Data processing, storage duration and automatic deletion.
These terms explain how Mega Step (HK) Ltd. processes, stores and deletes inspection data generated in connection with quality control, factory inspection and related reporting services.
1. Inspection data covered by these terms
In connection with quality control, factory inspection, pre-shipment inspection, during-production inspection, container loading supervision, audit, sample verification and related services, Mega Step (HK) Ltd. collects, processes and stores inspection data. This may include inspection reports, photographs, videos, test results, checklists, AQL sampling details, measurements, defect notes, product documents and related service documentation.
2. Purpose of processing
Inspection data is processed only for performing the agreed service, documenting the results, delivering reports, supporting customer review, enabling supplier follow-up, maintaining service traceability and fulfilling Mega Step's contractual and legal obligations.
3. Legal basis
The legal basis for processing is the performance of the contract where applicable, Mega Step's legitimate interest in proper execution and verifiability of inspection services, and any additional legal basis required by applicable data protection law.
4. Storage location
Inspection data for online reports may be stored in Cloudflare R2 Object Storage and related Cloudflare services used for report delivery, security and lifecycle management. Access is limited to the service workflow and authorized operational users or systems.
5. Automatic deletion after report handover
After handover of the final inspection report to the client, inspection data stored for online report delivery is automatically and permanently deleted after a maximum period of ninety (90) days through configured lifecycle rules, unless a longer retention period applies under section 6.
6. Longer retention
Mega Step may retain inspection data for a longer period only where statutory or regulatory retention obligations apply, the client has given prior written consent to extended storage, or retention is necessary for the establishment, exercise or defence of legal claims. In such cases, the client will be informed where appropriate.
7. Early deletion requests
The client may request earlier deletion of inspection data, provided that the request does not conflict with legal, accounting, contractual, dispute-handling or compliance obligations of Mega Step.
8. Personal data and DPA
Where Mega Step processes personal data on behalf of a client, these terms apply together with the Privacy Policy and any separate Data Processing Agreement agreed with the client. The client must ensure that personal data, supplier data or employee data provided to Mega Step may lawfully be used for the requested service.
9. Report links and access
Online report links are intended for the client and authorized recipients. Clients should avoid forwarding report links to unauthorized parties. Mega Step may disable access, rotate links or delete report materials where required for security, confidentiality, legal compliance or lifecycle deletion.
10. Governing law
These data processing terms are governed by the laws of Hong Kong Special Administrative Region. Any dispute arising out of or in connection with these terms shall be subject to the exclusive jurisdiction of the courts of Hong Kong, unless otherwise agreed in writing.