Privacy policy

Who we are

The data controller is Scott Info Consulting Co., Ltd. (WFOE Company China), Room 301, Block F, Kangqiao Shuyuan, No.1059 Kangqiao Road, Pudong New Area, Shanghai, P.R. China. You can reach us at scott@wfoecompanychina.com or haan@wfoecompanychina.com, and on WeChat and WhatsApp using the details on our contact page.

What we collect, by channel

At the enquiry stage, through the forms on this website, we collect only the name, email address, optional phone or WeChat handle, and the message you send us, including the city or service you ask about. We ask you not to send identity or corporate documents through any web form.

When you contact us on WhatsApp, WeChat or by email, we hold whatever you choose to send in that conversation, along with your contact identifier on that platform.

Once an engagement begins, and only then, we collect the documents a filing requires. Depending on the matter these can include passport scans, shareholder and director identity documents, proof of address, and company records. These are shared through a secure channel we agree with you, not through this website.

Sensitive information and minors

Passport and identity documents are sensitive personal information under Article 28 of the PIPL and special-category or identity data under the GDPR. We collect them only when a specific filing needs them, we ask for your separate, specific consent at that point, and we limit them to what the filing requires. Where a matter involves family or dependant visas, this can include a child's passport data, which we handle under the heightened consent rules that apply to minors.

Why we use it and our legal basis

We use enquiry data to answer you and to scope possible work. We use engagement data to carry out the service you have instructed and to make the filings it requires with Chinese authorities, banks and other bodies. Under the PIPL we rely on your consent and, for engagement data, on the necessity of performing our contract with you. Under the GDPR, where it applies, we rely on your consent for enquiries and on performance of a contract and our legal obligations for engagement work.

Who processes it

Enquiry forms are processed on our own web server and the message is emailed to an inbox in Google Workspace and Gmail, operated by Google LLC. To keep the forms free of spam and abuse we use Cloudflare Turnstile, operated by Cloudflare, Inc.; it checks that a submission comes from a person rather than a bot, and for that purpose it processes technical data including your IP address and how you interact with the page. This website is stored with our hosting provider. When we make a filing, the relevant Chinese authority, bank or notary necessarily receives the documents that filing requires. We do not sell your data or share it for advertising, and we use no advertising or analytics processors.

Where it is processed and cross-border transfers

Our work is centred in China, and engagement data is filed with Chinese authorities, so it is processed in China. Some processors named above, including the form relay and email services, operate outside China, which means an enquiry you send can be processed abroad. Where the PIPL applies, we rely on your consent for cross-border transfer under Article 38, and we transfer only what is necessary. If you would prefer to avoid overseas relays for a first enquiry, WeChat is the most local channel.

How long we keep it

We keep enquiry messages only as long as needed to deal with your enquiry and for a reasonable period afterward, then delete them. We keep engagement records for as long as necessary to provide the service and to meet the legal, tax and accounting retention obligations that apply to that work in China, which can require records to be kept for several years, after which they are deleted or returned to you.

Your rights

You can ask us to give you access to the personal data we hold about you, to correct it, to delete it, or to withdraw a consent you have given, and where the GDPR applies you also have rights to restrict or object to processing and to data portability. To make a request, email the contact below. We may need to verify your identity before we act, and some records we are legally required to keep cannot be deleted until that obligation ends.

Cookies and tracking

This website sets no advertising or analytics cookies and loads no third-party trackers. We store a small preference that remembers whether you chose light or dark mode, which stays on your device. The spam-protection widget on our contact forms, Cloudflare Turnstile, may place a short-lived token in your browser only to complete its human check; it is not used to track you across sites.

How to contact us

For any privacy question or request, email haan@wfoecompanychina.com, or write to Scott Info Consulting Co., Ltd. at the Shanghai address above. If you are in a country with a data protection authority and you are not satisfied with our response, you may also have the right to complain to that authority.

Last reviewed: 18 July 2026Draft prepared for review by a qualified lawyer before final publication.