Effective Date: August 1, 2025
← Back to HomepageWelcome to the Privacy Policy of DoraBox, a service provided by NovaNatural Technologies Limited. This document explains how we collect, use, store, share, and protect your personal information when you access or use our website at https://www.dorabox.mom and any related services, applications, or platforms that we operate. The DoraBox platform is designed and developed with a strong commitment to safeguarding the privacy and data rights of all users, visitors, and clients who interact with our computer systems design and professional technical services.
By accessing or using the DoraBox website and services, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with any part of this policy, you should discontinue use of our website and services immediately. This Privacy Policy applies to all information collected through our website, email communications, telephone interactions, and any other means by which you engage with NovaNatural Technologies Limited or the DoraBox platform.
NovaNatural Technologies Limited, with its registered office at Rm 40G 19/F BLK AD GOLDEN BEAR IND CTR, 66-82 CHAI WAN KOK ST, Chai Wan, Hong Kong (HK), is the data controller responsible for the processing of your personal data under applicable data protection laws. We operate within the Computer Systems Design and Related Services industry and are committed to complying with all relevant privacy regulations including the Hong Kong Personal Data (Privacy) Ordinance and other applicable international data protection frameworks.
In the course of providing our integrated computer systems design and professional technical services, DoraBox may collect several categories of personal information. The types of data we collect depend on the nature of your interaction with our platform and the services you request from us.
Personal Identification Information: This includes data that can be used to identify you directly, such as your full name, email address, telephone number, postal address, company name, job title, and industry sector. We collect this information when you fill out contact forms on our website, request a consultation, subscribe to our newsletter, or correspond with us through any communication channel.
Technical and Usage Data: When you visit the DoraBox website, our servers automatically record certain technical information. This includes your Internet Protocol (IP) address, browser type and version, operating system, device type, screen resolution, referring website URLs, pages visited on our site, timestamps of visits, and other diagnostic data. This information helps us understand how visitors interact with our website and allows us to optimize the user experience.
Communication Records: We retain records of any communications you have with our team, including emails, contact form submissions, telephone call notes, and support tickets. These records help us provide consistent and high-quality service and resolve any issues that may arise.
Business Information: In the context of providing professional services, we may collect information about your business operations, technical infrastructure, project requirements, and strategic objectives. This information is essential for delivering tailored systems design and integration solutions.
We collect personal information through various methods and channels, all of which are designed to be transparent and lawful. Understanding how your data reaches us is an important part of maintaining trust in our data handling practices.
Direct Collection: The majority of personal information we hold is provided directly by you. This occurs when you complete and submit forms on our website, send us an email message, call our telephone number at +12258772984, participate in a consultation session, or otherwise voluntarily share your details with the DoraBox team. You are under no obligation to provide personal information, but certain services may be unavailable without it.
Automated Collection: As you navigate through the DoraBox website, certain information is collected automatically through cookies, server logs, and similar technologies. This automated collection helps us analyze traffic patterns, detect and prevent fraudulent activity, and improve the performance and security of our digital infrastructure. Detailed information about our use of cookies is provided in the Cookies and Tracking Technologies section of this policy.
Third-Party Sources: On occasion, we may receive information about you from third-party service providers, business partners, or publicly available sources. For example, if a colleague refers you to our services, we may receive your contact details from that referral. We ensure that any third-party data sharing complies with applicable laws and is governed by appropriate contractual safeguards.
DoraBox and NovaNatural Technologies Limited use the personal information we collect for specific, legitimate business purposes. We are committed to using your data responsibly and only for the purposes described in this policy or as otherwise disclosed to you at the time of collection.
Service Delivery and Fulfillment: We use your information to provide, maintain, and improve our computer systems design and technical consulting services. This includes responding to your inquiries, preparing project proposals, delivering contracted services, processing transactions, and providing ongoing support and account management.
Communication and Engagement: Your contact information allows us to communicate with you about your projects, send service-related updates and notifications, respond to your requests and questions, and share relevant information about our services that may interest you. You may opt out of marketing communications at any time by following the unsubscribe instructions included in each message or by contacting us directly.
Website Improvement and Analytics: Technical and usage data is aggregated and analyzed to help us understand how visitors interact with our website. This enables us to identify areas for improvement, optimize navigation and content layout, troubleshoot technical issues, and ensure that our online presence meets the needs and expectations of our audience.
