Privacy Policy

This policy explains what personal data Eastbound Limited ("Eastbound", "we", "our") collects, why we collect it, how we use it, and your rights. Eastbound is a Hong Kong-incorporated research and consulting firm operating from Sheung Wan, Hong Kong.

If you only want the short version: we collect the contact details you give us (name, work email, company, job title) when you request a free audit, submit a contact form, or fill in a lead form on our advertising. We use it to deliver the audit or research you requested and to follow up about Eastbound's services. We do not sell your data, and we do not share it with third parties for marketing.

1. What we collect

Information you provide

• Audit and contact submissions — when you fill in our website forms (free audit, contact form, paid audit signup), we collect the website URL, brand name, work email, your name, and any free-text details you choose to share.
• Lead-generation forms on advertising platforms — when you submit a LinkedIn Lead Gen Form (or equivalent ad-platform form) for one of our offers, the platform passes us the fields you authorise — typically name, work email, company, job title, country, and your responses to our short qualifying questions.
• Email correspondence — when you email us at info@eastbound.ai or reply to our outreach, we keep that correspondence so we can serve you.

Information collected automatically

• Usage analytics — we use Google Analytics 4 to understand which pages people read, what content drives audit signups, and how to improve the site. Analytics data is IP-anonymised before transmission. We do not link analytics data to identified visitors.
• Server logs — our hosting provider (Amazon Web Services) keeps standard request logs (IP address, timestamp, requested URL, response status) for security monitoring. These are retained for 30 days and then deleted.
• Cookies — we use strictly the cookies set by Google Analytics (for usage measurement). We do not run advertising cookies, retargeting pixels, or social-media trackers other than analytics. You can disable analytics cookies in your browser settings without losing site functionality.

2. Why we use it

• To deliver the audit, research, or response you requested. If you submit an audit form, we run our China AI visibility prompt panel against your domain and return a sample report by email within 48 hours.
• To follow up about Eastbound's services. If you opted in to a lead form for a research download or audit, we may email you about deeper engagements (paid audit, GEO Sprint, ongoing monitoring) once or twice. You can opt out at any time by replying with "unsubscribe" or emailing info@eastbound.ai.
• To improve the site. Aggregated usage analytics help us decide which research to publish next and which pages to refine.
• To meet legal obligations. We retain billing and engagement records as required under Hong Kong tax and corporate law.

3. Who we share it with

We do not sell, rent, or trade personal data. We share data only with the service providers we strictly need to operate the business:

• Amazon Web Services — hosting, database (Singapore region for low-latency Asia delivery), and email infrastructure.
• Google (LLC) — Google Analytics 4 for website usage measurement.
• LinkedIn (Microsoft Corporation) — when you submit a LinkedIn Lead Gen Form, the form data passes from LinkedIn to Eastbound. LinkedIn's processing is governed by their own Privacy Policy.
• Resend — transactional email delivery (audit reports, password-reset notices for paid accounts).

We require all service providers to use the data only to deliver their service to us, not for their own purposes.

4. Where data is processed and stored

Our primary database is hosted on AWS in Singapore (ap-southeast-1). Backups are encrypted at rest. If you are in the EU/UK and our processing of your personal data is subject to GDPR/UK GDPR, we rely on standard contractual clauses with our service providers for any cross-border transfer outside the EEA.

5. How long we keep it

• Audit submissions and lead-form data — kept for up to 24 months from your most recent interaction, then deleted unless you have an active engagement with us.
• Engagement records (signed clients) — kept for 7 years after the engagement ends, to meet Hong Kong tax and audit requirements.
• Server logs — 30 days.
• Analytics — Google Analytics 4 default retention (currently 14 months).

6. Your rights

You can ask us, at any time, to:

• See what personal data we hold about you.
• Correct anything that's inaccurate.
• Delete your data (we'll honour this except where we're required to retain it for legal/accounting reasons).
• Stop receiving emails from us.
• Object to or restrict our processing.

Email info@eastbound.ai with your request. We aim to respond within 14 days. If you are in the EU/UK and you believe we have not handled your data lawfully, you also have the right to complain to your local data protection authority.

7. Children

Eastbound's services are B2B. We do not knowingly collect personal data from anyone under 18. If you believe a minor has submitted data to us, email info@eastbound.ai and we will delete it.

8. Security

We protect your data with HTTPS in transit, encrypted storage at rest, role-based access in our backend, and regular dependency patching. No system is impenetrable, so we also keep the data we collect to the minimum we need.

9. Changes to this policy

If we update this policy materially, we will publish the change here with a new "Last updated" date and, where appropriate, notify users by email.

10. Contact

For any privacy question, contact info@eastbound.ai. Eastbound Limited, Sheung Wan, Hong Kong.