anatta365

Legal

Privacy Policy

Last updated: March 2026

1. About This Policy

This Privacy Policy explains how Anatta Import & Export Limited (“we”, “us”, or “our”), incorporated in Hong Kong, collects, uses, retains, and protects personal data in connection with the China Supplier Due Diligence platform (“Platform”). This Policy is issued in compliance with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong (“PDPO”). By using the Platform or submitting any information, you acknowledge and accept the practices described in this Policy.

2. Data Controller

  • Company: Anatta Import & Export Limited
  • Registration No.: 60875144
  • Registered Address: F/RM B27, Shing Lee Commercial Building 8 Wing Kut Street, RM B27, Hong Kong
  • Contact Email: support@anatta365.com

3. Personal Data We Collect

We collect the following categories of personal data:

  • Contact information: full name, email address, company name, job title.
  • Account credentials: email address and authentication tokens (no passwords stored in plain text).
  • Supplier information you provide: supplier name (English and Chinese), city, website, USCC/business registration number, and any documents uploaded for analysis (business licenses, certificates, etc.).
  • Payment information: transaction reference and amount. We do not store full card details — payment processing is handled by our third-party provider.
  • Usage data: pages visited, IP address, browser type, and device information collected via cookies and server logs.

4. Purpose of Data Collection

We collect and use personal data for the following purposes:

  • To deliver the supplier due diligence assessment service.
  • To communicate with you regarding your engagement, report status, and account.
  • To process payments and maintain billing records.
  • To improve the Platform and develop new features.
  • To comply with applicable laws and regulations in Hong Kong.
  • To detect, investigate, and prevent fraudulent or unauthorised activity.

We will not use your personal data for direct marketing without your prior consent.

5. Data Retention

Engagement data and associated reports are retained for 3 years from the date of report delivery. Account data is retained for the duration of your account and for 2 years following account closure. Payment and billing records are retained for 7 years in accordance with the Companies Ordinance (Cap. 622). Uploaded documents may be deleted upon request, subject to any legal retention obligations.

6. Data Sharing & Third Parties

We do not sell, rent, or trade your personal data. We may share data with:

  • Service providers: cloud infrastructure, email delivery, and payment processing — each bound by appropriate data protection agreements.
  • Independent analysts: limited supplier data under confidentiality obligations to perform expert review.
  • Legal authorities: where required by Hong Kong law, court order, or regulatory request.

7. Cookies

The Platform uses cookies to maintain session state and collect aggregate analytics. You may decline non-essential cookies via the cookie banner on your first visit. Essential cookies required for the Platform to function cannot be disabled.

8. Data Security

We implement industry-standard technical and organisational measures to protect your personal data. All data is transmitted over encrypted connections (TLS). Access is restricted to personnel and systems with a legitimate business need.

9. Your Rights Under the PDPO

Under the Personal Data (Privacy) Ordinance, you have the right to:

  • Request access to personal data we hold about you.
  • Request correction of inaccurate personal data.
  • Make inquiries about our policies and practices in relation to personal data.

Contact us at support@anatta365.com. We will respond within 40 days as required by the PDPO. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner for Personal Data (PCPD) at www.pcpd.org.hk.

10. Cross-Border Data Transfers

Your data may be processed on servers located outside Hong Kong. We take reasonable steps to ensure equivalent protection in compliance with the PDPO.

11. Changes to This Policy

Material changes will be notified to registered users by email. Continued use of the Platform after the effective date of any change constitutes acceptance of the updated Policy.

12. Contact

  • Email: support@anatta365.com
  • Address:F/RM B27, Shing Lee Commercial Building 8 Wing Kut Street, RM B27, Hong Kong