Last updated: September 2026
This Privacy Policy is issued by Lever Data Solutions Limited, a company incorporated in Hong Kong trading as "Checkafy" ("Checkafy", "we", "our" or "us"), with its registered office at Unit 231, 2/F, Building 16W, Hong Kong Science Park, Pak Shek Kok, Hong Kong. For the purposes of the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong (the "PDPO"), Lever Data Solutions Limited is the data user of the personal data described in this Policy.
This Policy explains how we collect, use, disclose, transfer and protect personal data when you use our website (www.checkafy.com), any mobile applications we publish, and our commercial solutions, including CheckReport, CheckDashboard, CheckAPI and CheckOps (together, the "Services"). It also sets out the statement required under the PDPO regarding the use of personal data in direct marketing.
By using the Services you acknowledge that you have read this Policy. Where our processing relies on your consent, you may withdraw that consent at any time as described in section 9.
The Services collect, aggregate and analyse product, pricing, listing, promotion and availability information from publicly accessible retailer websites, marketplaces and other public sources ("Market Data"). Market Data is business information about products and sellers. It is not intended to, and we do not knowingly use it to, identify or profile individual consumers. Where a public listing includes the name or contact details of an individual seller, we process that information only to the extent necessary to provide the Services (for example, brand protection and unauthorised-seller monitoring for our customers) and in accordance with the PDPO. If you are a seller and believe we hold your personal data, you may exercise your rights under section 9.
Providing personal data to us is voluntary. However, if you do not provide the data we request, we may be unable to provide the Services, respond to you, or process your application.
We may use your name, email address, telephone number, company name and job role to send you information about Checkafy products and services, including market intelligence reports, dashboards, data APIs, managed execution services, events, webinars and industry insights (the "Marketing Classes").
We will not use your personal data for direct marketing unless you have given your consent or indicated no objection. We do not provide your personal data to any third party for that third party's own direct marketing.
You may ask us to stop using your personal data for direct marketing at any time, free of charge, by clicking the unsubscribe link in any marketing email or by writing to info@checkafy.com. We will action your request without charge and within a reasonable time.
We do not sell personal data. We may disclose personal data to:
Our Services are delivered using cloud infrastructure and service providers that may store or process personal data outside Hong Kong, including in Singapore, Japan, the United States and the European Union. Where we transfer personal data outside Hong Kong we take reasonable steps to ensure it receives a level of protection comparable to that under the PDPO, including contractual data-protection obligations with the recipient. By providing personal data to us you consent to such transfers for the purposes described in this Policy.
We apply technical and organisational measures appropriate to the nature of the data, including encryption in transit, access controls, logging, and staff confidentiality obligations. No method of transmission or storage is completely secure. To the extent permitted by law, we are not liable for unauthorised access that occurs despite reasonable security measures. If we become aware of a data breach that is likely to cause serious harm to you, we will notify you and the relevant authorities where required.
We retain personal data only for as long as necessary for the purposes for which it was collected, and thereafter as required for legal, regulatory, accounting, audit or dispute-resolution purposes. As a guide: account and subscription data is kept for the duration of the customer relationship and up to seven (7) years after it ends; enquiry and marketing data is kept until you unsubscribe or for up to three (3) years after the last contact; unsuccessful job applications are kept for up to twelve (12) months. When data is no longer required we delete or anonymise it.
Under the PDPO you have the right to:
To exercise these rights, write to info@checkafy.com with sufficient information for us to verify your identity. We will respond within forty (40) days as required by the PDPO. We may charge a reasonable fee for complying with a data access request, as permitted by the PDPO, and will tell you the fee before proceeding. If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner for Personal Data, Hong Kong.
We use cookies and similar technologies that are necessary for the website and dashboards to function, and analytics technologies to understand how the Services are used and to improve them. You can control cookies through your browser settings. Disabling cookies may affect the functionality of the Services.
The Services may link to, embed, or rely on third-party websites and services (for example, form providers, calendar and scheduling tools, and app stores). Their privacy practices are governed by their own policies, and we are not responsible for them. Data you submit through a third-party form is also received by that provider under its own terms.
Where a customer provides us with personal data (for example, an authorised-seller list or contacts) so that we can deliver managed services, we process that data on the customer's instructions and under our agreement with that customer. The customer is responsible for having a lawful basis to share that data with us. Requests relating to such data should be directed to the relevant customer in the first instance.
The Services are intended for business users and are not directed at individuals under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.
We may update this Policy from time to time. The current version is always available on this page with the "Last updated" date. Material changes affecting how we use your personal data will be notified by email or through the Services where practicable. Continued use of the Services after a change takes effect constitutes acceptance of the updated Policy.
Questions, requests and complaints about this Policy or our handling of personal data should be sent to our Data Protection contact: