Information We Collect
We collect information that you choose to provide when you contact us, request a consultation or discuss a potential engagement. Depending on how you contact us, this may include:
- Your name, email address and WhatsApp number.
- Your country or region.
- The services you are interested in and your intended timeline.
- Information about your proposed or existing business, shareholders, activities, location, transactions and support needs.
- Messages, documents or other information you voluntarily send to us.
- Appointment details when you schedule a consultation.
When you use our website, we and our service providers may automatically receive limited technical and usage information, such as your browser and device type, operating system, referring page, pages viewed, approximate location, date and time of access, and interactions with the website. Web servers and security services may also process IP addresses and related request information to deliver and protect the website.
Each time a page is requested, our website also sends a basic access-log record to a log analytics server that we operate ourselves (it is not a third-party analytics provider) and that is located in mainland China. The record contains the IP address, date and time, request method, page path (without query parameters), response status and size, and browser user agent. It does not include cookies, referring pages or form contents. We use these records to secure the website and to understand how search engines and AI crawlers access our pages, and we keep them for 12 months.
How We Use Your Information
We use personal information only for legitimate business and legal purposes, including to:
- Respond to inquiries and provide an initial assessment of your proposed Hainan company or existing operation.
- Arrange consultations, prepare proposals and communicate about requested services.
- Deliver company registration, bookkeeping, tax, workspace and policy-application support when you engage us.
- Maintain business records, manage client relationships and administer our services.
- Understand website use, improve content and measure the effectiveness of our pages.
- Prevent misuse, investigate security issues and protect our website, clients and business.
- Comply with applicable laws, regulatory requirements, professional obligations and lawful requests.
Where applicable law requires consent, such as for analytics, advertising and optional embedded services, we rely on your consent. You can withdraw it at any time through “Privacy settings” on any page, or by contacting us. Withdrawal does not affect processing that took place before you withdrew.
Data Sharing
We may share personal information only when reasonably necessary for the purposes described in this policy. Recipients may include:
- Service providers: providers that support website hosting, security, form processing, analytics, communications, scheduling, document management and other business operations.
- Communication, booking and assistant platforms: Formspree processes inquiry submissions, Calendly (with Stripe for fraud prevention) supports appointment scheduling, Coze provides the optional AI assistant, and WhatsApp processes messages you send through its service. Each service is also governed by its own privacy terms.
- Professional and operational partners: advisers, accountants, translators, registered-address or workspace providers, banks, filing agents and other parties involved in a service you request, but only where appropriate and subject to relevant confidentiality obligations.
- Authorities and legal recipients: government bodies, regulators, courts or other parties when disclosure is required by law, necessary to protect legal rights, or needed to prevent fraud or harm.
- Business transaction recipients: a successor or relevant adviser in connection with a proposed merger, reorganization, financing or transfer of all or part of our business, subject to appropriate safeguards.
Some providers may process information in jurisdictions other than your own. When required, we take reasonable steps to use providers and arrangements that offer appropriate protection for personal information. These providers may process information in the United States, mainland China or other countries where they operate.
Data Retention
We retain personal information only for as long as reasonably necessary to respond to your inquiry, provide requested services, maintain business and accounting records, resolve disputes, enforce agreements and satisfy legal or regulatory requirements. Retention periods vary according to the type of information, the nature of our relationship and applicable obligations.
When information is no longer required, we take reasonable steps to delete it, anonymize it or securely isolate it, unless continued retention is required or permitted by law. You may ask us to delete information as described under “Your Rights.”
Cookies, Consent and Third-Party Services
When you first visit hainansetup.com, we ask which optional services you allow. Until you make a choice, and if you choose “Reject optional”, only necessary features run. Analytics, advertising, the embedded booking calendar and the AI assistant load only after you allow the relevant category.
Consent categories
- Necessary (always on): delivering and securing the website, remembering your privacy choice, and processing forms you choose to submit.
- Functional services: the embedded Calendly booking calendar and the Coze AI assistant. The AI assistant loads only when you click it, even after you allow this category. Without this consent, you can still book through the Calendly page in a new window.
- Analytics: Google Analytics 4, used to understand which pages and sources are useful. Source attribution data is saved with analytics or advertising consent; see “How we record where your visit came from” below.
- Advertising: Google Tag Manager, Google Ads and DoubleClick, used to measure the results of our advertising.
How we record where your visit came from
When you arrive on our site, we may note the campaign tags in the link (such as utm_source), the page you landed on and the referring site. If you later submit a form, this helps us understand which pages and channels are useful. What we keep depends on your privacy choice:
- Before you make a choice: this information is held only in the open browser page. It is not saved to your device and is not sent with any form.
- Analytics allowed, advertising not allowed: we save the campaign tags, landing page and referring site, but remove Google Ads click identifiers (gclid, wbraid, gbraid).
- Advertising allowed: we save the full information, including Google Ads click identifiers, so we can measure which ads led to an enquiry.
If you withdraw consent in Privacy settings, we delete the saved record, clear it from the current page and from any unsent form, and do not restore it when you reload. If you allow advertising but not analytics, we do not send our own on-site event measurements (such as WhatsApp clicks or form enquiries) to Google Analytics.
How to change or withdraw your choice
Click “Privacy settings” at the bottom right of any page to change your choice at any time. When you withdraw analytics or advertising consent, we immediately update Google’s consent signals to “denied” and delete the related cookies and stored data listed below that the website can remove. Scripts that already ran on the current page cannot be fully unloaded by the browser; they stop loading from your next page view. If we materially change these categories, we will ask for your choice again.
Cookies and browser storage we use
| Name | Type | Category | Purpose | Retention |
|---|---|---|---|---|
hs_consent_v1 | Local storage | Necessary | Remembers your privacy choice | Until you clear it or we change the consent version |
hs_coze_session | Cookie (HttpOnly) | Necessary once you use the AI assistant | Secures the assistant session | 1 year |
hainanSetupChecklistEmail | Local storage | Functional | Remembers the email entered for the checklist download | Until cleared |
hs_attr | Local storage | Analytics or advertising | Records the campaign, referrer and landing page, attached to forms you choose to submit. Scope depends on your choice; see the source rules above | 90 days |
_ga, _ga_NGK6CJ2J86 | Cookie | Analytics | Google Analytics measurement | Up to 2 years (set by Google) |
_gcl_au, _gcl_ls | Cookie / local storage | Advertising | Google Ads click and conversion measurement | About 90 days (set by Google) |
Calendly, Stripe and Coze may set their own cookies or storage inside their embedded content, under their own policies.
Third-party services
| Provider | Role on our site | When it loads | Category |
|---|---|---|---|
| Google Analytics 4 | Website analytics | After analytics consent | Analytics |
| Google Tag Manager, Google Ads, DoubleClick | Advertising measurement | After advertising consent | Advertising |
| Cloudflare | Website hosting and security | Every visit | Necessary |
| Self-hosted log analytics (GEOInflow) | Server access logs for security and crawler measurement | Every page request | Necessary |
| Calendly | Appointment booking | After functional consent, or when you open the booking page | Functional |
| Stripe (loaded by Calendly) | Fraud prevention inside Calendly | When the Calendly calendar loads | Functional |
| Coze | Optional AI assistant | After functional consent and only when you click it | Functional |
| Formspree | Receives inquiry and checklist forms | Only when you submit a form | Necessary for your request |
| WhatsApp (Meta) | Messages you send or content you share | Only when you click a WhatsApp link | Leaves our website |
We do not send names, email addresses, phone numbers or inquiry-form contents to Google Analytics or Google Ads. Please do not enter identity numbers, sensitive personal information or confidential business documents into the AI assistant. You can learn more from Google’s explanation of how it uses information from partner sites.
How We Protect Your Information
We use reasonable administrative, technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration or disclosure. These measures may include access controls, secure transmission, service-provider review and limiting information to people who need it for an authorized purpose. No internet transmission or storage system is completely secure, so we cannot guarantee absolute security.
Your Rights
Depending on where you live and the law that applies, you may have the right to request access to personal information we hold about you, ask for inaccurate information to be corrected, request deletion, restrict or object to certain processing, withdraw consent, or request a portable copy of information you provided.
To make a request, email contact@hainansetup.com. Please describe your request and the contact method you previously used. We may need to verify your identity before acting. Some rights are subject to legal exceptions, including requirements to retain records or protect the rights of others. You may also have the right to contact the relevant data-protection authority.
Children's Privacy
Our website and services are intended for business owners, investors and professional users and are not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child has provided personal information to us, please contact us so that we can review and, where appropriate, delete it.
Changes to This Policy
We may update this policy when our services, providers or legal obligations change. The current version will be posted on this page with a revised “Last updated” date. Material changes may also be communicated through another appropriate channel when required.
Contact Us
The organization responsible for the personal information described in this policy is Liebang (Hainan) Technology Co., Ltd., operating under the Hainan Setup name.
- Email: contact@hainansetup.com
- WhatsApp: +852 9420 5261
Questions about your data?
Contact the Hainan Setup team.
Tell us what information you provided and how you contacted us, and we will review your request.
Email our teamWe do not sell, rent or trade your personal information to third parties.