Privacy Policy

Last Updated: July 31, 2026

1. Introduction

This Privacy Policy describes how HONG KONG LIVING RIVER EDUCATION TECHNOLOGY CO., LIMITED, operating as LIVING RIVER, collects, uses, stores, and protects personal information obtained through our website located at www.livingriver.mom and any related services, products, applications, and platforms that we provide. LIVING RIVER is committed to safeguarding the privacy of all individuals who interact with our organization, including website visitors, clients, partners, and end-users of our education technology solutions.

By accessing or using any of our services, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your information as described herein. If you do not agree with any part of this policy, you should discontinue use of our website and services immediately.

At LIVING RIVER, we recognize that privacy is a fundamental right. We have designed our systems and processes with privacy by design principles, ensuring that data protection is embedded into every layer of our technology stack. This policy outlines your rights and our obligations under applicable data protection laws, including but not limited to the Personal Data (Privacy) Ordinance of Hong Kong, the General Data Protection Regulation (GDPR) where applicable, and other relevant international privacy frameworks.

2. Information We Collect

We collect several categories of information depending on the nature of your interaction with our services. Each category serves a specific purpose and is treated with the utmost care and respect for your privacy. The types of information we may collect include the following:

2.1 Personal Identification Information

When you voluntarily submit a contact form, sign up for a service, request a consultation, or communicate with us through any channel, we may collect personal identification information. This includes your full name, email address, telephone number, company or institutional affiliation, job title, and physical mailing address. We collect only the minimum amount of personal data necessary to fulfill the purpose for which it was provided. You are under no obligation to provide this information; however, certain services and communications may not be available without it.

2.2 Technical and Usage Data

When you visit our website, our servers automatically record certain technical information. This data includes your Internet Protocol (IP) address, browser type and version, operating system, referring and exit pages, date and time stamps, pages visited, time spent on pages, clickstream data, and other diagnostic information. This information is collected through server logs, cookies, and similar tracking technologies. It helps us understand how visitors interact with our website, identify performance issues, detect and prevent security threats, and improve the overall user experience.

2.3 Cookies and Similar Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and collect analytical data. Cookies are small text files stored on your device by your web browser. We use essential cookies that are strictly necessary for the operation of our website, such as maintaining session state and remembering your cookie preferences. We also use analytical cookies to understand website traffic patterns and user behavior. These analytical cookies collect aggregated and anonymized data that cannot be used to identify individual users. You may configure your browser settings to refuse all or some cookies, or to alert you when cookies are being sent. Please note that disabling cookies may affect the functionality of certain features on our website.

2.4 Communication Data

When you contact us via email, contact forms, telephone, or any other communication channel, we collect and store the content of your communication along with any associated metadata. This includes the subject of your inquiry, the message body, attachments, and the date and time of the communication. We use this information to respond to your inquiries, provide customer support, and maintain records of our communications for quality assurance and legal compliance purposes.

2.5 Service Usage Data

For clients who subscribe to our education technology platforms and services, we may collect additional usage data related to your interaction with our products. This data includes account login information, feature utilization metrics, content interaction analytics, and system performance statistics. This information is used exclusively for service improvement, technical support, billing purposes, and to deliver the functionality you have contracted us to provide.

3. How We Use Your Information

LIVING RIVER processes personal information for specific, explicit, and legitimate purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected unless we obtain your explicit consent or are required to do so by law. The following list comprehensively describes all purposes for which we may use your information:

To provide, operate, and maintain our website and services, including troubleshooting, data analysis, testing, system maintenance, and security monitoring. To process and respond to your inquiries, requests, and applications submitted through our contact forms or other communication channels. To communicate with you about your account, our services, updates, security alerts, and administrative messages. To personalize your experience and deliver content and product offerings relevant to your interests and organizational needs. To conduct research, analysis, and development activities aimed at improving our products, services, and user interfaces. To detect, prevent, and address technical issues, fraud, security breaches, and other harmful or illegal activities. To comply with applicable legal obligations, court orders, and governmental requests that are properly served upon us. To enforce our Terms of Service and other contractual agreements, including pursuing available legal remedies and limiting damages we may sustain.

