Privacy Policy

1. Introduction

This Privacy Policy describes how SOSOC MUSIC WORLD LIMITED, operating as Sosoc Beat, collects, uses, stores, and protects information obtained from visitors and users of our website located at https://www.sosocbeat.autos and related services. By accessing or using our website and services, you acknowledge that you have read and understood this Privacy Policy and agree to the practices described herein.

SOSOC MUSIC WORLD LIMITED is a company registered in Hong Kong with its registered office at Room H, 19/F, Corinthia By The Sea Tower 6, 23 Tong Yin Street, Tseung Kwan O, Hong Kong (HK). We operate in the Computer Systems Design and Related Services industry within the Professional, Scientific, and Technical Services sector. Our services include computer integrated systems design, software architecture, technical consulting, and related professional services.

We are committed to protecting the privacy and security of personal information entrusted to us. This policy outlines our data handling practices and informs you of your rights regarding your personal data. We encourage you to read this policy carefully and contact us if you have any questions or concerns.

2. Information We Collect

We collect several categories of information to provide and improve our services. The types of information we collect depend on how you interact with our website and services. We collect information that falls into the following categories:

Personal Identification Information: When you fill out our contact form, subscribe to communications, or otherwise interact with our website, we may collect your full name, email address, phone number, company name, job title, and any other information you voluntarily provide through our forms or direct correspondence.

Technical and Usage Information: When you visit our website, our servers automatically record certain information sent by your browser. This may include your Internet Protocol (IP) address, browser type and version, operating system, referring URL, pages visited, time and date of your visit, time spent on pages, and other diagnostic data. This information helps us understand how visitors use our site and allows us to improve functionality and user experience.

Communication Data: When you send us an email, submit a contact form, or communicate with us through other channels, we collect and store the content of those communications along with your contact details. We use this information to respond to your inquiries and maintain a record of our correspondence.

Business Information: If you engage our services, we may collect information about your organization including its name, industry sector, business requirements, technical infrastructure details, and project specifications necessary to deliver our computer systems design and consulting services.

3. How We Collect Information

We collect information through several methods, each designed to respect your privacy while enabling us to deliver our services effectively. The primary collection methods include:

Direct Collection: Information that you provide directly to us through our contact forms, email correspondence, phone calls, or in-person meetings. This is the most common way we receive personal data, and you maintain full control over what information you choose to share with us.

Automated Collection: As you navigate our website, certain information is automatically collected through standard web technologies including server logs, cookies, and similar tracking mechanisms. This automated collection helps us analyze website performance, detect and prevent security threats, and understand usage patterns to enhance the user experience.

Third-Party Sources: In limited circumstances, we may receive information about you from third-party business partners, analytics providers, or publicly available sources. When we receive such information, we handle it in accordance with this Privacy Policy and the terms established by the third-party source.

4. How We Use Your Information

SOSOC MUSIC WORLD LIMITED uses the information we collect for specific business purposes that are necessary to provide and improve our services. We do not use personal data for purposes incompatible with those described in this policy without providing notice and obtaining consent where required by law.

Service Delivery: We use your information to provide, maintain, and improve our computer systems design and technical consulting services. This includes processing your requests, delivering project outcomes, and providing customer support.

Communication: We use your contact information to respond to inquiries, send service-related notifications, provide technical updates, and communicate about projects or engagements. We may also send administrative messages such as confirmations, invoices, and policy updates.

Website Improvement: We analyze usage data to understand how visitors interact with our website, identify areas for improvement, optimize content delivery, and enhance overall user experience. This analysis is performed using aggregated and anonymized data wherever possible.

Legal Compliance: We may process your information to comply with applicable laws, regulations, legal processes, or enforceable governmental requests. This includes meeting our obligations under data protection laws, tax regulations, and industry standards applicable to the Professional, Scientific, and Technical Services sector.

Security: We use information to monitor for and prevent fraudulent, unauthorized, or illegal activity on our systems and networks. This includes analyzing access patterns, detecting anomalies, and maintaining the integrity of our infrastructure.

Business Operations: We may use information for internal business purposes such as auditing, data analysis, financial management, and strategic planning. When information is used for these purposes, it is aggregated or de-identified wherever possible.

