PRIVACY POLICY

Last updated August 25, 2025

This privacy notice for QGP Limited (“Company,” “we,” “us,” or “our”) describes how and why we collect, store, use, and/or share (“process”) personal information when you use our websites, products, and services (collectively, the “Services”), including when you:

• visit our website at https://www.qgp.com or any website of ours that links to this Privacy Policy;
• create an account, make an order, or otherwise engage with us in sales, support, or marketing channels; or
• participate in events, surveys, or promotions that we organize.

If you do not agree with our policies and practices, do not use the Services. If you have questions or concerns, please contact us via our contact form.

SUMMARY OF KEY POINTS

This summary highlights key points only. You can find more details by using the table of contents below or navigating to the referenced sections.

• What personal information do we process? We process personal information that you provide to us, that is collected automatically, and—where applicable—that we receive from service providers in order to operate the Services. See Section 1.
• Do we process sensitive personal information? We do not intentionally process sensitive personal information.
• Do we receive information from third parties? We generally collect information directly from you and automatically via the Services. In limited cases we may receive information from service providers (e.g., payment processors or security vendors) necessary to provide the Services. See Section 1.
• How do we process your information? We process information to provide and secure the Services, comply with law, and communicate with you. See Section 2.
• On what legal bases? Where applicable (e.g., EU/UK GDPR), we rely on contract, legitimate interests, consent, and legal obligations. See Section 3.
• Is your information shared? We share with service providers and in connection with corporate transactions, in accordance with this Policy. See Section 4.
• How is it protected? We use organizational and technical safeguards appropriate to our business, but no system is 100% secure. See Section 7.
• Your rights. Depending on your location, you may have rights of access, correction, deletion, objection, restriction, portability, and other rights. See Section 9.

TABLE OF CONTENTS

1. WHAT INFORMATION DO WE COLLECT?
2. HOW DO WE PROCESS YOUR INFORMATION?
3. WHAT LEGAL BASES DO WE RELY ON?
4. WHEN AND WITH WHOM DO WE SHARE YOUR INFORMATION?
5. COOKIES AND SIMILAR TECHNOLOGIES
6. DATA RETENTION
7. DATA SECURITY
8. CHILDREN
9. YOUR PRIVACY RIGHTS
10. DO-NOT-TRACK
11. CALIFORNIA PRIVACY RIGHTS
12. VIRGINIA PRIVACY RIGHTS
13. HONG KONG PDPO DISCLOSURES
14. CHANGES TO THIS POLICY
15. SMS/TEXT MESSAGES
16. CONTACT US
17. REVIEW, UPDATE, OR DELETE YOUR DATA
18. RELATED POLICIES

1. WHAT INFORMATION DO WE COLLECT?

Information you provide. We collect personal information that you voluntarily provide, including:

• Identity and contact data (e.g., name, email, phone, company, job title, billing address);
• Account credentials (e.g., usernames and hashed passwords);
• Order and support data (e.g., order details, instructions, communications);
• Marketing preferences and survey responses.

Payment data. If you make purchases, we collect information necessary to process the transaction (e.g., name, billing details). We do not store full card numbers. Card and PayPal data are processed and stored by our payment providers (e.g., PayPal). For details, see PayPal’s policy: PayPal Privacy Statement.

Information collected automatically. We automatically collect device and usage data (e.g., IP address, device identifiers, browser type, operating system, referring URLs, pages viewed, searches, and timestamps) for security, operations, and analytics.

Information from service providers. In limited cases, we receive information from providers (e.g., payment processors, security and fraud prevention vendors) needed to operate the Services.

2. HOW DO WE PROCESS YOUR INFORMATION?

We process personal information to:

• Provide, operate, and maintain the Services and your account;
• Process orders and payments, fulfill and track services, and provide customer support;
• Detect, prevent, and respond to security incidents, fraud, abuse, or illegal activity;
• Improve, test, and enhance the Services (including analytics and quality assurance);
• Send administrative and transactional communications (e.g., order updates, service notices);
• Send marketing communications with your consent or as otherwise permitted by law;
• Comply with legal obligations and enforce our agreements.

