Privacy Policy

This policy explains how CloudBridge Capital Limited (Hong Kong) handles information submitted through this website. It describes what the site actually does, not what a template says it might. Last updated 12 August 2026.

What we collect when you use a form

The programs and contact forms are the only places this site asks you for anything. When you submit one, we store and email ourselves:

• What you typed: your name, email address, organization, and the message itself, along with the budget range, cities, or topic you selected.
• The IP address the submission came from, the time, and which form it was.
• An automated score used to sort genuine inquiries from bulk spam, together with the reasons behind it.

The message body is stored in full, because that is the inquiry we are answering. Nobody outside CloudBridge Capital reads it.

What we collect when you only read

Browsing the site sets no analytics or advertising cookies. A single session cookie is created so the forms can protect themselves against cross-site request forgery; it holds no personal data and expires when you close your browser. Our host and our network provider keep short-lived server logs, as any web host does.

Third parties

• DreamHost hosts the site and delivers our email.
• Cloudflare sits in front of the site as a content network and protects it from attack, so it processes the technical details of every request.
• beehiiv publishes the China Insights newsletter. The article thumbnails on this site are loaded from beehiiv's servers, which means your browser reveals your IP address to beehiiv when those images load. Subscribing to the newsletter happens on beehiiv's own site, under their privacy policy.

We do not sell personal data, we run no advertising profiles, and we use no tracking pixels.

How long we keep it

A daily job on the server enforces these limits automatically:

• Inquiries are deleted after 2 years.
• Submissions filtered as spam are deleted after 30 days, because we have less reason to hold them.
• Security logs, which record the time, route, and outcome of a submission but never the message body, are deleted after 90 days.

Daily backups exist so a server failure cannot erase a conversation in progress. The last 14 are kept, so a deleted record can survive in one of them for up to 14 days after it disappears from the live file.

Why we are allowed to hold it

You sent it to us so that we would reply. We use it to answer you and to decide whether we are a fit, which is a legitimate interest on both sides, and we keep enough of a record to run the business properly. We do not use it for anything else, and we never sell it or hand it to anyone for marketing.

If you subscribe to China Insights, that is a separate decision you make on beehiiv's own site, under their terms. We do not add anyone to the newsletter because they filled in a form here.

Where it goes

CloudBridge Capital Limited is a Hong Kong company, so data you send reaches Hong Kong. The site itself is hosted in the United States by DreamHost and served through Cloudflare's global network, which means your request is handled at whichever location is nearest to you. If you are in the EU or the UK, that is an international transfer, and we keep the amount of data involved to what is listed above.

Your rights

You can ask us what we hold about you, ask for it to be corrected, ask for a copy, or ask us to delete it before the periods above run out. Use the contact form and say what you are asking for. We will act on it, and we will not ask you to justify the request.

If you are in the EU or the UK and you are unhappy with how we have handled it, you can also complain to your national data protection authority.

Security

The site is served over HTTPS only. Submissions are stored outside the web root, so they are not reachable from the internet. The admin inbox has no password to steal: signing in requires a single-use code emailed to a registered address, and it works only in the browser that asked for it. Backups are held for fourteen days and are readable only by the site owner.

Contact

Privacy requests go through the contact page. The company behind this site is CloudBridge Capital Limited, Business Registration Number 74276386, Unit 2A, 17/F, Glenealy Tower, No.1 Glenealy, Central, Hong Kong S.A.R.