Privacy Policy

Midooc Group Limited (“Midooc,” “we,” “us,” or “our”) is a company incorporated in Hong Kong. Midooc is the controller responsible for the personal information described in this Privacy Policy and, for the purposes of the Hong Kong Personal Data (Privacy) Ordinance, the relevant data user. Midooc’s registered office is located at RM 1801, Easey Commercial Building, 253-261 Hennessy Road, Wan Chai, Hong Kong. This Privacy Policy explains how information is collected, used, disclosed, retained, and protected when you visit www.midooc.com (the “Website”).

Our Chief Privacy Officer is based in Guangzhou, Mainland China and handles privacy compliance, inquiries, complaints, and applicable privacy-rights requests on behalf of Midooc. The Chief Privacy Officer does not act as a separate data controller.

The Website does not currently provide user accounts, online ordering, or newsletter registration. The Website provides a contact form through which you may voluntarily submit your first name, last name, email address, inquiry subject, message, and any other information you choose to include. Fields marked with an asterisk are required to submit the form. If you do not provide the required information, you will be unable to submit the form and we may be unable to respond to your inquiry.

Midooc uses optional first-party website analytics to understand visits and improve usability. Your region determines the initial setting. You can change your choice at any time through Privacy Choices in the footer. We handle Contact enquiries separately to respond to your requests and maintain appropriate business records.

This Privacy Policy applies only to this Website, information submitted through its contact form, and communications voluntarily initiated through the contact details displayed on the Website. It does not apply to third-party websites or services linked from the Website.

1. Midooc First-Party Analytics

When website analytics is on, Midooc records visits and interactions on public pages to understand how people use the Website and where we can improve it.

Optional first-party analytics events may include:

● the number of users and session statistics;

● pseudonymous daily visitor and session identifiers rather than a named customer profile;

● pages visited and interaction events;

● referring pages or websites;

● browser and device information;

● approximate geographic information; and

● the date, time, and duration of a visit.

The service may use technical request information such as an IP address and browser agent to derive a daily pseudonymous visitor identifier and approximate geographic context. Its analytics event payload does not contain the raw visitor IP address.

When analytics is on, the Website may set secure first-party session and campaign-attribution cookies. We may measure page visits, link and button clicks, scrolling, time spent on a page and successful Contact form submissions. We exclude the contents of enquiries from analytics events.

We do not intentionally place names, contact email addresses, phone numbers or message contents into optional analytics events.

2. Essential Technical Information and Website Technologies

When you visit the Website, our hosting and security providers may process limited technical information needed to deliver pages, prevent misuse, maintain availability and troubleshoot service issues. This may include request details, device and browser information, error records and security information reasonably needed for those purposes.

The technical information processed may include an IP address, browser and device information, operating system, requested page or URL, referring page, date and time of access, response status, and information necessary to diagnose errors or protect the Website.

These technologies may use cookies, local storage, server logs, or similar mechanisms to deliver Website content, preserve user preferences, maintain security, prevent misuse, balance traffic, diagnose technical problems, and maintain Website availability.

We do not use essential technical information for targeted advertising, unrelated marketing, or independent behavioural profiling.

3. Information You Voluntarily Send to Us

You may submit a contact form containing your first name, last name, email address, inquiry subject, message, and any additional information you choose to provide. You may also contact us directly by email and provide the contact details and information contained in your message.

Our form, hosting, security, and email-delivery systems may also process the date and time of submission and limited technical information, such as an IP address, where necessary to deliver the message, prevent spam, maintain security, or diagnose technical problems.

We use this information only to respond to your inquiry, provide the product, quotation, customization, technical, or project-related information or support you request, maintain appropriate records, resolve disputes, protect our legal rights, and comply with applicable legal obligations.

Using the contact form or contacting us by email is voluntary. However, fields marked with an asterisk are required to submit the form. If you do not provide the required information, you will be unable to submit the form and we may be unable to respond to your inquiry.

Please do not submit sensitive personal information unless it is reasonably necessary for your request.

We use optional first-party analytics information only to:

● measure Website traffic;

● understand how visitors interact with Website pages;

● identify technical or usability issues; and

● improve the performance, structure, and content of the Website.

We process essential technical information only as reasonably necessary to operate, deliver, secure, maintain, and troubleshoot the Website.

We use information submitted through the Website contact form or voluntarily sent to us by email only to respond to the sender, provide the requested product, quotation, customization, technical, or project-related information or support, maintain appropriate business records, resolve disputes, protect our legal rights, and comply with applicable law.

