Effective date: 1 January 2026
This privacy policy explains how personal information is collected, used, stored and protected whenever someone visits the website located at https://www.zungsing.buzz, sends an enquiry through that website, or contacts the engineering team by email, telephone or letter. It applies to the data of prospective clients, existing clients, site owners, consultants, individual tenants and any other person who shares information with us.
We aim to be plain and honest. This document is written to be read by an ordinary member of the public, not only by lawyers. We describe the categories of data involved, the reasons we hold them and the choices available to the people concerned. We encourage you to read the whole policy once and then to keep it alongside any future messages we send about your personal data.
Nothing in this policy reduces the protections you enjoy under the applicable data protection law of the jurisdiction in which a service is delivered. Where a stricter rule applies, that stricter rule governs our handling of your information.
The engineering services described on this website are developed and operated by the developer ZungSing, working alongside and on behalf of the engineering firm named below. That firm, Zung Sing Engineering Limited, responsible for the design, installation, supervision and inspection works, is the principal data controller for the personal data collected for those services, and this policy describes how it looks after that data.
Our company is named Zung Sing Engineering Limited. We are established and active in the Hong Kong Special Administrative Region, and our principal place of business is Rm 1818, 18/F, Lei Ye House, Lei Yue Mun Estate, Yau Tong, Hong Kong (HK). This address is also the registered location we use for correspondence, statutory notifications and the records that support our privacy obligations.
Any reference in this policy to us, our company, the firm or the engineering team means Zung Sing Engineering Limited together with the staff and subcontractors who act on our behalf under written agreement. The website builder and day to day operator of the public pages is the developer known as ZungSing, who keeps the site available, maintains its security and answers technical questions from the staff address listed at the end of this document.
We collect only the information that is reasonably needed to answer an enquiry, to prepare a quotation, to deliver engineering works or to meet a legal duty. We never collect data for its own sake. The main categories are described here.
The first category is information you give us directly. When you complete the contact form on our website we receive the name you enter, the email address you supply, the subject you choose and the text of your message. When you telephone our number +12232652369, we may record your name and the reason for your call. When you send a letter or an email to support@zungsing.buzz, we store the content of your message and your contact details in our correspondence folder.
The second category is information collected automatically as you browse. Our hosting service records technical details such as your internet protocol address, the type of browser and operating system you use, the approximate time of your visit and the pages you open. These records support security, help us diagnose faults and give us a general sense of how many people read each page. They do not tell us who you are.
The third category relates to engineering projects. For a client or a building owner we may hold site addresses, drawings, floor plans, maintenance schedules, test certificates, contract documents and the contact details of the duty holders. For a consultant or a subcontractor we may hold professional credentials, invoices and reference notes. This category is gathered under a separate contract and is described more fully in the agreement we sign for each commission.
We use the information you give us for a limited set of purposes that are closely connected to our engineering work. Each use is listed so that you can see why a particular detail was gathered.
First, we respond to enquiries. If you ask about HVAC, electrical, plumbing, fire services, site supervision or maintenance, we read your message and reply with a scope, a method or a fee proposal. Your name and email address make that reply possible.
Second, we deliver the services we agree to provide. This includes visiting a site, reading drawings, coordinating subcontractors, witnessing tests, preparing certificates and handing over as-built records. Most of the engineering data involved belongs to the building or its owner rather than to you as a private individual.
Third, we manage our own records and accounting. We keep invoices, payment histories and correspondence so that both parties can see what was agreed and what was delivered. We also use project data to improve our own working methods and to train our engineers.
Fourth, we comply with the law. Where a regulation obliges us to keep a record or to report a matter, we keep and report as required. Examples include safety records, statutory inspection records and tax documents.
We do not sell your personal information to any third party, and we do not use your data for advertising that follows you across other websites.
Where the law requires us to name the ground on which we process personal data, we rely on the grounds set out in this section. They are stated in general terms because the precise rule can vary from one jurisdiction to another and from one data subject to another.
The first basis is consent. When you send us an enquiry through the website, we treat your voluntary submission as clear consent to receive a reply from our team. You may withdraw that consent at any time by writing to the address in the contact section.
The second basis is the performance of a contract. Where we agree to carry out engineering works, supervision or maintenance, we process the data needed to perform that agreement. This covers names of duty holders, site details and the technical records that fall within the contract.
The third basis is a legitimate interest. We hold a small amount of website and security data because keeping our pages online and free of abuse serves both our interest and the public interest. We balance this against your privacy and keep the data minimal so that the balance remains in our favour.
The fourth basis is a legal obligation. Certain records, especially those concerning fire safety and electrical testing, are kept because the law says they must be kept. In those cases we may not be able to delete the record on request, because deleting it would themselves break the law.
Our website and our engineering services are directed at building owners, developers, facility managers and professional adults. They are not aimed at children, and we do not knowingly collect personal information from a child without the involvement and consent of a parent or guardian.
