Scope and contact
Seaton Holdings Limited, located in Tsuen Wan, Hong Kong, is responsible for personal information it processes to operate China Customs Compliance. This location is not a full registered or service address. Contact support@chinacustomscompliance.com for privacy requests or arrangements for formal correspondence. Lemon Squeezy separately processes payment information as Merchant of Record under its own notices. This policy covers our website, purchase access and support, rather than replacing provider notices.
Information used
We use purchase email, product and Edition identifiers, order and payment references, amounts, currency, consent evidence, entitlement records and relevant support communications. Authentication and delivery processing uses short-lived token hashes, session records, authorization records and limited security or delivery events. Our application does not receive or store complete payment-card details. Do not submit sensitive personal information unnecessary for your support or service request.
Purposes and legal grounds
We process information to handle purchases, provide contracted digital access, maintain order evidence, answer requests, prevent abuse, reconcile payments and meet applicable legal obligations. Where applicable, contractual necessity, legal obligations or appropriately assessed legitimate interests support this processing. Where consent is required, we request it separately and provide a withdrawal mechanism. Purchase or delivery consent is not marketing consent. We do not treat a transactional email address as permission for marketing.
Providers and transfers
Cloudflare provides website, database and private-file infrastructure; Resend processes application emails; our business email provider supports correspondence. Lemon Squeezy acts separately as Merchant of Record for checkout, payment, tax and related records. Authorized providers and personnel receive only information needed for their role. Processing may occur in Hong Kong and other countries where providers operate, whose laws may differ from yours. We assess required contracts, safeguards and disclosure or consent requirements before enabling a processing arrangement. Editorial repositories do not contain customer records or have access to customer databases. Where used, encrypted backup providers process backup data and monitoring providers receive limited operational signals; we do not send customer records in monitoring heartbeats. Contact us about applicable providers and transfer arrangements.
Cookies, security and private access
Essential session mechanisms support sign-in and security. Short-lived links require explicit sign-in confirmation and are not intended for sharing. Private documents are authorized by the application rather than exposed through a public storage URL. These safeguards reduce risk but do not make any internet service immune to misuse. Non-essential tracking must not be enabled without the required notice and choice; this policy does not authorize analytics or advertising cookies.
Retention and your rights
We keep personal data only as long as necessary for its purpose. Order, payment, consent and accounting evidence is kept for applicable recordkeeping obligations and unresolved claims; the minimum customer and entitlement information needed for continuing purchased access is kept while that access remains available. We assess these purposes separately rather than retaining every event for the lifetime of a purchase. Authentication credentials expire under the applicable short-lived security settings; expiration prevents use but does not itself erase the audit record. We periodically review expired authentication records, security and delivery events, and closed support cases, deleting or anonymizing data no longer needed, subject to a documented legal hold. Access to retained records is restricted.
Privacy requests and deletion
Request access, correction or other applicable privacy rights at support@chinacustomscompliance.com. Explain your request and the relevant purchase email or reference; do not send passwords, card details or sign-in links. We verify identity proportionately, respond within the applicable statutory period, and explain any permitted extension or refusal. Depending on applicable law, rights may include deletion, restriction, portability, objection and withdrawal of consent; you may complain to the Hong Kong Privacy Commissioner for Personal Data or another competent authority. Withdrawal does not invalidate earlier lawful processing. Necessary legal records and valid purchase rights are handled separately from unnecessary data. Backup copies remain restricted until scheduled expiry or secure deletion, and recovery must reapply recorded deletion restrictions. This policy does not claim immediate deletion from every backup or an automated deletion function that has not been enabled.