Privacy Policy

How we collect, use, and protect your personal information

Last Updated: November 26, 2025

UME Holdings Limited ("UME", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you access or use our website at www.umegroup.org (the "Website") or our IT cloud-based Software as a Service (SaaS) solutions, including the UME Products series (collectively, the "Services").

By using the Website or Services, you consent to the practices described herein. If you do not agree, please do not use our Website or Services.

1. Information We Collect

We may collect the following types of information:

Personal Information

  • Identity Data: Name, email address, phone number, company details, and billing information provided during registration, subscription to UME Products, or inquiries.
  • Usage Data: Information about your interactions with the Services, such as IP address, browser type, device information, pages visited, and time stamps.
  • User Content: Data you upload or input into the Services, such as files, documents, or custom configurations (processed in accordance with your instructions).

Non-Personal Information

  • Aggregated analytics, such as website traffic patterns or Service usage statistics.

We do not knowingly collect sensitive personal information (e.g., health data) unless explicitly required for the Services and with your consent.

2. How We Collect Information

  • Directly from You: When you register an account, subscribe to Services, submit forms, or communicate with us.
  • Automatically: Through cookies, web beacons, and similar technologies (see our Cookie Policy below). We use tools like Google Analytics for analytics.
  • From Third Parties: Such as payment processors (e.g., for subscriptions) or integrated services you connect to UME Products.

3. How We Use Your Information

We use your information to:

  • Provide, maintain, and improve the Services, including delivering UME Products functionality.
  • Process transactions and manage subscriptions.
  • Communicate with you about your account, updates, or support.
  • Analyze usage to enhance user experience and develop new features.
  • Comply with legal obligations, prevent fraud, and enforce our Terms of Use.
  • Send marketing communications (with your consent or as permitted by law), such as newsletters about UME Products.

4. Sharing Your Information

We do not sell your personal information. We may share it with:

  • Service Providers: Third parties that assist us in operating the Services (e.g., cloud hosting, analytics providers), bound by confidentiality.
  • Business Partners: For integrated features in UME Products, with your consent.
  • Legal Authorities: To comply with laws, respond to subpoenas, or protect rights, safety, or property.
  • In Business Transfers: If UME is involved in a merger or acquisition, your information may be transferred as an asset.

5. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your information, including encryption for data in transit and at rest. However, no system is completely secure, and we cannot guarantee absolute security. You are responsible for securing your account credentials.

6. Data Retention

We retain your personal information only as long as necessary for the purposes outlined herein, or as required by law (e.g., for tax or audit purposes). For SaaS subscriptions, data is retained until account deletion, plus a reasonable period for backups.

7. Your Rights and Choices

Depending on your location, you may have rights to:

  • Access, correct, or delete your personal information.
  • Withdraw consent for processing.
  • Object to or restrict certain uses (e.g., marketing).
  • Data portability.

To exercise these rights, contact us at privacy@umegroup.org. We will respond within a reasonable timeframe (typically 30 days). For EU/UK users, we comply with GDPR; for California residents, CCPA.

You can opt out of marketing emails via the unsubscribe link or cookie settings.

8. International Data Transfers

UME is based in Hong Kong. If you access Services from outside Hong Kong, your information may be transferred to and processed in Hong Kong or other jurisdictions. We ensure adequate safeguards, such as standard contractual clauses, for such transfers.

9. Children's Privacy

The Services are not directed to children under 16. We do not knowingly collect their data. If we learn of such collection, we will delete it promptly.

10. Cookie Policy

We use cookies and similar technologies to enhance functionality, analyze usage, and personalize content.

  • Essential Cookies: Necessary for core Services (e.g., session management).
  • Analytics Cookies: Track usage patterns (e.g., Google Analytics).
  • Marketing Cookies: Deliver targeted ads.

You can manage preferences via browser settings or our cookie banner. Disabling cookies may limit functionality. For details, see our full Cookie Policy at www.umegroup.org/cookies.

11. Changes to This Privacy Policy

We may update this Policy periodically. Changes will be posted on the Website with the "Last Updated" date. Significant changes will be notified via email or in-Service notices. Continued use constitutes acceptance.

12. Governing Law and Contact

This Policy is governed by the laws of the Hong Kong Special Administrative Region ("HKSAR"). For questions, contact our Data Protection Officer at cs@umegroup.org.

Note: This Privacy Policy does not apply to third-party sites linked from our Website.