Legal Compliance and Protection: We may process your information as necessary to comply with applicable laws, regulations, legal processes, or governmental requests. We also use data to enforce our Terms of Service, investigate potential violations, detect and prevent fraud or security incidents, and protect the rights, property, and safety of DoraBox, our clients, and the public.
Protecting the security and integrity of your personal information is a fundamental priority at DoraBox. We implement a comprehensive set of technical, administrative, and physical safeguards designed to protect your data against unauthorized access, disclosure, alteration, and destruction.
Our security measures include but are not limited to: encryption of data in transit using Transport Layer Security (TLS) protocols, encryption of sensitive data at rest, role-based access controls that limit data access to authorized personnel only, regular security assessments and vulnerability scans, intrusion detection and prevention systems, multi-factor authentication for administrative access, and employee training on data protection and privacy best practices.
While we strive to use commercially acceptable means to protect your personal information, no method of electronic storage or transmission over the Internet is one hundred percent secure. We cannot guarantee absolute security, and you acknowledge that you provide your personal information at your own risk. In the event of a data breach, we will follow our established incident response procedures and notify affected individuals and relevant authorities as required by applicable law.
DoraBox retains personal information only for as long as is necessary to fulfill the purposes for which it was collected, or as required to comply with legal obligations, resolve disputes, and enforce our agreements. The specific retention period for different categories of data is determined based on the following criteria.
Information related to active client engagements and ongoing service provision is retained for the duration of the client relationship plus an additional period of seven years after the relationship ends to comply with tax, accounting, and legal record-keeping requirements. Contact form submissions and general inquiry data are retained for a period of two years from the date of last interaction, unless a longer retention period is required or permitted by law. Website usage data and analytics logs are typically retained for up to twenty-six months before being aggregated or anonymized.
When personal information is no longer needed for the purposes described above, we will securely delete, destroy, or anonymize it using industry-standard data sanitization techniques. You may request the deletion of your personal data at any time by contacting us using the details provided in the Contact Information section of this policy.
Depending on your jurisdiction and the applicable data protection laws, you may have certain rights regarding the personal information we hold about you. DoraBox is committed to honoring these rights and providing you with meaningful control over your data.
Right of Access: You have the right to request a copy of the personal information we hold about you, along with details about how we process it. We will provide this information in a commonly used electronic format, subject to any legal restrictions and the need to verify your identity.
Right of Rectification: If you believe that any personal information we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. We encourage you to keep us informed of any changes to your personal details.
Right of Erasure: You may request the deletion of your personal information under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, or when you withdraw your consent and there is no other legal basis for processing.
Right to Restrict Processing: You have the right to request that we limit the processing of your personal data in specific situations, including when you contest the accuracy of the data or object to our processing activities.
Right to Data Portability: You may request that we transfer your personal data to another organization, or directly to you, in a structured, commonly used, and machine-readable format, where technically feasible.
Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, and we will cease processing unless we demonstrate compelling legitimate grounds that override your interests.
To exercise any of these rights, please contact us at service@dorabox.mom. We will respond to your request within the timeframe required by applicable law, typically within thirty days. We may need to verify your identity before processing your request.
DoraBox and NovaNatural Technologies Limited do not knowingly collect, use, or disclose personal information from children under the age of thirteen. Our website and services are designed for business professionals and are not intended for use by minors. We take the privacy of children very seriously and have implemented measures to prevent the inadvertent collection of data from individuals under the age of thirteen.
If we become aware that we have inadvertently collected personal information from a child under the age of thirteen without verifiable parental consent, we will take immediate steps to delete that information from our systems. If you are a parent or legal guardian and you believe that your child has provided us with personal information without your consent, please contact us immediately at service@dorabox.mom so that we can promptly address the situation.
For users between the ages of thirteen and eighteen in certain jurisdictions, we recommend that you review this Privacy Policy with your parent or guardian to ensure that you both understand how we handle personal data and the rights available to you under applicable law.
DoraBox is operated by NovaNatural Technologies Limited, a company registered in Hong Kong. Your personal information may be transferred to, stored, and processed in Hong Kong and other jurisdictions where our service providers and business partners maintain facilities. These jurisdictions may have data protection laws that differ from the laws in your country of residence.
When we transfer personal data across international borders, we take appropriate steps to ensure that your information receives an adequate level of protection, consistent with the standards described in this Privacy Policy. These steps may include entering into standard contractual clauses approved by relevant data protection authorities, conducting transfer impact assessments, and implementing supplementary technical and organizational measures where necessary.
