top of page

Privacy Policy

WeExpand (collectively, “we,” “our,” “WeExpand”) provides Agentic AI and automation solutions designed to help businesses scale across Hong Kong, South East Asia, and the Greater Bay Area. Our core offerings, referred to as the “Services,” include AI agents for autonomous research, smart lead generation, prospect qualification and engagement, and AI-driven Robotic Process Automation (RPA) for repetitive back-office tasks like data entry and CRM updates. We also provide competitive and market intelligence, leveraging big data to facilitate detailed Know Your Customer (KYC) analysis and industry assessments.

 

We are committed to protecting the privacy of individuals whose data we handle. This Privacy Policy (“Privacy Policy”) explains how we collect, use, and manage Personal Data, and outlines the rights individuals have, particularly under the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong (“PDPO”).

 

We use the term “Personal Data” throughout this document, consistent with the definition in the PDPO, to refer to any data relating directly or indirectly to a living individual, from which it is practicable for the identity of the individual to be directly or indirectly ascertained, and in a form in which access to or processing of the data is practicable.

 

In addition to Personal Data used in our Services, we operate corporate websites and engage in business-to-business communications. We address the Personal Data collected and used for these corporate and business purposes (such as information we use to communicate with our customers and potential customers) in Section 6 of this Privacy Policy.

 

1. Personal Data That We Collect and Use in Our Services

 

To deliver our Services, we receive data, including Personal Data, from various sources, such as public registries, commercial data compilers, third-party data providers, and business networking platforms. We refer to the information we collect and process throughout this Privacy Policy as “Information” or “Personal Data.” We primarily focus on collecting “business intelligence” data associated with professional roles; however, Personal Data used for personal purposes may also be collected.

 

The Personal Data we use to provide our Services includes:

  • Identifiers and Contact Details: First/last name, professional email address, personal or professional telephone number, and postal address.

  • Professional Information: Job title, employment history, company name, organizational affiliations, and related professional information.

  • Technical Data: IP address and a cookie or device identifier that uniquely identifies your browser or device. (Please see Section 5 for more details on these identifiers.)

  • Interaction Data: Usage data related to electronic interactions, such as whether an email is received, opened, or responded to, and related information, as well as whether a domain or email address is active.

  • Website Usage Data (Customer-Related): Data related to website visits, page views, and log-in activity on our customers' platforms, used for retargeting and analytics.

  • Market Intelligence Data: Information and actions associated with consumer interactions, such as success rates of outreach (by phone, email, or other channels), used to infer which types of products may be of interest to a prospect.

  • Inferred Data: Certain Personal Data may be inferred—for instance, connecting identifiers (e.g., phone numbers or email addresses) to the same person, or inferring professional interests (e.g., interest in marketing products) based on professional role.

  • KYC/AML Data: Detailed data points necessary for Know Your Customer (KYC) analysis and industry assessments, leveraged through big data infrastructure.

We may also use aggregated or pooled data regarding customer outreach success rates for benchmarking and data validation services for our customers.

 

2. How We Use the Personal Data

 

WeExpand uses the Personal Data collected for various purposes, aligning with our provision of AI and automation solutions:

 

As Part of Our Services:

  • Agentic AI and Lead Generation Services: We license or otherwise provide Personal Data as part of smart lead generation and prospect qualification to our customers (including businesses, non-profits, recruiters, and marketing platforms). This service helps customers target and engage prospects who are most likely to be interested in specific goods or services.

  • Know Your Customer (KYC) and Industry Assessments: We process Personal Data to perform detailed KYC analysis and industry assessments for our customers as part of our Services, leveraging big data platforms.

  • Automation and Outreach: We use Personal Data to support AI agents that autonomously research, qualify, and manage personalized outreach and follow-ups on behalf of our customers.

  • Retargeting and Digital Marketing: Our Services may assist customers in sending targeted communications to individuals who visited their websites by cross-referencing identifiers such as cookie identifiers and email addresses.

  • Robotic Process Automation (RPA): We process Personal Data to support AI-driven RPA solutions that handle back-office tasks like data entry and updates to customer databases (e.g., CRM systems).

