🔒 Privacy Policy

1. Data We Collect

1.1 To provide the Service, we only collect the following necessary data:

• Account data: your email address (used for registration, login, and receiving reports) and password (stored encrypted and never readable in plain text);
• Service preferences: your chosen report language and watchlist (used solely to generate your personalised reports);
• Subscription data: your chosen plan, renewal method, and subscription status;
• Technical data: basic access logs (such as IP address, access time, and browser type) to ensure the security and stable operation of the Service.

1.2 We do not collect your name, ID/passport number, address, bank card number, or any other personal data unrelated to the provision of the Service.

1.3 Cookies and local storage: This Website does not deploy third-party advertising cookies. To record login status and interface language preferences, we may store necessary session identifiers and preference settings in your browser's local storage (localStorage); you may clear local storage through your browser settings, after which you will need to log in again.

2. Purposes of Use

The data we collect is used solely for the following purposes:

1. Creating and managing your account;
2. Generating and sending your personalised market data reports based on your watchlist configuration;
3. Processing your subscription, renewal, and refund requests;
4. Sending you service notices (including expiry reminders and policy/terms change notices);
5. Ensuring service security and preventing fraud and abuse.

We do not use your personal data for any purpose other than those described above, and we do not sell, rent, or provide your data to any third party, or use it for advertising and marketing. If we conduct direct marketing in the future, we will obtain your prior consent and provide a convenient opt-out mechanism in every marketing message.

3. Disclosure of Data

3.1 We will not disclose your personal data to any third party except in the following circumstances:

• To third-party service providers engaged as necessary to provide the Service (such as email delivery and payment processing services), provided such providers are subject to confidentiality obligations;
• Where disclosure is required by applicable law, court order, or regulatory authority;
• Where disclosure is necessary to protect the legitimate rights and interests of the Company or other users.

3.2 Your watchlist is used solely to generate your own personalised reports and will not be displayed, shared, or used for any other purpose.

4. Cross-border Transfer of Data

4.1 The processing of data in connection with the Service may involve transferring your data to servers outside your region (including, without limitation, overseas services used for data storage and email delivery).

4.2 We only make such transfers to the extent necessary to provide the Service, and will take reasonable measures to ensure that your data receives a level of protection no lower than that described in this Policy during transfer and storage.

5. Retention and Deletion of Data

5.1 We retain your personal data only for as long as necessary to fulfil the purposes described in this Policy.

5.2 You may request deletion of your account at any time. After deletion, we will delete or anonymise your account data and watchlist configuration (except where retention is required by law).

5.3 Automated records such as service logs will be cleaned up automatically after a reasonable period. Specifically: account data is retained for no more than 90 days after account deletion (except where retention is required by law); service logs are retained for no more than 12 months; and email delivery records are retained for no more than 24 months.

6. Your Rights (Under the PDPO)

Under the Personal Data (Privacy) Ordinance of Hong Kong, you have the right to:

1. Access: request access to the personal data we hold about you;
2. Correction: request correction of inaccurate personal data;
3. Deletion: request deletion of your account and related personal data;
4. Withdraw consent: withdraw your consent to the processing of your data (withdrawal does not affect the lawfulness of processing carried out before the withdrawal).

To exercise any of these rights, please contact us via the customer service email (service1@stkdata.tech). We will handle your request within a reasonable time (usually within 30 days).

Right to complain: If you consider that our handling of your personal data breaches the Personal Data (Privacy) Ordinance of Hong Kong, in addition to contacting our data protection officer, you also have the right to lodge a complaint with the Office of the Privacy Commissioner for Personal Data, Hong Kong.

7. Data Security

7.1 We adopt reasonable technical and organisational measures to protect your personal data, including but not limited to encrypted password storage, encrypted transmission, access control, and security monitoring.

7.2 Please keep your account password secure, avoid reusing passwords across different websites, and be alert to phishing and other online risks.

7.3 Security incident notification: If a security incident (such as a data breach) occurs that may pose a high risk to your personal data, we will notify you as soon as practicable by email or via a prominent notice on the Website, describing the impact of the incident and the measures taken.

8. Minors

The Service is intended for users aged 18 or above. We do not knowingly collect personal data of minors. If you are a guardian of a minor and become aware of such collection, please contact us so that the data can be deleted promptly.

9. Changes to This Policy

9.1 We may update this Policy from time to time. The updated Policy will be published on the Website and take effect from the date of publication.

9.2 For material changes, we will notify you via your registered email or a prominent notice on the Website. Your continued use of the Service after such changes constitutes acceptance of the updated Policy.

10. Governing Law and Jurisdiction

11. Contact Us

If you have any questions about this Policy or the handling of your personal data, please contact us at: 📧 service1@stkdata.tech