1. Who we are
This website is published by BOS CREATE A LIMITED, a company trading from 9/F AMTEL BLDG, 148 DES VOEUX RD C, Hong Kong (HK). The site and its digital systems are developed and maintained by the developer BosCreate, who builds the page templates, the contact form behaviour and the small scripts that support the reading experience. BosCreate acts on the instruction of BOS CREATE A LIMITED when handling personal data that arrives through this site and does not use that data for any purpose of its own.
BOS CREATE A LIMITED9/F AMTEL BLDG
148 DES VOEUX RD C
Hong Kong (HK)
For privacy matters you may write to contact@boscreate.autos or call +17757437207 during office hours. Please read this policy together with our Terms of Service, which describes the commercial rules that apply to our fabrication work. This policy is written in plain English on purpose so that a client, a supplier or a visitor can understand it without legal training.
2. Scope of this policy
This policy covers personal data that we collect through this website, through email and telephone contact, through the enquiry form that prepares a message in your own mail application, and through the ordinary running of our fabrication floor. It also covers data that we receive from a client when a project involves named contacts, delivery addresses or installation crews.
This policy does not cover the practices of third parties whose services you may reach from this site, such as a postal service, a payment provider or a courier. Those organisations publish their own policies, and we encourage you to read them before you share information with them. This policy also does not apply to job applicants who send material for a role that we have advertised separately, although the same principles of fairness and minimisation apply to that material.
3. Information we collect
We collect a limited amount of information, and we try to collect only what is needed for a clear business reason. The categories below describe what we may hold at any point during a working relationship.
Contact details
Your name, email address, telephone number, company name and the role you hold at that company. Where a project is delivered to a site, we may also hold a delivery address and the name of the person who will receive a crate.
Enquiry content
The subject line and message that you send through the contact form or by direct email, together with any drawing, photograph, dimension sheet or sample note that you attach. If you describe an event date, a site constraint or an access route, that description forms part of the enquiry record.
Project records
Measured drawings, cutting lists, finish specifications, test assembly notes, photographs taken on the floor, snag lists, handover notes and the correspondence that surrounds them. These records usually identify a company rather than an individual, but they often carry the name of the person who approved a drawing or signed a handover.
Technical information
When you open a page, the web server that delivers it may record the date and time of the request, the page requested, the browser type, the operating system family and a shortened network address for security purposes. We do not build advertising profiles from this information, and we do not use it to track you across other sites.
Payment and billing details
For commercial jobs we hold the billing name, the invoice reference, the purchase order number and the payment status. We do not store full card numbers on this website. Where a card payment is required, it is handled by a regulated payment provider and we receive only a confirmation and a reference.
Visitor messages
If you telephone the floor, the team may keep a short written note of the call so that the enquiry is not lost and so that a colleague can pick it up. If you write in by post, the letter is kept with the job file for the period described in this policy.
4. How we collect information
Most information reaches us directly from you, either when you send an enquiry, when you approve a drawing, when you call the floor or when you visit the workshop. Some information is generated by our own records as the work progresses, such as a photograph of a test assembly or a note recorded at the bench.
We also receive information from a client when that client introduces a colleague, a site manager or a courier who will be involved in a delivery. In that situation we ask the client to make sure the named person knows that their contact details have been passed to us, and we treat the details in the same way as details sent to us directly.
The contact form on this site is deliberately lightweight. It does not send your message to a server on our behalf. Instead it prepares an email in your own mail application, which you may review and send or discard. This means the message does not leave your device until you choose to send it.
5. Why we use information
We use information to answer enquiries, prepare measured quotations, schedule bays on the fabrication floor, order materials, coordinate installation days, complete handover notes and keep the commercial records that a company must keep. We also use information to improve the clarity of this website, to protect our systems and to meet our legal and accounting obligations.
We do not sell personal data. We do not rent contact lists. We do not use the enquiry form to build a marketing database that is separate from our working relationships. If we ever wish to send you a seasonal note about the floor, we will ask first and give you a simple way to decline.
Specific purposes
- Responding to a question about set piece fabrication, signage, installation days, studio rentals, kiln work or billboard row displays.
- Preparing a quotation with materials, lead times and a delivery plan.
- Coordinating a site visit, a delivery slot or an installation crew.
- Keeping a project record so that a replacement part can be reproduced later.
