and local storage. Cookies are small text files placed on your device that help a website recognize your browser and remember certain information.
We use these technologies for essential functions, such as remembering your preferences, and for analytics, such as understanding which pages are most useful to visitors. We do not use cookies to track you across unrelated websites for advertising purposes.
Most web browsers allow you to control cookies through their settings. You can typically block or delete cookies, though doing so may affect the functionality of some parts of our website. For more information about managing cookies, please consult the help documentation for your browser.
Cookies can be categorized in several ways. Strictly necessary cookies enable core functions such as navigation and access to secure areas. Preference cookies remember choices you have made, such as language or region. Analytics cookies help us understand how visitors interact with the site so we can improve its structure and content. We use only the cookies that are reasonably required for these purposes.
08How We Share Information
We do not rent or sell personal information. We may share information only in the limited circumstances described below.
Service Providers
We may share information with trusted service providers who perform functions on our behalf, such as hosting, email delivery, and analytics. These providers are permitted to use the information only to perform services for us and are bound by confidentiality obligations.
Professional Advisers
We may share information with our legal, accounting, and other professional advisers where necessary to obtain advice or to protect our rights.
Legal Requirements
We may disclose information where required by law, regulation, legal process, or a valid governmental request, or where we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
Business Transfers
In the event of a merger, acquisition, reorganization, or sale of all or part of our assets, personal information may be transferred as part of that transaction. We will provide notice before your information is transferred and becomes subject to a different privacy policy.
We may also share information that has been aggregated or de-identified in a way that does not identify any individual. Such information may be used for research, reporting, or service improvement and is not considered personal information for the purposes of this policy.
09Data Retention
We retain personal information only for as long as is necessary to fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law.
The specific retention period depends on the type of information and the purpose for which it was collected. For example, inquiry messages may be retained for a reasonable period to allow us to respond and maintain records of correspondence, while client project data is retained in accordance with our contractual obligations and applicable legal requirements.
When information is no longer needed, we take reasonable steps to delete or anonymize it. We may retain information in a de-identified form for analytical purposes where this is lawful and does not identify any individual.
To determine retention periods, we consider factors such as the amount, nature, and sensitivity of the information, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process the information, and whether those purposes can be achieved by other means. We also consider legal, regulatory, tax, and accounting requirements that may require us to keep certain records for a minimum period.
10Data Security
We implement appropriate technical and organizational measures designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, and access. These measures are reviewed and updated as our systems and the threat landscape evolve.
Our safeguards include encrypted transmission of data, access controls that restrict information to personnel who need it to perform their duties, regular review of system activity, and the application of secure development practices to the systems we build.
Although we work hard to protect information, no method of transmission or storage is completely secure. We cannot guarantee absolute security, and we encourage you to take reasonable precautions of your own, such as using strong passwords and protecting your devices.
In the event of a security incident that affects your personal information, we will take steps to contain the incident, investigate its cause, and, where required by law, notify affected individuals and relevant authorities in a timely manner. We also maintain an incident response plan that is tested and updated periodically.
11International Data Transfers
OceanVast is based in Hong Kong, and our service providers may be located in other jurisdictions. As a result, personal information may be transferred to and processed in countries other than the one in which you reside, including countries that may have different data protection standards.
When we transfer personal information across borders, we take steps to ensure an adequate level of protection, such as entering into appropriate contractual arrangements with recipients or relying on other safeguards recognized by applicable law.
By using our website or services, you acknowledge that your information may be transferred to and processed in jurisdictions outside your country of residence.
Where we transfer personal information to a jurisdiction that does not provide an equivalent level of protection, we rely on safeguards such as standard contractual clauses, adequacy decisions, or other mechanisms recognized by applicable law. We also require our service providers to implement appropriate technical and organizational measures to protect information they process on our behalf.
12Your Privacy Rights
Depending on your location, you may have certain rights regarding your personal information. These may include the right to access the information we hold about you, to request correction of inaccurate information, to request deletion of your information, to restrict or object to certain processing, to request data portability, and to withdraw consent where we rely on it.
To exercise any of these rights, please contact us using the details in the How to Contact Us section below. We will respond to your request within the timeframes required by applicable law. In some cases, we may need to verify your identity before we can act on a request.
We will not charge a fee to process an ordinary request to exercise your rights. However, if a request is manifestly unfounded, repetitive, or excessive, we may charge a reasonable fee or decline to act on it. We will explain our decision and inform you of any right you may have to appeal it.
If you believe your rights have not been respected, you also have the right to lodge a complaint with a supervisory authority in your jurisdiction. We encourage you to reach out to us first so we can attempt to resolve any concern directly.
13Privacy for Children
Our website and services are intended for business users and are not directed to children. We do not knowingly collect personal information from individuals under the age of sixteen without verifiable parental consent.
If you are a parent or guardian and believe your child has provided us with personal information, please contact us using the details below. We will take steps to delete that information promptly and in accordance with applicable law.
14Third Party Links
Our website may contain links to third party websites, applications, or services that are not operated by us. This policy does not apply to those third parties, and we are not responsible for their privacy practices.
We encourage you to review the privacy policies of any third party you interact with before providing personal information. The inclusion of a link does not imply our endorsement of the linked site or its practices.
15Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, our services, or applicable law. When we make material changes, we will update the Last updated date at the top of this page and, where appropriate, provide a more prominent notice.
We encourage you to review this policy periodically. Your continued use of our website after changes become effective constitutes your acceptance of the updated policy.
16How to Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our handling of personal information, please contact us using the details below. We aim to respond to all privacy-related inquiries in a timely manner.
- Company: IMMENSE OCEAN INVESTMENTS LIMITED
- Address: 27/F CEO TWR, 77 WING HONG ST, Cheung Sha Wan, Hong Kong (HK)
- Email: service@oceanvast.mom
- Phone: +1 814 904 2604
- Website: www.oceanvast.mom