1. Identity of the Data Controller

Choicegrdcrewcabin Intelligence Analysis Ltd., a private company registered in England and Wales under Company Registration Number 09842105, with registered offices at 42 St. Mary Axe, Floor 18, London, EC3A 8EP, United Kingdom, operates the web portal choicegrdcrewcabin.asia and serves as the primary Data Controller for any personal data processed via this website.

For any queries regarding this policy, our designated Data Protection Officer (DPO) can be reached at [email protected] with the subject line "Data Protection Inquiry".

2. Categories of Data Collected

We adhere to data minimization principles. We do not maintain unauthenticated tracking trackers or monetize user profiles. The data processed through our site includes:

  • Technical Telemetry: Anonymized Internet Protocol (IP) address hashes, browser user-agent tokens, referring URLs, access timestamps, and HTTP response codes collected via automated edge server logs for security defense and DDoS prevention.
  • Direct Communications Data: Your name, official organizational email address, and voluntary message content submitted through our secure Contact & Clearance inquiry portal.
  • Consent State Information: Cryptographically timestamped records of your cookie consent preferences stored locally within your browser's localStorage database.

3. Lawful Bases for Processing (UK GDPR / EU GDPR)

Under Article 6 of the General Data Protection Regulation, we process your information exclusively under the following recognized legal bases:

  • Legitimate Interests (Art. 6(1)(f)): Processing network security telemetry to detect malicious intrusion attempts, prevent unauthorized web scraping, and ensure the cryptographic stability of the domain.
  • Consent (Art. 6(1)(a)): Handling non-essential analytics cookies and receiving direct communications transmitted voluntarily through our web contact interface. You maintain the right to revoke consent at any moment.
  • Legal Obligation (Art. 6(1)(c)): Retaining records required to fulfill commercial accounting standards and statutory disclosures demanded by regulatory authorities in the United Kingdom.

4. Third-Party Infrastructure Processors

We do not sell, rent, or lease personal identifiers. Data may be processed on our behalf by audited third-party service providers bound by strict Data Processing Agreements (DPAs):

  • Hosting and Content Delivery Networks: Secure cloud infrastructure providers operating resilient server nodes to deliver static assets with high availability.
  • Cryptographic TLS Termination: Distributed edge networks managing automated certificates to secure transport-layer handshakes.
  • Email Transit Gateways: SMTP servers enforcing STARTTLS and DKIM authentication to route briefing desk inquiries to our analysts.

5. International Data Transfers

Where data is transferred outside the United Kingdom or the European Economic Area (EEA), Choicegrdcrewcabin Intelligence Analysis Ltd. implements standard contractual clauses (SCCs) as recognized by the Information Commissioner’s Office (ICO) and European Commission, ensuring recipients maintain security controls equivalent to domestic statutory requirements.

6. Data Retention Schedules

Server access logs are retained on a rolling cycle of 90 days, after which they are permanently deleted or irreversibly anonymized for longitudinal traffic trend analysis. Direct communications received via the briefing desk are held for a maximum of 24 months to maintain reference context for professional inquiries, unless an explicit deletion request is lodged earlier.

7. Statutory Rights under UK/EU GDPR and CCPA

Depending on your jurisdiction, you possess the following statutory rights regarding your personal data:

  • Right of Access (Subject Access Request): Request confirmation and copies of any personal records maintained regarding your identity.
  • Right to Rectification: Request correction of inaccurate, obsolete, or incomplete records.
  • Right to Erasure ("Right to be Forgotten"): Demand the deletion of personal information where retention is no longer justified by statutory requirements.
  • Right to Restrict Processing: Request suspension of processing while accuracy or legitimacy is verified.
  • Right to Data Portability: Obtain an interoperable, machine-readable export of data provided to us under consent.
  • Non-Discrimination (CCPA): We will never deny services, charge differing rates, or downgrade analytical access if you exercise your privacy rights.

To exercise these rights, submit a formal request to our privacy desk at [email protected]. We respond to all verified requests within thirty (30) statutory calendar days.

8. Supervisory Authority & Complaints

If you believe our data processing violates applicable data protection legislation, you retain the right to lodge a formal complaint with the Information Commissioner's Office (ICO) in the United Kingdom via their official portal at ico.org.uk.