Last updated: 22 June 2026
Privacy Policy
This Privacy Policy explains how Exlora Group handles personal data in connection with this website, exloragroup.com.
1. Who we are
Exlora Group Limited, a company registered in Hong Kong SAR (registered office and company number available on request), is the data controller for personal data processed through this website. A Spanish operating entity is being established and will be reflected here once incorporated. For any data-protection question, write to jay.bian@exloragroup.com.
2. EU representative (GDPR Article 27)
As a controller established outside the European Economic Area that may process personal data of individuals in the EU, we are in the process of appointing an EU representative under Article 27 of Regulation (EU) 2016/679 (GDPR). Until that appointment is complete, please direct any GDPR matters to jay.bian@exloragroup.com.
3. What we collect
This website does not run advertising or profiling, and the analytics we use set no cookies and do not identify you (see "Hosting and technical data" below). We only process personal data when you choose to contact us:
- Contact form. The form on our site opens a pre-filled message in your own email application, addressed to us. When you send it, we receive your name, email address, and the message you write. Legal basis: pre-contractual steps taken at your request (GDPR Art. 6(1)(b)).
- Direct email. If you write to us at an @exloragroup.com address, we process your email address, name, and anything you include, for the purpose of replying.
4. Hosting and technical data
This website is hosted on Cloudflare Pages. As with most websites, our host may automatically process limited technical data (such as your IP address and basic request information) to deliver the site securely and reliably. Fonts are loaded from Google Fonts, which may receive your IP address when a page loads. We do not combine this technical data with your identity or use it to track you across other sites.
To understand how many people visit and how the site performs, we use Cloudflare Web Analytics. It is privacy-first: it sets no cookies, does not fingerprint your device, and does not collect personal data or track you across sites, so it requires no consent banner.
5. Who sees your data
We share personal data only with: our website host (Cloudflare); our email provider (Microsoft 365); professional advisers under a duty of confidentiality; and authorities where the law requires it. We do not sell personal data.
6. International transfers
Because the data controller is established outside the EEA, your data may be processed outside the EEA. Where required, such transfers rely on the European Commission's Standard Contractual Clauses and appropriate supplementary safeguards.
7. Retention
We keep email correspondence for up to 24 months from your last interaction with us, unless we have an ongoing commercial relationship with you or a legal obligation to keep it for longer.
8. Your rights
Under the GDPR you have the right to access, correct, delete, restrict, and port your personal data, to object to its processing, and to withdraw consent at any time without affecting earlier lawful processing. To exercise these rights, write to jay.bian@exloragroup.com. You may also complain to your local data-protection authority, or in Spain to the Agencia Española de Protección de Datos (www.aepd.es).
9. Security
We apply reasonable technical and organisational measures to protect personal data, including encryption in transit and access controls.
10. Changes
We may update this Policy from time to time. Any material change will appear on this page, and the "Last updated" date above will change accordingly.