Privacy Policy

How Tiger Hill Limited collects, uses, and shares personal data.

1. Who we are

Tiger Hill Limited (“we”, “us”, “our”) operates Cynad and the website located at www.cynad.com. Tiger Hill Limited is a Hong Kong company (Company No. 77736989) with its registered office at Unit 2, LG 1, Mirror Tower, 61 Mody Road, Tsim Sha Tsui, Hong Kong. For questions about this Policy or our data practices, contact support@cynad.com.

2. Personal data we collect

We collect the following categories of personal data:

(a) Contact information you provide to us, such as your name, email address, company, and role.

(b) Account and usage data generated when you use Cynad, including authentication events, device and browser information, and log data.

(c) Investor personal data provided to us by our customers for processing through Cynad, where our customer is the data controller and we act as processor.

(d) Technical data including IP address, device identifiers, and essential cookies required to operate the service.

3. How we use personal data

We use personal data to (a) provide, secure, and operate Cynad; (b) communicate with users about their accounts, service changes, and security notices; (c) improve our services; (d) comply with legal and regulatory obligations; and (e) with consent where required, send marketing communications that you may opt out of at any time.

Where the EU General Data Protection Regulation (GDPR), UK GDPR, or similar laws apply, we process personal data on the following legal bases: (a) performance of a contract with you or our customer; (b) our legitimate interests in operating and securing our services, provided such interests are not overridden by your rights; (c) compliance with legal obligations; and (d) your consent where required.

5. Sharing and service providers

We share personal data with third-party service providers that help us operate Cynad, including cloud hosting, email delivery, and application monitoring providers. Each is bound by confidentiality and data-protection obligations no less protective than those in this Policy. A list of current service providers is available on request from support@cynad.com. We do not sell personal data and we do not use personal data for advertising.

6. Cookies

We use only strictly necessary cookies required to operate Cynad and this website, such as session, authentication, and CSRF-protection cookies. We do not use advertising, analytics, or tracking cookies that would require consent under applicable law. If we introduce such cookies in future, we will update this Policy and, where required, seek your consent through a cookie banner before setting them.

7. International transfers

Personal data may be transferred to and processed in countries other than your own, including to our service providers. Where required by applicable law, we rely on Standard Contractual Clauses or other approved transfer mechanisms to protect personal data in transit and at destination.

8. Data retention

We retain personal data only for as long as necessary to fulfil the purposes set out in this Policy or as required by applicable law. After the retention period ends, personal data is securely deleted or anonymised.

9. Your rights

Depending on your jurisdiction, you may have the right to access, correct, delete, restrict processing of, or port your personal data, and to object to certain processing. You may also have the right to lodge a complaint with a supervisory authority. To exercise these rights, contact support@cynad.com. We will respond within the time required by applicable law.

10. Children

Cynad and this website are not directed at children, and we do not knowingly collect personal data from children under the age of sixteen (16). If you believe a child has provided us with personal data, contact us and we will take steps to delete it.

11. Security

We implement commercially reasonable administrative, technical, and organisational safeguards designed to protect personal data against unauthorised access, use, alteration, or disclosure, including encryption in transit and at rest, access controls, and audit logging.

12. Changes to this Policy

We may update this Policy from time to time. We will post the updated Policy with a new “Last updated” date, and, where changes are material, we will notify users in advance of the effective date to the extent required by applicable law.

13. Contact

Questions or complaints about this Policy or our data practices can be directed to support@cynad.com, or by post to Tiger Hill Limited, Unit 2, LG 1, Mirror Tower, 61 Mody Road, Tsim Sha Tsui, Hong Kong.