Privacy Policy
Last updated: 2026
This Privacy Policy describes how SUPERADS INTERNATIONAL TECHNOLOGY LIMITED (the Data Controller) collects, uses and protects the personal data of users of the website gbyteit.com, in compliance with Regulation (EU) 2016/679 ("GDPR") for data subjects in the European Economic Area and the Hong Kong Personal Data (Privacy) Ordinance (Cap. 486, "PDPO") for our home jurisdiction.
1. Data Controller
SUPERADS INTERNATIONAL TECHNOLOGY LIMITED — RM 1502-A EASEY COMM BLDG 253-261 HENNESSY RD — Wan Chai — Hong Kong. Email: info@gbyteit.com
2. Data we collect
We collect the following personal data when you place an order: full name, phone number, delivery address. We also automatically collect technical data (IP address, browser type, pages visited) for security and analytics purposes.
3. Purpose of processing
Your data is processed exclusively to:
- process your order and arrange delivery
- contact you to confirm the order
- handle returns or customer service requests
- fulfil tax, accounting and record-keeping obligations under applicable law
4. Legal basis
For data subjects in the EEA, processing is based on the performance of a sales contract (Art. 6(1)(b) GDPR), on compliance with legal obligations (Art. 6(1)(c) GDPR), and on our legitimate interest in fraud prevention and service improvement (Art. 6(1)(f) GDPR). For all other users, processing is carried out in accordance with Data Protection Principle 1 of the Hong Kong PDPO (purpose and manner of collection).
5. Data retention
Order-related data is retained for 7 years after the contractual relationship ends, in line with applicable accounting and tax record-keeping requirements. Technical browsing data is retained for a maximum of 12 months. After these periods, personal data is securely deleted or anonymised.
6. Data recipients
Your data may be shared with:
- partner couriers for shipping (e.g. BRT, GLS, DHL, DPD, Royal Mail, InPost)
- customs and tax authorities of your country of delivery, when required by law
- IT providers and payment / order-management vendors that operate the site infrastructure, bound by a Data Processing Agreement pursuant to Art. 28 GDPR and equivalent obligations under the PDPO
7. Your rights (GDPR)
If you are located in the European Economic Area, at any time you can exercise your rights of access, rectification, erasure, restriction of processing, data portability, and objection, as well as the right to withdraw consent, by writing to info@gbyteit.com. You also have the right to lodge a complaint with the data protection authority of your country of habitual residence; a directory is published by the European Data Protection Board at edpb.europa.eu/about-edpb/about-edpb/members_en.
8. Your rights (Hong Kong PDPO)
If you are located in Hong Kong, you have the right to request access to and correction of your personal data pursuant to sections 18 and 22 of the PDPO. You may also lodge a complaint with the Office of the Privacy Commissioner for Personal Data (PCPD) at www.pcpd.org.hk.
9. International data transfers
SUPERADS INTERNATIONAL TECHNOLOGY LIMITED is established in Hong Kong, a third country under the GDPR. When we process personal data of EEA data subjects, transfers outside the EEA are protected by appropriate safeguards, including Standard Contractual Clauses approved by the European Commission (Decision (EU) 2021/914) and, where applicable, supplementary technical and organisational measures.
10. Security
We apply technical and organisational measures appropriate to the risk (encryption in transit via TLS, access controls, segregation of duties, regular backups) to protect your personal data against unauthorised access, loss, or disclosure.
11. Changes to this Privacy Policy
SUPERADS INTERNATIONAL TECHNOLOGY LIMITED reserves the right to modify this Privacy Policy at any time. Updates will be published on this page with the date of the change.
12. Contact
For any question about our Privacy Policy or to exercise your rights under the GDPR or the PDPO, write to: info@gbyteit.com