Privacy Policy

Definitions

• “Dojostack” means Dojostack Limited incorporated in Hong Kong and its subsidiaries;
• “Hong Kong” means Hong Kong SAR of PRC;
• “Ordinance” means the Personal Data (Privacy) Ordinance Cap. 486;
• “PICS” means our Personal Information Collection Statement, provided on our websites;
• “PRC” means People’s Republic of China;
• “You/you” means the user of the Websites and Services or the entity authorising you as a user (where applicable);
• “We/we” and “Us/us” means Dojostack; and
• “Websites and Services” means our websites (and any related operation systems), including, without limitation for the time being, https://dojostack.co or its replacement as we designate from time to time, and the related services provided through such websites.

We are committed to protecting the privacy and security of your personal data. Our staff respect the confidentiality of all personal data collected and comply with the Ordinance. This PPS outlines how we collect, use, disclose, transfer, retain, and secure your personal data. By accessing the Websites and Services, you consent to the practices described herein.

1. Data Collection

We collect the following types of data when you visit or use the Websites and Services (including trial runs), contact us, or participate in our promotional activities:

• Personal Data: Information by which we can identify you or verify your identity, such as your name, email address, phone number, postal address, job title, company name, identity document and/or its number, payment record, and communication record;
• Other Data: Information about your use of the Websites and Services, such as your IP address, operating system, page views, and other usage statistics.

The data above is necessary for access security, processing your application, subscription or request, and for provision of our services. We will not allow you to access the Websites and Services without such data.

2. Purposes of Collection

Your personal data will be kept confidential and used for the following purposes:

• verify your identity for secure access to the Websites and Services;
• communicate with you regarding your enquiries or complaints (if any);
• maintain, improve, and develop new features of the Websites and Services;
• conduct direct marketing (subject to your consent);
• prevent security threats and illegal acts;
• comply with the applicable laws and regulations; and
• fulfil any other purposes for which you give consent from time to time.

3. Accuracy

We will only use the personal data for the above purposes if we believe such personal data is accurate after our verification and usable for such purposes.

4. Retention

We will retain your personal data only as long as necessary to fulfil the purposes outlined in this PPS or our PICS and will erase the personal data from our record after 6 years of your cessation as a user of the Website and Services, unless a longer retention period is required by law or under any legitimate reason.

5. Disclosure or Transfer

We may disclose or transfer your personal data to third parties, including but not limited to the following entities:

• third-party contractors or service providers acting on our behalf;
• our professional consultants;
• government, regulatory, or law enforcement bodies, and courts as required by law; and
• such other party as we state in the PICS.

We will not release such personal data to any other parties without your prior consent.

6. Security

Subject to our rights of disclosure and transfer above, access to your personal data is restricted to our authorised staff who need to use it for the above purposes. We take reasonable measures to protect your personal data against unauthorised access. However, given the nature of the internet, we cannot guarantee absolute security. Please consider this before providing your personal data.

7. Cookies

We use cookies and similar technologies to track activities of our websites and to personalise your user experience. The data collected is aggregated and anonymous. You can disable cookies in your browser, but this may limit your use of some features of our websites.

8. Third-Party Links

The Websites and Services may contain links to third-party websites for your convenience. These sites operate independently and have their own privacy practices. When you visit a linked website, the third party may collect personal data in accordance with its own policies, which are not covered by this PPS. We encourage you to review their privacy statements before providing any personal information.

9. Direct Marketing

Subject to your consent, we would like to use, disclose, and transfer to our contractors or service providers your name and contact details, for sending you news, feature updates, events and promotional materials about Dojostack, and will comply with the Ordinance in relation to direct marketing. Your consent may be given under our PICS and your choice is voluntary. You may opt out or change your preference at any time by writing to our data officer at the following email address: privacy@dojostack.co.

10. Your Rights

Unless statutory exemptions apply, you have the following rights under the Ordinance:

• ascertain whether we hold your personal data;
• request access to and a copy of your personal data;
• request the correction of your personal data;
• withdraw your consent to our use of your personal data; and
• access our privacy policies and practices.

provided that we may charge a reasonable fee for processing data access requests.

