Privacy policy

Flixwick Limited, a company registered in Hong Kong SAR under number 81284837, is the controller of the personal data collected through this website.

Its registered office is Suite C, Level 7, World Trust Tower, 50 Stanley Street, Central, Hong Kong. Data protection questions and requests go to business@flixwick.com, or by post to that address.

The GDPR applies to us because we offer our services to people in the European Union, even though the company itself is registered outside it.

We collect personal data only when you send it to us. That means the name, company, email address and message you enter in the contact form, and anything you later send us by email or messaging.

This website does not run advertising trackers, does not profile visitors, and sets no analytics cookies. Our hosting provider keeps standard server logs, which may include your IP address, for security and diagnostics.

We do not collect special category data, and we ask you not to send any through the form.

Answering your enquiry and preparing a proposal rests on Article 6(1)(b), steps taken at your request before entering a contract. If you are writing on behalf of a company rather than for yourself, the same processing rests on Article 6(1)(f), our legitimate interest in responding to business enquiries, which we consider does not override your interests because you chose to contact us.

Running and invoicing an engagement rests on Article 6(1)(b), performance of the contract. Keeping accounting records rests on Article 6(1)(c), compliance with a legal obligation.

We do not use enquiry data for marketing, we do not sell it, and there is no automated decision making or profiling of any kind.

Enquiries submitted through the form are delivered by a third party form service, and email is handled by our mail provider. Both act as processors on our instructions and only to deliver the message.

If an engagement starts, data may be shared with the platforms and subcontractors named in your written scope. We do not disclose personal data to anyone else unless the law requires it.

We are established in Hong Kong, so anything you send us is processed there. Hong Kong is not covered by a European Commission adequacy decision, and you should assume your data leaves the EEA as soon as you contact us.

Data you send us directly, by the form or by email, reaches us because you chose to write to us rather than because anyone exported it on your behalf. Where we in turn use service providers to deliver, store or process that data, we require appropriate safeguards by contract, including the European Commission's standard contractual clauses where those apply to the provider.

Enquiries that do not become engagements are deleted within twelve months. Records connected to an engagement are kept for seven years after it ends, which is the period our accounting and tax obligations require.

Server logs are kept for the period our hosting provider applies, which is short and measured in weeks rather than years.

Under the GDPR you may ask for access to your personal data, correction of anything inaccurate, erasure, restriction of processing, and portability of the data you gave us. Where we rely on legitimate interests you may object to the processing, and we will stop unless we can show compelling grounds that override your objection.

Write to business@flixwick.com and we will respond within one month. If a request is complex we may extend that by a further two months, and we will tell you within the first month if we do. Exercising these rights is free unless a request is manifestly unfounded or excessive.

If you believe we have handled your data badly you may complain to the supervisory authority in the EU member state where you live, work, or where you think the problem occurred.

Access to enquiry data is limited to the people who need it to answer you. Data is held in accounts protected by strong authentication, transmitted over TLS, and we review access when someone leaves a project.

If a breach is likely to result in a risk to your rights we will notify the competent supervisory authority within seventy two hours, and we will tell you directly where the risk is high.

If this policy changes we publish the new version on this page. Material changes affecting existing clients are also sent by email.