  • Audience Segments: We create groups of individuals based on common professional interests or characteristics (e.g., “Greater Bay Area Executives”). These “Audience Segments” may be licensed to clients for targeted marketing campaigns, often linked to other identifiers for cross-channel advertising.

To Operate Our Business and Services:

  • We use Personal Data for internal purposes, such as to improve, test, update, and verify our databases; develop new products; and operate, analyze, improve, and secure our Services and IT infrastructure.

  • De-identified and Aggregated Data: We may create aggregated, de-identified, and/or anonymized data from Personal Data we collect for internal research and development, such as evaluating new products. We process this data by removing personal identifiers and may use and share this aggregated data with third parties for lawful business purposes, including analysis and promotion of our business, without attempting to re-identify the data.

 

3. How We Share Information with Third Parties, including Service Providers

 

WeExpand may share Personal Data with customers, marketing platforms, and service providers to facilitate the Services. This includes sharing in the following ways:

  • With Our Customers: We license Personal Data to our customers, partners, and resellers who use it for their marketing, outreach, KYC, and lead generation activities, particularly within the Hong Kong, South East Asia, and Greater Bay Area markets. We may also share data with our customers’ service providers (e.g., print mailing or email campaign providers).

  • With Our Partners: We share Personal Data and Audience Segments with business and data partners to provide tailored marketing, advertising, and communications, or for analytical purposes (e.g., measuring campaign performance, data handling).

  • With Our Service Providers (Data Processors): We share Personal Data with a range of service providers to operate, protect, and maintain our Services and websites, including tech, hosting, customer support, marketing, data validation, security, and payment vendors.

  • Corporate Transfers: In the event of a merger, acquisition, or sale of significant assets involving WeExpand, Personal Data in our possession may be transferred to the new entity and shared during the due diligence process.

  • Affiliates and Subsidiaries: WeExpand may share Personal Data with any affiliated or subsidiary companies.

  • As Required by Law or to Protect Persons/Entities: We may disclose Personal Data if we believe in good faith that disclosure is necessary to (a) comply with relevant Hong Kong or international laws, or to respond to a subpoena, warrant, or court order; or (b) to protect or defend the rights, property, or safety of WeExpand, our customers, or any other person or entity.

 

4. Your Marketing and Opt-Out Choices (In alignment with Hong Kong PDPO)

 

The Hong Kong Personal Data (Privacy) Ordinance (PDPO) grants individuals the right to opt-out of the use of their Personal Data for direct marketing. You have several ways to control how your Personal Data is used for marketing:

  • Opt-Out from Database: You may request to have your Personal Data removed from our active marketing databases by visiting our dedicated opt-out page [Placeholder: Insert WeExpand Opt-Out Page URL Here]. We will endeavor to remove your Personal Data from our active marketing databases within a commercially reasonable timeframe, in compliance with PDPO and other applicable laws. We may require you to verify the information you submit (e.g., via a verified email response).

  • Opt-Out of Retargeting Services: To opt out of our Retargeting Services described in Section 2, you must follow the instructions on our opt-out page regarding cookies and personal identifiers. As this process is cookie-based, you must opt out from each browser you use, and if you clear your browser cookies, you will need to opt out again.

  • Corporate Email Unsubscribe: If we send you marketing emails in our corporate capacity (e.g., about our Services to existing or prospective customers), you may “unsubscribe” using the link provided in the email.

 

5. Cookies and Similar Technologies

 

Cookies and How We Use Them

 

WeExpand and its business partners use certain industry-standard technologies, including cookies, pixel tags, and similar technologies. We, our service providers, and partners may use these technologies on our websites or in connection with our Services.

 

We may work with third parties to enhance our services (e.g., for ad tailoring or cookie placement) or to provide marketers access to our Personal Data, often in a hashed format. These partners may set and access their own cookies and similar technologies on your browser, collecting information about your browsing activities.

  • Cookies: Small data files stored on your device that identify your browser or device.

  • Pixel Tags (Web Beacons): Invisible 1x1 pixels placed on web pages that generate a generic notice of a visit, allowing partners or us to read deployed cookies.

We use these technologies to "remember" you, analyze visitor patterns and trends, collect data on activities on client sites, and interact with advertising to provide relevant content and match your interests.