By using the DoraBox website and providing your personal information to us, you consent to the transfer of your data to Hong Kong and other locations as described in this policy. If you have questions about the safeguards we use for international data transfers, please contact us using the details provided in the Contact Information section.
The DoraBox website may contain links to third-party websites, applications, and services that are not owned or controlled by NovaNatural Technologies Limited. We are not responsible for the privacy practices, content, or security of these third-party services. We encourage you to review the privacy policies of any third-party services you access through links on our website.
We may also use third-party analytics, hosting, and infrastructure services to support the operation of our website. These third-party providers have their own privacy policies governing how they collect, use, and share data. While we carefully select our service partners and include data protection obligations in our contracts, we cannot control their independent data processing activities. If you have concerns about the privacy practices of any third-party service we use, please contact us for additional information.
The inclusion of a link to a third-party website does not imply our endorsement of that website or its privacy practices. We recommend that you exercise caution and review the applicable privacy statements before submitting any personal information to third-party sites.
If you are a resident of the State of California in the United States, you may have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). This section provides a summary of those rights and explains how you can exercise them in relation to DoraBox and NovaNatural Technologies Limited.
Under California law, you have the right to know what personal information we collect about you, the categories of sources from which we collect it, the business purposes for which we use it, and the categories of third parties with whom we share it. You also have the right to request that we delete your personal information, subject to certain exceptions, and the right to opt out of the sale or sharing of your personal information. DoraBox does not sell personal information for monetary consideration.
To exercise your California privacy rights, please contact us at service@dorabox.mom with the subject line California Privacy Rights Request. We will verify your identity before processing your request, and we will not discriminate against you for exercising any of your rights under California law. You may designate an authorized agent to submit a request on your behalf, and we may require written authorization from you to confirm the agent has the authority to act for you.
The legal basis on which DoraBox processes your personal information depends on the type of data and the context in which we collect it. We ensure that we have a valid lawful basis for each processing activity we undertake, in compliance with applicable data protection regulations.
For most of our processing activities, we rely on one or more of the following legal bases: the processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract; the processing is necessary to comply with a legal obligation to which we are subject; the processing is necessary for the purposes of our legitimate interests or those of a third party, provided that such interests are not overridden by your fundamental rights and freedoms; or you have provided your explicit consent to the processing for one or more specific purposes.
Where we rely on consent as the legal basis for processing, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. If you would like more information about the specific legal basis we rely on for any particular processing activity, please contact us.
In the unfortunate event of a personal data breach, DoraBox has established procedures to promptly identify, contain, and remediate the incident. A data breach is defined as a security incident that results in the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to personal data transmitted, stored, or otherwise processed by us.
Upon discovering a data breach, we will immediately activate our incident response team to assess the scope and impact of the breach. We will take all necessary steps to contain the breach, preserve evidence for forensic analysis, and restore the security of affected systems. We maintain detailed records of all breach incidents, including the facts surrounding the breach, its effects, and the remedial actions taken.
Where a data breach is likely to result in a high risk to the rights and freedoms of affected individuals, we will notify those individuals without undue delay. Our notification will describe the nature of the breach, the categories and approximate number of data subjects affected, the likely consequences of the breach, and the measures we have taken or propose to take to address the breach and mitigate its potential adverse effects. We will also notify the relevant supervisory authorities as required under applicable data protection laws.
We may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or operational requirements. When we make material changes to this policy, we will post the updated version on this page and update the Effective Date at the top of the document.
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information. In the event of significant changes that materially affect your rights or the way we process your data, we will make reasonable efforts to provide you with additional notice, such as through a prominent notice on our website, by email, or through other direct communication channels.
Your continued use of the DoraBox website and services after any changes to this Privacy Policy take effect constitutes your acceptance of the revised policy. If you do not agree with the updated terms, you should discontinue use of our services and contact us to discuss any concerns you may have.
If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, we encourage you to reach out to us. We are committed to addressing your inquiries promptly and transparently.
Data Controller: NovaNatural Technologies Limited
Registered Address: Rm 40G 19/F BLK AD GOLDEN BEAR IND CTR, 66-82 CHAI WAN KOK ST, Chai Wan, Hong Kong (HK)
Email: service@dorabox.mom
Phone: +12258772984
Website: https://www.dorabox.mom
We aim to acknowledge all privacy-related inquiries within three business days and provide a substantive response within thirty days. If you are located in a jurisdiction that provides for a right to lodge a complaint with a data protection supervisory authority, you may also contact the relevant authority in your country of residence.