Privacy Policy

Last updated: 23 September 2026

1. Who we are

This website is operated by AuroraXcel Life Sciences Limited, which is responsible for the processing of personal data described in this policy (the “data user” under the Hong Kong Personal Data (Privacy) Ordinance and the “controller” under the EU General Data Protection Regulation).

We have not appointed a data protection officer. Please send any privacy question or request to the email address above.

2. What personal data we process and why

2.1 When you visit the website

The website is hosted by Vercel Inc. (USA). When your browser requests a page, Vercel’s servers necessarily receive technical data such as your IP address, the date and time of the request, the page or file requested, the referring page and your browser’s user-agent string. Vercel processes this data to deliver the website and to protect it against abuse and attacks. We do not use this data to identify you, and we do not combine it with other data.

To display the website correctly, your browser also loads resources directly from these third-party providers, which therefore receive your IP address and browser information:

Legal basis (where the GDPR applies): our legitimate interest in providing a secure, working and well-presented website (Art. 6(1)(f) GDPR).

2.2 When you email us

If you write to us, we receive your email address, your name (if provided), the content of your message and any other information you choose to include, such as your company, job title or phone number. We use this to answer your enquiry and, where relevant, to prepare or carry out a business relationship with you or your organisation.

Legal basis (where the GDPR applies): steps taken at your request before entering into a contract, or performance of a contract (Art. 6(1)(b) GDPR); otherwise our legitimate interest in responding to enquiries we receive (Art. 6(1)(f) GDPR).

2.3 When you contact us on WhatsApp

The WhatsApp links on our website open WhatsApp, a service operated by WhatsApp Ireland Limited (for users in the European Region) or WhatsApp LLC (elsewhere), both part of Meta. Nothing is sent to WhatsApp until you click a link. If you message us, we receive your phone number, your WhatsApp profile name and picture (depending on your settings) and your messages, and we use them in the same way as emails (see 2.2). WhatsApp processes your data under its own terms and privacy policy: whatsapp.com/legal/privacy-policy. If you prefer not to use WhatsApp, please email us instead.

2.4 Your language preference

If you choose a language with the language selector, your browser stores that choice locally (see our Cookie Policy). This stays in your browser and is never sent to us.

3. What we do not do

• We do not use analytics, advertising or social-media tracking tools on this website.
• We do not set cookies.
• We do not sell or rent personal data, or share it for targeted advertising.
• We do not make decisions about you based solely on automated processing, including profiling.

4. Who we share data with

• Service providers who process data on our behalf, such as our website host and our email provider.
• Our team in our regional locations (Hong Kong, Germany, Brazil and the United States), where needed to handle your enquiry.
• Authorities, courts or advisers where we are legally required to, or where necessary to establish, exercise or defend legal claims.

5. International transfers

We are based in Hong Kong, and some of our providers (including Vercel and Google) are based in the United States. Your data may therefore be processed outside your own country. Where the GDPR applies to a transfer outside the European Economic Area, it relies on the safeguards our providers offer, such as the EU-U.S. Data Privacy Framework or the European Commission’s Standard Contractual Clauses.

6. How long we keep data

• Emails and WhatsApp messages: for as long as needed to deal with your enquiry and any resulting business relationship. After that we delete them, unless we must keep them longer to meet legal obligations (for example commercial or tax record-keeping) or to defend legal claims.
• Server and resource-request data (2.1): kept by Vercel, Google and Flaticon according to their own retention policies. We do not keep separate copies.
• Language preference: stays in your browser until you clear your browser’s site data.

7. Your rights

Depending on where you live, you have rights over your personal data. To use them, email about@auroraxcel.com. We may need to confirm your identity before acting on a request, and we will reply within the time the applicable law requires.

• Hong Kong (Personal Data (Privacy) Ordinance): you may request access to, and correction of, your personal data.
• European Economic Area, including Germany (GDPR): you have the right of access, rectification, erasure, restriction of processing, data portability, and to object to processing based on legitimate interests. You may also complain to a data protection supervisory authority, particularly in the country where you live or work.
• Brazil (LGPD): you may request confirmation of processing, access, correction, anonymisation, blocking or deletion of unnecessary or excessive data, portability, and information about who we share data with. You may also complain to the Autoridade Nacional de Proteção de Dados (ANPD).
• United States: we do not sell personal data or share it for cross-context behavioural advertising. Residents of states with privacy laws may request access to, correction of, or deletion of their personal data.

8. Security

The website is served over an encrypted HTTPS connection. We take reasonable measures to protect the personal data we receive. However, ordinary email is not end-to-end encrypted, so please do not send us highly sensitive information by email.

9. Children

This website is aimed at businesses and is not directed at children. We do not knowingly collect personal data from children.

10. Changes to this policy

We will update this policy when our website or our practices change. The date at the top shows when it was last revised.

11. Contact

For any question about this policy or your personal data, email about@auroraxcel.com or write to us at the address in section 1.