Depending on the applicable law and the relevant processing activity, we rely on one or more of the following legal bases:

● your consent where required for optional first-party analytics, which you can withdraw through Privacy Choices;

● our legitimate interests in operating, securing, understanding, and improving the Website and responding to business communications, provided those interests are not overridden by your rights and interests;

● taking steps at your request before entering into a contract or performing a contract; and

● compliance with applicable legal obligations.

Midooc does not sell or rent personal information. We do not use information collected through the Website for targeted advertising, unrelated direct marketing, automated decision-making, or independent behavioural profiling.

The Website may use cookies and similar technologies that are strictly necessary to deliver the Website, maintain security, remember privacy choices, or provide functions requested by the user. Where permitted by applicable law, these technologies may operate without consent because they are necessary for the relevant function.

We use the approximate country or region that our hosting provider, Hostinger, determines from your IP address to set your initial analytics preference. In regions where we ask for consent, analytics starts off and we offer you a choice to allow or decline. In regions where analytics starts on, you can turn it off at any time. If we cannot determine which setting applies, analytics starts off.

We use a first-party preference cookie to remember your choice for up to 180 days. When analytics is on, the session cookie can last up to 30 minutes and the campaign-attribution cookie can last until the end of the current UTC day. Your browser may remove cookies earlier.

Use Privacy Choices in the Website footer to turn analytics on or off. Turning it off stops new optional collection and clears the analytics session and campaign cookies. You can still browse, download documents and submit Contact enquiries.

Certain embedded content, such as externally hosted video or media, may be provided by third parties and may use their own cookies or similar technologies when the content is activated. Where required by applicable law, such content will remain unavailable or restricted until the applicable choice has been made.

The cookies and technologies used by the Website may change when Website components or service providers are updated. We will update this Privacy Policy, the Website’s cookie settings, or a separate Cookie Notice where a material change affects how information is processed.

You can manage optional website analytics directly in the Cookies and Similar Technologies section of this page. Browser Do Not Track and Global Privacy Control signals override any previous choice to turn analytics on.

The product project list offers optional “Save in this browser” storage for the project name, selected product IDs and per-product notes. This feature keeps that copy in local storage on the current browser profile; it does not send those fields to Midooc. Saved projects older than 90 days are not loaded, but their stored copy remains until cleared. Turn saving off or use “Clear project and saved copy” to remove it, or clear this site’s data in browser settings. Other people using the same browser profile may be able to see it. Extra requirements-draft fields remain in the current page only; copying or downloading exports a draft only when you choose that action. Avoid sensitive information in these tools.

We may disclose information only as reasonably necessary to:

● Midooc personnel who are authorized to handle enquiries, maintain the Website or review website statistics for business purposes;

● website hosting, form-processing, spam-prevention, infrastructure, content-delivery, security, and technical service providers that help deliver, maintain, and protect the Website and process inquiries;

● email-delivery service providers that transmit or store messages submitted through the Website contact form or sent directly by email;

● professional advisers where reasonably necessary to obtain legal, accounting, security, or other professional advice; and

● courts, regulators, law-enforcement authorities, or other competent authorities where disclosure is required by applicable law or a valid and legally binding request.

Our service providers may process information only for the relevant services they provide, subject to applicable contractual and legal requirements.

Midooc does not sell or rent personal information and does not disclose personal information to data brokers or third parties for targeted advertising.

The Website is hosted on servers located in the United States. Website access, security, and error logs, contact-form submissions, and other limited technical information required to operate the Website may therefore be stored or processed in the United States.

Midooc is incorporated in Hong Kong, and its privacy contact is based in Guangzhou, Mainland China. Information voluntarily submitted through the Website contact form or by email, including requests and complaints, may be accessed or processed in Hong Kong and Mainland China. First-party analytics and information processed by hosting and infrastructure providers may also be handled where their relevant systems operate.

The principal locations described for the Website and Midooc operations include the United States, Hong Kong and Mainland China. Hosting or other service providers may use additional processing locations under their applicable services and agreements; relevant safeguards and legal obligations must be assessed for the actual hosting configuration.

International processing may arise from hosting, optional first-party analytics, communications, security, support and legal compliance. We apply safeguards required for the relevant information and applicable law.

We schedule deletion of optional website analytics event data after 90 days. Essential security records and enquiries are subject to separate retention purposes and periods described in this Policy.

The optional analytics session cookie lasts no longer than 30 minutes and campaign attribution no longer than the current UTC day; the first-party privacy-choice cookie may persist for up to 180 days. A browser may remove them earlier. Rejection or withdrawal clears analytics session and campaign cookies and stops new optional analytics collection.

Hosting and infrastructure providers may retain essential technical, security and service data under their applicable service terms and retention settings. Business enquiries are retained according to the operational and legal needs described below.

