Privacy Policy
Last updated: 2026-04-011. Introduction
KOLab ("we", "us", or "our"), operated by KOLab Inc., is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and disclose personal data in connection with our influencer marketing platform and related services (the "Services"), in accordance with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong ("PDPO").
By using our Services, you acknowledge that you have read and understood this Privacy Policy.
2. Data We Collect
We may collect the following categories of personal data:
Account Information: Name, email address, phone number, company name, job title, and login credentials when you register for an account or submit a contact form.
Usage Data: Information about how you interact with our platform, including pages visited, features used, campaign data, search queries, and session duration.
Device and Technical Data: IP address, browser type, operating system, device identifiers, and referral URLs.
Payment Information: Billing details and transaction records processed through our third-party payment providers (Stripe). We do not store full credit card numbers on our servers.
Public Social Media Data: Publicly available information from social media platforms (Instagram, YouTube, TikTok, Threads) related to influencer/KOL profiles, including follower counts, engagement metrics, and public posts, for the purpose of providing our marketing analytics services.
3. How We Use Your Data
We use your personal data for the following purposes:
- To provide, maintain, and improve our Services
- To process transactions and manage your account
- To match brands with suitable influencers/KOLs
- To generate campaign analytics and performance reports
- To communicate with you about your account, campaigns, and our services
- To send marketing communications (with your consent, which you may withdraw at any time)
- To comply with legal obligations and enforce our terms
- To detect, prevent, and address fraud or security issues
4. Legal Basis for Processing
Under the PDPO, we process your personal data on the basis of: (a) your consent; (b) the necessity of performing our contractual obligations to you; (c) compliance with legal obligations; and (d) our legitimate business interests, provided these do not override your data protection rights.
5. Data Sharing and Disclosure
We may share your personal data with:
- Service Providers: Third-party vendors who assist us in operating our platform, including cloud hosting (Microsoft Azure), payment processing (Stripe), and analytics services.
- Business Partners: Brands or influencers you choose to connect with through our platform, limited to the data necessary for campaign collaboration.
- Affiliated Companies: Our parent company, Altech Digital, and its subsidiaries, for business operations and support.
- Legal Requirements: When required by law, regulation, legal process, or governmental request.
We do not sell your personal data to third parties.
6. Cross-Border Data Transfers
Your personal data may be transferred to and stored on servers located outside of Hong Kong, including in regions where our cloud infrastructure providers operate. We take reasonable steps to ensure that any cross-border transfer of personal data is conducted in compliance with the PDPO and that your data receives adequate protection.
7. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. When your data is no longer needed, we will securely delete or anonymise it.
8. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption of data in transit (HTTPS/TLS), access controls, and regular security assessments. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.
9. Your Rights
Under the PDPO, you have the right to:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request that we correct any inaccurate or incomplete personal data.
- Withdrawal of Consent: Withdraw your consent to marketing communications at any time.
- Deletion: Request deletion of your account and associated personal data, subject to our legal obligations to retain certain records.
To exercise any of these rights, please contact us at contact@kolab-inc.com. We will respond to your request within 40 days, as required by the PDPO.
10. Cookies and Tracking
Our platform uses cookies and similar tracking technologies (including Meta Pixel) to analyse usage patterns, measure advertising effectiveness, and improve our Services. You may manage your cookie preferences through your browser settings.
11. Third-Party Links
Our Services may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal data.
12. Children's Privacy
Our Services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child, we will take steps to delete it promptly.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on our website with a revised "Last updated" date. Your continued use of our Services after any changes constitutes your acceptance of the updated policy.
14. Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:
You may also lodge a complaint with the Office of the Privacy Commissioner for Personal Data, Hong Kong, if you believe your data protection rights have been violated.