5. Sharing and Disclosure of Information

We respect the confidentiality of your information and do not sell, trade, or rent personal data to third parties for marketing purposes. We may share information in the following limited circumstances:

Service Providers: We engage trusted third-party companies and individuals to perform services on our behalf, such as website hosting, data analytics, email delivery, payment processing, and IT infrastructure management. These service providers have access to personal information only as necessary to perform their functions and are contractually obligated to maintain the confidentiality and security of your data.

Legal Requirements: We may disclose information if required to do so by law or in response to valid requests by public authorities, including courts, law enforcement agencies, and regulatory bodies. We will notify you of such disclosures when permitted by applicable law.

Business Transfers: In the event of a merger, acquisition, reorganization, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy.

With Your Consent: We may share your information for purposes not described in this policy when we have obtained your explicit consent to do so. You may withdraw your consent at any time by contacting us using the details provided in the Contact Information section.

6. Data Storage and Security

We implement commercially reasonable technical, administrative, and physical security measures designed to protect your personal information from unauthorized access, disclosure, alteration, and destruction. Our security practices are aligned with industry standards for the Computer Systems Design and Related Services sector.

Technical Measures: We employ encryption protocols for data in transit using TLS technology, firewall protections, secure server configurations, access controls with role-based permissions, and regular security assessments. Our systems are monitored continuously for potential vulnerabilities and intrusions.

Administrative Measures: Access to personal data is restricted to authorized personnel who have a legitimate business need. Our employees and contractors receive training on data protection practices and are bound by confidentiality obligations. We maintain documented security policies and incident response procedures.

Physical Measures: Our data storage infrastructure is housed in secure facilities with physical access controls, environmental protections, and redundant systems to ensure data availability and integrity.

While we strive to protect your information, no method of transmission over the Internet or electronic storage is one hundred percent secure. We cannot guarantee absolute security, but we are committed to continuously improving our safeguards and will notify you in accordance with applicable law if a security breach affects your personal data.

7. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, including any legal, accounting, or reporting requirements. The specific retention period depends on the nature of the information and the purpose for which it was collected.

Contact and Communication Data: Information provided through contact forms or correspondence is retained for the duration of our business relationship and for a reasonable period thereafter to respond to follow-up inquiries and maintain records of communications.

Technical Usage Data: Automatically collected technical data is generally retained for a shorter period, typically up to twenty-six months, unless a longer retention period is required for security analysis or legal compliance.

Business Records: Records related to client engagements, contracts, and financial transactions are retained in accordance with applicable tax and commercial laws, typically for a period of seven years following the conclusion of the engagement.

When information is no longer needed, we will securely delete or anonymize it using methods designed to prevent recovery or reconstruction of the data.

8. International Data Transfers

As a Hong Kong-based company serving clients globally, your information may be transferred to, stored in, and processed in countries outside your country of residence. These countries may have data protection laws that differ from those in your jurisdiction.

When we transfer personal data across international borders, we implement appropriate safeguards in accordance with applicable data protection laws. These safeguards may include entering into standard contractual clauses approved by relevant regulatory authorities, ensuring that recipients are certified under recognized data protection frameworks, or relying on adequacy decisions where applicable.

By using our website and services, you consent to the transfer of your information to countries outside your country of residence, including Hong Kong and other jurisdictions where we or our service providers operate. If you have questions about the safeguards we use for international data transfers, please contact us using the information provided below.

9. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal information. We are committed to facilitating the exercise of these rights in accordance with applicable law:

Right to Access: You may request access to the personal information we hold about you and receive a copy of that data in a commonly used electronic format.

Right to Rectification: You may request that we correct or update any inaccurate or incomplete personal information we hold about you.

Right to Erasure: In certain circumstances, you may request that we delete your personal information from our systems. This right is subject to legal obligations that may require us to retain certain information.

Right to Restrict Processing: You may request that we limit the processing of your personal information under certain conditions, such as when you contest the accuracy of the data.

Right to Data Portability: Where applicable, you may request a copy of your personal data in a structured, machine-readable format for transfer to another service provider.

