Privacy Policy

UtaProxy (“we”, “us”, or “our”) is operated by Lightyear (Hong Kong) Co., Limited. We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, disclose, and protect your personal information when you use our website and proxy services (collectively, the “Services”).

This Policy applies to users of our Services. By using our Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described in this Policy, please do not use our Services.

We process personal information in accordance with applicable data protection and privacy laws, including the Personal Data (Privacy) Ordinance (Cap. 486) of the Hong Kong Special Administrative Region. We also aim to provide privacy protections consistent with widely recognized data protection principles, including those reflected in the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), where appropriate and applicable.

2.1 Information You Provide

When you register for an account, purchase our Services, or contact us, we may collect information necessary to provide and manage our Services, including:

1. Email address
2. Password
3. Phone number, where provided
4. Account and subscription information
5. Order and transaction information
6. Information you provide when contacting our Customer Support team

Payment information is processed by third-party payment service providers. We do not directly store complete payment card details on our own servers.

2.2 Information We Collect Automatically

When you use our Services, we may collect limited technical and operational information necessary to maintain service availability, performance, security, and prevent abuse.

This may include:

1. Access timestamps
2. Session identifiers
3. Service usage information
4. Technical information required to operate and secure our Services

When our proxy services process your requests, our systems may temporarily process technical information such as your IP address and destination website information solely for the purpose of routing and delivering the requested traffic.

We do not intentionally store your browsing history, the content of data transmitted through our proxy services, or device fingerprint information as part of our standard proxy service logging practices.

Where technical information is temporarily processed for service delivery, it is not intentionally retained in persistent storage after the relevant request has been completed, subject to necessary security, operational, or legal requirements.

We may use personal information for the following purposes:

1. To provide, operate, and maintain our Services
2. To create and manage user accounts
3. To process payments and orders
4. To provide customer support
5. To communicate with you regarding your account or Services
6. To prevent fraud, abuse, unauthorized use, and security incidents
7. To monitor and improve the performance, reliability, and functionality of our Services
8. To comply with applicable legal and regulatory requirements
9. To send marketing communications where you have provided the required consent or where otherwise permitted by applicable law

We do not use personal information for purposes that are incompatible with the purposes described in this Policy unless otherwise permitted or required by applicable law.

We use cookies and similar technologies to operate our website, maintain security, manage user sessions, and provide requested functionality.

4.1 Necessary Cookies

We use strictly necessary cookies for core website functions, including:

1. User authentication
2. Session management
3. Security
4. Essential website functionality

These cookies are necessary for the operation of our Services and generally cannot be disabled through our cookie consent mechanism.

4.2 Analytics Cookies

We use Google Analytics to understand how visitors interact with our website and to improve our Services.

Depending on your cookie settings, Google Analytics may collect information such as pages visited, time spent on the website, referral sources, browser information, device information, and IP-related information.

Analytics cookies are non-essential cookies. Where required by applicable law, we will obtain your consent before setting such cookies.

You may withdraw or change your cookie preferences at any time through our cookie consent mechanism.

Most web browsers also allow you to manage or disable cookies through their settings. Disabling strictly necessary cookies may affect the availability or functionality of certain parts of our Services.

5.1 Storage Location

Your personal information is primarily stored and processed on servers located in Hong Kong.

Depending on the Services we provide and the third-party providers we use, your personal information may also be accessed or processed in other jurisdictions.

Where personal information is transferred across jurisdictions, we take reasonable steps to ensure that such transfers are handled in accordance with applicable data protection requirements.

If you are located in a jurisdiction that provides specific protections for international data transfers, you may have additional rights or protections under applicable law.

5.2 Retention Period

We retain personal information only for as long as reasonably necessary to fulfill the purposes described in this Policy, provide our Services, maintain business and financial records, prevent fraud and abuse, resolve disputes, and comply with applicable legal obligations.

The actual retention period may vary depending on the type and purpose of the information.

Where an account is deleted, we may retain certain information for a reasonable period where necessary for legal, accounting, security, fraud prevention, dispute resolution, or other legitimate business purposes.

When personal information is no longer required, we will take reasonable steps to delete or anonymize it in accordance with our applicable retention practices.

5.3 Log Data

We may maintain system and operational logs for purposes such as performance monitoring, troubleshooting, security monitoring, abuse prevention, and service reliability.

We aim to limit the information contained in such logs to what is reasonably necessary for these purposes. Where logs contain personal information, they will be retained only for as long as reasonably necessary for the relevant operational, security, or legal purpose.

We do not sell your personal information to third parties.

We may share personal information only where reasonably necessary to provide our Services, operate our business, protect our users and systems, or comply with applicable law.

6.1 Payment Processing

To process payments and prevent fraud, we may share necessary transaction information with our payment service providers, including PayPal, OnlyPay, TripleA, and EPay.

The information shared may include information necessary to process the transaction, such as your name, email address, order details, transaction information, and information required for fraud prevention.

Payment providers process your information in accordance with their own privacy policies and applicable laws.

6.2 Analytics and Service Providers

We may use third-party service providers to support website analytics, hosting, infrastructure, security, customer support, payment processing, and other business functions.

These providers may process personal information on our behalf and are expected to process such information only as necessary to provide the relevant services and in accordance with applicable contractual and legal requirements.

6.3 Legal and Regulatory Requirements

We may disclose personal information where reasonably necessary to:

Comply with applicable laws, regulations, or legal processes

Respond to lawful requests from courts, regulators, or governmental authorities

Protect our rights, property, or safety

Investigate fraud, abuse, security incidents, or violations of our Terms of Use

Protect the rights, safety, or property of our users or other individuals

6.4 Business Transfers

If we are involved in a merger, acquisition, restructuring, financing, sale of assets, or similar business transaction, personal information may be transferred as part of that transaction.

Where required by applicable law, we will provide appropriate notice regarding such changes.

We respect your rights regarding your personal information and aim to provide privacy protections consistent with widely recognized data protection principles, including those reflected in the GDPR and CCPA, where appropriate.

Depending on your location and applicable laws, you may have the following rights regarding your personal information:

1. Access — Request access to the personal information we hold about you.
2. Correction — Request that inaccurate or incomplete personal information be corrected.
3. Deletion — Request deletion of your personal information, subject to applicable legal and contractual requirements.
4. Restriction — Request that we restrict certain processing of your personal information.
5. Data Portability — Request a copy of certain personal information in a structured, commonly used, and machine-readable format, where applicable.
6. Objection — Object to certain processing of your personal information, where applicable.
7. Withdraw Consent — Withdraw consent where processing is based on your consent.
8. Complaint — Raise a privacy concern or submit a complaint to us. Where applicable, you may also have the right to lodge a complaint with the relevant data protection authority.

These rights may vary depending on your jurisdiction and the laws applicable to your personal information.

To exercise your privacy rights or raise a privacy-related concern, please contact us at [email protected]. We will review and respond to your request within a reasonable period and in accordance with applicable requirements.

As an international service provider, we may process personal information in jurisdictions other than the country in which you reside.

For example, personal information collected through our Services may be stored or processed in Hong Kong or by service providers located in other countries.

Where applicable, we take reasonable measures to protect personal information when it is transferred across jurisdictions and to ensure that such transfers are handled in accordance with applicable data protection requirements.

By using our Services, you acknowledge that your personal information may be processed in jurisdictions outside your country of residence, subject to the protections described in this Policy and applicable law.

We take reasonable technical and organizational measures to protect personal information against unauthorized access, disclosure, alteration, loss, or destruction.

These measures may include access controls, encryption, security monitoring, and other appropriate security practices.

However, no method of transmission or storage over the Internet can be guaranteed to be completely secure. While we take reasonable measures to protect your information, we cannot guarantee absolute security.

If we become aware of a personal data breach that may pose a risk to individuals, we will take appropriate steps to investigate, contain, and address the incident.

Where required by applicable law, we will notify the relevant authorities and affected individuals within the applicable timeframe.

Our Services are intended for business and general audiences and are not directed to children. We do not knowingly collect personal information from children.

If you believe that a child has provided personal information to us, please contact us at [email protected] so that we can review and take appropriate action.

We may update this Privacy Policy from time to time to reflect changes to our Services, business practices, technology, or applicable legal requirements.

When we make material changes, we may provide additional notice through our website, email, or other appropriate means.

The updated version of this Privacy Policy will become effective from the date stated in the revised Policy. We encourage you to review this Policy periodically to remain informed about how we handle personal information.

If you have any questions, concerns, or requests regarding this Privacy Policy or our handling of personal information, please contact us:

1. Company: Lightyear (Hong Kong) Co., Limited
2. Website: UtaProxy
3. Email: [email protected]
4. Address: WORKSHOP 60, 3/F, BLOCK A, EAST SUN INDUSTRIAL CENTRE NO. 16 SHING YIP STREET KWUN TONG KOWLOON HONG KONG

We will make reasonable efforts to address privacy-related questions and requests in accordance with applicable laws and this Privacy Policy.