4. Legal Basis for Processing

We process personal data only when we have a valid legal basis to do so. Depending on the jurisdiction and the specific context of the data processing activity, our legal bases include one or more of the following: the performance of a contract with you or your organization, such as fulfilling our obligations under a service agreement; compliance with a legal obligation to which we are subject, such as tax reporting or responding to lawful data access requests; our legitimate business interests, provided those interests are not overridden by your data protection rights and freedoms; and your explicit consent, which you may withdraw at any time without affecting the lawfulness of processing carried out prior to such withdrawal.

5. Data Sharing and Disclosure

LIVING RIVER does not sell, rent, or trade your personal information to third parties for their marketing purposes. We may share your information only in the limited circumstances described below and always with appropriate safeguards in place to protect your privacy.

5.1 Service Providers

We may engage trusted third-party companies and individuals to facilitate our services, provide services on our behalf, perform service-related functions, or assist us in analyzing how our services are used. These third parties have access to your personal information only to perform these tasks on our behalf and are contractually obligated not to disclose or use it for any other purpose. Categories of service providers we may use include cloud hosting providers, email delivery services, customer relationship management platforms, analytics providers, and payment processors.

5.2 Business Transfers

In the event that LIVING RIVER is involved in a merger, acquisition, reorganization, sale of assets, or bankruptcy proceeding, your personal information may be transferred as part of that transaction. We will provide notice on our website and via email before your personal information becomes subject to a different privacy policy.

5.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities, including courts, law enforcement agencies, and regulatory bodies. We will evaluate each request on its merits and disclose information only where we have a good-faith belief that such action is necessary to comply with a legal obligation, protect and defend our rights or property, prevent or investigate possible wrongdoing, protect the personal safety of our users or the public, or protect against legal liability.

5.4 With Your Consent

We may share your personal information for purposes not otherwise described in this policy only with your explicit, informed consent obtained at or before the time of such sharing.

6. Data Retention

We retain personal information for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting obligations. The specific retention period depends on the nature of the data and the purposes for which it was processed. When determining the appropriate retention period, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process the data, and whether those purposes can be achieved through other means, as well as applicable legal requirements.

Personal data collected through our contact forms is typically retained for a period of twenty-four months from the date of last correspondence, after which it is securely deleted or anonymized. Website usage data collected through server logs and analytics is retained for a maximum period of fourteen months before being aggregated or deleted. Account-related data for active clients is retained for the duration of the business relationship plus a period of six years following termination to comply with legal and contractual obligations. You may request earlier deletion of your data where such deletion does not conflict with our legal obligations or legitimate business needs.

7. Data Security

The security of your personal information is of paramount importance to us. We implement and maintain a comprehensive set of administrative, technical, and physical safeguards designed to protect your data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. Our security measures are regularly reviewed, tested, and updated to address evolving threats and vulnerabilities in the cybersecurity landscape.

Our technical safeguards include industry-standard encryption protocols for data in transit using Transport Layer Security (TLS) technology, encryption of sensitive data at rest using AES-256 encryption algorithms, network firewalls and intrusion detection and prevention systems, regular vulnerability scanning and penetration testing conducted by independent security firms, multi-factor authentication for administrative access to production systems, role-based access controls with the principle of least privilege, and continuous security monitoring with automated alerting and incident response procedures.

Despite our best efforts, no method of electronic storage or transmission over the Internet is completely secure. While we strive to protect your personal information using commercially acceptable means, we cannot guarantee its absolute security. In the event of a data breach, we will notify affected individuals and relevant supervisory authorities within the timeframes required by applicable law and take immediate remedial action to contain and mitigate the impact of the breach.

