Effective date: 20 August 2026

LOPO TERRACOTTA PRODUCTS CORPORATION LIMITED (“LOPO”, “we”, “us” or “our”) respects your privacy and is committed to handling personal data fairly, transparently and securely.

This Privacy Policy explains how we collect, use, disclose, store and protect personal data in connection with terracotta-panel.com, its inquiry forms and related communications.

1. Who We Are

The operator of this website and the data user responsible for the personal data described in this Privacy Policy is:

LOPO TERRACOTTA PRODUCTS CORPORATION LIMITED
RM 3 UNIT P 1/F KAISER ESTATE PHASE 3
NOS. 9–11 HOK YUEN ST
HUNGHOM, KL, HONG KONG

Email: roger@lopoterracotta.com

For privacy enquiries and personal-data requests, please use the contact details in section 15.

2. Personal Data We Collect

Depending on how you use the website, we may collect the following categories of personal data.

Inquiry and contact information

  • name;
  • work email address;
  • country or region;
  • company;
  • phone or WhatsApp number;
  • product interest;
  • estimated facade area;
  • project schedule or timeline; and
  • project requirements, specifications, dimensions, colours, finishes, quantities, application details, drawing links and other information included in your message.

On our current inquiry forms, fields marked with an asterisk are required. These generally include name, work email, country or region, product interest and project requirements. Company, phone or WhatsApp number, estimated area and project schedule are generally optional.

Communications and business records

We collect emails, quotation requests, sample requests, technical discussions and other correspondence exchanged with you. Inquiry submissions are delivered to our designated business email mailbox and may also be stored in the WordPress database, administrative systems and backup copies, depending on the website and backup configuration in use.

Technical and usage information

When you visit the website, our systems and service providers may automatically process technical information such as:

  • IP address;
  • requested page or URL;
  • referring page or website;
  • date and time of access;
  • browser, device and operating-system information;
  • language and display settings;
  • approximate location derived from IP address;
  • pages viewed and interactions with website content;
  • cookie, tag or similar identifiers; and
  • server, error, access, performance and security logs.

Security and anti-spam information

Our form-security services may process form content and technical or interaction signals used to identify automated, fraudulent, abusive or spam submissions.

We do not request sensitive personal information through our inquiry forms. Please do not submit identification documents, payment-card or financial-account information, health information, passwords or other sensitive personal information.

3. How We Collect Personal Data

We collect personal data:

  • directly from you when you complete a Contact Form 7 inquiry form, email us, contact us through WhatsApp or otherwise communicate with us;
  • automatically through the website, server logs, cookies, tags and similar technologies;
  • through our hosting, analytics, security, anti-spam, translation and external-media providers; and
  • from a colleague, employer, project team member or other business contact who legitimately provides your contact details in connection with a project or inquiry.

4. How We Use Personal Data

We use personal data where reasonably necessary to:

  • receive, assess and respond to product, sample, quotation and project inquiries;
  • provide requested product, technical, manufacturing, logistics or commercial information;
  • communicate with prospective and existing customers, architects, contractors, consultants, distributors and project teams;
  • prepare quotations, samples and project-related recommendations;
  • maintain records of inquiries, quotations and business correspondence;
  • operate, maintain, secure, troubleshoot and improve the website;
  • measure website usage, content performance and visitor experience;
  • provide language and video features requested by visitors;
  • prevent spam, fraud, abuse and other security threats;
  • comply with applicable legal, accounting and regulatory requirements; and
  • resolve disputes and establish, exercise or defend legal rights.

5. Legal Bases Where Applicable

Where an applicable law requires us to identify a legal basis, we rely, as appropriate, on:

  • taking steps at your request before entering into a contract;
  • performing a contract or business arrangement with you or your organisation;
  • our legitimate interests in responding to business inquiries and operating, securing and improving the website;
  • compliance with legal obligations; and
  • your consent, including for non-essential cookies, external media or direct marketing where consent is required.

Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing completed before withdrawal.

6. Personal Information Collection Statement for Inquiry Forms

Fields marked with an asterisk (*) are required for the relevant inquiry. Other fields are voluntary. We use the information submitted through a form to assess and respond to your inquiry, provide requested quotation, sample or technical information, and maintain related business correspondence.

If you do not provide required information, we may be unable to assess or respond to your inquiry. Not providing optional information will not prevent submission, although it may limit our ability to respond efficiently.

Where reasonably necessary, inquiry data may be disclosed to authorised LOPO personnel; relevant manufacturing, technical or logistics personnel or service providers; providers of website hosting, email, form delivery, database, backup, security and anti-spam services; professional advisers; and authorities where disclosure is required or authorised by law. Some recipients and systems may be outside Hong Kong.

You may request access to or correction of your personal data by contacting our Privacy Contact using the details in section 15.

7. Cookies, Tags and Consent Management

Cookies are small files or identifiers stored on or accessed from your device. We also use tags, pixels, local-storage technologies and similar tools.

