Updated 13 October 2026
Privacy Policy
How KCG Limited handles information shared through Yours to Bloom, and how to exercise your rights.
1. Controller and scope
The controller for Yours to Bloom processing is KCG Limited — 2301, 23/F, Bayfield Building, 99 Hennessy Road, Wan Chai, Hong Kong. Privacy contact: carvalhotheo19@gmail.com. This policy covers browsing yourstobloom.com and enquiries addressed to KCG.
Technical providers may also process information for their own obligations under their policies. This website does not provide customer accounts, payments or newsletter subscriptions.
2. Information involved
When you contact us: first name, email address, message, language and any telephone number, country, project stage or support preferences you choose to share. The form distinguishes required and optional fields.
Browsing involves IP addresses, browser information, requested pages and technical data needed for delivery and security. The website does not ask for age, income or financial assets. Please avoid sensitive information or personal data about other people.
3. Purposes and grounds
Contact information is used to answer your enquiry, understand your project, prepare a proposal and manage related correspondence. Technical information supports website operation, abuse prevention and security.
Where the GDPR applies, preparing a quotation follows pre-contractual steps requested by you; answering other questions and securing the site rely on our legitimate interests. Uses requiring consent need a separate agreement. Contact details are not automatically added to marketing campaigns.
4. Form and email contact
Automatic form delivery is not yet enabled. The application does not save form entries in a database. If you attempt submission, information passes temporarily through the hosting service for validation and the application explains that the enquiry has not been emailed.
You can email carvalhotheo19@gmail.com directly. Your email provider and Google, which provides this Gmail inbox, then process information needed to deliver and manage the message. Opening an email link does not itself send a message.
5. Access and providers
Enquiries sent to KCG are intended for people authorised to respond and providers needed to handle them. Browsing involves OpenAI for Sites and Cloudflare for delivery, security and technical request processing.
KCG has not added data sales, advertising tools or audience analytics to this website. Your information is not published as a testimonial or shared for advertising.
6. Cookies and external content
The atelier_locale cookie remembers a language you manually select for up to twelve months. You can delete it in your browser and continue using the FR, EN and DE links. The hosting platform may also use technical cookies for operation and security.
Fonts and photographs are hosted with the website. Displaying them does not require direct requests to Google Fonts or Unsplash. If you follow an external link, the destination receives browsing information under its own policy. KCG does not implement advertising tracking.
7. Retention
The application does not retain form messages. Its temporary abuse protection counter uses IP addresses for a ten-minute in-memory window and removes expired entries on subsequent requests.
Email correspondence is retained while your enquiry and related follow-up are handled. Once that purpose ends, it should be deleted unless records are needed for a contractual relationship, a legal obligation or the defence of a legal claim. Provider technical logs and other provider data follow their own retention arrangements.
8. International processing
KCG Limited is established in Hong Kong. Technical and email services may process information in other countries, including the United States. Sites does not guarantee that data remains in the visitor’s country.
Applicable transfer rules must be observed. You may contact us for information about providers, processing locations and contractual safeguards relevant to your enquiry. We do not claim an exclusive processing location or an unverified certification.
9. Your rights
To request access or correction, write to carvalhotheo19@gmail.com. Depending on applicable law, you may also request deletion, restriction or a portable copy, object to certain uses or withdraw consent. We may request only the information needed to verify your identity.
You can raise a complaint with the relevant authority, including Hong Kong’s Privacy Commissioner for Personal Data or your local authority where the GDPR applies. KCG does not use profiling or automated decisions with legal effects on this website.
10. Security and changes
The website uses HTTPS, request validation and abuse limitation measures. These reduce risks without providing an absolute guarantee. Access to KCG email and data should be restricted to authorised people.
This policy will be updated if email submission, analytics, processing or providers change. The revision date is displayed at the top of the page.