Website access, security, and error logs are retained only for as long as reasonably necessary to operate and protect the Website, investigate technical or security incidents, prevent misuse, and comply with applicable legal obligations.

Information submitted through the Website contact form or sent by email is kept only for as long as reasonably necessary to respond, provide requested information or support, maintain appropriate business records, resolve disputes, protect legal rights or comply with applicable legal obligations.

When information under our control is no longer reasonably necessary for these purposes, we will delete it, anonymize it, or restrict further processing as required by applicable law.

We use reasonable administrative, technical, and organisational measures designed to protect information against unauthorised access, loss, misuse, alteration, or disclosure.

No Internet transmission or storage system can be guaranteed to be completely secure. If a personal information security incident occurs, we will take appropriate remedial measures and notify affected individuals and competent authorities where required by applicable law.

The Website may contain links to websites or services operated by third parties.

When you leave our Website or interact with a third-party service, that third party’s privacy policy applies to its own processing of information. We encourage you to review the applicable third-party privacy policy.

Midooc remains responsible for information processed under its control as required by applicable law.

Depending on the laws applicable to you, you may have the right to:

● request confirmation of whether we process your personal information;

● request access to or a copy of your personal information;

● request correction or completion of inaccurate or incomplete information;

● request deletion of your personal information;

● request anonymisation, restriction, or blocking of information that is unnecessary, excessive, or processed unlawfully, where applicable;

● withdraw consent, without affecting the lawfulness of processing carried out before withdrawal;

● object to or restrict certain processing;

● request information about the categories and sources of personal information, the purposes for which it is processed, the recipients or categories of recipients, and applicable international-transfer safeguards;

● request data portability where applicable;

● appeal a decision concerning a privacy-rights request, or use an authorised agent to submit a request, where applicable; and

● submit a complaint to an applicable privacy or data protection authority.

Where applicable law provides such protection, we will not discriminate against you for exercising a privacy right.

First-party analytics uses pseudonymous daily and session identifiers, so linking an analytics event to a particular person may be limited. We assess and respond to verifiable privacy requests according to applicable law.

To exercise an applicable privacy right, contact us using the details in the Contact Us section below. We may take reasonable steps to verify your identity and the scope of your request. We will respond within the period required by applicable law.

If you believe that Midooc has handled your personal information inconsistently with this Privacy Policy or applicable law, you may submit a complaint to our Chief Privacy Officer using the details in the Contact Us section below. Please describe your concern and provide the information reasonably necessary for us to assess it.

We will acknowledge the complaint, investigate it fairly, and respond without undue delay and within any period required by applicable law. We may request additional information where reasonably necessary and will explain our response and any appropriate steps we propose to take.

If you are not satisfied with our response, you may have the right to submit a complaint to the privacy or data-protection authority competent for your country or region.

The Website respects the browser’s Do Not Track and Global Privacy Control signals by preventing optional first-party analytics collection for requests carrying those signals. These signals override a previous analytics acceptance.

Use the Privacy Choices link in the Website footer to manage the optional website analytics control in this page. Midooc does not sell personal information or use these analytics events for targeted advertising.

The Website is intended for business and professional audiences and is not directed to children.

Midooc does not knowingly collect personal information from children through the Website. If we become aware that personal information has been collected from a child contrary to applicable law, we will take reasonable steps to delete it.

We may update this Privacy Policy when our Website practices, technology, service providers, or legal obligations change.

The “Last Updated” date at the beginning of this Privacy Policy indicates when it was most recently revised. Where required by applicable law, we will provide additional notice or obtain consent before making a material change to how personal information is processed.

Within the Midooc Group, Midooc Group Limited, a company incorporated in Hong Kong, is responsible for the use of your personal information. If you have questions, requests, or complaints about this Privacy Policy, including how we or our service providers handle your personal information, you may contact us in the following ways:

Hong Kong Registered Office:
Midooc Group Limited
RM 1801, Easey Commercial Building
253-261 Hennessy Road
Wan Chai, Hong Kong

a. If you are a corporate-level user of the Midooc Group, please email us at we@midooc.com.

b. If you are a Midooc user and a resident of the European Economic Area, please email us at midooc@outlook.com.

c. Otherwise, if you are a Midooc user, please email us at we@midooc.com.

Our Chief Privacy Officer is based in Guangzhou, Mainland China and handles privacy matters on behalf of Midooc Group Limited. You may contact the Chief Privacy Officer at the following privacy correspondence address:

Chief Privacy Officer
Midooc Group Limited
406 Huasui Road, Tianhe District
Guangzhou 510623, Guangdong Province
China

Alternatively, you may email we@midooc.com with “Attn: Chief Privacy Officer” in the subject line.