If a child sends us a message, for example as part of a school project about buildings, we reply to the enquiry and then hold no more data than the brief correspondence requires. We delete any such exchange once the question is answered unless a parent later asks us about works on their own property.
A parent or guardian who believes that their child has shared personal details with us without permission should contact us using the details at the end of this policy. We will remove the information promptly and confirm in writing that the removal has been carried out.
We apply reasonable technical and organisational measures so that the personal data in our care stays accurate, available to the right people and out of the reach of those who have no reason to see it.
Our website is served over a secure connection so that messages travel between your browser and our server in an encrypted form. Our office machines are protected by passwords and access is limited to the engineers and administrators who need it for their work. Email and documents about projects are kept inside our systems rather than on public file stores.
We train our people to treat personal data with care, to lock screens when they step away and to challenge unusual requests for information. Subcontractors who touch your data accept equivalent duties in their agreements with us.
No method of transmission over the internet and no method of electronic storage is completely secure in every respect. We therefore cannot promise absolute protection, but we act quickly to limit any harm should a breach occur and we notify you and the relevant authority where the law requires.
We keep personal data only for as long as it serves a legitimate stated purpose or as long as the law requires. After that time the data is deleted or put beyond ordinary use.
Contact enquiries and their replies are normally kept for a period of thirty-six months so that, if a conversation resumes, both sides can recall the context. Website server logs are kept for a shorter period, typically no more than thirteen months, purely for security and fault diagnosis.
Engineering records that belong to a building, such as test certificates and as-fitted drawings, are kept for the period set by the relevant regulation, because the duty holder needs them for inspections and future maintenance. Financial and tax records are kept for the number of years that the tax authority requires.
When a retention period ends, deletion is carried out in a way that cannot be casually reversed on our ordinary systems. We do not sell retired data or add it to any marketing database.
Depending on where you live and on the nature of the data, you may have some or all of the rights described in this section. We honour them on request at no cost and confirm what we have done within the time the law allows.
The first right is access. You may ask for a copy of the personal data we hold about you and for a description of how we use it. We will supply that copy in a readable format.
The second right is correction. If a detail we hold is wrong, for example a misspelt name or an outdated email address, you may ask us to put it right without unreasonable delay.
The third right is erasure, sometimes called the right to be forgotten. Where no contract and no legal obligation require us to keep the data, you may ask us to delete it and to stop using it. If a legal duty blocks deletion, we will tell you why.
The fourth right is restriction and objection. You may ask us to pause the use of your data while a dispute is resolved, or to stop using data that we process on a legitimate interest where your objection outweighs our interest.
The fifth right is portability. Where you gave consent and the data is processed by automated means, you may ask for a structured copy that could be moved to another firm.
The sixth right is to complain. If you believe our handling of your data falls short, you may complain to the supervisory authority in your region. We ask that you first give us a chance to respond, but you are never obliged to raise the matter with us before contacting a regulator.
Because engineering clients and site owners may connect from many countries, and because our hosting and email services operate across secure data centres, a small amount of data may travel outside the region where you are located. This section explains how we keep that travel safe.
When we transfer your data to a country that the originating law does not recognise as providing an adequate level of protection, we rely on safeguards that the law accepts, such as standard contractual clauses or equivalent instruments agreed between the sender and the receiver.
Our aim is that your information receives, wherever it goes, a level of protection equivalent to the level it receives at home. Should you want to know which transfer tool applies to data about you, we will name it on request.
From time to time our pages or our correspondence may contain a link to another website, for example to a standards body, a regulator or a professional partner. When you leave our site and follow such a link, you come under the privacy practice of that other website.
We do not control the content or the data handling of external sites, and this policy no longer applies the moment you are no longer on a page we publish. We encourage you to read the policy on any third party site before you share personal information with it.
We review this policy from time to time so that it stays correct as our site, our services and the law develop. The date printed at the top of this page shows when the current version became effective.
When we make a change that affects how your data may be used, we update the policy and note the change clearly. Important changes are not made by quietly editing a single word in the middle of a long paragraph; we draw attention to them on the homepage for a reasonable period.
You are welcome to revisit this page whenever you send us fresh information. Continued use of the website after a revised policy appears is taken as acceptance of the updated terms in respect of data collected from that point onward.
If you have a question about this policy, wish to exercise a right, or believe there has been a lapse in the way we look after your information, the fastest route is a message to our support inbox.
Our postal and registered address is Zung Sing Engineering Limited, Rm 1818, 18/F, Lei Ye House, Lei Yue Mun Estate, Yau Tong, Hong Kong (HK). Our email address is support@zungsing.buzz and our telephone number is +12232652369.
When you write about data protection, please tell us your name, the address or email you believe we hold, and the nature of your request, so that we can find the relevant records and answer you accurately. We will reply without unreasonable delay and normally within thirty days.
This privacy policy is offered for your information. Read it alongside our terms of service, and return to our homepage to explore the services we describe throughout this site.