GDPR information.

01Scope and controller

This page explains how Statistical Inference Limited applies the General Data Protection Regulation and related data-protection requirements when our services are offered to people in the European Economic Area. It supplements our Privacy and Cookies Policy.

Statistical Inference Limited is the controller for personal data described here unless a contract states that we act as a processor on behalf of a customer.

02Data we process

Depending on the service you use, we may process account and contact details, subscription records, support correspondence, security and connection records, product settings, usage events, and content or domains that you intentionally submit for analysis.

The browser extension keeps its domain intelligence and page-content analysis features off until you make the relevant choice. More detail about extension data, storage, and retention appears in section 16 of the Privacy and Cookies Policy.

03Purposes and lawful bases

We rely on the following lawful bases according to the context:

• Contract: creating and maintaining an account, delivering requested analysis, managing subscriptions, and providing customer support.
• Consent: optional Analytics and Marketing cookies, direct marketing where consent is required, and browser-extension processing that is presented as optional.
• Legitimate interests: securing the service, preventing abuse, measuring reliability with non-cookie operational records, responding to business enquiries, and improving requested features where those interests are not overridden by your rights.
• Legal obligation: tax, accounting, regulatory, law-enforcement, and other binding requirements that apply to us.

Where we rely on legitimate interests, we assess the purpose, necessity, and potential effect on individuals before proceeding.

04Service providers and recipients

We share personal data only when necessary with hosting, database, authentication, payment, security, support, analytics, and content-analysis providers, or with professional advisers and public authorities where the law requires it. Providers may process data only for the agreed service and under appropriate contractual and security obligations.

We do not sell personal data. Optional analytics and marketing technologies are not loaded on our public website unless you consent to the relevant category.

05International transfers

Statistical Inference Limited operates from Hong Kong and uses service providers in multiple countries. This can involve international transfers of personal data outside the country in which it was collected.

Where data-protection law requires it, we use an applicable adequacy decision or contractual and organisational safeguards designed to protect the transferred data. You may contact us for information about the safeguards relevant to your data.

06Retention

We retain personal data only for as long as necessary for the purpose for which it was collected, including applicable legal, accounting, dispute, and security requirements. Retention depends on the type of record and the service used.

• Account and contract records are retained while the account is active and as required afterward.
• Security and abuse-prevention records are retained for a limited operational period.
• Temporary extension page-analysis jobs expire no later than 30 minutes after creation.
• Website cookie preferences remain until replaced, cleared, or made obsolete by a new consent version.

We delete or anonymise data when the applicable retention period ends.

07Your rights

Subject to applicable conditions and exceptions, you may have:

• the right of access to your personal data;
• the right to rectification of inaccurate or incomplete data;
• the right to erasure;
• the right to restriction of processing;
• the right to data portability;
• the right to object to processing based on legitimate interests or direct marketing;
• the right to withdraw consent at any time, without affecting earlier lawful processing; and
• the right to lodge a complaint with a competent supervisory authority.

08Making a request

Send a rights request to [email protected]. Describe the account, service, or data concerned. We may request information necessary to confirm your identity and protect data from unauthorised disclosure.

We aim to respond without undue delay and normally within one month. Where a request is complex or numerous, applicable law may permit an extension, in which case we will explain the delay. You may also contact the supervisory authority in the EEA country where you live, work, or believe an infringement occurred.

09Cookies and browser extension choices

Necessary website storage supports security and remembers your privacy choice. Analytics and Marketing are optional and controlled separately through Cookie settings. Rejecting them does not prevent access to the website.

The browser extension provides separate controls for domain intelligence and page-content analysis. Revoking either choice stops future transmission for that feature and clears the related local extension data as described in the Privacy and Cookies Policy.

10Automated decision-making

We do not use personal data for solely automated decision-making that produces legal effects or similarly significant effects on individuals. Content rankings and publisher signals are research outputs requested by users and are not decisions about an individual's legal rights.

11Security, changes, and contact

We apply technical and organisational measures appropriate to the nature of the processing. No internet service is risk-free, so we review controls and limit access according to role and operational need.

We may update this page when our services or legal obligations change. Material changes will be identified by an updated date. Questions can be sent to [email protected].