Last updated: {{Month 08,2025}}
This Privacy Notice explains what we collect, why we collect it, how we use it, and your options. For how we work with engagement data, see Data Handling → /data-handling.
Contact details: name, work email, phone, company, role
Engagement inputs: scope/questions, cities/sites, target dates, budget range
Evidence excerpts: redacted invoices, ledgers, bank lines, logistics docs (only what is needed for sampling and tie-outs)
Website data: basic analytics (pages viewed, device/browser, approximate location)
You or your colleagues (forms, email, calls)
Your vendors/partners if you introduce them to us
Public sources needed for screening (e.g., litigation or sanction lists)
To scope, perform, and deliver our services (including on-site work)
To communicate about proposals, timelines, and deliverables
To operate and improve this website (analytics only; no ad retargeting)
To comply with law, prevent fraud/abuse, and enforce our Terms → /terms
Contract (to provide proposals and services you request)
Legitimate interests (quality control, security, capacity planning)
Consent (where required—for example, certain marketing or optional cookies)
Legal obligation (record-keeping where applicable)
Within our organization on a need-to-know basis
With vetted subcontractors only with your written consent, under confidentiality
With advisors or authorities when legally required
We do not sell your data or share it for advertising
Primary processing is in China (UTC+8) for on-site work
Cross-border transfers occur only when needed for your team and agreed in writing (e.g., your HQ review)
Least-privilege access, MFA on admin accounts
Encrypted storage and transit; access logs during engagements
Separate workspaces per client/engagement
See details in Data Handling → /data-handling
Working set kept for the life of the engagement
Default retention 180 days after final delivery, unless your contract states otherwise
Secure deletion and (on request) a deletion certificate
You can access, correct, or delete your data (subject to legal/contract limits)
You can object to or restrict certain processing, or request a copy (portability) where applicable
To exercise a request, contact us via /contact. We’ll respond within a reasonable time
We use basic analytics (e.g., GA4) to understand site usage; we do not run ad pixels or retargeting
Your browser may offer settings to limit cookies or send Do Not Track; we honor applicable signals where feasible
Our site and services are for businesses. We do not knowingly collect personal data from children.
Linked sites have their own policies. We are not responsible for their practices.
We will update this page when our practices change. The “Last updated” date shows the latest version.
Questions or requests? Use contact. For contractual matters, see Terms