Privacy Policy

Last updated 18 September 2026

This policy explains what iFansy Limited does with personal data when you visit waitingagencygift.com or work with us as a client. We are the controller of that data.

1. What we collect

• What you send us. Your name, email address, company details and whatever you write when you get in touch or become a client.
• Client working material. Access to the social accounts we manage for you, the material you hand over, and the notes and approvals we exchange while working.
• Billing details. The company name, address and tax details that have to appear on an invoice, plus the record of what was invoiced and paid.
• Technical records. Our hosting provider records the request your browser makes, including the IP address, for security and to keep the site up. We do not read these for anything else.

We do not ask for special categories of data such as health or beliefs, and we do not want them in the material you send us.

2. Why we use it, and on what basis

What for	Lawful basis
Answering an enquiry and preparing a quote	Steps taken at your request before a contract
Doing the work we agreed and talking to you about it	Performance of our contract
Invoicing, accounting and tax records	Legal obligation
Keeping the site and our accounts safe from abuse	Our legitimate interest in a service that is not attacked

We do not profile you, we do not make decisions about you by machine alone, and we do not use your data to advertise to you.

3. Who else sees it

• Our hosting provider, which serves this site and keeps the request logs described above.
• Our email provider, which carries the messages between us.
• Our accountant and, where a specific case needs it, our professional advisers.
• Authorities, when the law requires it.

We do not sell personal data, we do not rent or buy contact lists, and we do not share your data so that another company can advertise to you.

4. Where your data goes

We are based in Hong Kong and our providers work from several countries, including inside and outside the European Economic Area. Where data leaves the EEA it travels under the standard contractual clauses approved by the European Commission, or an equivalent safeguard. Write to us and we will tell you which safeguard covers a particular provider.

5. How long we keep it

• Enquiries that do not become work: up to 12 months.
• Client records and the material around the work: for the length of the engagement and 24 months after it ends.
• Invoices and accounting records: 7 years, because the law requires it.
• Hosting request logs: as long as our provider keeps them, normally weeks rather than months.

6. Your rights

You can ask us for a copy of what we hold about you, to correct it, to delete it, to limit what we do with it, to receive it in a portable form, or to object to a use that rests on our legitimate interest. Where we rely on consent you can take it back at any time, which does not undo what happened before.

Write to us at the address below and we answer within 30 days. If you are in the European Economic Area or the United Kingdom and you are not satisfied, you may complain to the data protection authority where you live.

7. Security

Traffic to this site is encrypted. Access to client accounts and material is limited to the people doing the work, and it is handed back or removed when an engagement ends. No system is perfect, and if a breach ever puts you at risk we will tell you and the authority, as the law requires.

8. Children

This site and our services are for adults and for businesses. We do not knowingly collect data about children.

9. Changes

If this policy changes, the date at the top changes with it, and the current version is always the one on this page.

Contact