Mice & Elephants

Mice & Elephants ("we", "us", "our") operates miceandelephants.com. We are committed to protecting your personal data and your right to privacy. This policy explains what information we collect, how we use it, and your rights in relation to it.

We comply with the Personal Data (Privacy) Ordinance (Cap. 486) (PDPO) of Hong Kong, and where applicable, the General Data Protection Regulation (GDPR) of the European Union.

1. Who we are

Mice & Elephants is a privacy-first neutral relay platform based in Hong Kong. We act as a communications intermediary — allowing users to interact with brokers, insurers, and vendors without exposing their personal contact details.

For data privacy enquiries, contact us at: contact@miceandelephants.com

2. What data we collect

a) Information you give us directly

Contact form: your name, email address, and message content.
Early access sign-up: your name and email address.
Referral sign-up (e.g. via Electacar): your name and email address.

b) Information collected automatically

Basic server logs including IP address, browser type, and pages visited — retained for security purposes only.
We do not currently use cookies or third-party analytics tracking.

c) Information we do NOT collect

We do not collect payment information.
We do not build profiles of your browsing behaviour.
We do not collect your phone number unless you provide it voluntarily in a message.

3. How we use your data

To respond to your enquiry or message.
To send you early access communications you have signed up for.
To operate and improve the relay platform.
To comply with our legal obligations.

We will never sell your personal data to third parties. We will never use your data for unsolicited marketing.

4. Legal basis for processing (GDPR)

Where GDPR applies, we process your personal data on the following lawful bases:

Consent — when you sign up for early access or submit a contact form.
Legitimate interests — for security logging and fraud prevention.
Legal obligation — where required by applicable law.

5. Data retention

Contact form submissions are retained for up to 24 months, then deleted.
Early access sign-up data is retained until you unsubscribe or request deletion.
Server logs are retained for up to 90 days for security purposes.

6. Who we share data with

We use the following third-party services to operate this website:

EmailJS — used to deliver contact and sign-up form emails. Your name and email are transmitted through their service. See EmailJS Privacy Policy.
Vercel — our website hosting provider. See Vercel Privacy Policy.

We do not share your data with insurers, brokers, or any other third party without your explicit knowledge and consent.

7. Data masking and the relay

The core purpose of Mice & Elephants is to protect your identity. When you use our relay service, your real contact details are never shared with the receiving party. They see only a temporary relay address. We retain the minimum data necessary to operate the relay and delete it when the relay is deactivated.

8. Your rights

Under PDPO and GDPR, you have the right to:

Access the personal data we hold about you.
Correct any inaccurate data.
Delete your data (right to erasure).
Withdraw consent at any time where consent is the basis for processing.
Object to processing based on legitimate interests.
Portability — receive your data in a portable format.

To exercise any of these rights, email us at contact@miceandelephants.com. We will respond within 30 days.

9. Cookies

This website currently does not use cookies for tracking or analytics. If we introduce cookies in future, we will update this policy and obtain your consent before doing so.

10. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. All data is transmitted over HTTPS.

11. International transfers

Our email delivery service (EmailJS) may process data outside Hong Kong. Where this occurs, we ensure appropriate safeguards are in place in accordance with PDPO requirements.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the date at the top of this page. Continued use of the site after changes constitutes acceptance of the updated policy.

13. Contact us

For any privacy-related questions or requests, please contact us at:
contact@miceandelephants.com

This policy applies to miceandelephants.com and all subdomains operated by Mice & Elephants.