Privacy Policy
Last updated: 08.22.2025
Message, we registered in Hong Kong, is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website https://jetmessage.site/ and services.
1. Information We Collect
We may collect the following categories of personal data:
Contact Information: name, email address, phone number.
Payment Information: billing address, payment method (processed securely via third-party providers).
Technical Information: IP address, browser type, operating system, device identifiers, cookies, and similar technologies.
Usage Information: how you use our website and services (e.g., pages visited, features used).
Marketing Preferences: your choices about receiving marketing communications.
2. Statement of Purposes (PDPO — Hong Kong)
When we collect your data, we specify the purpose:
Email address — used for account setup, customer support, and communication.
Payment data — used only for processing payments and complying with tax/legal obligations.
Cookies/technical data — used to improve website performance and analytics.
You may request access to or correction of your personal data by contacting us at anastasiaf.message@gmail.com.
3. How We Use Your Information
We use personal data for:
Providing and improving our services.
Processing transactions and issuing invoices.
Responding to inquiries and support requests.
Sending marketing communications (with your prior consent, where required).
Complying with legal and regulatory requirements.
4. Enforcement, Liability, and Risk Mitigation
One of the main challenges with privacy and cookie policies is that enforcement varies across jurisdictions, and regulators are increasingly proactive in monitoring compliance. Here are the key considerations:
Regulatory fines and liability: Under the GDPR, fines can reach up to €20 million or 4% of global annual turnover, whichever is higher. Other regimes, such as CCPA/CPRA in California, LGPD in Brazil, and PDPO in Hong Kong, also impose significant financial penalties. In addition, private lawsuits and class actions are increasingly common, especially in the U.S.
Cross-border enforcement: Even if your company is incorporated in Hong Kong, regulators in the EU or California can still exercise jurisdiction if you collect or process the data of their residents. This means your policies and practices must be defensible across multiple legal systems, not just under Hong Kong law.
Practical risks: Beyond regulatory penalties, reputational damage is a major risk. Clients in the luxury and high-net-worth sectors place strong emphasis on privacy and discretion. Any perceived weakness in your privacy stance could undermine trust.
Risk mitigation strategies:
1. Ensure your policies are not only compliant on paper but also reflected in actual business practices (e.g., technical safeguards, consent tracking, data minimization).
2. Include clear disclaimers and limitation of liability clauses in your policies, to the extent permitted by applicable law.
3. Consider offering data subject rights request mechanisms (for access, deletion, portability) proactively, even if not strictly required in all jurisdictions, to reduce exposure to enforcement actions.
4. Regularly update your policies to reflect changes in law and industry best practices — ideally, conduct a review at least once per year.
