Privacy polic
Draft pending review by JL World. Not yet approved legal text.
Who we are
This draft explains how personal data is handled on jlworld.com. It covers the main website and the unlisted briefing pages (web addresses that start with /briefing/) that we share with some business contacts.
The party responsible for your personal data is [legal company name, to be confirmed by JL World], of [registered address, to be confirmed by JL World]. You can reach us about privacy at [privacy contact email, to be confirmed by JL World].
What we collect and when
If you send an enquiry (contact form)
The contact form asks for:
- your name and work email
- your company name in English, and optionally in Chinese
- optionally, your address and phone number
- the products you are interested in, and optionally your expected volume and timeline
- your message
If you use the video form on a briefing page
Some visitors see a short form before the video plays. It asks for your name and email. We store them with the briefing page, the page version you saw, whether you unlocked the video, and the date. We use your name and email to follow up with you. Whether you unlocked the video or booked a call is also counted, in aggregate, to compare page versions.
After you submit it, your name and email are also kept in your browser for the rest of that browser session, and used to fill in the booking form (see Cookies and browser storage).
If you book a call
Booking happens on a Cal.com page shown inside the briefing page. Cal.com collects what you type there. Cal.com then sends us the booking, and we store it with the briefing page and the page version you saw. Cal.com itself sends the booking confirmation email and calendar invite to the person who books.
We receive your name and email, and any of these that the booking form collects: phone number, company, product type, project stage, timeline, business type, notes, the booking reference and the time of the booking. The questions are set up in Cal.com. [final list of booking questions, to be confirmed by JL World]
Visit measurement on briefing pages
This applies to the briefing pages only. It does not apply to the rest of the website.
When you open a briefing page we give your browser a random visitor ID. It does not contain your name or email. We record each of these events with that ID: opening the page, playing the video, reaching 25%, 50%, 75% and 90% of the video, and reaching the end.
Each event is stored with the briefing page, the page version you saw (gate or open), the date and time, and the campaign tags in the link you followed (utm_source, utm_medium and utm_campaign), if present. We do not store your IP address or browser details with these events.
Datasheet downloads
When you download a product datasheet from our website, we record which product it was, the address of the page you came from, and scrambled (hashed) versions of your browser details. Where our server can see your IP address, we store a hashed version of that too. The hashed values are not stored in readable form.
Server logs
The web servers that deliver this website keep request logs. These normally include your IP address, the page you asked for, the date and time, and your browser details.
Why we use it, and our legal basis
We use personal data only to:
- reply to your enquiry
- let you watch the briefing video
- arrange and prepare for a call with you, and follow up with you afterwards, including after you use the video form. [direct-marketing statement and how to opt out, to be confirmed by JL World’s legal adviser]
- measure which version of a briefing page works better and which campaigns bring visitors
- count datasheet downloads
- keep the site secure and free of spam
Legal basis (EU and UK)
If the EU or UK data protection law applies to you, our legal basis is: [legal basis to be confirmed by JL World’s legal adviser].
Our forms do not ask you to tick a consent box, so this draft does not claim your consent as the basis.
Hong Kong notice
We collect your data for the purposes listed above. Giving us your details is your choice, but without them we may not be able to reply to you or let you book a call. We may share the data with our staff and the service providers named in this policy. You may ask to see the data we hold about you and ask us to correct it.
Who handles it for us
Cal.com and Cloudflare load their content from their own servers, so they can see your IP address and browser details when your browser loads it. They are service providers and may process data on servers outside Hong Kong.
We do not sell your personal data.
Our website links to other sites, such as our LinkedIn and Facebook pages. Those sites have their own policies.
- Cal.com handles online booking, on briefing pages only. Its privacy policy is at https://cal.com/privacy(opens in a new tab)
- Cloudflare Turnstile checks that a form is sent by a person and not a bot, on the contact form and the video form. Your browser loads Turnstile from Cloudflare. When you send a form, our server also sends Cloudflare the Turnstile token and, where our server can see it, your IP address. Its privacy policy is at https://www.cloudflare.com/privacypolicy/(opens in a new tab)
- JL World’s own hosting and email systems store the data and carry our email. Their location: [hosting location, and any transfer outside Hong Kong, to be confirmed by JL World]
How long we keep it
Retention periods are still to be set. For each kind of data below, JL World will state how long it is kept:
- Enquiries from the contact form: [retention period to be decided by JL World]
- Video form records and booking records: [retention period to be decided by JL World]
- Visit measurement events and datasheet download records: [retention period to be decided by JL World]
- Server logs: [retention period to be decided by JL World]
Your choices and rights
You can ask us to give you a copy of your personal data, to correct it, to delete it, or to stop using it in a way you object to. To ask, email the privacy contact address under Who we are. We will reply within [response time, to be decided by JL World].
You can block or delete cookies and site data in your browser settings. The briefing pages still work without them. If you block them, we cannot remember which version of the page you saw, and the unlock from the video form is not remembered.
Cookies and browser storage
The code of this website sets no cookies outside the briefing pages and loads no analytics or advertising scripts. The briefing pages set the items below. All of them belong to jlworld.com (first-party).
- jl_visitor (cookie): the random visitor ID used to count visits and video events. Lasts 1 year. HttpOnly, so scripts on the page cannot read it. Sent over HTTPS only on the live site.
- jl_gate_<page> (cookie): remembers which version of that briefing page you were shown, where <page> is the page name. Lasts 30 days. HttpOnly, and sent over HTTPS only on the live site.
- jl_unlock_<page> (browser session storage): the name and email you typed in the video form, used to fill in the booking form. It is removed when you close the tab or browser.
Other companies
Cloudflare Turnstile runs on the contact form, which is on the main website, and on the video form. Cal.com runs on briefing pages. Both are third-party code. They may set their own cookies or store data in your browser. We do not control them. See their policies: https://www.cloudflare.com/privacypolicy/(opens in a new tab) and https://cal.com/privacy(opens in a new tab)
A service such as Cloudflare may also sit in front of this website. [whether the Cloudflare or other ingress configuration adds any cookies, analytics or similar, and which, to be confirmed by JL World’s IT]
Changes to this policy
This is a draft. When JL World approves a final version, it replaces this one and shows the date it took effect. Date: [effective date, to be confirmed by JL World]