Legal
Privacy Policy
Last updated: 16 September 2026
Specifics.io ("we", "us", "our") is a business based in Hong Kong providing automation and technology services to small and medium-sized businesses. We keep our handling of personal information deliberately simple, and this policy describes it honestly: what we collect, why, and what your rights are. Formal company registration details will be published here once incorporation is complete.
What we collect
The personal information you actively give us is what you choose to send through the contact form: your name, business name, email address, mobile number (if you provide it), and your message. We only ask for what we need to respond to you, nothing more.
Separately, every visitor's IP address and standard request information is necessarily processed by Cloudflare, our hosting and security provider, for every page you view, not just the contact form, as part of delivering the site and protecting it from abuse (for example, the rate limiting that stops the contact form being spammed). We do not run analytics or advertising trackers of our own — see our Cookie Policy for the full detail on the one cookie this site sets and how we checked that claim.
How we use it
We use the information you submit solely to respond to your enquiry and, if you engage us, to carry out that engagement. We do not sell, rent, or trade your personal information, and we do not use it for marketing unless you have separately asked us to.
Separately from this website, we may also send business introductions (cold outreach), from contact@specifics.io. The business contact details we use for this come from publicly available sources, such as a company's own website or a business directory, not from anyone else.
Rules on unsolicited business communications differ meaningfully by jurisdiction and can be stricter than a simple opt-out standard — including Hong Kong's own direct marketing regime, which in some circumstances requires consent before we contact a named individual rather than relying on an after-the-fact opt-out. Because of this, we take a deliberately cautious approach to who we contact and how, and keep it under active review rather than treating one legal basis as sufficient everywhere. Every such email identifies Specifics.io clearly and isn't disguised as being from someone else, and you can stop it at any time — reply "unsubscribe" or email us and we will remove your details from any outreach list, no questions asked.
How your message reaches us
When you submit the contact form, Cloudflare Turnstile first checks the submission is from a human, and your message is then transmitted to our inbox by Resend, a transactional email service. Both act only as carriers or security checks for your message and process it in accordance with their own privacy commitments (see Cloudflare's privacy policy and Resend's privacy policy). We share your information with no other third parties, except where the law requires us to.
How long we keep it
If your enquiry doesn't lead to an engagement, we delete it once it's clearly gone cold rather than keeping it indefinitely. If it does lead to an engagement, we keep what's needed for that engagement and for as long afterwards as we're required to for tax, accounting, or legal reasons. You can ask us to delete your information sooner at any time (see "Your rights" below).
Your rights, wherever you are
Regardless of where you're located, you can ask us to: give you a copy of the information we hold about you, correct it if it's wrong, delete it, restrict or object to how we use it, or hand it over in a portable format. Email contact@specifics.io with "Privacy request" in the subject line and we will act on it — we apply this as one global standard rather than giving different visitors different treatment depending on which law happens to apply to them.
Where a specific law also gives you these rights as a matter of legal entitlement rather than just our policy, that includes: the UK GDPR and EU GDPR if you're in the United Kingdom or European Economic Area (with the right to complain to your local supervisory authority — in the UK, the Information Commissioner's Office); Hong Kong's Personal Data (Privacy) Ordinance, since we operate out of Hong Kong; and, if you're in the United States, whichever state privacy law applies to you. We will respond within the timeframe required by whichever law applies, or within 30 days if none does.
International transfers
We are based in Hong Kong, so information you send us is processed outside the UK and the European Economic Area. Our infrastructure and email providers, Cloudflare and Resend, may also process or store information on servers located in other countries, including the United States; both are established providers with their own data protection commitments, linked above. Where we handle personal information of UK or EU residents, we rely on those providers' safeguards alongside our own practices in this policy, in line with applicable data protection law.
Security
We take reasonable administrative and technical measures to protect the information you send us. No method of transmission over the internet is completely secure, however, and we cannot guarantee absolute security. If a data breach affecting your information ever occurs, we will notify you and any authority we're legally required to notify without undue delay.
Children
Our services are aimed at businesses, and this website is not directed at children. We do not knowingly collect personal information from anyone under 16.
Changes to this policy
We will update this policy if our practices change, and the "last updated" date above will always reflect the current version.
Contact us
Questions about this policy or how we handle your information: contact@specifics.io.