Such requests may be made in writing to our data officer at the following email address: privacy@dojostack.co.

10. Changes to This PPS

We may update this PPS to reflect changes in our practices or the applicable laws and regulations. We will notify you of any material changes by posting the updated version on our websites or by other means as required by law.

11. Contact Us

If you have any questions about this PPS or our privacy practices, please contact our data officer at:

Version: 2026.02.14

Definitions

• “Authorising Entity” means the entity contracted with us separately before authorising you as a user of the Websites and Services;
• “Dojostack” means Dojostack Limited incorporated in Hong Kong and its subsidiaries;
• “Hong Kong” means Hong Kong SAR of PRC;
• “Ordinance” means the Personal Data (Privacy) Ordinance Cap. 486;
• “PRC” means People’s Republic of China;
• “You/you” means the user of the Websites and Services or the Authorising Entity (where applicable);
• “We/we” and “Us/us” means Dojostack; and
• “Websites and Services” means our websites (and any related operation systems), including, without limitation for the time being, https://dojostack.co or its replacement as we designate from time to time, and the related services provided through such websites.

1. Data Collection

1.1. The personal data, you provide to us, as defined in the Ordinance will be used generally for administering, operating, and enhancing the Websites and Services, direct marketing (subject to your consent), and compliance of the applicable law and regulations. The personal data required is specified in this PICS, and our application, subscription, or request forms. Where you are a user authorised by the Authorising Entity or you choose to sign in using a single sign-on (SSO) account of other systems, we may also collect necessary personal data from the Authorising Entity or such other system owners for authenticating access to the Websites and Services.

1.2. You must provide complete information, including your name and email address, as specified in the relevant forms. The data above is necessary for access security, processing your application, subscription or request, and for provision of our services. We will not allow you to access the Websites and the Services without such data. We will only use the personal data for the purposes set out below if we believe such personal data is accurate after our verification and usable for such purposes. Incomplete, inaccurate or unusable data may prevent us from processing further.

2. Purposes of Collection

Your personal data will be kept confidential and used for the following purposes:

• verify your identity for secure access to and provide deliverables to you via the Websites and Services;
• communicate with you regarding your enquiries or complaints (if any);
• maintain, improve, and develop new features of the Websites and Services;
• conduct survey and perform analysis in relation to our Websites and Services;
• conduct direct marketing described below (subject to your consent);
• prevent and respond to potential or actual security threats or illegal activities;
• comply with the applicable laws and regulations; and
• any other purposes for which you give consent from time to time.

3. Disclosure or Transfer of Personal Data

We may disclose or transfer your personal data to third parties, including but not limited to the following entities:

• third-party contractors or service providers acting on our behalf;
• our professional consultants; and
• government, regulatory, or law enforcement bodies, and courts as required by law.

We will not release such personal data to any other parties without your prior consent.

4. Direct Marketing

Subject to your consent, we would like to use, disclose, and transfer to our contractors or service providers your name and contact details, for sending you news, feature updates, events and promotional materials about Dojostack, and will comply with the Ordinance in relation to direct marketing.

Your consent may be given under our application, subscription, or request forms containing the following option content and your choice is voluntary. You may opt out or change your preference at any time by writing to our data officer at the following email address: privacy@dojostack.co.

If you do not tick this box, you indicate no objection to our use, disclosure and transfer of your personal data for our direct marketing in the manner above.

You may withdraw your consent at any time by letting us know in writing to our data officer at the following email address: privacy@dojostack.co.

5. Your Rights

Unless statutory exemptions apply, you have the following rights under the Ordinance:

• ascertain whether we hold your personal data;
• request access to and a copy of your personal data;
• request the correction of your personal data;
• withdraw your consent to our use of your personal data; and
• access our privacy policies and practices.

provided that we may charge a reasonable fee for processing data access requests.

Such requests may be made in writing to our data officer at the following email address: privacy@dojostack.co.

6. Privacy Policy Statement

Please refer to our Privacy Policy Statement published in our websites from time to time.

Version: 2026.02.14