Right to Object: You may object to the processing of your personal information for direct marketing purposes or where processing is based on legitimate interests.

Opt-Out Choices: You may opt out of receiving promotional communications from us by following the unsubscribe instructions included in each email or by contacting us directly. You may also adjust your browser settings to refuse cookies, as described in the Cookies section below.

To exercise any of these rights, please contact us using the details in the Contact Information section. We will respond to your request within the timeframe required by applicable law and may ask you to verify your identity before processing your request.

10. Privacy for Children

Our website and services are not directed toward individuals under the age of eighteen. We do not knowingly collect, use, or disclose personal information from children. If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us immediately using the details in the Contact Information section.

Upon learning that we have inadvertently collected personal information from a child without verified parental consent, we will take prompt steps to delete that information from our records. We encourage parents and guardians to monitor their children online activity and to instruct them never to provide personal information through websites without permission.

If we develop services specifically intended for children in the future, we will update this policy with additional protections and obtain verifiable parental consent before collecting any information from children, in compliance with applicable laws including the Childrens Online Privacy Protection Act (COPPA) and similar regulations in other jurisdictions.

11. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and understand where our visitors come from. Cookies are small text files placed on your device by a web server that can later be retrieved by the same server.

Types of Cookies We Use: We use essential cookies necessary for the basic functioning of our website, such as maintaining session state and remembering your cookie preferences. We also use analytics cookies to collect information about how visitors use our site, including which pages are most frequently visited and how users navigate through the site. This data helps us improve our content and user experience.

Third-Party Cookies: Some cookies may be placed by third-party services we use for analytics and site functionality. These third parties may use cookies to collect information about your online activities across different websites over time.

Managing Cookies: Most web browsers allow you to control cookies through their settings. You may configure your browser to refuse all cookies, accept only certain cookies, or notify you when a cookie is being set. Please note that disabling cookies may affect the functionality of certain features on our website. For more detailed information about managing cookies, consult the help documentation for your specific browser.

Do Not Track Signals: Our website currently does not respond to Do Not Track signals sent by browsers. However, you may exercise other privacy controls as described in this policy, including adjusting your cookie preferences and opting out of communications.

12. Third-Party Services and Links

Our website may contain links to third-party websites, platforms, and services that are not owned or controlled by SOSOC MUSIC WORLD LIMITED. This Privacy Policy applies solely to information collected through our website and services. We are not responsible for the privacy practices, content, or security of third-party websites.

We encourage you to review the privacy policies of any third-party websites or services before providing them with your personal information. The inclusion of a link to a third-party website does not constitute an endorsement of that site or its privacy practices.

Our website may also integrate with third-party analytics services, hosting providers, and communication platforms that process data on our behalf. These integrations are governed by data processing agreements that include contractual commitments to protect your information. A list of the primary third-party services we use for data processing is available upon request by contacting us.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal obligations, or other operational requirements. When we make changes, we will revise the Effective Date at the top of this policy and post the updated version on our website.

For material changes that significantly affect how we collect, use, or share personal information, we will provide additional notice as appropriate under the circumstances. This may include sending an email notification to users who have provided their email address, posting a prominent notice on our website, or obtaining renewed consent where required by law.

We encourage you to review this Privacy Policy periodically to stay informed about our information practices. Your continued use of our website and services after the effective date of any updated policy constitutes your acknowledgment and acceptance of the changes.

14. Legal Basis for Processing

For individuals located in jurisdictions that require a legal basis for processing personal data, including the European Economic Area (EEA) and the United Kingdom, we process your information under the following legal bases:

Consent: We may process your information based on your explicit consent, which you may withdraw at any time. For example, when you submit a contact form, you consent to our processing of the information you provide.

Contractual Necessity: We process information necessary for the performance of a contract with you or to take steps at your request before entering into a contract. This includes processing information needed to deliver our computer systems design and consulting services.

Legitimate Interests: We may process your information for our legitimate business interests, provided these interests are not overridden by your rights and interests. Our legitimate interests include improving our services, ensuring the security of our systems, conducting business analytics, and communicating with clients and prospective clients about relevant services.

