Privacy Policy

Last Updated: August 2026

At ROY SANDT LTD or A COLLECTIVE SPACE (referred to as "ROY SANDT LTD", "A COLLECTIVE SPACE", "ACS", "we", "us", or "our"), we are deeply committed to protecting the privacy, digital security, and personal data of our community members, student groups, and corporate partners.

This Privacy Policy outlines how we collect, use, process, store, and safeguard your personal information when you visit our website, subscribe to our once-a-month newsletter, use our booking widgets, or submit intake forms. We comply fully with the Personal Data (Privacy) Ordinance (Cap. 486) of the Hong Kong Special Administrative Region (PDPO).

1. The Types of Data We Collect

We only collect personal data that is directly necessary for providing our creative wellbeing services, fulfilling orders, and communicating upcoming events. This includes:

Identity & Contact Data: Your name, email address, phone number, and company/school affiliation when you submit an inquiry form or sign up for our newsletter pop-up.
Transaction & Booking Data: Details about payments made through our secure checkout, upcoming public workshop selections, or custom corporate/school service contracts. (Note: We do not store full credit card data on our servers; all payments are processed through encrypted, secure third-party payment gateways integrated with our website).
Program Intake Insights: Information provided via our specialized team questionnaires, such as team dynamics, individual learning goals, or structural comfort levels, used exclusively to safely customize our Fail Better Labs.
Technical & Usage Data: Your IP address, browser type, and how you interact with our website interfaces, tracked passively via cookies when you navigate our website.

2. How We Collect Your Personal Data

We use different methods to gather information from and about you, including:

Direct Interactions: You voluntarily give us your details by filling out contact forms, registering for a Crafts & Yaps session, buying a Spoon Carving Kit, or entering your email into our "No Spam" newsletter subscription block.
Automated Technologies: As you scroll through our site, automated data tracking via standard web cookies captures your browsing patterns to help improve our platform’s user experience.
Third-Party Platforms: If you click through a link or interact with our integrated social media elements (such as our Instagram feed widgets), those external platforms may share basic analytical interaction data with us.

3. How We Use Your Personal Data

ACS uses your data strictly for legitimate operational purposes aligned with our business goals. We will never sell, rent, or trade your personal information. We use it to:

Process your e-commerce product orders, issue booking confirmations, and manage workshop check-ins.
Send our strictly once-a-month newsletter providing early access to upcoming workshop calendars, flash sales, and community updates.
Design, evaluate, and scaffold our tailored school programs and corporate leadership labs to match your group's specific wellness metrics.
Monitor website performance, fix technical bugs on our website breakpoints, and improve our digital layout.

4. Data Sharing and Third-Party Disclosures

To run an efficient digital platform, we share necessary data fragments with trusted service providers who help us operate. These third parties are legally bound to protect your data and are prohibited from using it for their own marketing. They include:

Our primary website hosting platform, database provider, and booking system infrastructure.
Secure Payment Processors: Encrypted external gateways (such as Stripe or PayPal) used to verify and clear retail or public workshop ticket sales safely.
Email Marketing Automation: Platforms used exclusively to hold our subscriber database and distribute our monthly newsletter.
Legal Compliance: We may disclose personal data if explicitly required to do so by Hong Kong law, law enforcement, or court orders under the HKSAR jurisdiction.

5. Data Security, Retention, and Storage

We prioritize your digital and physical peace of mind.

Security Measures: Our website uses secure Hypertext Transfer Protocol Secure (HTTPS) access. All transactional communication is protected via Secure Sockets Layer (SSL) encryption tech.
Retention Boundaries: We store your data only as long as necessary to fulfill the purposes we collected it for, including satisfying any legal, accounting, or business reporting requirements.
Intake Forms Confidentiality: Questionnaire answers regarding mental wellness, fear of failure, or corporate workplace dynamics are treated as confidential organizational assets and are permanently deleted or fully anonymized once a program cycle, feedback report, or pilot cohort analysis is complete.

6. Your Legal Rights Under Hong Kong PDPO

Under the Personal Data (Privacy) Ordinance of Hong Kong, you hold clear rights regarding the data we maintain. You have the right to:

Request verification of whether we hold your personal information.
Request a portable digital copy of the personal data we hold about you.
Request the immediate correction of inaccurate or outdated data.
Opt-Out Instantly: You can remove your email from our monthly subscriber distribution list at any time by clicking the "Unsubscribe" link located at the bottom of every newsletter dispatch, or by sending a direct request through our website contact form.

7. Changes to This Privacy Policy

As our collective expands into additional heritage crafts, event activations, and digital services, we may occasionally update this Privacy Policy. Any adjustments will be published immediately on this page with an updated "Last Updated" date at the top. We encourage you to review this policy periodically.

8. Contact Us

If you have any questions, feedback, or data access requests regarding this policy or our privacy management practices, please contact our founding team directly through our contact form below.