Privacy Policy

Last updated: June 27, 2026 · Jurisdiction: Hong Kong SAR · Contact: info@khb.com

1. Introduction

KHB Group ("KHB", "we", "us", "our") operates the website https://khb.hk/ and the Enterprise AI Influence Platform, including GEO Master, VIP Service, AI Board, KAIF™ Methodology, and AI Checkup (collectively, the "Services"). This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and the rights you have over your data.

By accessing or using the Services, you consent to the practices described in this policy. We comply with the Hong Kong Personal Data (Privacy) Ordinance (PDPO) and align with international frameworks including the EU General Data Protection Regulation (GDPR).

2. Data We Collect

2.1 Data you provide

Contact data — name, work email, company, job title, industry, company size, AI focus area, and any message you submit via our contact form.
Advisory data — information shared during discovery calls, workshops, and ongoing advisory engagements, including brand positioning, target AI models, and AI visibility objectives.
Account data — email, password (hashed), role, and tenant configuration if you are granted enterprise access to the platform.

2.2 Data collected automatically

Technical data — IP address, browser type, device type, operating system, referring URL, and pages visited.
Usage data — features used, time on page, click events, and in-product behavior (only for authenticated enterprise users).
Cookies and similar technologies — see Section 6 below.

3. How We Use Your Data

To respond to your inquiry and route you to the appropriate advisor.
To deliver advisory services, AI influence diagnostics, and ongoing account management.
To operate, secure, and improve the Services, including model training for our own AI Board agents (never on personally identifiable advisory content).
To send service updates, security notices, and (with consent) marketing communications — you may opt out at any time.
To comply with legal obligations and protect against fraudulent or abusive activity.

4. Legal Basis for Processing

For users in the European Economic Area, we process personal data under the following GDPR lawful bases:

Contract (Art. 6(1)(b)) — to deliver advisory and platform services you have requested.
Consent (Art. 6(1)(a)) — for marketing communications and optional analytics cookies.
Legitimate interests (Art. 6(1)(f)) — for network security, fraud prevention, and product improvement, balanced against your rights.
Legal obligation (Art. 6(1)(c)) — where disclosure is required by law.

5. Data Sharing and Recipients

We do not sell personal data. We share data only with the following categories of recipients, under written agreements that require equivalent protection:

Cloud infrastructure providers hosting the platform, located in Hong Kong and Singapore.
Subprocessors for email delivery, analytics, and customer support tools (a current list is available on request).
Professional advisors — lawyers, auditors, and tax advisors where necessary.
Regulators and law enforcement — where compelled by law.

We do not transfer personal data outside Hong Kong and Singapore without safeguards such as Standard Contractual Clauses.

6. Cookies and Similar Technologies

We use essential cookies for authentication and security, and optional analytics cookies to understand traffic patterns. Third-party tools we may use include privacy-respecting analytics and session-recording tools. You can manage cookies via the cookie banner presented on first visit or through your browser settings. Disabling non-essential cookies does not affect core service availability.

7. Data Retention

We retain personal data only as long as necessary for the purposes set out above:

Contact form submissions — 24 months from last interaction.
Advisory engagement data — duration of engagement plus 7 years for audit and contractual record.
Account data — until account closure, then 90-day soft deletion window, followed by hard deletion.
Technical logs — 90 days, then aggregated and anonymized.

8. Your Rights

Depending on your jurisdiction, you may have the following rights:

Access — request a copy of the personal data we hold about you.
Rectification — correct inaccurate or incomplete data.
Erasure — request deletion, subject to lawful retention obligations.
Restriction — limit processing in certain circumstances.
Portability — receive your data in a structured, machine-readable format.
Objection — object to processing based on legitimate interests or for direct marketing.
Withdraw consent — at any time, without affecting prior lawful processing.

To exercise any right, email info@khb.com. We respond within 30 days. If you are dissatisfied, you may lodge a complaint with the Hong Kong Privacy Commissioner for Personal Data or your local data protection authority.

9. Security

We apply industry-standard safeguards including TLS encryption in transit, AES-256 encryption at rest, role-based access control, least-privilege provisioning, MFA for administrative accounts, and continuous monitoring. Despite these measures, no system can be guaranteed 100% secure. We will notify affected users and regulators of any personal data breach as required by law within 72 hours of confirmation.

10. International Transfers

Where personal data is transferred outside Hong Kong, we rely on adequacy decisions or appropriate safeguards such as Standard Contractual Clauses. A list of countries to which data may be transferred is available on request.

11. Children's Privacy

The Services are intended for business and professional use. We do not knowingly collect data from individuals under 18. If you believe we have collected data from a minor, please contact us and we will delete it.

12. Changes to This Policy

We may update this policy to reflect changes in our practices or legal requirements. Material changes will be announced on our website and via email to active enterprise users at least 30 days before taking effect.

13. Contact

For privacy questions, data subject requests, or to exercise any right under this policy, contact our Data Protection Officer at info@khb.com or write to: KHB Group, Hong Kong SAR.

See also: Terms of Service · Disclaimer