3. WHAT LEGAL BASES DO WE RELY ON?

Where required (e.g., under EU/UK GDPR), we rely on one or more of the following legal bases:

• Contract: to provide the Services you request and perform our agreements with you;
• Legitimate interests: to secure and improve our Services, prevent fraud, and market to business contacts, provided such interests are not overridden by your rights;
• Consent: for certain marketing, cookies, or where otherwise required; you may withdraw consent at any time;
• Legal obligation: to comply with laws, regulations, and lawful requests.

4. WHEN AND WITH WHOM DO WE SHARE YOUR INFORMATION?

We share personal information with:

• Service providers performing services on our behalf (e.g., hosting, customer support, payment processing, security);
• Professional advisors (e.g., legal, accounting) under duties of confidentiality;
• Corporate transactions, in connection with any merger, acquisition, or sale of assets; and
• Legal and compliance, to comply with law, enforce terms, or protect rights, safety, and property.

5. COOKIES AND SIMILAR TECHNOLOGIES

We use cookies, pixels, and similar technologies to operate and improve the Services and for analytics. For details and your choices, please see our Cookie Policy.

6. DATA RETENTION

We retain personal information for as long as necessary to fulfill the purposes outlined in this Policy, including to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. When no longer needed, we will delete or anonymize the information. If deletion is not feasible (e.g., in backups), we will securely store and isolate the information until deletion is possible.

7. DATA SECURITY

We implement administrative, technical, and physical safeguards appropriate to the nature of the data we process. However, no electronic transmission or storage can be guaranteed to be 100% secure.

8. CHILDREN

The Services are not directed to children under 18, and we do not knowingly collect data from them. If you believe a child has provided personal information, contact us and we will take appropriate steps to delete such information.

9. YOUR PRIVACY RIGHTS

Depending on your location, you may have rights of access, correction, deletion, objection, restriction, portability, and the right to withdraw consent. You may exercise these rights via our contact form. We will respond in accordance with applicable law. You also have the right to lodge a complaint with your local supervisory authority.

10. DO-NOT-TRACK

Because there is no universal standard for DNT signals, we do not currently respond to them. If such a standard is adopted, we will update this Policy.

11. CALIFORNIA PRIVACY RIGHTS (CCPA/CPRA)

California residents may have rights to know, access, delete, correct, and opt out of certain data sharing. We do not sell personal information as defined by the CCPA/CPRA. To exercise rights, use our contact form. We will not discriminate against you for exercising your rights.

12. VIRGINIA PRIVACY RIGHTS (VCDPA)

Virginia residents may have rights of access, correction, deletion, portability, and to opt out of targeted advertising or profiling producing legal effects. To exercise rights or appeal a decision, contact us via our contact form.

13. HONG KONG PDPO DISCLOSURES

As a Hong Kong company, we act as a “data user” under the Personal Data (Privacy) Ordinance (Cap. 486) (“PDPO”). You have rights to request access to and correction of personal data we hold about you. Requests should be made via our contact form. We will take practicable steps to ensure personal data is accurate and not kept longer than necessary for the purpose for which it is used. Personal data may be transferred outside Hong Kong; where we do so, we take reasonably practicable steps to ensure recipients provide a standard of protection comparable to that under the PDPO.

14. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. The “Last updated” date at the top indicates when it was last revised. Changes take effect when posted.

15. SMS/TEXT MESSAGES

If you opt in to receive SMS alerts, we may send order or system notifications (no more than three per week). Message and data rates may apply. You can opt out at any time by replying STOP; for help, reply HELP. We will not share your phone number with third parties for their own marketing.

16. CONTACT US

If you have questions or comments about this Policy, contact us via our contact form or by post at:
QGP Limited
Unit 501, 5/F, Valley Centre
No. 80-82 Morrison Hill Road
Hong Kong, Hong Kong 999077
Hong Kong

17. REVIEW, UPDATE, OR DELETE YOUR DATA

Based on the laws of your country or state, you may request access to, correction of, or deletion of your personal information. Please submit requests via our contact form.

18. RELATED POLICIES

For additional information, please review our Terms & Conditions, Cookie Policy, and Refund Policy.

This Privacy Policy is incorporated by reference into our Terms & Conditions and should be read together with our Cookie Policy and Refund Policy.