Controller and contact
IPO177 is operated by PAK LONG BRYON HO, a sole trader in England and Wales. Privacy and support enquiries: support@ipo177.com.
Data we process
- Account identity: account identifier, verified email and the display name you provide.
- Service data: watchlists, questions, reports, notifications, plan and billing status.
- Consent and preference records: consent version, time, categories and GPC status; the consent record does not store a full IP address.
- Security data: limited authentication, hosting and request logs needed to secure and operate the service.
Purposes and legal bases
- Provide accounts and requested research features: contract or steps requested before contract.
- Security, fraud prevention, audit and service integrity: legitimate interests and legal obligations.
- Optional analytics, preferences and marketing: consent, which can be withdrawn at any time.
- Legal claims, tax and regulatory records: legal obligation or legitimate interests.
Recipients, transfers and retention
Cloudflare hosts the service, Supabase provides account authentication, and Stripe processes subscriptions. Each provider receives only the data needed for its service. Account data is retained while the account is active and then only as required for security, tax, legal claims or statutory duties. Consent and audit records are retained to demonstrate compliance.
Your rights
- Request access or a portable account export.
- Request correction, deletion, restriction or object to processing where applicable.
- Withdraw optional consent without affecting earlier lawful processing.
- Complain to the ICO or your local supervisory authority.