Welcome to GBiowit's privacy statement.
GBiowit ("GBiowit", "we", "us", or "our") is a biotechnology company based in Hong Kong, specializing in organoid products, organ-on-a-chip solutions, and related research services. We are committed to protecting your personal data and complying with the requirements of the Personal Data (Privacy) Ordinance (Cap. 486) of the Hong Kong Special Administrative Region (the "Ordinance"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website or interact with us.
1. Collection of Personal Data
We may collect the following categories of personal data, which are necessary for the purposes described in Section 2:
- Identity and Contact Information: Name, email address, phone number, company/institution name, job title, and postal address.
- Technical and Usage Data: IP address, browser type and version, time zone setting, operating system, and browsing actions on our website (including pages viewed and referral URLs).
- Communication Data: Any information you provide when contacting us via email, inquiry forms, or support requests.
If you fail to provide the required personal data, we may be unable to respond to your inquiries, process orders, or provide requested services.
2. Purposes of Collection and Use
We use your personal data only for legitimate business purposes, including:
- Responding to product and service inquiries, quotations, and technical support requests.
- Processing orders for organoid culture media, kits, matrices, reagents, and related products.
- Providing organoid construction, pharmacodynamic evaluation, and organ-on-a-chip customization services.
- Sending administrative information, such as updates to our terms, policies, or service changes.
- Improving website functionality, user experience, and internal analytics.
- Complying with legal obligations, court orders, or regulatory requests in Hong Kong.
- Any other purpose for which you have provided your explicit consent.
3. Legal Basis for Processing (Under Hong Kong PDPO)
Under the Ordinance, our lawful bases for processing personal data include: (i) your consent; (ii) processing necessary for the performance of a contract (e.g., fulfilling an order); (iii) compliance with a legal obligation; and (iv) our legitimate interests (e.g., improving our products and website security) that do not override your data protection rights.
4. Disclosure and Transfer of Personal Data
We keep your personal data confidential and only disclose it to third parties under the following circumstances:
- To our affiliates, contractors, and service providers (e.g., IT infrastructure, payment processing, shipping partners) who assist us in operating our business, provided they agree to keep the data secure.
- To courts, law enforcement, government or regulatory authorities in Hong Kong or elsewhere as required or permitted by law.
- To professional advisors such as legal counsel, auditors, and insurers.
- In connection with a merger, acquisition, or asset sale, where data may be transferred as part of the business transition.
We never sell or rent your personal data to third parties for marketing purposes without your explicit consent.
5. Cross-Border Data Transfers
To fulfill the purposes set out in Section 2, we may transfer your personal data outside the Hong Kong Special Administrative Region. In such cases, we will take all reasonably necessary steps to ensure that your data is treated securely and in accordance with the Ordinance, including implementing contractual safeguards or adequacy arrangements.
6. Data Retention
We retain personal data only for as long as necessary to achieve the purposes for which it was collected, or as required by applicable laws and regulations (e.g., tax, commercial records). Once the retention period expires, we securely delete or anonymize the data.
7. Data Security
We implement appropriate technical and organizational measures (including encryption, access controls, and regular security assessments) to protect your personal data from unauthorized access, accidental loss, alteration, or disclosure. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
8. Your Rights (Access and Correction)
Under the Hong Kong Personal Data (Privacy) Ordinance, you have the right to:
- Request access to and receive a copy of your personal data held by us.
- Request correction of any inaccurate or incomplete personal data.
- Withdraw your consent at any time (without affecting the lawfulness of processing based on consent before its withdrawal).
To exercise these rights, please submit a written request to our Data Privacy Officer using the contact details in Section 11. In accordance with the Ordinance, we may charge a reasonable administrative fee for processing access requests.
9. Cookies and Similar Technologies
We use cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and personalize content. Cookies are small text files stored on your device. Most browsers allow you to block or delete cookies; however, doing so may impair certain features of our website. For more information, please refer to our Cookiebot consent manager which you can access via the cookie banner on our site.
10. Third-Party Links
Our website may contain links to third-party websites, plugins, or applications. Clicking those links may allow third parties to collect or share data about you. We do not control these third-party sites and are not responsible for their privacy practices. We encourage you to read the privacy policies of every website you visit.
11. Contact Us (Data Privacy Officer)
If you have any questions about this Privacy Policy, wish to access or correct your personal data, or make any inquiry regarding our data handling practices, please contact our Data Privacy Officer:
GBiowit – Data Privacy Officer
Email: info@gbiowit.com
Hong Kong Special Administrative Region
We will respond to all legitimate requests within a reasonable timeframe and in accordance with the Ordinance.
12. Updates to This Privacy Policy
We may revise this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Any updates will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically. Your continued use of our website after any changes constitutes acceptance of the revised Privacy Policy.
Last Updated: 15 April 2026