- Issuing invoices and maintaining statutory accounting records.
- Handling a complaint, a warranty question or an insurance claim.
- Protecting the website and the workshop against misuse or fraudulent requests.
6. Lawful bases for processing
Where data protection law requires a lawful basis, we rely on one or more of the following. First, the processing is necessary to take steps at your request before entering a contract, or to perform a contract that we have with you or your employer. Second, the processing is necessary for our legitimate interests in running a fabrication business, provided those interests are not overridden by your rights and freedoms. Third, the processing is necessary to comply with a legal obligation, such as tax and accounting rules. Fourth, in limited situations, you have given clear consent, for example when you agree to receive a periodic note about the floor.
Where we rely on legitimate interests, we consider the nature of the information, the reasonable expectations of the person concerned and the effect the processing has on them. We keep the reasoning short and written, and we review it when a new kind of project changes the way we work. Where we rely on consent, you may withdraw it at any time and we will stop the related activity without asking for a reason.
7. Project and fabrication records
The fabrication floor depends on records. A measured drawing allows a sign to be repeated. A finish record allows a glaze to be matched. A test assembly photograph allows an installation crew to see how a set piece is meant to sit. These records may include the name of the person who approved them, and we keep them because they are the working memory of the bench.
Floor photographs are taken to document progress and quality. We try to frame them around the work rather than around people. If a person appears clearly in a photograph and we wish to use that photograph on this website or in a portfolio, we will ask for permission first. Photographs that identify an individual and are not needed for the project record are deleted during routine housekeeping.
Kiln logs and finish trials are kept as technical records. They contain temperatures, times, recipes and batch numbers and rarely contain personal data. Where a trial note carries the name of the client who requested it, the name is treated as part of the project record and follows the retention rules set out later in this policy.
8. Site visits and floor visits
When you visit the workshop at 9/F AMTEL BLDG we may ask you to sign a visitors book. The book records your name, your company, the time you arrived and the person you came to see. This is a safety measure: if the floor is evacuated, the book tells the team who should be accounted for. The book is kept for a short period and then destroyed.
A floor visit often involves a conversation at the bench in front of drawings or samples. We may take a note of that conversation so that decisions made in person are not lost. You will always be told when a note is being taken, and you may ask to see the note before it is filed.
Where a site survey is carried out at your premises, the surveyor will record dimensions, access routes and photographs of the area that will carry the work. We try to avoid capturing people in survey photographs and we do not record personal belongings or documents that are not relevant to the installation.
11. International transfers
BOS CREATE A LIMITED is based in Hong Kong, and most of our records stay in Hong Kong. Some of the services that support this website, such as hosting or email delivery, may store data in another jurisdiction. When that happens we take reasonable steps to ensure that the information receives a level of protection consistent with this policy.
If a project involves an overseas venue, information about that project, including the contact details of the venue team, may be shared with the parties who need it to complete the installation. We share the minimum needed for the task and we do not send a full project file when a simple contact sheet will do.
If you would like to know whether a particular transfer affects your information, write to contact@boscreate.autos and we will explain the route that the information takes.
12. How long we keep information
We keep information only as long as we need it. The periods below are the usual practice of the floor. A shorter period may apply where a request is resolved immediately, and a longer period may apply where a dispute or a legal obligation requires it.
- Enquiries that do not become a job: up to twelve months, then deleted.
- Quotations that are not accepted: up to eighteen months, so that a later repeat can be priced accurately.
- Project records and drawings: up to seven years after the last delivery, so that a replacement can be made.
- Invoice and accounting records: the period required by Hong Kong tax and company law.
- Visitors book entries: three months, unless an incident requires a longer record.
- Floor photographs used for documentation: up to three years, or longer if they form part of a retained record.
When a retention period ends, the record is deleted or securely destroyed. If a record is embedded in a backup, it is removed when the backup is next rotated, and the backup itself is protected for the whole of its short life.
13. How we protect information
The workshop is a physical place as well as a digital one, so security covers both. Paper drawings are kept in a locked plan chest. The visitors book sits at the entrance and is collected each evening. Devices that hold project files require a login, and the shared floor terminal is locked when it is not in use.
On the digital side, we use access controls so that a person can reach only the records needed for the role. We keep software reasonably current, we avoid sending sensitive material by open message, and we encourage the use of a password manager. Where information moves between the office and the floor, it moves over an encrypted connection.
