Privacy policy
How this website handles the personal data you choose to submit, and the rights you have over it.
Last updated: · Policy version 2026-10-23.1
1. Who we are
ModuWeave｜摩威 (“ModuWeave”, “we”, “us”) is operated by Genera Connect Limited (霽帆科技有限公司), a company registered in Hong Kong (Hong Kong Business Registration No. 78775114), Level 15, Area F, Cyberport 3, 100 Cyberport Road, Southern District, Hong Kong. We are the controller of the personal data described in this policy.
For any privacy question or request, email hello@moduweave.com. Please include your enquiry reference (for example MW-XXXXXXXX) if you have one.
2. Personal data we collect
Information you submit. The enquiry form collects your name, work email, company or project name, target market or country, area of interest and application description. You may also choose to give the project stage, quantity, component or model, request purpose, timeline and optional technical details. If you contact us by email or WhatsApp Business, we receive the information contained in those messages, including your phone number for WhatsApp.
Technical information. When you submit an enquiry, our server derives a one-way hashed value from your IP address and the date. We use it only to limit repeated or automated submissions and store it with the enquiry record; we do not store your IP address itself in the enquiry database. Our hosting provider processes standard connection data (such as IP address, browser type and requested pages) to deliver and secure the website.
Temporary product brief. When you continue from a product page, the site uses this browser’s session storage to carry the product context, quantity and application text into the contact form. The form uses a brief only when the product matches and the brief is less than 10 minutes old, then removes the handoff entry when reading it. An older or unmatched brief is discarded on intake. If you do not open the form, the entry can remain in this browser session until you clear it or the session ends. This handoff does not submit an enquiry.
Saved enquiry receipt. After the server confirms a saved enquiry, the site may store a minimal receipt in session storage: its reference, time and selected categories. The receipt contains no name, email, company, quantity or free-text description. It is valid for up to 24 hours; the confirmation page clears an expired or invalid receipt when checking its state, including when the page becomes visible again. A displayed receipt is also cleared when its validity ends. Session storage remains in this browser’s tab/session and can be cleared through your browser’s site-data controls. Browser session-restore settings may retain session data.
Please do not submit confidential drawings, trade secrets, passwords, payment details or special categories of personal data (such as health information) through the form.
3. How we use your data and our legal bases
| Purpose | Legal basis (EU/UK GDPR) |
|---|---|
| Reviewing and responding to your enquiry, preparing samples, quotations and documentation | Steps taken at your request before entering into a contract (Art. 6(1)(b)) |
| Performing and administering a contract with you or your company | Performance of a contract (Art. 6(1)(b)) |
| Business follow-up with your company about the requirement you raised | Our legitimate interest in developing business relationships (Art. 6(1)(f)) |
| Preventing spam, abuse and security incidents | Our legitimate interest in operating a secure website (Art. 6(1)(f)) |
| Understanding which website pages are useful through optional Google Analytics | Your consent (Art. 6(1)(a)); you can withdraw it through Analytics preferences |
| Keeping business, accounting and tax records | Compliance with legal obligations (Art. 6(1)(c)) |
We do not use your data for automated decision-making or profiling with legal or similarly significant effects. We do not sell your personal data, and we do not share it for cross-context behavioural advertising. We only send marketing emails where the law permits, and you can opt out at any time.
4. Who we share data with
We share personal data only as needed for the purposes above:
- Hosting and infrastructure providers, including Cloudflare, which hosts this website and the enquiry database.
- Google Analytics, only if you accept analytics cookies, to measure page visits and basic technical information about browsers and devices. Google may process this information in the United States and other countries where it operates. See how Google uses data from sites that use its services.
- Email and messaging providers we use to communicate with you, including WhatsApp Business if you choose to contact us that way.
- Manufacturing and engineering partners that review feasibility, samples or production for your project. We share the technical requirements they need, and share your name or contact details only when needed for the next step you requested, such as shipping a sample.
- Logistics providers for delivering samples or orders.
- Professional advisers and authorities where required by law or to establish, exercise or defend legal claims.
These recipients are bound by confidentiality or data-protection obligations appropriate to their role.
5. International transfers
We are based in Hong Kong, and our manufacturing partners are mainly located in mainland China. Your data may therefore be processed outside the European Economic Area, the United Kingdom and the United States, including in Hong Kong, mainland China and the countries where our service providers operate. Where EU or UK law requires it, we protect these transfers with the European Commission’s Standard Contractual Clauses (and the UK Addendum) or another recognised safeguard. You can request further information about these safeguards using the contact details above.
6. How long we keep data
- Enquiries that do not lead to a business relationship: up to 24 months after our last contact.
- Records relating to quotations, orders and contracts: as long as required by applicable accounting, tax and limitation periods, normally up to 7 years after the transaction.
- The hashed anti-abuse value: kept with the related enquiry record and deleted with it.
- The browser session receipt: up to 24 hours, or until your browser session ends.
We delete or anonymise data when it is no longer needed for these purposes.
7. Your rights
Depending on where you are located, you may have the right to access your personal data, correct it, delete it, restrict or object to its processing, receive it in a portable format, and withdraw consent where processing relies on consent. You can object at any time to processing based on our legitimate interests, including direct marketing.
EU and UK residents may also lodge a complaint with their local data protection supervisory authority. We would appreciate the chance to address your concern first.
California and other US state residents may have the right to know what personal information we collect, to request its deletion or correction, and not to be discriminated against for exercising these rights. We do not sell or share personal information as defined by the CCPA/CPRA, and we do not process sensitive personal information for purposes that would require a right to limit.
To exercise any right, email hello@moduweave.com. We may need to verify your identity before acting and will respond within the time required by applicable law, normally one month.
8. Cookies and analytics
When enabled, Google Analytics is optional. We load its script and enable analytics cookies only after you select “Accept analytics”. Until then, and if you reject analytics, we do not send analytics requests to Google. You can change your choice using “Analytics preferences” in the footer when analytics is enabled. Withdrawing consent stops further collection and removes this site's Google Analytics cookies without reloading the page or clearing any enquiry details you have entered. An expired choice is treated as no consent.
When enabled, analytics measures page visits and basic browser and device information. We send page paths and titles, and remove query strings and fragments from measured page addresses. The first referral is reduced to its origin; later referrals are the previously measured page path. We do not send enquiry fields, saved receipts, product briefs or site-search terms to Google, and we disable Google signals and advertising personalisation. Google also receives connection information when your browser contacts its services.
The first-party cookies _ga and _ga_CY4GZ36255 distinguish browsers and sessions; their
configured lifetime is up to 180 days without renewal on each visit. We remember your analytics choice in local storage
for 180 days, so you do not have to choose on every page. Clearing browser site data removes your saved choice. If
local storage is unavailable, your choice applies only to the current document.
Site search runs in your browser using a public content index. The session receipt described above is needed to show your enquiry confirmation. Neither requires analytics consent. Local development and preview hosts do not load analytics.
9. Security
We use appropriate technical and organisational measures, including encrypted connections (HTTPS), access controls, request validation and rate limiting. No internet transmission is completely secure, so please avoid sending highly sensitive information through the form.
10. Children
This website is intended for business users. It is not directed to children, and we do not knowingly collect personal data from anyone under 16.
11. Hong Kong law
As a Hong Kong company, we also handle personal data in accordance with the Personal Data (Privacy) Ordinance (Cap. 486).
12. Changes and language
We may update this policy as our services or legal requirements change. The “Last updated” date above shows the latest version. If this policy is provided in other languages, the English version prevails in case of inconsistency.