Privacy Policy

1. Introduction

Scope

This policy applies to everyone who uses surfcard.io and its related services, including browsing the site, creating an account, publishing a profile, scanning business cards and managing contacts.

Updates to this policy

We may update this policy from time to time. Any revision is published on this website and takes effect on publication. We recommend that you review the latest version periodically.

2. The data we collect

Personal identifying data

When you register an account or use our services, we may collect:

• Your name and contact details, such as email address and phone number
• Account credentials — your login email and your password
• The content of your profile: job title, company, links, photographs and anything else you choose to publish

Usage data

To keep the service running and to improve it, we automatically collect:

• IP address and device information
• Browser type and version
• Access times and the pages you view
• Preferences and interaction behaviour

Data you upload

If you upload photographs, logos or files to your profile, or images of business cards to the scanner, we collect and store them in order to provide the service, in accordance with this policy.

3. How we use data

Providing the service

Your personal data is used to:

• Create and manage your account
• Publish your profile and share it by tap, QR code or link
• Read the business cards you scan and build the contact records you review
• Show you the views, taps and saves your own profile receives
• Provide customer support

Improving the service

We use anonymised or aggregated data to:

• Analyse how the site and the service are used
• Improve features and the user experience
• Develop new products and services

Communication

Where you have agreed to it, we send product news, promotions and service updates by email or by other means.

4. Sharing data

We do not sell personal data

We do not sell, trade or rent your personally identifiable data to any third party.

Service providers

To deliver the service we may share the data that is necessary with trusted third parties of the following kinds:

• Cloud storage and website hosting
• Text recognition (OCR) processing for scanned business cards
• Email delivery
• Customer support platforms

These providers may use your data only so far as their function requires, and are bound by corresponding confidentiality and data protection obligations.

Legal requirements

We may disclose your personal data where the law requires it, or where disclosure is necessary to protect our legitimate rights, property or safety.

5. Data security

Security measures

We apply technical and organisational measures to protect your data, including:

• SSL encryption for data in transit
• Secure cloud servers and regular security checks
• Access restricted to authorised staff who need it for their work

Retention

We keep your personal data for as long as the purpose it was collected for requires, or as long as the law requires, after which it is securely deleted or anonymised.

6. Your rights

You have the right to:

• Ask for a copy of the personal data we hold about you
• Ask us to correct personal data that is inaccurate or incomplete
• Ask us to delete your personal data, where the law allows it
• Unsubscribe from marketing messages at any time

Please make any such request using the contact details below. We will respond within a reasonable time.

7. Cookies and tracking technologies

How we use cookies

We use cookies and similar technologies to:

• Improve your browsing experience and remember your preferences
• Analyse site traffic and how the service is used
• Provide personalised marketing content, where you have agreed to it

Managing cookies

You can refuse or delete cookies in your browser settings, though some features of the site may then stop working. Our Cookies Policy sets this out in detail.

8. Cross-border data transfer

Your personal data may be transferred to and stored outside Hong Kong. Where that happens we ensure the transfer complies with applicable law and is subject to appropriate safeguards.

9. Children’s privacy

Our website and services are not directed at children under 13, and we do not knowingly collect their personal data. If you believe we have collected such data by accident, please tell us immediately so that we can delete it.

10. Contact us

If you have a question about this document, or about how your personal data is handled, email us at info@surfcard.io.