← Back to Home

Privacy Policy

Last updated: August 2026

1. Introduction

HeyGuest (“we”, “our”, “us”) is committed to protecting the privacy and personal data of our users and their event attendees. This Privacy Policy explains how we collect, use, store, and protect personal data when you use the HeyGuest platform.

We comply with the Personal Data (Privacy) Ordinance (Cap. 486) (“PDPO”) of the Hong Kong Special Administrative Region and other applicable data protection laws.

2. Data We Collect

We collect the following categories of personal data:

  • Account information: name, email address, and password when you register for an account.
  • Event attendee data: names, email addresses, phone numbers, and company information that you upload or enter for your events.
  • Check-in data: timestamps and method of check-in (QR scan or manual).
  • Usage data: how you interact with our platform, including pages visited and features used.
  • Contact enquiries: name, email, and message content when you submit our contact form.

3. How We Use Your Data

We use personal data for the following purposes:

  • Providing and operating the HeyGuest platform and its features.
  • Sending QR code invitations and event-related emails on your behalf.
  • Processing event check-ins and generating attendance reports.
  • Responding to your enquiries and providing customer support.
  • Improving our platform and developing new features.

4. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or destruction. All data is encrypted in transit (TLS/SSL) and at rest.

5. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by law. Event data is retained for a reasonable period after the event to support reporting needs, after which it may be deleted.

6. Your Rights

Under the PDPO, you have the right to:

  • Request access to your personal data held by us.
  • Request correction of any inaccurate personal data.
  • Request deletion of your personal data where applicable.

To exercise any of these rights, please contact us at [email protected].

7. Third-Party Services

We may use third-party service providers to help operate our platform (e.g., cloud hosting, email delivery). These providers are bound by data processing agreements and are only permitted to use personal data as necessary to provide their services.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of any material changes by updating the “Last updated” date at the top of this page.

9. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at [email protected].