 

Disabling Cookies

 

Most web browsers accept cookies by default. You can adjust your browser settings to warn you before accepting cookies or to refuse them entirely. Disabling cookies may affect the functionality and usability of our websites and Services. For more information on controlling cookies and other tracking technologies, please consult your browser’s settings or our [Placeholder: Insert WeExpand Cookie Notice Link].

 

6. Data Collected Through Our Corporate Website and in our Corporate Capacity

 

Information Collected

 

WeExpand collects Personal Data from users of our website(s) and through other business operations:

  • Website Data: Domain name, IP address, user agent, time stamp, information on pages visited, and interaction with content (e.g., time spent on a blog post).

  • User-Provided Contact Information: Personal Data you provide when signing up for webinars, events, newsletters, or requesting information, including mailing and email addresses.

  • Offline Data: Information collected during business activities such as trade shows, phone calls, or webinars (e.g., business cards).

  • Customer Interaction Data: For our existing customers, we may record interaction with our service platforms, what tools are used, and what information is provided or received. This data may be combined or tracked based on your account information or cookie identifiers.

How WeExpand Uses This Personal Data

 

We use the Personal Data collected through our corporate channels to:

  • Create and manage your user account.

  • Provide Services you have requested.

  • Respond to inquiries and communicate with you (including service updates).

  • Market our products and services to you, including “retargeting” you with communications across the Internet or through email.

  • Send you offers for products and services from partner brands that we believe may interest you.

  • Perform data analysis and market research.

  • Combine the collected Personal Data with other information from third parties or publicly available sources to improve the relevance and effectiveness of our products and advertisements.

  • Use IP addresses to diagnose server issues, administer websites, and gather demographic information.

  • Use clickstream data to analyze visitor navigation and tailor our websites.

  • Ensure compliance with our legal obligations, policies, and terms and conditions.

  • Service Enrollment: If you enroll in a specific Service (e.g., a lead-generation service), we may collect and share your Personal Data (such as name, email, and contact information) with other subscribers or enterprise customers. User-generated content (e.g., website comments) may also be publicly displayed with your name.

 

How WeExpand Shares This Personal Data

 

We may share or otherwise disclose the Personal Data collected through our corporate capacity as follows:

  • With Service Providers: To assist in delivering the services we provide, including tech support, marketing, data validation, security, and payment vendors.

  • For Marketing: To communicate with you and market our services through email, direct mail, or display media.

  • Legal Compliance: We will disclose Personal Data if required by law, regulation, government authority, or court order to protect the rights, safety, or property of ourselves or any person or entity, or to cooperate with law enforcement in an official investigation (in compliance with Hong Kong commercial law).

  • Corporate Transactions: If WeExpand is purchased, merged, or undergoes a substantial asset sale, Personal Data will likely be transferred to the successor entity.

  • Cookie-based Marketing: Our websites use cookies and similar technologies for internal purposes and marketing, including retargeting ads.

 

7. Privacy Rights under Hong Kong Law (Personal Data (Privacy) Ordinance - PDPO)

 

If you are an individual whose Personal Data we process, you have certain rights under the Hong Kong Personal Data (Privacy) Ordinance (Cap. 486). Specifically, you have:

  • The Right to Access Personal Data (Data Access Request): You have the right to request access to your own Personal Data held by us. We may charge a reasonable fee for complying with a data access request.

  • The Right to Correct Personal Data (Data Correction Request): If you believe your Personal Data held by us is inaccurate, you have the right to request its correction.

  • The Right to Opt Out of Direct Marketing: You have the right to request that we cease using your Personal Data for direct marketing purposes (as detailed in Section 4).

 

How to Exercise Your PDPO Rights:

  • Data Access or Correction Requests: To exercise your right to access or correct your Personal Data, please submit your request through our designated portal: [Placeholder: Insert WeExpand Privacy Request Manager Link] or contact us using the details in Section 15.

  • Verification: For security and verification purposes, and as required by law, we will take reasonable steps to verify your identity before fulfilling any request for access, correction, or deletion. This may involve confirming your name and email address or other identifiers in our database. If we cannot verify your identity, we may be unable to respond to your request.

