Privacy Policy & Personal Information Collection Statement
‍
leasesify endeavours to comply with the obligations and requirements of the Personal Data (Privacy) Ordinance (the “Ordinance”). Respect the confidentiality of all personal data collected and/or stored and/or used by us and endeavour to keep all the personal data safe in compliance with the obligations and requirements of the Ordinance.
‍
Personal Data Collection and Use Policy
‍
leasesify ("we," "us," or "our") is committed to transparency in collecting, using, and protecting your personal data. This policy details our practices for personal data handled via our platform (e.g., website, mobile app, or services).  
‍
We collect the following categories of data when you use leasesify:  
‍
A. Directly Provided Data
‍
- Identity & Contact Details, full name, email, phone number, email address, physical address, government ID (e.g., HKID, passport), date of birth.  
‍
- Rental Information, Property details, tenant/landlord information, lease terms, payment history.
‍
- Financial & Transactional Data, bank account details(collecting & paying rent), credit card information, transactions record and payment history, lease agreements, income verification and credit reports.  
‍
- Property/Asset Details, Property address, photos, ownership documents, desired lease terms, lessees.  
‍
- Communications: support, chat logs, survey responses.
‍
- User Content, messages with other users, uploaded documents (e.g., contracts, invoices), feedback, or support queries.
‍
- Verification: Government-issued ID (e.g., for KYC compliance).
‍
B. Automatically Collected Data
‍
- Technical Data, IP address, device type, browser, operating system, geolocation (approximate).  
‍
- Usage Data, Pages visited, session duration, clickstream data, login times, search queries.  
‍
- Cookies/Tracking Technologies, We use cookies to enhance user experience.
‍
C. Data from Third Parties  
‍
- Credit Checks, data from credit bureaus (TransUnion, Paoccra), identity verification services.
‍
D. Anti Money Laundering(AML) and Know Your Customer(KYC) Data
‍
- Data from agencies (e.g., aereve), supervisory and regulatory services.
‍
E. Global Public Records
‍
- Data from agencies (e.g., Wyith Institute) in regards Governments and Public Reporting Law enforcement lists from Interpol background check, country-specific government and state agencies, and police forces, and lists from governing regulatory bodies. This applies only to publicly accessible data relevant to identity/background checks and does not involve cross-border processing of sensitive data.
‍
F. Purposes of Customer Service Data Processing
‍
i. Verification (where applicable and consented to). Failure to provide valid verification documents may prevent transaction progression.
‍
ii. Handling Enquiries and Complaint to effectively address your concerns and maintain service quality, we process data when you contact us via customer service hotline, email support, in-person appointments, live chat, or written correspondence.
‍
iii. Marketing and Promotion Activities when users participate in our events, campaigns, loyalty programs, or surveys, we process data to administer participation: Manage event registrations, reward fulfilment, and feedback collection. Tailor promotions based on stated preferences, transaction history, or demographic data. Participation is voluntary. Consent for direct marketing can be withdrawn anytime via unsubscribe links or by contacting customer service.
‍
Refusal to provide personal data reasonably required for the purposes specified above may result in our inability to provide the requested services. In such cases, some services or features may not be available due to legal or operational constraints. Prevent us from fulfilling our legal or regulatory obligations (e.g., AML/CTF checks, tenancy registration). Materially impede our ability to perform core contractual functions (e.g., verifying identity for lease execution, processing payments securely).

How We Use Information  
‍
leasesify processes your personal data lawfully, transparently, and solely for specified purposes. We rely on the following legal bases under applicable data protection laws