Our website may use the following categories:

  • Necessary and security technologies: support website delivery, load balancing, form submission, consent choices, security, fraud prevention and spam protection.
  • Preference and functional technologies: remember language or display choices and provide features such as translation.
  • Analytics technologies: help us understand visitor numbers, sessions, approximate location, device or browser characteristics, traffic sources, pages viewed and interactions with website content.
  • External media or marketing technologies: may be used when video or other third-party content is loaded, and if measurement or advertising functions are enabled.

Where prior consent is required by applicable law, non-essential analytics, external-media, functional or marketing technologies will be activated only after you make a choice through our consent-management platform or cookie banner. Where available, the banner allows visitors to accept, reject or manage non-essential categories. Necessary technologies cannot normally be disabled through the consent tool because they support requested website functions or security.

You may review or change your choices through the website’s Cookie Settings link or consent banner. You may also control cookies through your browser. Blocking necessary or security technologies may affect inquiry submission or other website functions.

Cookie names, durations and supplier configurations may change when the website or its services are updated. The current consent tool or cookie notice should be treated as the most specific description of active non-essential technologies.

8. Website and Third-Party Service Providers

SiteGround

We use SiteGround technologies in connection with website hosting, caching, optimisation, security, database services and backups. SiteGround and its relevant affiliates or subprocessors may process website files, databases, inquiry records, IP addresses, requested URLs, timestamps and technical or security logs as necessary to provide and protect those services.

More information is available in the SiteGround Privacy Policy.

Google Analytics and Google Tag

We use Google Analytics and Google Tag technologies to measure website traffic and performance. Depending on our current configuration and your consent choices, these services may process a client or cookie identifier, session information, approximate location, browser and device information, traffic source, page views and interactions with the website.

Google Tag helps load or manage measurement configurations. We do not intentionally send names, email addresses, phone numbers or inquiry-message content to Google Analytics as analytics identifiers.

Where required, Google Analytics and other non-essential Google measurement functions are controlled through the consent-management platform. Advertising or marketing functions, if enabled, are treated as a separate non-essential category where applicable.

Information about Google Analytics data practices is available from Google Analytics. Google also provides a Google Analytics opt-out browser add-on.

Google reCAPTCHA

Our inquiry forms use Google reCAPTCHA to protect the website against spam, fraud and automated abuse. reCAPTCHA may process IP address, device and application information, browser characteristics, interaction signals, referring information and an assessment token. It may also use a security identifier such as _grecaptcha.

We use this information only for website and form security. Google processes reCAPTCHA customer data to provide, maintain and protect the service in accordance with the applicable Google Cloud service and data-processing terms. Further information is available in the Google reCAPTCHA documentation.

Akismet and Automattic

We use Akismet or related Automattic services to detect spam and abusive form submissions. Depending on configuration, data sent for checking may include the submitted name, email address, message or other form fields, IP address, user-agent information, referring page, website URL and submission time.

More information is available in Automattic’s Privacy Notice for Visitors to Users’ Sites.

GTranslate

We use GTranslate technologies to provide language-selection or translation functionality. Loading or using the translation feature may cause technical request information, such as IP address, browser or device information, requested URL, language choice and timestamp, and potentially page content required for translation, to be processed by GTranslate, its content-delivery providers or related translation services.

More information is available in the GTranslate Privacy Policy.

Google Fonts

The website may obtain font resources from Google Fonts to display text consistently. When fonts are loaded from Google servers, the visitor’s browser may send technical request information such as IP address, browser or device information, requested resource, referring page and timestamp to Google. Where font files are hosted locally, this external request does not occur.

Google’s handling of data is described in the Google Privacy Policy.

YouTube

Some pages may contain videos hosted by YouTube. Loading or playing an embedded video may allow Google or YouTube to process IP address, device and browser information, referring page, video interactions, cookie or account identifiers and other usage information. If you are signed in to a Google account, activity may be associated with that account according to your Google settings.

Where required by law, YouTube content and its non-essential technologies are loaded in accordance with your consent choice. Information about Google and YouTube data practices is available in the Google Privacy Policy.

9. Disclosure of Personal Data

We may disclose relevant personal data to the following classes of recipients, only where reasonably necessary for the purposes described in this Privacy Policy:

  • our authorised employees and contractors;
  • relevant manufacturing, technical, sample, quotation, logistics or project-support personnel and service providers;
  • website hosting, content-delivery, email, form-delivery, database, backup, analytics, translation, IT-support, cybersecurity and anti-spam providers;
  • professional advisers, including legal advisers, accountants, auditors and insurers;
  • courts, regulators, law-enforcement bodies or other persons where disclosure is required or authorised by law; and
  • a genuine prospective purchaser, successor or adviser in connection with a merger, reorganisation or transfer of all or part of our business, subject to appropriate confidentiality protections.

Service providers may act as our processors or service providers, or in some cases as independent controllers, according to the nature of the service and their applicable terms.

