Privacy Policy Statement

1. The Information We Collect About You

When you use our Platform, do business with us, or register for our service, we collect the following personal information actively provided by you, collected from your device(s) when you interact with us or obtained from third parties. Broadly speaking we will process the following categories of personal data:

Account Data

Including your name, email address, password, telephone number, jurisdiction, user ID, language, communication, interests, age, age representation and other profile settings.

Customer Support Data

Including content of your customer support requests, response from our customer care teams and images attached to our email communications.

Device Information

Including device ID, IP address, session information, device configuration settings, operating system, platform interactions such as items added to the cart, and other data obtained through web-trackers (e.g. cookies, SDKs, pixels).

Location Data

Including address, district, jurisdiction, your device’s longitude and latitude.

Payment Data

Including bank account details, credit card data, payment method data, payment amount, payment recipient details, refund details, and bank receipts.

Service Order Data

Including service order details (e.g. name, service address, date and time of the services, type of services), order IDs, service order history, proof of use of services, service names and quantities.

Single-Sign-On (“SSO”) Options Data

User data (e.g. name, email address, telephone number, jurisdiction, user ID, and your date of birth) shared by third-party SSO providers, such as Google, Apple, and Facebook, that you have an account with, and opted to use their SSO options to log into our platform.

2. How We Will Use the Information About You

We gather this information to allow us to process your registration, process any service orders you may make, provide the services requested, and connect you with the Venues. The relevant information is then used by us, our agents and sub-contractors to communicate with you on any matter relating to the conduct of your account and the provision of the goods services in general. If you agree, we may also contact you about other products and services we think may be of interest to you.

We may also use aggregate information and statistics for the purposes of monitoring website usage in order to help us to develop our website and our services. We may also provide such aggregate information to third parties. These statistics will not include information that can be used to identify you.

From time to time we may provide your information to our customer service agencies for research and analysis purposes so that we can monitor and improve the services we provide. We may contact you to ask you for your feedback and comments on our services.

When you make an account

When creating an account we need to process your Account Data and Device Information. Once you have created an account, we will assign you a user ID that is unique to you (and cannot be used by any outside parties), allowing us to recognise you in our system without needing to use all of your account-related information.

The information we request during the account creation process is necessary to establish the customer relationship with you so that we can provide you with our services; without this process, we cannot provide our services to you.

We offer you the option to register on our platform by using commonly used social networks; provided you have an account with any of these, you can sign up and log in to our platform using your user data from those identity management providers. When logging in with the SSO option, we may get access to SSO Options Data such as your name, email address, telephone number, jurisdiction, user ID, and your date of birth, if you have shared this data with the SSO provider, as this is necessary for creating your account. We never receive or store the password you use for these systems. The categories of data we process about you for this purpose include Account Data and SSO Options Data. We process this personal data for as long as you remain a Customer, or until you delete your account with the SSO provider.

You can access your account profile at any time to make changes, add or edit Payment Data, or view your previous transactions. Your data is also processed to administer your account profile, which includes tasks such as ensuring the accuracy of your personal details, processing any modifications you make, and managing technical issues you might have. The information we process about you for this purpose includes Account Data, Service Order Data, Payment Data, and Device Information.

Placing a Service Order

Once you log in to your account profile and select Venue(s) for a service, it will be saved in your cart. Even if you close your browser or app, you can continue your order from where you left off. To make this feature available on our platform, we process your Account Data, Device Information, and Service Order Data. We retain certain Order Data as necessary to maintain your user history and to process refunds where required. All other related data is deleted as soon as we no longer need it.

If you decide to proceed with your service order and the selected Venue(s), we will need to receive the payment for the services you have selected. When you place an order and select a payment provider available on the Platform, your information will be shared with your selected payment provider to initiate the payment process. To fulfil the requirement to provide you with an invoice and to facilitate your payment, we need to process your Account Data, Service Order Data, and Payment Data.

In order to make the ordering process convenient, the Platform allows you to save your preferred payment method, so that you will not have to re-enter your payment details the next time you need to make payments on the Platform. The information you can save within this feature is your Payment Data. We will keep this personal data for as long as you choose to share it with us.

Marketing

If you have consented to receiving marketing materials from us when signing up for our services via the Platform, we may also wish to provide you with information about special features of the Platform or any other service or products we think may be of interest to you. You are always free to opt-out from such communications. If you agree to us providing you with marketing information, you can always opt out at a later date. To make this possible, we use your Account Data, Location Data, Device Information and Service Order Data. This information enables us to promote products and services available on our platform.

If you have consented to receiving marketing materials from third parties when signing up for our services via the Platform, we may also want to provide you with related information from third parties we think may be of interest to you. We may also provide your information to carefully selected third parties whose products or services we believe may be of interest to you. You are always free to opt-out from such communications.

We will process the data we process within this purpose for the duration of your account with us. We will store the information if you have opted in to or out of receiving such communications for an appropriate retention period in line with applicable laws.

3. Use of Cookies, Other Information-Gathering Technologies and Personalised Content

Cookies and information-gathering technologies

We use web tracking technologies (e.g. cookies, SDKs, measuring pixels) when you browse the Platform, whether you are a Customer or a visitor. These technologies enable us to facilitate the functioning of the Platform, improve its performance and security, or understand how our users interact with the Platform. In addition, these technologies allow us to deliver customised content or targeted advertising to our users.

Cookies are text files placed on your computer to collect standard internet log information and visitor behaviour information. The information is used to track visitor use of the website and to compile statistical reports on website activity. You can set your browser not to accept cookies, and your browser’s help pages will tell you how to remove cookies from your browser. However, in a few cases some of our website features may not function if you remove cookies from your browser.