8. Your Data Protection Rights

Depending on your jurisdiction, you may have certain rights regarding the personal information we hold about you. LIVING RIVER respects and facilitates the exercise of these rights in accordance with applicable data protection laws. The rights available to you may include:

The right of access, which entitles you to request a copy of the personal data we hold about you and to receive information about how we process it. The right to rectification, which allows you to request that we correct any inaccurate or incomplete personal data we hold about you. The right to erasure, also known as the right to be forgotten, which permits you to request the deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected or when you withdraw your consent. The right to restrict processing, which enables you to request that we limit the processing of your personal data under specific conditions. The right to data portability, which allows you to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller. The right to object, which permits you to object to the processing of your personal data in certain situations, including processing for direct marketing purposes. The right to withdraw consent at any time, where processing is based on your consent, without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact us using the details provided in the Contact Information section of this policy. We will respond to your request within the timeframe required by applicable law, which is typically thirty calendar days. We may need to verify your identity before processing your request and may request additional information to confirm your identity. In certain circumstances, we may be unable to fulfill your request, such as when doing so would compromise our legal obligations, interfere with the rights of others, or undermine our ability to provide services you have contracted for. In such cases, we will provide you with a clear explanation of the reasons for our decision and inform you of any available remedies.

9. International Data Transfers

As a company headquartered in Hong Kong with a global client base, LIVING RIVER may transfer, store, and process your personal information in countries outside your country of residence, including Hong Kong, the United States, and other jurisdictions where our service providers operate. We take appropriate safeguards to ensure that your personal data receives an adequate level of protection regardless of where it is processed. These safeguards may include the use of standard contractual clauses approved by relevant data protection authorities, adherence to binding corporate rules, or reliance on adequacy decisions where applicable. By submitting your personal information to us, you consent to such transfers, storing, and processing.

10. Children Privacy

Our website and services are not directed to individuals under the age of sixteen. We do not knowingly collect, use, or disclose personal information from children under the age of sixteen without verifiable parental consent. If we become aware that we have collected personal data from a child under sixteen without verification of parental consent, we will take immediate steps to delete that information from our servers. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately so that we can take the necessary corrective action.

For our education technology products deployed in K-12 school environments, we work directly with educational institutions who act as data controllers for student data. We contractually require these institutions to obtain all necessary parental consents and to comply with applicable laws governing the collection and use of student data, including the Family Educational Rights and Privacy Act (FERPA) in the United States and equivalent legislation in other jurisdictions.

11. Third-Party Links

Our website may contain links to third-party websites, plug-ins, services, or applications that are not owned or controlled by LIVING RIVER. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control and are not responsible for the privacy practices or content of these third-party sites. We encourage you to read the privacy policies of every website you visit and every service you use. This Privacy Policy applies solely to information collected by LIVING RIVER through our own website and services.

12. Do Not Track Signals

Our website does not currently respond to Do Not Track (DNT) signals transmitted by web browsers. DNT is a preference you can set in your web browser to inform websites that you do not want to be tracked. While there is no consensus on how to interpret such signals, we will continue to monitor developments in this area and may adjust our practices as standards evolve. In the meantime, you may exercise certain privacy controls through your browser settings and by configuring your cookie preferences as described in this policy.

13. Automated Decision-Making

LIVING RIVER does not engage in fully automated decision-making processes that produce legal effects concerning you or similarly significantly affect you. Where our systems use algorithms or automated processing to support decision-making, a human being is always involved in the final determination. If this practice changes in the future, we will update this policy, notify you, and provide you with the opportunity to opt out where required by law.

14. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will post the revised policy on this page and update the Last Updated date at the top of the document. We may also provide additional notice, such as a prominent notification on our website homepage or sending you an email notification, depending on the significance of the changes. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website and services after any changes to this Privacy Policy constitutes your acceptance of the updated terms.

15. Contact Information

If you have any questions, concerns, complaints, or requests regarding this Privacy Policy or our privacy practices, please do not hesitate to contact us using the information below. We take all privacy concerns seriously and will respond to your inquiry promptly and thoroughly.

Data Protection Officer
HONG KONG LIVING RIVER EDUCATION TECHNOLOGY CO., LIMITED
Rm 13 28/F NEW TECH PLZ, 34 TAI YAU ST
San Po Kong, Hong Kong
Email: support@livingriver.mom
Phone: +18175531593
Website: www.livingriver.mom

If you are not satisfied with our response or believe that we are processing your personal data in violation of applicable law, you have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction. For Hong Kong residents, the supervisory authority is the Office of the Privacy Commissioner for Personal Data (PCPD). For residents of the European Economic Area, you may lodge a complaint with the data protection authority in your member state.