We do not sell information submitted through our inquiry forms for money or provide inquiry-form details to unrelated third parties for their own direct-marketing purposes.

10. International Processing and Transfers

Our website, email, backup, analytics, security, translation, external-media and project-support providers may operate in Hong Kong, Mainland China, the European Economic Area, the United States or other jurisdictions. Personal data may therefore be processed outside the jurisdiction in which it was collected, and the laws in those locations may differ.

Where personal data is transferred outside Hong Kong, we take practicable steps appropriate to the circumstances to require recipients and service providers to protect it consistently with the purposes described in this Privacy Policy. Measures may include contractual restrictions, confidentiality obligations, access controls, security requirements and due-diligence review.

Where another applicable law requires a recognised international-transfer mechanism, we will use an appropriate mechanism required by that law, subject to the circumstances and available lawful transfer arrangements.

11. Retention

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected.

  • Inquiry records: if an inquiry does not lead to an ongoing business relationship, we normally retain the inquiry and related correspondence for up to 24 months after our last substantive interaction.
  • Active projects and business relationships: where an inquiry leads to a quotation, sample programme, project, order, contract or continuing relationship, relevant records may be retained for longer as necessary to perform the relationship, meet accounting or legal requirements, resolve disputes, or establish, exercise or defend legal claims.
  • Technical and security logs: logs under our direct control are commonly retained for approximately 30–90 days, but the period may vary according to security needs, incident investigations, hosting configuration and supplier settings.
  • Analytics information: identifiable or pseudonymous analytics information is retained according to the configured Google Analytics retention setting and applicable consent choice. Aggregated or effectively anonymised statistics may be retained for longer.
  • Backups: deleted information may remain in restricted backup copies until those backups are overwritten through the normal backup cycle, unless longer preservation is required for security, legal or disaster-recovery reasons.

When personal data is no longer reasonably required, we take practicable steps to delete it, anonymise it or otherwise dispose of it securely. Supplier-controlled retention periods may vary according to their service configuration and contractual terms.

12. Security

We take practicable and proportionate technical and organisational measures to protect personal data against unauthorised or accidental access, processing, alteration, erasure, loss or use. These measures may include encrypted transmission, access restrictions, authentication, software maintenance, backups and limiting access according to business need.

No internet transmission, mailbox, website or storage system can be guaranteed to be completely secure. Please do not submit sensitive personal information through an inquiry form.

13. Direct Marketing

Submitting an inquiry does not by itself subscribe you to marketing communications.

If we wish to use personal data for direct marketing, we will first provide the notice and obtain the consent or indication of no objection required by applicable law. Marketing communications will include a reasonable method to opt out. You may ask us at any time to stop using your personal data for direct marketing.

14. Your Rights

Under the Hong Kong Personal Data (Privacy) Ordinance, you may request access to personal data we hold about you and request correction of inaccurate personal data.

Depending on the law applicable to you and our processing, you may also have rights to:

  • request deletion or restriction of personal data;
  • object to particular processing;
  • receive certain personal data in a portable format;
  • withdraw consent;
  • opt out of certain sales, sharing, targeted advertising or profiling where an applicable law provides that right; and
  • complain to a competent data-protection authority.

These additional rights are not available in every jurisdiction and may be subject to legal conditions or exceptions. Where applicable, we will process recognised browser-based privacy or opt-out signals as required by law.

To protect personal data, we may need to verify your identity and authority before acting on a request. For a Hong Kong data-access request, we may ask you to use the form prescribed by the Privacy Commissioner. Any fee charged will be limited to what is permitted by law and will not be excessive.

15. Privacy Contact

Privacy enquiries and requests for access to or correction of personal data should be sent to:

Privacy Contact
LOPO TERRACOTTA PRODUCTS CORPORATION LIMITED
RM 3 UNIT P 1/F KAISER ESTATE PHASE 3
NOS. 9–11 HOK YUEN ST
HUNGHOM, KL, HONG KONG

Email: roger@lopoterracotta.com
Suggested subject line: Privacy Request

Where applicable, you may also lodge a complaint with the Office of the Privacy Commissioner for Personal Data, Hong Kong, or another competent data-protection authority.

16. Children

This is a business-to-business website intended for architects, contractors, consultants, distributors, project teams and other professional visitors. It is not directed to children under 18, and we do not knowingly seek to collect personal data from children through the website.

If you believe a child has submitted personal data inappropriately, please contact us so that we can review the circumstances and take appropriate action.

17. External Links and Platforms

The website may link to third-party websites, social platforms, communication services, maps, document hosts or other external resources. Clicking a link or using an external service may allow that third party to collect information independently.

We do not control the privacy or security practices of independent third parties. You should review their privacy information before submitting personal data or using their services.

18. Changes to This Privacy Policy

We may update this Privacy Policy when our website, business practices, service providers or legal obligations change. The updated version will be posted on this page with a revised effective date. Where required by law, we will provide additional notice of material changes.

Related Posts: