Privacy Policy

Who we are

This site is operated by Thrillplug Limited ("Thrillplug", "we", "us"), a company registered in Hong Kong, with its registered office at Flat 1019B, 10/F, Liven House, 61-63 King Yip Street, Kwun Tong, Hong Kong.

We work with small businesses in the EU, UK and elsewhere, so we treat personal data as if the GDPR applied even where it does not strictly bind us.

What we collect

Free audit form: the website URL or business name you type in, plus the language version of the site you submitted from, and a timestamp.

Email contact: if you write to us at julian@thrillplug.com, we receive your email address, name and the content of the message.

Cookies: a single first-party preference cookie remembering whether you accepted the cookie banner. We do not load analytics or advertising cookies unless you accept.

Server logs: like most websites, our hosting provider keeps short-lived technical logs (IP address, user agent, requested path) for security and reliability.

Why we collect it

To produce and send the free audit you requested.

To answer messages you send us.

To operate, secure and improve the website.

To comply with legal obligations (accounting, fraud prevention).

Legal basis (GDPR)

Performance of a contract or pre-contractual steps at your request (Art. 6(1)(b) GDPR) — when you request an audit or contact us.

Our legitimate interest in running a safe, working website (Art. 6(1)(f) GDPR) — for server logs and basic security.

Your consent (Art. 6(1)(a) GDPR) — for any non-essential cookies. You can withdraw consent at any time by clearing your browser storage for this site.

Who sees your data

Thrillplug staff working on your request (currently a small team).

Resend (Resend.com), our transactional email provider, which delivers your audit request to our inbox.

Our hosting provider (currently Vercel), which serves the site.

We do not sell personal data to anyone.

Where your data goes

Thrillplug Limited is based in Hong Kong; our service providers (Resend, Vercel) process data in the United States and the EU. Where applicable, transfers rely on standard contractual clauses or equivalent safeguards.

How long we keep it

Audit requests and email correspondence: up to 24 months after the last contact, then deleted unless we are required to keep records longer (e.g. for tax or contract law).

Server logs: typically up to 30 days at the hosting provider.

Cookie consent preference: stored in your browser until you clear it.

Your rights

You can ask us to confirm what data we hold about you, correct it, delete it, restrict our use of it, or send you a copy in a portable format. You can also object to processing based on our legitimate interest.

To exercise any of these rights, email julian@thrillplug.com. We will respond within 30 days.

If you are in the EU/UK and believe we have mishandled your data, you have the right to complain to your local data protection authority.

Changes to this policy

We update this page when we change how we handle data. The date at the top reflects the latest version.