Privacy Policy

Last updated: 6 October 2026

Beyond1n0 is Gary Cheung’s personal professional publishing website, focused on AI governance, information risk and accountable business decisions. This policy explains how information is handled when you browse the site, leave a comment, request a resource or contact Gary.

1. Information you provide

Contact forms collect the fields shown on the form, which may include your name, email address, company, role and message. The AI Governance Decision Review form collects the scenario and decision context you choose to provide, with optional contact information where indicated. Subscription or resource-request forms collect your email address and any other information identified on the form.

Providing information is voluntary. Required fields are marked on each form; without them, the form may not submit or a response may not be possible. Browsing articles does not require submitting a form.

Please do not send passwords, customer records, personal information about colleagues or clients, unpublished security findings, trade secrets, or information you are not authorized to disclose. Describe business scenarios in general terms and remove identifying details.

2. Technical information, cookies and external content

The website and its hosting, delivery and security services may process technical information such as IP addresses, browser details, requested pages, timestamps and error or security logs to deliver the site, troubleshoot problems and reduce abuse.

WordPress features may use cookies, for example to remember comment details if you choose that option or to support an authenticated session. You can control cookies through your browser settings; blocking them may affect some features. This policy does not treat continued browsing as consent to optional advertising or tracking.

Pages can request resources from other providers, such as Google Fonts or Gravatar profile images. Those requests can disclose your IP address and browser information to the provider. External links and any embedded content are also subject to the relevant provider’s privacy practices.

3. How information is used

• To receive, consider and respond to enquiries and Decision Review submissions.
• To deliver a resource or email updates you request, and administer subscriptions.
• To display and moderate comments, investigate spam or misuse, and maintain the website.
• To keep necessary correspondence and records relating to those activities.

A contact enquiry or Decision Review submission is not, by itself, a request to receive marketing emails. You can ask to stop email updates through an unsubscribe option where provided or through the Contact page.

4. Decision Review submissions and public comments

The AI Governance Decision Review is an informal thought exchange. As the form explains, Gary may use anonymized patterns from submissions to inform future writing. This does not authorize publication of your name, employer or identifiable message. A distinctive scenario may still identify an organization, so avoid sensitive or identifying details and contact Gary if you have concerns about reuse.

Comments you submit for publication can be visible to other visitors together with the display name and content you provide. Do not put private information into a public comment. WordPress also processes comment-form data, IP addresses and browser information for moderation and spam prevention; the site uses Akismet anti-spam software. See Akismet’s privacy information.

5. Service providers and disclosure

The site uses WordPress and 10Web hosting and site tools, Fluent Forms and email-related tools, and spam-prevention services. Gary and authorized technical service providers may access information as needed to operate the site, deliver messages, maintain records or resolve technical issues. Website administration and editorial work can also involve external software and AI-assisted tools; do not submit information that requires a confidential or restricted processing environment.

Information may be disclosed where required by law or where reasonably necessary to address unlawful activity, protect the website or establish or defend a legal claim. Providers may process information outside Hong Kong. This policy does not promise that all data stays in a particular country.

6. Retention and security

Form entries, comments and correspondence may remain in website records, mailboxes and backups. The site does not currently specify one automatic deletion period for all records. Retention needs depend on the purpose of the record, ongoing correspondence, security needs and applicable legal obligations. You may ask Gary to delete information that is no longer needed; deletion from active records may not immediately remove copies in backups or records that must be retained.

The site uses HTTPS for its public pages. No website, email system or transmission method can guarantee absolute security or confidentiality. Please use the forms only for information appropriate to an ordinary website enquiry.

7. Your choices and privacy requests

You can ask what personal information is held about you, request access or correction, withdraw a subscription, or request deletion where appropriate. Requests will be considered subject to applicable law, necessary identity checks and legitimate retention requirements. This does not limit any rights you have under applicable data-protection law.

Send privacy enquiries to Gary Cheung through the Contact page. Use “Privacy request” in any required business-context fields that do not apply, and include only the information needed to identify your request. For information about privacy rights in Hong Kong, visit the Office of the Privacy Commissioner for Personal Data.

8. Audience and policy changes

Beyond1n0 is intended for a professional audience and is not directed at children. If you believe a child has submitted personal information, contact Gary so it can be addressed.

This policy may be updated as the site’s features or practices change. The date above identifies the latest version. A policy update does not by itself authorize a new, unrelated use of information already collected.