Privacy Policy

This policy explains how THDG handles personal data when you visit thdg.io, contact us, discuss a partnership or apply to work with us.

Who is responsible

The company responsible for this website & the personal data described in this policy is:

THDG Limited
Unit B, 3/F, Kai Wan House
146 Tung Choi Street, Mongkok, Kowloon
Hong Kong

Privacy contact: data@thdg.io

In this policy, “we”, “us” & “our” mean THDG Limited. We are the “data user” under Hong Kong privacy law & the “controller” under EU or UK data protection law where those laws apply.

What we collect

Messages & business enquiries

When you email us, we receive your email address, message & any information you include, such as your name, company, contact details or attachments. We use Google Workspace to receive, store & manage this correspondence.

Forms & applications

We use Typeform to collect enquiries & applications. Depending on the form, the information you provide may include your name, email address, company, professional experience, portfolio links, work samples & answers to application questions.

We use this information to respond to enquiries, discuss potential collaborations, assess applications & communicate with you.

Providing information is voluntary, but we may be unable to respond or assess an application without the relevant details. Please include only information relevant to your enquiry or application.

Hosting information

Our website is hosted on Vercel. Delivering, maintaining & protecting the website involves processing technical request information, such as IP addresses, requested pages, browser information & timestamps.

Vercel may retain technical logs for service operation, troubleshooting, security & legal purposes. These logs are separate from website analytics.

Public viewer feedback

We display selected public YouTube comments as examples of viewer feedback. These may include the comment, public username & profile image.

This information comes from publicly available YouTube comments. If we have featured your comment & you would like to raise a concern about its use, contact data@thdg.io.

Cookies, browser storage & tracking

The THDG website does not set cookies, use local storage or similar browser storage, or run website analytics or advertising trackers.

This applies to thdg.io itself. When you open a Typeform form or follow a link to another website, that service may use its own cookies, technical logs or similar technologies, as explained in its privacy information.

If we introduce analytics or tracking, we will update this policy & obtain consent before the relevant activity where required by law. Reading this policy or continuing to browse does not itself provide consent.

Why we use personal data

We use personal data for the purposes described above. Where EU or UK data protection law applies, our legal bases are:

• Enquiries & partnerships: our legitimate interest in responding to people, evaluating collaborations & managing business relationships. Where you are a party to a potential or existing contract, we may also process information to take steps you request before entering that contract or to perform it.
• Recruitment: our legitimate interest in assessing candidates & managing recruitment, alongside taking steps towards a potential employment or services contract at your request where applicable.
• Website operation & security: our legitimate interest in delivering a functioning website, resolving technical issues & preventing abuse.
• Viewer feedback: our legitimate interest in showing how audiences respond to our work, balanced against the rights & reasonable expectations of the people concerned.
• Privacy requests & legal matters: complying with legal obligations &, where necessary, our legitimate interest in establishing, exercising or defending legal claims.

Where we rely on consent for a particular use of your information, you can withdraw it at any time without affecting the lawfulness of processing before withdrawal.

Who handles your data

We use the following providers:

• Vercel: hosts the website & processes technical information needed to operate, maintain & secure it. See Vercel’s Privacy Notice.
• Google Workspace: provides our business email service & processes correspondence, attachments & related service information. See Google’s Cloud Data Processing Addendum.
• Typeform: provides our enquiry & application forms & processes the information submitted through them. See Typeform’s Privacy Policy & Data Processing Agreement.

These providers process information to deliver their services. They may also process certain technical, account or operational information for their own security, administration or legal obligations, as explained in their terms & policies.

Relevant members of our team may access information to handle enquiries, partnerships, applications & privacy requests.

We may also disclose relevant information to professional advisers or public authorities where necessary to meet legal obligations or establish, exercise or defend legal rights.

International processing

THDG Limited is based in Hong Kong. Our service providers operate internationally, so personal data may also be processed in the United States, the European Economic Area & other countries where those providers operate.

The applicable provider terms describe protections for international transfers, including standard contractual clauses & other recognised transfer mechanisms where relevant.

Contact data@thdg.io for information about the safeguards applicable to your data.

How long we keep information

We keep personal data for as long as needed for its purpose, taking account of relevant legal obligations & the need to handle complaints or legal claims.

• Enquiries & correspondence: while the enquiry or business relationship is active & afterwards where needed to resolve follow-up matters or retain relevant legal records.
• Applications: for the recruitment process & any necessary follow-up, complaints or legal claims. If we wish to retain your details for future opportunities, we explain the purpose & retention period and obtain consent where required.
• Hosting logs: according to Vercel’s applicable service settings & operational, security & legal retention requirements.
• Viewer feedback: while it remains relevant to the purpose for which it is displayed, subject to applicable rights & any valid removal request.
• Privacy requests: for as long as needed to handle the request & maintain an appropriate record of our response.

When information is no longer needed, we delete it or anonymise it. Removal from provider backups follows the relevant provider’s deletion procedures.

How we protect information

We use appropriate technical & organisational measures to protect personal data against unauthorised access, loss, misuse or disclosure.

No method of online transmission or storage can be guaranteed completely secure.

Your rights

THDG Limited is subject to Hong Kong’s Personal Data (Privacy) Ordinance. Rights under EU, UK & other privacy laws apply where those laws cover our processing.

Depending on the applicable law & circumstances, you may have the right to:

• Access your personal data & receive a copy.
• Correct inaccurate or incomplete information.
• Request deletion.
• Restrict or object to certain processing.
• Receive your data in a portable format.
• Withdraw consent for processing based on consent.

Where California privacy law applies, you may also have rights to know about our collection & disclosure practices, exercise applicable opt-out rights & make requests without discriminatory treatment.

To exercise your rights, email data@thdg.io, addressed to our Privacy Contact. We may need information to verify your identity. We respond within the period required by the applicable law & explain any permitted extension.

You can complain to the Privacy Commissioner for Personal Data, Hong Kong. Where EU or UK law applies, you can also contact the relevant data protection authority.

Children

This website is intended for business contacts, collaborators & potential team members. It is not directed at children under 16.

If you believe a child has provided personal data through this website or our forms, contact us so we can investigate & take appropriate steps to remove it.

External websites

Our website links to external services. Those operators explain their own processing in their privacy policies.

Where a provider collects information on our behalf, such as through a Typeform application, our use of that information remains covered by this policy.

Changes to this policy

We update this policy when our practices change & revise the date above. Where required, we provide additional notice or obtain consent before introducing a new use of personal data.

Contact

Privacy & data requests: data@thdg.io
Partnerships: sponsorships@thdg.io
Careers: jobs@thdg.io
General enquiries: contact@thdg.io