Privacy Policy

1. Scope and entity

This privacy policy describes how Down Under Far East Limited ("we", "us", "our"), a company incorporated in Hong Kong (Companies Registry no. 80329068-000-05-26-1) with its registered office at Unit B, 11/F Yam Tze Commercial Building, 23 Thomson Road, Wan Chai, Hong Kong, handles personal data collected through this website at downunderfareast.com.

Where this policy refers to "the site", we mean the corporate website at downunderfareast.com and its subdomains. Brands operated by the company — including PassportMates at passportmates.club — publish their own privacy policies covering content and services hosted on those sites.

2. Personal data we collect

2.1 Information you provide via the contact form

If you complete the contact form, we collect:

• the name you supply;
• the email address you supply;
• the subject line and message text you write;
• a system-generated tag identifying which section of the site sent the form.

We use these only to receive your enquiry, respond to it, and keep a record of correspondence on the matter.

2.2 Information collected automatically

When you visit the site, our hosting infrastructure logs technical information necessary to deliver content and protect the service:

• IP address;
• the page requested and the date and time of the request;
• HTTP user-agent (browser or device identification string);
• referrer (the page from which you arrived, if any).

We use this only for service operation, abuse mitigation (rate limiting), and security investigation.

2.3 Cookies and tracking

The site does not use advertising, analytics, or behavioural tracking cookies. We do not embed third-party trackers, social-media widgets, or scripts that profile visitors. The site issues only the technical cookies essential for serving content; no consent banner is shown because no consent is required for the site as configured.

3. Why we process this data

The lawful bases on which we process personal data are:

For visitors located in the European Economic Area or the United Kingdom, "lawful basis" is read in accordance with Article 6 of the GDPR or UK GDPR as applicable.

4. How long we keep your data

• Contact form submissions are kept while reasonably necessary to address your enquiry and any follow-up correspondence. We then archive correspondence in our mail systems for up to twelve months before deletion.
• Server logs are kept for up to thirty days and then deleted.

We may retain limited records longer where retention is required by law, regulation, or to handle a dispute, in which case we keep only what is reasonably necessary for that purpose.

5. Who we share your data with

We do not sell, rent, or disclose personal data to third parties for advertising or marketing purposes.

We may disclose personal data:

• to a service provider acting on our written instructions and bound by appropriate confidentiality and data-handling obligations (we currently operate the contact form using a dedicated server and our own mail infrastructure; should we add an external email service or database provider in the future, we will update this section);
• to comply with applicable law, valid regulatory or legal process, or a request from a competent authority; or
• in connection with a corporate transaction (such as a reorganisation, merger, or sale of business assets), under appropriate confidentiality terms.

6. Where your data is processed

We are incorporated and operate from Hong Kong. The infrastructure used to host the site and process contact-form submissions is located outside Hong Kong; international transfers of personal data are handled in accordance with the Hong Kong Personal Data (Privacy) Ordinance and, where relevant, the data-export rules of the originating jurisdiction.

7. Your rights

Subject to the conditions and exceptions provided by applicable law, you may:

• ask whether we hold personal data about you, and obtain a copy of that data;
• ask us to correct personal data you believe is inaccurate;
• ask us to delete personal data we no longer have a legitimate basis to retain;
• object to or restrict our processing in defined circumstances; and
• withdraw any consent on which we rely (where consent is the lawful basis).

These rights are recognised under the Hong Kong Personal Data (Privacy) Ordinance (Cap. 486) and broadly mirrored under the GDPR and UK GDPR for visitors located in the European Economic Area or the United Kingdom.

To exercise any of these rights, contact us at hello@downunderfareast.com. We will respond within the timelines required by applicable law. If you believe we have not handled your personal data properly, you may also contact the Hong Kong Office of the Privacy Commissioner for Personal Data (pcpd.org.hk) or, where relevant, the supervisory authority in your country of residence.

8. Security

We use HTTPS to protect data in transit. The contact form is delivered over an encrypted connection to our authenticated mail infrastructure. Access to systems holding personal data is restricted to personnel with a legitimate operational need.

No transmission of information over the internet can be guaranteed to be entirely secure. We cannot warrant the security of information you transmit to us, and you do so at your own risk.

9. Children

The site is directed to adult audiences. We do not knowingly collect personal data from children under sixteen. If you believe a child has submitted personal data to us, please contact us and we will delete it promptly.

10. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top of this page reflects the most recent change. Material changes will be notified by a prominent notice on this page.

11. Contact

For privacy-related enquiries, including to exercise your rights: