Privacy Policy

1. Who we are

This website is operated by BODA High-Tech Computer Inc. ("we", "us", "our"), a company incorporated in California, United States, with its registered office at 919 Fremont Ave, Alhambra, CA 91803, United States. We develop and operate the iHomepage CMS website building platform.

For the purposes of the EU and UK General Data Protection Regulation, we act as the data controller for personal information processed through this website. You can reach us at any time at [email protected].

2. Scope of this policy

This policy covers personal information we process when you browse this website, submit a form, or contact us by email or telephone. It does not cover:

• Third-party websites we link to, which have their own privacy policies;
• Websites that our customers build and publish using iHomepage CMS, where the customer is the controller of visitor data on their own site;
• Information you provide to us through separate commercial agreements, which may be governed by additional terms.

3. Information we collect

This website has no login or user accounts. We collect only the following categories of information.

3.1 Information you give us voluntarily

If you contact us or submit a form on this site, you may provide your name, company name, email address, telephone number, country, and the content of your message or inquiry. Providing this information is optional; if you choose not to provide it, we may be unable to answer your question.

3.2 Information collected automatically

Like most websites, our servers and infrastructure providers automatically record technical information when a page is requested. This may include your IP address, browser type and version, operating system, device type, the referring page, the pages you view, and the date and time of your visit. This information is used to deliver the site, maintain security and diagnose faults.

3.3 Analytics information (only with your consent)

If you accept analytics cookies, a third-party analytics provider may collect information about how you use this site — for example which pages are viewed, approximate geographic region (derived from a truncated IP address), session duration and the general path taken through the site. Where the provider supports it, we enable IP anonymisation. Analytics is not loaded at all unless you have given consent.

3.4 Information we do not collect

We do not knowingly collect special categories of personal data (such as health, biometric, racial or ethnic origin, political opinions, religious beliefs, trade union membership or sexual orientation). Please do not include such information in messages you send us. We do not process payment card details on this website.

4. How we use information

Purpose	Information used
Delivering and securing the website	Technical and server log information
Responding to your inquiry or question	Contact details and message content
Sending updates you have subscribed to	Email address (until you unsubscribe)
Understanding and improving site usage	Analytics information, with consent
Meeting legal and regulatory obligations	Whichever records are relevant
Establishing, exercising or defending legal claims	Whichever records are relevant

We do not use your personal information to make decisions producing legal or similarly significant effects about you by automated means, and we do not carry out profiling for advertising purposes on this site.

5. Legal bases for processing (EEA and UK visitors)

Where the GDPR applies, we rely on the following legal bases:

• Consent (Art. 6(1)(a)) — for analytics cookies and for optional email subscriptions. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Legitimate interests (Art. 6(1)(f)) — for operating and securing the website, preventing abuse, and responding to business inquiries. We balance these interests against your rights and freedoms.
• Performance of a contract or pre-contractual steps (Art. 6(1)(b)) — where you contact us to discuss using our services.
• Legal obligation (Art. 6(1)(c)) — where retention or disclosure is required by applicable law.

6. Cookies and analytics

We use a small number of cookies. Strictly necessary cookies — including the cookie that stores your consent choice — are set without consent because the site cannot function correctly without them. Analytics cookies are set only after you select "Accept all".

Our Cookie Policy describes each cookie, its purpose and its duration, and explains how to change your choice or delete cookies in your browser.

7. Sharing and service providers

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We share information only in these circumstances:

• Service providers (processors) acting on our instructions — for example website hosting and content delivery, email delivery, and (with your consent) web analytics. These providers are bound by contract to process data only for the purposes we specify and to protect it appropriately.
• Professional advisers such as lawyers, auditors and insurers, where reasonably necessary.
• Authorities where we are required to disclose information by law, court order, or to protect the rights, property or safety of any person.
• A successor entity in connection with a merger, acquisition or sale of assets, subject to this policy continuing to apply to the transferred information.

8. International transfers

We are established in the United States, and our service providers may process information in the United States or other countries. Where personal information of visitors in the European Economic Area, the United Kingdom or Switzerland is transferred outside those regions, we rely on appropriate safeguards — typically the European Commission's Standard Contractual Clauses (and the UK Addendum where applicable) — together with supplementary technical and organisational measures where necessary. You may request further information about these safeguards using the contact details below.

9. How long we keep information

• Inquiry and correspondence records: up to 24 months after our last substantive contact, unless a longer period is needed for a legal claim or an ongoing business relationship.
• Email subscription records: until you unsubscribe, plus a minimal suppression record so we do not contact you again.
• Server and security logs: typically up to 12 months.
• Analytics data: in accordance with the retention setting configured with the analytics provider, ordinarily no more than 14 months.
• Consent records: for the life of the consent cookie (up to 180 days) and any record needed to demonstrate compliance.

When information is no longer needed, we delete it or irreversibly anonymise it.

10. Security

We apply technical and organisational measures appropriate to the risk, including encryption of traffic in transit (HTTPS), access controls limiting who can view submitted inquiries, and regular updates to the software we operate. No method of transmission or storage is completely secure, and we cannot guarantee absolute security; please do not send sensitive personal information to us by unencrypted email.

11. Your rights

Depending on where you live, you may have some or all of the following rights in relation to your personal information:

• Access — to obtain confirmation of whether we process your information and a copy of it;
• Rectification — to have inaccurate information corrected;
• Erasure — to have information deleted in certain circumstances;
• Restriction — to limit how we use information in certain circumstances;
• Objection — to object to processing based on legitimate interests, and to direct marketing at any time;
• Portability — to receive information you provided in a structured, machine-readable format;
• Withdrawal of consent — at any time, where processing is based on consent;
• Complaint — to lodge a complaint with your local supervisory authority. In the EEA, this is the data protection authority of your country of residence, work or the alleged infringement; in the UK, the Information Commissioner's Office.

California residents may additionally have the right to know the categories of personal information collected and disclosed, to request deletion or correction, and not to receive discriminatory treatment for exercising these rights. As stated above, we do not sell or share personal information as those terms are defined under California law.

To exercise any right, email [email protected]. We respond within the period required by applicable law — ordinarily within one month under the GDPR, or 45 days under California law — and may extend this where permitted, telling you why. We may need to verify your identity before acting, and may decline requests where an exception applies.

12. Children

This website is intended for businesses and is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, contact us and we will delete it.

13. Do Not Track and Global Privacy Control

Because there is no common industry standard for responding to "Do Not Track" browser signals, this site does not respond to them. However, no analytics cookies are set unless you actively consent, which achieves a comparable result. Where we are legally required to honour an opt-out preference signal such as Global Privacy Control, we treat it as a request to reject non-essential cookies.

14. Changes to this policy

We may update this policy to reflect changes in our practices or in the law. We will change the "Last updated" date at the top of this page, and where changes are material we will provide a more prominent notice on the site. Please review this page periodically.

15. Contact us

For any question about this policy or about how we handle personal information, including to exercise your rights, contact us: