Privacy Policy

Last updated: 18 October 2026

This Privacy Policy explains how Noark Limited ("we", "us", "our") handles personal data in connection with this website, noark.io, and when you contact us by email, telephone or post. It does not cover any other website or service.

Summary

• This website does not set cookies, does not use analytics or advertising tools, and has no forms or user accounts.
• The pages of this website load files only from noark.io.
• We receive personal data about you only if you contact us.

Who we are

Noark Limited
Rm C 4/F China Insurance Bldg
48 Cameron Rd
Tsim Sha Tsui, Kowloon
Hong Kong

Email: contact@noark.io

When you visit this website

What this website does not do

This website does not use cookies or similar technologies, such as local storage, to store information on your device. It does not use analytics, advertising or tracking tools, and it does not include content from other websites, such as social media buttons, maps, videos or externally hosted fonts. It has no forms and no user accounts.

The animation on the home page is drawn by your browser. To display it, your browser checks whether it supports the animation and whether you have asked for reduced motion. These checks happen only on your device, and the results are not sent to us or to anyone else.

Hosting

This website is hosted by Cloudflare. To show you a page, your browser sends a request to Cloudflare's servers. With each request, Cloudflare receives technical information such as your IP address, the page or file requested, the time of the request, and details your browser sends, such as its type and version, your operating system and your language preference.

Cloudflare uses this information to deliver the website and to protect the website and its own network against attacks and abuse. Cloudflare also uses some of this information for its own purposes, such as security and improving its services, as described in Cloudflare's privacy policy. Cloudflare states that it stores information mainly in the United States and the European Economic Area.

Cloudflare provides us with summary statistics about visits, such as the number of requests and the countries they come from, and with samples of requests that its security systems have blocked or challenged. These samples may include IP addresses, browser details and the page requested. We look at this information only to keep the website working and secure, and we do not use it to identify anyone. We have not turned on Cloudflare's optional visitor analytics, we do not export Cloudflare's request logs, and we do not keep our own copies of this information. Cloudflare decides how long it keeps the information it processes. Its privacy policy states that it keeps personal information for as long as needed for the purposes described there or to meet legal obligations.

Network error reports

Cloudflare may ask your browser to report how loading this website went, using a browser feature called Network Error Logging. If your browser supports it, it may later send Cloudflare short reports about loading pages or files from this website, for example when loading fails. A report contains the address of the page or file, the page you came from, the IP address of Cloudflare's server, the protocol, the response code, how long the request took and the type of error. Cloudflare receives your IP address when a report is sent. Cloudflare states that it uses the address only to work out your network provider, country and metropolitan area, and that it does not log the address.

Security check cookie

Cloudflare's security systems may need to check that a visit comes from a real browser, for example while the website is under attack. We have also asked Cloudflare to check visits from some countries and regions, and to block visits from some of them; Cloudflare works out the country or region from the IP address. When a visit is checked, Cloudflare may show a short verification page and place a cookie named cf_clearance on your device to record that the check was passed. Cloudflare describes this cookie as strictly necessary. Apart from this, no cookies are set when you visit this website.

When you contact us

Contacting us is voluntary. If you do, we need your contact details to reply to you.

• Email. If you email us at contact@noark.io, or our Data Protection Officer at dpo@noark.io, we receive your email address, your name and any other details you include, the content of your message and any attachments, and technical information added by email systems, such as the sending servers and the time. Email may not be encrypted while it travels between email servers, so please do not send us sensitive information by email.
• Telephone. Calls to our telephone number are answered on our behalf by our office service provider. It either transfers the call to us or takes a message, noting your name, telephone number and message and passing them to us. As part of this service, it may keep records of calls and messages and may record calls.
• Post. Letters sent to our address are received by our office service provider on our behalf and passed to us.

How we use it

We use the information you give us only to reply to you, to deal with the matter you contacted us about, and to keep a record of our correspondence. We do not use it for direct marketing, we do not sell it, and we do not disclose it to anyone except as described in this policy.

Who handles it

• Google provides our email service (Google Workspace). Google processes our email on our behalf as a data processor under its Cloud Data Processing Addendum, including scanning it for spam and malware, and states that it does not use Google Workspace data for advertising. Google may store or process email in any country where it or its subprocessors have facilities, so your email may be stored outside Hong Kong.
• Our office service provider, which answers our telephone calls and receives our post on our behalf, as described above.
• Courts, regulators, law-enforcement agencies or our professional advisers, where the law requires us to disclose information or where it is necessary to establish or defend legal claims.

How long we keep it

• Email. Emails, including our replies, are permanently deleted once they are more than four years old. Emails in the same conversation are kept until the most recent one reaches that age. Google's terms commit it to delete such data from its systems within 180 days after it can no longer be recovered.
• Telephone messages and letters. Messages and letters passed to us are kept for no longer than four years. Records kept by our office service provider as part of its service to us are kept under its own retention practices.

If we need to keep particular information longer to meet a legal obligation or to establish or defend legal claims, we keep it only for as long as that need lasts.

Your rights

You can ask us:

• whether we hold personal data about you, and for a copy of it;
• to correct personal data about you that is inaccurate;
• to delete personal data about you, or to stop using it. We will do so unless we need to keep it to meet a legal obligation or to establish or defend legal claims.

Send your request in writing, in English or Chinese, to our Data Protection Officer by email at dpo@noark.io or by post to the address above. We may ask you to confirm your identity before we act on a request. We will reply within 40 days.

We do not charge for requests to correct or delete personal data. For a request for a copy of personal data, we may charge a fee as permitted by law, which will not be more than our cost of complying with the request. If we charge a fee, we will tell you the amount before we act on the request.

If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner for Personal Data, Hong Kong.

Security

We limit access to personal data to the people who need it to deal with your enquiry, and we protect the accounts we use to run our email and this website with two-factor authentication. This website is served only over encrypted (HTTPS) connections.

Changes to this policy

If we change this policy, we will update this page and the "Last updated" date at the top.

Contact

If you have questions about this policy or about how we handle personal data, contact our Data Protection Officer at dpo@noark.io or at the address above.