Privacy Notice

Privacy Notice

This Privacy Notice explains how BloxFi Limited (“BloxFi”, “we”, “us”, “our”) collects, uses, discloses, and protects personal data when you visit WEBSITE (the “Website”), contact us, or subscribe to our updates. It also describes your choices and rights.

If you later engage BloxFi as a client, that relationship will be governed by separate agreements and privacy disclosures provided at onboarding.

Who we are (Controller)

BloxFi Limited, incorporated in Hong Kong, is the controller of personal data processed through the Website.

Scope

This Notice covers personal data we process via:

  • browsing the Website,
  • submitting forms or contacting us,
  • subscribing to newsletters/updates, and
  • participating in demos/sandboxes available on the Website (if any).

The Website is informational and not a transactional platform.

What we collect

  • Data you provide
    • Identification & contact: name, company, role, email, phone, country/region.
    • Communications: message content, meeting preferences.
    • Marketing preferences: newsletter opt-in/opt-out.
  • Data we collect automatically
    • Device/usage: IP address, browser type/version, operating system, pages viewed, time/date, referrer URL, general location (city/region), and Website performance metrics.
    • Cookies & similar tech: identifiers that help us operate, secure, and improve the Website and (if you consent) measure audience and campaign performance (see §7).
  • Data from third parties
    • Basic firmographic/contact data from lead-gen or analytics providers (where permitted by law and your settings).

We do not intentionally collect special-category data (e.g., health, biometric, political opinions). Please do not send such information via our forms.

Why we use your data (purposes)

  • Operate the Website (load balancing, security, debugging).
  • Respond to inquiries and manage our business communications.
  • Provide updates/marketing where you opt in, and honour your preferences.
  • Analytics and improvement (audience measurement, content performance).
  • Compliance and protection (detect/prevent fraud or abuse; comply with laws and requests from competent authorities; enforce our Terms).

Legal bases depend on your location. Typically: our legitimate interests (operate, secure, improve the site; B2B communications), consent (marketing emails; non-essential cookies), and legal obligations (compliance/reporting).

We do not conduct automated decision-making that produces legal or similarly significant effects via the Website.

How we share information

We share personal data only as needed with:

  • Service providers (e.g., hosting, security, email delivery, analytics, CRM) bound by confidentiality and data-protection terms;
  • Corporate events (merger, acquisition, financing, or sale of assets);
  • Legal/compliance recipients (courts, regulators, law enforcement) where required;
  • With your direction or consent (e.g., when you ask us to connect you with our sales team).

We do not sell your personal data.

International transfers

We may process and store data outside your country (including outside Hong Kong). Where required, we implement appropriate safeguards (e.g., contractual protections/standard contractual clauses with recipients). Details are available on request.

Cookies and similar technologies

We use cookies, SDKs, and similar tech to:

  • keep the site secure and functioning (strictly necessary),
  • perform basic analytics and performance measurement (with your consent).

You can manage non-essential cookies via our banner or your browser settings. Blocking some cookies may impact site performance.

Categories we use

  • Strictly necessary (always on): security, load balancing, consent storage.
  • Analytics/Performance (optional): page views, scroll depth, campaign attribution via ANALYTICS PROVIDER.

Marketing communications

If you opt in, we’ll send newsletters or product updates. You can unsubscribe at any time via the link in our emails or by contacting us through the channel specified in the Contact us / complaints section. We’ll continue sending non-marketing messages when necessary to answer your requests.

Data retention

We retain personal data only for as long as reasonably necessary to fulfil the purposes described in this Notice, including to meet legal, regulatory, tax, accounting, or reporting duties, to resolve disputes, and to enforce our agreements. When deciding how long to keep data, we consider the amount, nature and sensitivity of the data; the potential risk of harm from unauthorised use or disclosure; the purposes for which we process it and whether those purposes can be achieved by other means; and applicable legal/records-retention and limitation periods.

As a guide:

  • Enquiries & support: kept until we close your request and for a reasonable period afterwards for audit and follow-up.
  • Marketing: kept until you unsubscribe or we learn the address is invalid. We keep a minimal “suppression” record so we don’t email you after you opt out.
  • Security logs & analytics: kept for a short period to operate, secure, and improve the Website, after which we aggregate or de-identify where feasible.
  • Legal holds/compliance: retained longer where required by law, by a regulator, or in connection with a dispute, investigation, or to enforce our rights.

When data is no longer needed, we delete it or irreversibly de-identify it. Back-ups and archives are pruned or overwritten on their normal cycles.

Security

We maintain appropriate technical and organizational measures (access controls, encryption in transit, network segmentation, monitoring, backups). No system is 100% secure; please use caution when sharing information online.

Your rights

Your privacy rights depend on where you live. Subject to applicable law, you may be able to exercise some or all of the following:

  • Right to be informed – to receive clear information about how we use your data (this Notice and related disclosures).
  • Access – to request confirmation whether we process your data and obtain a copy of it.
  • Correction (Rectification) – to have inaccurate or incomplete data corrected.
  • Deletion (Erasure) – to request deletion of your data in certain circumstances (e.g., where it’s no longer needed, or you withdraw consent where consent was the legal basis).
  • Restriction – to ask us to limit how we use your data in certain cases (e.g., while we verify accuracy or handle an objection).
  • Objection – to object to processing based on our legitimate interests (and to direct marketing at any time).
  • Portability – to receive certain data in a structured, commonly used, machine-readable format and/or request we transmit it to another controller, where technically feasible.
  • Withdraw consent – where processing relies on consent, you can withdraw it at any time (this won’t affect processing already performed).
  • No solely automated decisions – we do not carry out decisions producing legal or similarly significant effects solely by automated means via the Website.

If GDPR/UK GDPR applies to you, you additionally have:

  • the right to object at any time to processing based on our legitimate interests, and we will stop unless we demonstrate compelling legitimate grounds;
  • the right to object to direct marketing at any time (we will stop immediately);
  • the right to erasure and restriction in the situations set out in GDPR/UK GDPR;
  • the right to data portability for data you provided to us and which we process by automated means on the basis of consent or contract; and
  • the right to lodge a complaint with your supervisory authority.

To exercise rights, contact us through the channel specified in this Privacy Notice. We may need to verify your identity and may refuse requests where a legal exemption applies. We will respond within one month of receiving a valid request (we may extend by a further period where permitted for complex or numerous requests and will tell you why).

Direct marketing choices. You can unsubscribe from marketing at any time using the link in our emails or by contacting us through the channel specified in the Contact us / complaints section. We keep a minimal suppression record to ensure we honour your opt-out.

Children

The Website is intended for business users and is not directed to children. Do not use the Website if you are under the age required to form a contract in your jurisdiction.

Third-party sites

The Website may link to third-party sites or services. Their privacy practices are governed by their own notices. We are not responsible for third-party content or policies.

Changes to this Notice

We may update this Notice from time to time. We will post the latest version on the Website with a new “Last updated” date and, where appropriate, provide additional notice.

Contact us / complaints

Questions, requests, or complaints:

  • Email: info@WEBSITE
  • Physical Address: Room 602, 6/F, Kai Yue Commercial Building, No.2c, Argyle Street, Mongkok Kowloon, Hong Kong.

If you believe we have not addressed your concern, you may contact your local data-protection authority (where applicable).

Governing law

This Notice is governed by Hong Kong law. Dispute resolution follows the “Dispute Resolution and Governing Law” section of our Terms of Service.