No system is perfect. If we become aware of a breach that creates a risk to the rights of a person whose data we hold, we will investigate, contain the issue and notify the affected person and the relevant authority where the law requires it. We will also explain, in plain language, what happened and what we have changed.
14. Your privacy rights
Subject to the law that applies to you, you may ask to see the personal data we hold about you, ask us to correct an error, ask us to delete data that we no longer need, ask us to restrict or object to a particular use, or ask for a copy of data in a portable format. You may also withdraw a consent that you have given.
To make a request, write to contact@boscreate.autos with enough detail for us to find the record, such as your name, your company and the approximate date of contact. We may ask for proof of identity before we release information, because we do not want to hand a project file to the wrong person. We aim to reply within thirty days and we will tell you if a request needs more time.
If you are not satisfied with our response, you may raise the matter with the privacy authority in your jurisdiction. We would prefer the chance to resolve it with you first, and we will cooperate with any regulator that reviews a complaint.
15. Privacy for children
This website is intended for business clients and adult visitors. We do not knowingly collect personal data from a child, and we do not design any feature to attract a child. If a school project or a family event brings a child to the floor, the child remains the responsibility of the accompanying adult and we do not record the child in our project files.
If you believe that a child has sent personal data to us through this site, please write to contact@boscreate.autos and we will delete the material promptly. We will not ask a child to explain the situation or to provide further information.
16. Marketing choices
We do not run a newsletter that is filled from the contact form. If we begin to send an occasional note about the floor, the note will go only to people who have asked for it, and every note will carry a simple way to stop. A request to stop will be honoured promptly and will not affect the handling of a project that is already under way.
We may mention a completed project in a portfolio on this site without naming the person who commissioned it. If a client would prefer that a project not be shown at all, a short written note to contact@boscreate.autos is enough and we will remove the images from the working portfolio.
17. Third party sites and links
This site may link to a map service, a courier tracking page or a client site. Those destinations are outside our control. When you follow a link, the destination may set its own cookies and may collect information under its own policy. We do not receive a copy of what you do there.
If you reach a page that asks for payment details on our behalf and you are unsure whether it is genuine, stop and call the floor on +17757437207. Payment for a project is arranged through a regulated provider, and we are always willing to confirm the route before you enter any information.
18. Automated decisions
We do not make decisions about you by automated means that produce a legal or similarly significant effect. A quotation is prepared by a person who has read the drawing. A delivery slot is agreed with a person who knows the route. A project is accepted or declined by a member of the team, not by a scoring engine.
The small script on this site adjusts how a section appears as you scroll. That has nothing to do with a decision about you. It is a presentation detail that can be disabled in your browser, and the content remains readable when it is disabled.
19. Data incidents
We treat a data incident as a workshop event: something that must be logged, contained and explained. When we become aware of a possible incident, the first step is to stop the loss, whether that means changing a password, recovering a file or retrieving a misdirected email. The second step is to work out whose information is affected and what harm could follow. The third step is to notify the people concerned where the risk justifies it.
A written record of each incident is kept so that the same mistake is not repeated. If you believe that your information has been exposed through our site or our floor, please contact us at once on contact@boscreate.autos or +17757437207 so that we can act quickly.
20. Changes to this policy
We review this policy from time to time. When we make a change that matters, we update the date at the top of the page and, where the change affects a current client, we mention it in the next piece of correspondence. We do not quietly alter a retention period or a sharing practice without saying so.
The version published on this page is the version that applies. If you need a copy of an earlier version for a dispute or a tender, write to contact@boscreate.autos with the date you require and we will provide it if we still hold it.
21. How to contact us
Write to contact@boscreate.autos or call +17757437207. The office is open Monday to Friday, 9:00 to 18:00.
You may also send a letter to BOS CREATE A LIMITED, 9/F AMTEL BLDG, 148 DES VOEUX RD C, Hong Kong (HK).
Please mark any privacy request clearly in the subject line so that it reaches the right person without delay. If you are asking on behalf of someone else, tell us who you are and why you are making the request, and we will explain what we need to proceed.
This policy is published in English. If a translation is prepared for a client, the English text remains the reference version. Nothing in this policy limits a right that the law gives you.