Cookies and web tracking technologies may be used to collect data that we classify as Device Information.

We perform data analytics to improve the Platform, for example, in order to analyse and optimise the user experience, we may show our Customers different versions of our platform interface or different pricing models in the context of so-called A/B testing. Analysing how users interact with different versions enables us to define which version performs better. In this regard, we process Service Order Data and Device Information.

Personalised content

When you browse the Platform, we show you a variety of Venues and associated services and products. We may customise the content on the Platform so that you are shown Venues who are close to you, who you have used in the past, or services and products we believe may be of interest to you. To make this feature available, we need your Account Data, Location Data, Service Order Data, and Device Information. The only result of this process will be that you will receive suggestions about products or vendors that match your interests and preferences.

4. How We Protect Your Information

We have put in place security procedures and technical and organisational measures to safeguard your personal information: suitable servers, network equipment and cloud services to deliver our platform, to ensure high performance and uninterrupted service. We will use all reasonable efforts to safeguard your personal information. However, you should be aware that the use of the internet is not entirely secure and for this reason we cannot guarantee the security or integrity of any personal information which is transferred from you or to you via the internet. One of our main priorities is to provide you with a secure platform and a safe ordering experience. Part of achieving this goal involves implementing proactive measures to detect and prevent fraudulent activity. For this purpose, we process your Account Data, Payment Data, Location Data, Device Information, and Service Order Data.

5. Handling Your Data

There may be situations when we are required to share personal data with public authorities or where we have to process your personal data to initiate or defend legal claims and uphold our rights and interests. As such, we may disclose and process certain data we hold about you, to the extent strictly necessary to conduct and conclude these legal proceedings and investigations, and to uphold our rights and interests. We retain this information for as long as necessary to comply with our legal obligations including related to ongoing proceedings and investigations.

Internal handling of your data

Within CleanSpace, only staff members will receive access to your personal data to fulfil duties or look into your support request. In certain scenarios, we also need to share your personal data with recipients outside of our company (listed below). Please be assured that your data is shared with these recipients only to the extent necessary for the specified purposes and only as we are legally permitted to do so.

External handling of your data

CleanSpace uses third-party service providers as is necessary to perform its operations effectively and efficiently. Many of these providers process your personal data as so-called data processors. This means they are only allowed to process your personal data under our instructions and have no claims whatsoever to process your personal data for their own, independent purposes.

CleanSpace is also required to work with third parties, to whom we share your personal data, such as consultants, lawyers, accountants, or other professionals who receive your data from us under a contract and process your personal data for legal reasons, or to protect our own rights and interests. Under no circumstances will we sell or rent your personal data to third parties without your explicit, informed consent.

From time to time CleanSpace may be requested and required to disclose personal data to public authorities. In some circumstances, we may disclose personal data with public bodies in order to bring or defend legal claims, to protect our rights and interests, or to address security concerns.

6. Overseas Transfers

The information you provide may be transferred to countries outside Hong Kong that do not have similar protections in place regarding your data and restrictions on its use as set out in this policy. However, we will take steps to ensure adequate protections are in place to ensure the security of your information. By submitting your information you consent to these transfers for the purposes specified above. If we transfer your personal data from Hong Kong to a jurisdiction outside of Hong Kong, we take appropriate safeguards to ensure that these transfers provide a level of protection that complies with data protection requirements.

7. Access to Your Information and Updating and Correcting Your Information

You have the right to request a copy of the information that we hold about you. If you would like a copy of some or all of your personal information, please contact us. We may make a small charge for this service.

We want to ensure that your personal information is accurate and up to date. If any of the information that you have provided to CleanSpace changes, for example if you change your email address, name or payment details, or if you wish to cancel your registration, please let us know the correct details by contacting us or by updating the same on the Platform. You may ask us, or we may ask you, to correct information you or we think is inaccurate, and you may also ask us to remove information which is inaccurate.

8. Sale of Business

If CleanSpace’s business is sold or integrated with another business your details may be disclosed to our advisers and any prospective purchasers and their advisers and will be passed on to the new owners of the business.

9. Your Consent

By submitting your personal information you consent to the use of that information as set out in this policy.

10. How Long Do We Keep Your Data?

We retain your personal data for as long as it is necessary to achieve the purposes we described above. The duration for which we retain your personal data is determined by factors such as the scope, nature and purposes of the personal data processing, and whether we are bound by legal obligations that require us to retain your personal data. We generally delete your data (including daily backups) after the purposes have been fulfilled, unless we have a right to retain your data for a longer period in accordance with applicable laws or we have obtained your consent.

Typically, we retain personal data for the following periods:

• Account Data: retained while account is active; deleted within 90 days of account closure.
• Payment Data: 7 years from the date of the relevant transaction.
• Service Order Data: 7 years.
• Device Information: 24 months from last activity.
• Location Data: 30 days from collection.
• Customer Support Data: 24 months from ticket close.
• Marketing consent records: 3 years after consent withdrawal.

11. Changes to Privacy Policy

We keep our privacy policy under regular review. If we change our privacy policy we will post the changes on this page, and place notices on other pages of the website, so that you may be aware of the information we collect and how we use it at all times. This privacy policy was last updated on 13 May 2026.

12. How to Contact CleanSpace

We welcome your views about our website and our privacy policy. If you would like to contact us with any queries or comments please reach out via our contact page.

13. Links to Other Websites

Our website and mobile applications contain links to other websites. This privacy policy only applies to this website and mobile applications so when you link to other websites you should read their own privacy policies.

14. Prevailing Language

If this Privacy Policy Statement has been translated into Chinese, in the event of any inconsistency between the English version and the Chinese version, the English version shall prevail.