Legal
Privacy Policy
How Surveillance Intelligence Asia handles personal data belonging to visitors, registered users, and customers.
Who this applies to
Visitors, registered users, and customers of Surveillance Intelligence Asia.
Information we collect
Account information: name, email, company, job title, and department.
Payment information: card payments are processed by Lemon Squeezy, part of Stripe, our merchant of record for card orders; for bank transfer or cheque, the billing details you give us for your invoice. We never see or store your card details.
Purchase history: the products and subscriptions associated with your account.
Communications: email correspondence with our editorial, support, and legal teams.
Auto-collected: usage data, device information, cookieless analytics and one session cookie (all described below).
Third parties
We rely on a small number of processors to run the service: Lemon Squeezy, part of Stripe, which acts as merchant of record for card orders and handles their checkout, billing and receipts; a hosting and content-delivery provider, which also provides our cookieless traffic measurement; a database and authentication provider; a security-check provider that confirms a request for a sign-in code comes from a person and not a bot; an email delivery provider for transactional mail; and, for Enterprise seats only, the service that answers The Desk's questions, which receives the question you type and returns the cited answer. We never see or store your card details. Those go to the payment processor directly.
If you start an order and do not finish it, the details you entered in the first step are sent to our billing team so we can help you complete it. They are not added to any mailing list.
Where your data is processed
We are based in the Macau Special Administrative Region. Our servers and our providers operate in Singapore, the European Union and the United States, so your data is transferred and processed outside Macau and, depending on where you are, outside your own country. We use providers that offer contractual protections for those transfers, including the European Commission's standard contractual clauses where they apply.
How we use your data
Service delivery, account management, communication about your purchases and subscriptions, product improvement, security monitoring, and legal compliance.
Sharing
We do not sell personal data. We share data only with: service providers under non-disclosure agreements; authorities where legally required; counterparties in a business transfer; and the professional-verification reviewer for restricted-product access.
Security
SSL/TLS in transit, access-controlled servers with row-level authorisation, private storage for every paid file with short-lived signed download links, and a documented incident-response procedure. We do not commission third-party penetration testing at our current size.
Retention
Account records: 2 years after closure. Purchase records: 7 years for tax compliance. Usage logs: 12 months. Communications: 3 years.
Your rights
Access, correction, deletion, portability, restriction, objection, and withdrawal of consent. To exercise any of these, email privacy@surveillanceasia.com.
Cookies
We set one cookie: a session cookie, and only once you sign in. We run no advertising trackers and no advertising or social scripts of any kind.
We do measure traffic, and the measurement is cookieless. It records the page address, the referring site, an approximate location (country, region and city), your browser, operating system and device type, so we know which pages are read and where readers arrive from. Nothing is stored on your device and you cannot be identified: visitors are told apart by a hash derived from the request and discarded after 24 hours. It runs on our own domain through the hosting provider already named above, so no new company receives your data.
The only requests your browser makes off this site are to the processors named above: our database and authentication provider, which signs you in and checks what you have access to; the security-check provider, on the sign-in page only, which reads basic browser signals for that one purpose: telling a person from a bot; and The Desk's answering service when you use it. Nothing profiles you and nothing follows you elsewhere, so there is nothing to consent to and no banner to dismiss.
Third-party links
The site links out to regulator pages, news outlets, and similar third-party sources. We do not vet their privacy practices; review their policies before submitting any personal information.
Contact
Your right to complain, and to whom. If we do not resolve something to your satisfaction you may complain to a supervisory authority. We are established in the Macau Special Administrative Region and our processing is governed by the Macau Personal Data Protection Act (Law 8/2005), overseen by the Office for Personal Data Protection (GPDP). If you are in the European Union, the United Kingdom or another jurisdiction with its own data-protection authority, you may also complain to the authority where you live or work: that right is yours regardless of where we are.
Privacy questions, requests, or complaints: privacy@surveillanceasia.com.