Legal Obligations: We may process your information to comply with applicable laws, regulations, and legal processes, including tax reporting, record-keeping requirements, and responses to lawful requests from government authorities.

15. Your California Privacy Rights

If you are a California resident, the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) may provide you with additional rights regarding your personal information. Under these laws, California residents have the right to know what personal information we collect, use, disclose, and sell or share.

Categories of Information Collected: We collect identifiers such as name and email address, commercial information related to services provided, Internet or electronic network activity information related to website usage, professional or employment-related information, and inferences drawn from the information we collect.

Right to Know and Delete: California residents may request that we disclose the categories and specific pieces of personal information we have collected, the categories of sources, the business purpose for collection, and the categories of third parties with whom we share information. You may also request deletion of your personal information, subject to certain exceptions.

Right to Opt Out: We do not sell personal information as defined under the CCPA. We also do not share personal information for cross-context behavioral advertising. If our practices change in the future, we will update this policy and provide a mechanism for you to exercise your opt-out rights.

Non-Discrimination: We will not discriminate against you for exercising your rights under California privacy laws. This means we will not deny you services, charge different prices, or provide a different quality of service because you exercised your privacy rights.

To exercise your California privacy rights, please contact us using the details in the Contact Information section. We will verify your identity before processing your request and respond within the timeframe required by California law.

16. GDPR and EEA Resident Rights

For residents of the European Economic Area (EEA), Switzerland, and the United Kingdom, the General Data Protection Regulation (GDPR) and corresponding national laws provide comprehensive data protection rights. As a data controller for the personal information we collect through our website and services, we are committed to upholding these rights.

In addition to the rights described in Section 9 of this policy, EEA residents have specific rights under the GDPR including the right to lodge a complaint with a supervisory authority in your country of residence if you believe our processing of your personal data violates applicable data protection laws. A list of EU data protection authorities is available on the European Data Protection Board website.

We have designated a point of contact for data protection inquiries. If you are an EEA resident and have questions about our data practices or wish to exercise your GDPR rights, please contact us at contact@sosocbeat.autos with the subject line GDPR Data Subject Request. We will respond to your request within one month, with a possible extension of two additional months for complex or numerous requests.

Our processing activities described in this policy are conducted under legal bases including consent, contractual necessity, legitimate interests, and legal obligations, as detailed in the Legal Basis for Processing section above.

17. Data Breach Procedures

SOSOC MUSIC WORLD LIMITED maintains a comprehensive incident response plan designed to detect, contain, and remediate security incidents involving personal data. In the event of a data breach that compromises the confidentiality, integrity, or availability of personal information, we will activate our incident response procedures.

Upon confirmation of a data breach, we will take immediate steps to contain the incident, assess the scope and impact, identify affected individuals and data categories, and implement measures to prevent recurrence. We will document all aspects of the breach investigation and response.

When required by applicable data protection laws, we will notify affected individuals and relevant supervisory authorities of a data breach without undue delay. Our notification will describe the nature of the breach, the categories and approximate number of individuals and records affected, the likely consequences, and the measures we have taken or propose to take to address the breach and mitigate its effects.

We will also provide contact information for the point of contact from whom affected individuals can obtain additional information. All breach notifications will be made in accordance with the timing and content requirements of applicable law, including the 72-hour notification requirement under the GDPR where applicable.

18. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us using the information below. We value your privacy and will make every effort to address your concerns promptly and thoroughly.

SOSOC MUSIC WORLD LIMITED
Room H, 19/F, Corinthia By The Sea Tower 6
23 Tong Yin Street
Tseung Kwan O
Hong Kong (HK)

Email: contact@sosocbeat.autos
Phone: +15169567287
Website: https://www.sosocbeat.autos

We will acknowledge receipt of your inquiry within five business days and provide a substantive response within thirty days. If your request requires additional time, we will inform you of the delay and provide an estimated response date.

If you believe we have not adequately addressed your privacy concerns, you have the right to contact the data protection authority in your jurisdiction. For Hong Kong residents, this is the Office of the Privacy Commissioner for Personal Data. For EU residents, you may contact your local supervisory authority as listed on the European Data Protection Board website.