  • Retention: We may retain Personal Data for certain necessary purposes, such as complying with legal obligations, protecting against fraudulent activity, or for our own internal purposes reasonably related to your relationship with us, in alignment with the PDPO data retention principles.

 

8. Links

​

Our website may contain links to other websites that we believe may be of interest. WeExpand is not responsible for the privacy practices, policies, or content of these external sites or companies.

 

9. Security and Data Integrity

 

WeExpand implements measures designed to help ensure that the Personal Data we possess is housed and transmitted securely. This includes various types of physical and electronic security, such as firewall protections, encryption, hashing or truncation of data, and access controls to Personal Data. However, you should be aware that no platform can guarantee 100 percent safety from hacks or illegal intrusion.

 

10. Changes to this Privacy Policy

 

We may update this Privacy Policy periodically. Any changes will become effective when the revised policy is posted to our website. Please check back regularly to review any changes to this Privacy Policy.

 

11. Storage and Transfer of Personal Data (Hong Kong Focus)

 

We generally store and process Personal Data in Hong Kong or in data centers within the Greater Bay Area or South East Asia to support our regional operations.

 

If you are accessing our website or communicating with us from outside Hong Kong, your Personal Data may be transferred to and processed in Hong Kong. Any cross-border transfer of Personal Data is handled in compliance with the PDPO, which requires that we take all reasonably practicable steps to ensure that the Personal Data is protected against unauthorized access, processing, or use, and to ensure that the receiving jurisdiction has data protection laws substantially similar to or offering the same level of protection as the PDPO, or that we obtain your prescribed consent.

 

12. When We Act as a “Data Processor”

 

In certain instances, we act as a “Data Processor” (or “Service Provider”) when we receive and process our customers’ own proprietary Personal Data, such as their customer lists, to perform Services (e.g., RPA or data validation) for them under a contract.

 

For these processing activities, our obligations regarding the data are governed by our contract with that enterprise customer, who acts as the “Data User” (or “Data Controller”). This Privacy Policy does not apply to Personal Data we process solely on behalf of our customers. If you have questions or requests regarding your Personal Data that we process at the direction of and on behalf of a customer, please direct your inquiry to that enterprise customer.

 

13. Personal Data Retention

 

We retain Personal Data in our commercial database for as long as it is necessary to fulfill the purposes for which it was collected, or as required by applicable Hong Kong commercial law and regulatory requirements.

 

To determine the appropriate retention period, we consider factors such as the nature and sensitivity of the Personal Data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process the data, and any relevant legal, accounting, or reporting requirements (e.g., related to KYC/AML obligations).

 

When Personal Data is no longer required, we will either delete it, anonymize it, or isolate it from further processing.

 

14. Legal Basis for Processing Personal Data (Hong Kong PDPO Context)

 

In the context of Hong Kong law, we process Personal Data in accordance with the data protection principles outlined in the PDPO. Our processing is based on the following justifications:

  • Contractual Necessity: Where processing is necessary for the performance of a contract to which the data subject is a party (e.g., providing Services to our corporate customers).

  • Legitimate Interests: Where processing is necessary for our legitimate interests (or those of our customers) in carrying out our business activities, provided these interests are not overridden by the fundamental rights and freedoms of the data subject. Examples include:

    • Processing professional contact data to facilitate targeted business-to-business marketing and outreach within the Greater Bay Area.

    • Using technical data for internal auditing, debugging, security, and improving our Services.

    • Processing KYC/AML data for compliance with commercial and legal regulations.

  • Legal Obligation: Where processing is necessary for compliance with a legal obligation to which WeExpand is subject (e.g., reporting requirements or responding to court orders).

  • Prescribed Consent: Where we have obtained the explicit and voluntary consent of the data subject for a specified purpose (e.g., subscribing to a specific newsletter).

 

15. Contact Us

 

If you have questions related to this Privacy Policy, our Services, or our data handling practices under Hong Kong law, please contact us:

 

Privacy Officer

WeExpand

 

Address: [Level 49, Langham Place Office Tower, Hong Kong]

Email: [admin@weexpand.co]

Phone: [+852 65112521]

 

We appreciate your comments and questions regarding WeExpand’s privacy practices and are committed to addressing your concerns.

 

Last updated: [April 1, 2026]

bottom of page