Who we are
This is the privacy policy of 上海候毅科技, which publishes this website under the name HoulMeigh Intelligent Technology (“HoulMeigh”, “we”) at https://www.houlmeigh.com. It explains what we do with personal data when you visit this website or write to us, and what we do not do. It applies to this website only.
Data controller: 上海候毅科技, established and operating in Shanghai, mainland China. Website: https://www.houlmeigh.com. Contact for everything in this policy, including any request listed under “Your rights”: service@houlmeigh.com. If you need our registered name in Latin script or our unified social credit code for correspondence with an authority, ask us by email and we will give it.
The short version
- This site runs no analytics, no advertising and no tracking scripts. Nothing is profiled and nothing is sold.
- There is no web form that collects your details, no comment section and no visitor accounts. The enquiry channel is email.
- We collect two things only: the email you choose to send us, and the standard request records our web server writes to its access log.
- Two third parties can see your browser’s request because our pages load assets from them: Google Fonts and the WordPress emoji CDN. See “Third-party requests” below.
What we collect
1. Email you send us
The Contact page invites business enquiries to service@houlmeigh.com. When you write to us we receive your email address, your display name or signature, and everything the message contains. Please do not send us information you do not want us to hold — for example national identification numbers, payment card data, or health or other sensitive data. We do not ask for it and we have no use for it.
We answer enquiries from the same mailbox. Our mail is hosted by Alibaba Cloud Enterprise Mail, so the message content is stored in our mailbox there until we delete it.
2. Server access log
Like any web server, ours records each request it receives: the IP address, the date and time, the URL requested, the HTTP status returned, the size of the response, and the browser’s user-agent string and referring address when the browser sends one. We use this to detect abuse of the site, to diagnose failures and to keep the server secure. We do not build visitor profiles from it, we do not join it with any other data source, and we do not use it for advertising.
This log is currently kept on our hosting provider’s server without a fixed automatic deletion cycle. We are aware that this needs a defined retention period, and we are working on it. Ask us if you want the record of your own IP removed sooner than that.
3. Cookies
Ordinary browsing of this website does not require a cookie and we do not set one for it. WordPress sets cookies only in two situations that do not apply to normal visitors: when someone signs in at /wp-login.php (authentication and display-preference cookies; today the only account on this site belongs to our own staff), and for a short technical check on the login page that records nothing about you. Comment-related cookies are not used because this site does not accept comments.
What we deliberately do not do
No third-party analytics or marketing tag is loaded on any page (verified against the delivered HTML). No comment form or file upload is offered to visitors — all articles have comments closed. There is no registration, no newsletter, no e-commerce, no payment processing, and no targeted advertising. We do not knowingly collect anyone’s personal data through this site except as described above, and we do not sell or rent any of it to anyone.
Third-party requests
Our pages reference two external resources, which means your browser contacts those operators directly and they can see your IP address, the fact that the request came from this site and your browser string:
- Google Fonts (
fonts.googleapis.com/fonts.gstatic.com) for the two typefaces used on the site — Google LLC. Their privacy notice: https://policies.google.com/privacy - s.w.org, the WordPress emoji asset CDN used by the site’s software for text rendering — Automattic / WordPress.org. Their privacy notice: https://wordpress.org/about/privacy/
Everything else you see — scripts, styles and images — is served from this domain. Links to other websites are links only; we do not embed their content, so nothing is sent to them until you click.
Where your data is processed
This website is hosted on Alibaba Cloud infrastructure in mainland China, and our mailbox is with the same provider. If you contact us from outside that region, the information you send is transferred to and processed there. We pass data to these service providers only to keep the site and the mailbox running, and to the extent required by law or to protect our rights.
To visitors in the EEA or the UK, one thing stated plainly: we are a company established in mainland China, we have no office or branch in the EEA or the UK, and we have not appointed a representative there under Article 27 GDPR or the UK GDPR. That does not reduce anything in this policy — service@houlmeigh.com reaches us directly, and the requests listed under “Your rights” are handled by us, free of charge, without you going through an intermediary. We are writing this here rather than leaving it unstated, because it is the part of our setup a reader in those regions would want to know.
How long we keep it
Email correspondence is kept while the conversation is relevant — for example while a business relationship or a reported issue is live — and deleted when it no longer is, unless we must keep it for legal or accounting reasons. Access-log lines age out with the log management we described above. We do not create a permanent record of a visitor who only read a page.
Why we are allowed to process it
For the email you send us: your own initiative in contacting us, and our interest in replying and in preparing or performing whatever you asked about. For the access log: our legitimate interest in operating and securing a public website. For the two third-party requests above: the site cannot render as designed without them. We do not rely on consent for anything that is bundled or hidden — if we ever need to, we will ask you first, plainly.
Your rights
Whatever your location, if you write to service@houlmeigh.com we will, on request and free of charge: tell you what personal data of yours we hold and why; correct it; delete it; restrict how it is used; give you a copy in a machine-readable form; and explain our reasoning if we ever make a decision about you that is based on automated processing (we do not). If you are in the EEA or UK you may also complain to your supervisory authority; if you are elsewhere you may complain to your local data-protection authority. We aim to answer within 30 days and we will never ask you to pay for exercising these rights.
How we protect it
The site is served only over HTTPS with a Let’s Encrypt certificate that renews automatically, HTTP Strict Transport Security, and response headers that stop framing, MIME sniffing and unsolicited access to the camera, microphone, location and payment APIs. The login page throttles repeated attempts. XML-RPC, the software’s version markers and its administrative setup scripts are not reachable from the public side, and code cannot be executed from the media upload directory. Access to the server and to the mailbox is limited to named staff members.
No website is perfectly secure. If we become aware that personal data we hold has been compromised in a way that is likely to affect you, we will notify the affected people and any competent authority without undue delay, and say what we are doing about it.
Children
This website is not directed at children and we do not knowingly collect personal data from anyone under 18. If you believe a child has sent us information, write to us and we will delete it.
Reports of infringement
Our Contact page states that HoulMeigh takes intellectual property and the legitimate rights of owners seriously. If you report an infringement to service@houlmeigh.com, the identifying details you send are used only to investigate and act on that report.
Changes to this policy
We update this page when what we actually do with data changes; the date below is when the current version took effect. Material changes will be announced on this page before they apply.
Questions, requests and reports: service@houlmeigh.com. Postal and legal-entity details are available on request.
Last updated: 7 October 2026.
HoulMeigh Service Team