A. Service Delivery
‍
We process your personal data as necessary fulfil service to you and provide the core functionalities of the leasesify platform: Identity & Eligibility Verification: To confirm your identity, age, legal capacity, and eligibility to enter into lease agreements as either a lessor or lessee. Lease Agreement Facilitation: To prepare, generate, execute, manage, store, and facilitate renewals or terminations of lease agreements between users. Payment Processing: To enable, process, track, and reconcile lease payments, security deposits, fees, and any related financial transactions securely. Communication Platform: To enable essential communication between lessors and lessees regarding listings, agreements, property details, maintenance requests, and other transaction-related matters through our platform's messaging system
‍
B. Legal & Regulatory Compliance
‍
We process your provided tenants consent data where necessary to comply with binding legal and regulatory requirements imposed on leasesify: Fraud & Financial Crime Prevention: To conduct Know Your Customer (KYC), Anti-Money Laundering (AML), and other necessary fraud prevention checks as mandated by law or regulation.
Regulatory Adherence: To comply with relevant tenancy laws, landlord-tenant regulations, consumer protection statutes, and other applicable industry-specific rules.
‍
C. Legitimate Business Interests
‍
We process your personal data based on our legitimate business interests, provided these interests are not overridden by your fundamental rights and freedoms. We always conduct a balancing assessment. Our legitimate interests include:
‍
Platform Improvement & Development: To analyze aggregated and anonymized usage patterns, feature adoption, and user behavior to optimize the platform's functionality, develop new features, enhance overall user experience, and ensure technical stability and performance. Only anonymized, non-identifiable operational data is used for internal feature improvement. No directly identifying data is used.
‍
Security & Fraud Prevention (Operational): To actively monitor platform activity for, detect, prevent, and investigate security incidents, suspicious activities (including fake listings, phishing attempts, account takeovers, and payment fraud), and protect the integrity of the leasesify platform and its users.
‍
Marketing of leasesify Services (Direct): To send you communications about leasesify's own products, services, features, promotions, offers, and updates that we believe may be relevant to your leasing activities (e.g., new features for landlords, special offers for renters). You have the absolute right to opt-out of such marketing communications at any time (easily exercisable via unsubscribe links or your account settings).
‍
Customer Support & Operations: To efficiently provide customer support, troubleshoot technical issues, resolve disputes between users, manage user feedback and reviews, conduct essential business operations (e.g., audits, reporting), and maintain administrative records related to your account and transactions.
‍
D. With Your Consent
‍
We process your personal data for specific purposes only where we have obtained your prior, explicit, and freely given consent. To send you promotional emails, SMS messages, or push notifications about offers, services, or events from leasesify's carefully selected marketing partners or regarding non-core services.
‍
E. Data Retention Period and Destruction
‍
We strictly adhere to the data protection principles and statutory requirements set forth in the **Personal Data (Privacy) Ordinance (Cap. 486) of the Laws of the Hong Kong Special Administrative Region (SAR).
‍
Standard Retention Period: Subject to the exceptions outlined below, we will securely destroy or anonymize the collected personal data after a retention period of seven years has elapsed from the date of collection or the conclusion of the relevant transaction or business relationship, whichever is later. Notwithstanding the standard seven-year retention period, we will retain personal data for a longer duration to satisfy ongoing obligations imposed by applicable laws, regulations, statutory directives, or orders from competent authorities within or outside Hong Kong SAR when such retention is demonstrably necessary specific and lawful purposes.

Data Sharing & Disclosure
‍
leasesify is committed to protecting the privacy of our users in Hong Kong. We share personal data only where necessary, strictly proportionate to the purpose, and in full compliance with the Personal Data (Privacy) Ordinance (Cap. 486) ("PDPO") and other applicable laws. Disclosure occurs under the following specific circumstances:
‍
Service Providers: We engage carefully selected third-party service providers who perform essential functions on our behalf and under our strict contractual instructions. These providers only receive the specific personal data necessary to perform their contracted services and are prohibited from using it for any other purpose. We engage third-party processors under strict contractual terms, ensuring data is only used for the intended purposes.
‍
Categories of Service Providers & Purpose of Sharing: Payment Processing Gateways: (Stripe, local HK payment processors) - To securely process rental payments, deposits, and refunds. Data shared may include name, contact details, payment card/bank information  and transaction details.
‍
Cloud Hosting & Infrastructure Providers: AWS to store data securely and host the leasesify platform.
‍
Partners/Integrations:  Data from payment processors such as Stripe, DocuSign, Bank or CRM tools.  
‍
Identity Verification & Background Check Vendors: - To conduct necessary identity verification, creditworthiness checks (where legally permissible and with consent), and anti-fraud screening for tenancy applications. Data shared may include name, HKID number (securely handled), date of birth, and contact information.
‍
Customer Support & Communication Tools: - To manage user inquiries, provide platform support, and send essential service communications (e.g., ticketing systems, email/SMS notification services). Data shared may include name, contact details, and relevant issue details.
‍
IT Security & Maintenance Providers: - To ensure platform security, perform vulnerability scans, and provide technical support.
‍
leasesify may disclose personal data to government agencies, regulators, law enforcement bodies, courts, or other public authorities if and when we are legally required or permitted to do so under Hong Kong law. This disclosure occurs only upon receipt of valid legal process or when necessary to comply with a binding legal obligation.

Security of Personal Data
‍
Security Measures to maintain a robust electronic security framework designed and implemented in accordance with the requirements stipulated by the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong ("the Ordinance") and Security measures are aligned with widely adopted industry practices and the principles of the PDPO." This improves credibility without overpromising. This comprehensive system incorporates, but is not limited to secure network architecture utilising firewalls and intrusion detection/prevention systems.  Rigorous access control mechanisms, including strong authentication protocols (e.g., multi-factor authentication where appropriate) and role-based access permissions. Regular security audits, vulnerability assessments, and penetration testing to identify and remediate potential weaknesses. Logging and monitoring of system access and activities to detect and respond to potential security incidents. Physical security measures protecting the locations housing our data servers and infrastructure.
‍
We endeavours to comply with the obligations and requirements of the Personal Data (Privacy) Ordinance. Our staff shall respect the confidentiality of all personal data collected and/or stored and/or used by us and endeavor to keep all the personal data safe in compliance with the obligations and requirements of the Ordinance. Restricted access to your personal data within our organisation is strictly limited. Only authorised personnel who have a legitimate and necessary business requirement to access such data shall be granted permission. This necessity arises specifically for purposes to contacting you directly regarding services or enquiries. Providing, administering, or maintaining services requested by you or currently in use. Fulfilling other reasonable business needs directly related to your relationship with us, where access to your data is essential.

Data Retention
‍
leasesify retains personal data in strict adherence to the storage limitation principle under Hong Kong's Personal Data (Privacy) Ordinance (Cap. 486). Data is kept only:
‍
(a) For as long as necessary to fulfil the purposes for which it was collected;
‍
(b) To satisfy statutory or regulatory obligations; or
‍
(c) Where justified by legitimate business needs, provided such retention does not override the data subject’s rights.
‍
Retention Periods, active users, personal data is retained throughout the duration of your active account lifecycle to: Facilitate lease agreements, payment processing, and user communications; Maintain transaction records and account integrity; Deliver ongoing services under our Terms of Use.
‍
Post-Account Closure
‍
Following account termination (user-initiated or by leasesify), Personal data is retained in line with legal or regulatory obligations, typically up to 7 years, or longer where justified: Tax & Financial Regulations: Inland Revenue Ordinance (Cap. 112) – Retention of financial records for audit purposes. Tenancy & Contractual Compliance: Landlord and Tenant (Consolidation) Ordinance (Cap. 7) – Evidence for tenancy disputes. Limitation Ordinance (Cap. 347) – Statute of limitations for contractual/legal claims. Anti-Fraud & Security: Prevention of Money Laundering Ordinance (Cap. 615) – Transaction monitoring requirements.
‍
Market analysis, service optimization, and statistical reporting; Development of AI models to enhance platform functionality. Such data falls outside PDPO’s definition of "personal data" (Section 2).

Cookies
‍
We use:  Essential cookies for site functionality to improve services and manage preferences via browser settings or our cookie banner.  We do not use cookies for behavioural profiling or third-party marketing without explicit consent.
‍
This Privacy Policy Statement may revise from time to time, all the changes will be published in our website www.leasesify.com

Customer Consent Statement
‍
By using leasesify's services, you consent to the collection, use and processing of your lease-related information in accordance with this policy, confirming that you are authorized to provide the information. You may withdraw your consent at any time through your account settings or by contacting support.

This privacy policy statement may be revised from time to time, and all changes will be posted on our website www.leasesify.com. Continued use will constitute your acceptance of this policy.
‍
© 2025 leasesify All rights reserved.

‍