Legal

Privacy policy

Effective date: 29 April 2026

This privacy policy explains how Glia Hong Kong Holdings Co., Limited (CR 79614428, "Glia", "we", "our", "us") collects, uses, stores, and protects personal data submitted through glia.digital (the "site"). It is written for the Hong Kong Personal Data (Privacy) Ordinance (Cap. 486) ("PDPO") and applies to anyone who visits the site or contacts us through it.

1. Who we are

Glia Hong Kong Holdings Co., Limited is a private company incorporated in the Hong Kong Special Administrative Region. Our registered office is Room 5003, 5F Yau Lee Centre, 45 Hoi Yuen Road, Kwun Tong, Hong Kong. For the purposes of the PDPO we are the data user of any personal data collected through this site.

2. Information we collect

We deliberately collect as little personal data as possible. The only personal data we actively collect is what you choose to submit through our contact form: your name, your email address, and the content of your message.

Our hosting infrastructure also generates standard server logs as a routine part of delivering the site. These logs may include your internet protocol (IP) address, your browser and operating system identifiers, the pages you visited, and the date and time of your visit. Server logs are generated by our hosting provider, not by application code we have written, and are retained by that provider for short periods for security and operational purposes.

The site does not offer user accounts, does not process payments, and does not request any health, financial, identity document, or other sensitive personal data. We do not run web analytics tools, advertising networks, social media tracking pixels, or session replay scripts.

3. How we use your information

We use the information you submit through the contact form solely to read, understand, and respond to your enquiry. We do not use it for marketing, profiling, or automated decision-making. We do not sell, rent, or trade personal data with anyone.

Server logs are used by our hosting provider to detect abuse, diagnose technical issues, and ensure the site is delivered reliably.

4. Where your information is stored

Contact form submissions are stored in a Supabase database hosted in Singapore. Supabase acts as our data processor under a written processing agreement. We retain enquiries until the matter is resolved, or for a maximum of 24 months from submission, whichever is sooner. After that period, submissions are deleted.

The site itself is delivered by Vercel, our hosting provider. Vercel may process connection metadata at the network edge to deliver the site to your browser. Vercel is also our data processor for this purpose.

5. Cookies and similar technologies

We do not set any first-party advertising or analytics cookies. The site uses only the technical cookies that may be set by our hosting provider for delivery and security purposes. For full details please see our cookie policy.

6. Third parties we use

We use a small number of service providers to operate the site:

Supabase (Supabase Inc., Singapore region) stores contact form submissions on our behalf. Vercel (Vercel Inc.) hosts and serves the site through a global edge network. We do not use any other third-party data processors. We do not embed analytics, advertising, social media, or chat widgets that would transfer data to third parties without your active interaction.

7. International transfers

Your personal data may be transferred outside Hong Kong as part of normal site operations. Specifically, contact form submissions are stored in Singapore via Supabase, and connection metadata may pass through Vercel's global edge network. We rely on contractual safeguards with these providers to maintain protection equivalent to that required under the PDPO.

8. Your rights under the PDPO

Under the Hong Kong Personal Data (Privacy) Ordinance you have the right to:

request a copy of any personal data we hold about you; request correction of inaccurate personal data; request deletion of personal data we no longer need; and ask questions about how your data is being handled. To exercise any of these rights please email hello@glia.digital. We will respond within a reasonable period and at most within 40 days of receiving a verifiable request, in line with the PDPO. We will not charge a fee unless permitted by law.

9. Data security

We protect personal data with appropriate technical and organisational measures. The site is served only over HTTPS. Data in our Supabase database is encrypted in transit and at rest. Access to stored submissions is limited to authorised personnel who need it to respond to enquiries. We review our security practices regularly.

10. Children's privacy

The site is not directed at children under the age of 16 and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data through the contact form, please contact us at hello@glia.digital and we will delete it.

11. Retention

Contact form submissions are retained for as long as necessary to respond to your enquiry, and in any case no longer than 24 months from submission. Server logs are retained by our hosting provider in accordance with their standard retention policies. After the retention period, data is deleted or irreversibly anonymised.

12. Changes to this policy

We may update this policy from time to time. The effective date at the top of this page will be revised when changes are made. We will not reduce your rights under this policy without your express consent.

13. Contact

For privacy enquiries, including any request to exercise your rights under the PDPO, please contact us at hello@glia.digital, or by post to:

Privacy Officer
Glia Hong Kong Holdings Co., Limited
Room 5003, 5F Yau Lee Centre
45 Hoi Yuen Road
Kwun Tong, Hong Kong