Privacy Policy
What this site collects, who processes it, and how to exercise your rights over it.
Last updated 25 September 2026. This policy covers the website i-comply.io. It does not cover compliance work carried out under a separate client agreement, which is governed by that agreement. If we change how we handle personal data we will update this page and the date on it.
1. Who we are
i-Comply Ltd (“i-Comply”, “we”) is an independent product compliance company based in Hong Kong SAR. For personal data collected through this website, i-Comply Ltd is the data controller — we decide why and how it is used.
For any privacy matter, including the rights in section 7, or to complain about how we have handled your data:
info@i-comply.io · +852 6769 7250 · WhatsApp
2. What we collect
From the contact form: your first name, last name, email address and message, which are required, and your company and the services you are interested in, if you choose to give them. Please do not send us sensitive personal data through the form.
On the contact page: when the page opens, your browser loads our form provider’s script and the anti-spam check it runs (section 4), so both receive your IP address and browser details. The anti-spam check also looks at how you interact with it, such as mouse movements, scrolling and key presses, to tell people from bots.
From your visit: our web server records an access log, as any web server does — IP address, page requested, time, referring site and browser. We read those logs to see aggregate figures like visitor numbers and popular pages.
We load no analytics, advertising or tracking scripts. Apart from the anti-spam check on the contact page, nothing runs in your browser to measure you, we do not profile visitors, and we do not track you across other sites. Two things can be stored on your device: your light/dark theme choice, saved only if you use the theme switch, and the anti-spam check’s data on the contact page (section 8).
Loading this site means your browser fetches fonts, a mapping library and globe images, and on the contact page the form script and anti-spam check, directly from the providers in section 4, so those providers see your IP address. That is a consequence of loading any external file, not something we collect.
3. Why we use it, and our legal basis
| Purpose | Data used | Legal basis (UK/EU GDPR) |
|---|---|---|
| Answering your enquiry and preparing a quote or proposal | Name, email, company, message, services of interest | Steps you ask us to take before a possible contract with you — Article 6(1)(b). Where you contact us on behalf of a company: our legitimate interest in responding to business enquiries — Article 6(1)(f) |
| Following up on the conversation, and keeping a record of it | The same | Legitimate interest in managing business enquiries — Article 6(1)(f) |
| Preventing spam and automated abuse of the contact form | IP address, browser and device details and how you interact with the anti-spam check (hCaptcha); IP address and email address (Web3Forms’ spam filters) | Legitimate interest in keeping the form secure — Article 6(1)(f) |
| Keeping the business records Hong Kong law requires, where an enquiry becomes a client relationship | Your enquiry and contact details, where they form part of those records | Legitimate interest in complying with the Hong Kong tax and company laws that apply to us — Article 6(1)(f) |
| Understanding how this site is used, in aggregate | Server access logs | Legitimate interest in improving our own website — Article 6(1)(f) |
We do not use your details for marketing, we will not add you to a mailing list, and we do not sell or rent personal data to anyone. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.
4. Who else receives it
These providers receive personal data when you use this website or send us an enquiry through it.
| Provider | What it does | What it receives | Where |
|---|---|---|---|
| Web3Forms Web3Creative |
Runs our contact form: provides the form script, delivers submissions to our inbox and filters out spam | Everything you enter into the form, and your IP address. For spam filtering it may pass your IP address and email address to CleanTalk and to Akismet (Automattic). | Operates from India; infrastructure from Amazon Web Services, Cloudflare and Hetzner (Germany/Finland); CleanTalk and Akismet in the United States |
| hCaptcha Intuition Machines Inc |
The anti-spam check that Web3Forms runs on our contact form, to tell people from bots | IP address, browser and device details, and how you interact with the check (for example mouse movements and key presses) | United States |
| Microsoft 365 Microsoft |
Hosts our email, where every enquiry ends up | Your enquiry, and anything you email us directly | Microsoft data centres |
| Fontshare Indian Type Foundry |
Serves the typefaces used on this site | IP address, browser information | Company in India; files delivered through a global content delivery network |
| unpkg | Serves the mapping library, map data and images behind the globe graphic | IP address, browser information | Cloudflare’s global network |
| Hostens | Hosts this website and records the access logs | Standard server logs, including IP address | Singapore |
Web3Forms keeps a copy of each form submission on its own systems for up to three years, then deletes it automatically. The copy that reaches our inbox is governed by section 6.
If you message us on WhatsApp, that conversation is handled by WhatsApp (Meta) under its own terms. We may also disclose personal data where legally required, or to establish or defend legal claims.
5. International transfers
We are based in Hong Kong and this website is hosted in Singapore. Some of the providers in section 4 are in the United States and India. If you are in the EEA, the UK or Switzerland, your data therefore leaves that area.
- Hong Kong, Singapore and India do not have an adequacy decision from the European Commission.
- The United States has one only for companies certified under the EU–U.S. Data Privacy Framework. hCaptcha (Intuition Machines Inc) and Microsoft (Microsoft Corporation) are certified under it, and under its UK Extension and the Swiss–U.S. Data Privacy Framework, which the UK and Swiss authorities recognise.
- Web3Forms covers transfers with the Standard Contractual Clauses included in its Data Processing Agreement, published at web3forms.com/dpa.
Ask us using the details in section 1 and we will tell you what applies to a specific transfer.
6. How long we keep it
- Enquiries that do not become work: up to 24 months from our last exchange, then deleted.
- Enquiries that become a client relationship: for the duration of that relationship, then for 7 years after the end of the financial year of our last dealings, as Hong Kong tax and company law require for business records (Inland Revenue Ordinance, Cap. 112, s.51C; Companies Ordinance, Cap. 622, s.377), then deleted.
- Server access logs: up to 12 months, then deleted.
- Web3Forms’ copy of a form submission: up to three years, then deleted automatically by Web3Forms.
You can ask us to delete your enquiry sooner, including the copy held by Web3Forms, unless we are required to keep it as part of the business records described above.
7. Your rights
Under the GDPR you have the right to request a copy of the personal data we hold about you, and to request that it is corrected or deleted, that our use of it is restricted, or that it is given to you in a portable format. You can also object to our use of it where we rely on legitimate interests, and lodge a complaint with your national supervisory authority.
Under Hong Kong’s Personal Data (Privacy) Ordinance (Cap. 486), which also applies to us, you have the right to request access to and correction of your data, and complaints can go to the Office of the Privacy Commissioner for Personal Data. This policy also serves as our Personal Information Collection Statement: completing our contact form is voluntary, but without it we cannot answer your enquiry.
To exercise any of these, contact our Operations Manager at info@i-comply.io or by post at i-Comply Ltd, Unit B, 12/F, Hang Seng Causeway Bay Building, 28 Yee Wo Street, Causeway Bay, Hong Kong. We will respond within one month, at no charge, and will not ask you to justify the request.