Privacy Policy

1. Introduction and Scope

Hero Might operates as a computer systems design company headquartered at Ningjiang District Boxue Road, Songyuan, 131000, China (CN). This policy applies to all visitors of our website, prospective clients, active clients, job applicants, and any individual whose personal data we may process in the course of providing our professional services. By accessing our website or using our services, you acknowledge that you have read and understood this Privacy Policy.

We reserve the right to revise this policy at any time. Material changes will be announced via a notice on our website at least thirty days before they take effect. Continued use of our services after the effective date constitutes acceptance of the revised policy.

2. Information We Collect

We collect information that you voluntarily provide to us through contact forms, email correspondence, consultation requests, and service agreements. This may include your name, company name, job title, email address, phone number, physical address, project requirements, technical specifications, and any other information you choose to share during the course of our engagement.

Additionally, our web server automatically logs certain technical information when you visit our website, including your IP address, browser type and version, operating system, referring URL, pages visited, timestamps, and device type. This information is collected through standard server logs and is used solely for operational diagnostics, security monitoring, and aggregate traffic analysis.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data, health information, or information relating to criminal convictions unless explicitly and voluntarily provided by you in the context of a specific service engagement where such data is relevant and necessary.

3. Cookies and Tracking Technologies

Our website uses essential cookies and similar technologies to ensure proper functionality. These include session cookies that maintain your navigation state and preference cookies that remember your display settings. These cookies are strictly necessary for the operation of the website and do not require your consent under applicable data protection laws.

We may also use analytics cookies to understand how visitors interact with our website. These cookies collect anonymized information about page views, time spent on pages, and navigation patterns. We use this data exclusively in aggregate form to improve our content and user experience. You may disable analytics cookies through your browser settings at any time without affecting core website functionality.

Hero Might does not use advertising cookies, third-party tracking pixels, social media plugins that track users, or any form of behavioral advertising technology. We do not sell, rent, or trade your personal information to any third party for marketing or commercial purposes.

4. How We Use Your Information

The information we collect is used for the following purposes:

• Service Delivery: To respond to inquiries, prepare proposals, execute service agreements, and deliver computer systems design consulting and engineering services as contracted.
• Communication: To send you project updates, technical documentation, invoices, and administrative messages related to ongoing engagements.
• Website Improvement: To analyze aggregated usage patterns and optimize the performance, content, and navigation of our website.
• Legal Compliance: To comply with applicable laws, regulations, legal processes, and enforceable governmental requests.
• Security: To detect, prevent, and respond to fraud, abuse, security incidents, and technical issues that may harm Hero Might, our clients, or the public.

We process your personal data based on one or more of the following legal grounds: the necessity to perform a contract with you or to take steps at your request prior to entering into a contract; our legitimate business interests in operating and improving our services; compliance with a legal obligation to which we are subject; and your explicit consent where required by applicable law.

5. Data Sharing and Third-Party Disclosure

Hero Might does not sell, license, or share your personal information with third parties for their independent marketing or commercial purposes. We may share your information only in the following limited circumstances:

• Service Providers: With trusted third-party vendors who perform functions on our behalf, such as cloud hosting, email delivery, payment processing, and IT support. These providers are contractually bound to process your data only on our instructions and subject to confidentiality and security obligations consistent with this policy.
• Professional Advisors: With legal counsel, auditors, and insurance providers as necessary for the operation of our business and in accordance with professional ethical obligations.
• Legal Obligations: When required by law, regulation, subpoena, court order, or other legal process, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business Transfers: In connection with or during negotiation of any merger, acquisition, sale of assets, financing, or similar corporate transaction involving all or a portion of our business.

6. Data Storage and Security

Hero Might implements and maintains technical and organizational security measures designed to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include industry-standard encryption protocols for data in transit (TLS 1.3) and at rest (AES-256), network firewalls, intrusion detection systems, access controls based on the principle of least privilege, regular security audits, and employee training on data protection obligations.

Your personal data is stored on secure servers located in data centers that maintain SOC 2 Type II certification and ISO 27001 accreditation. We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, or as required by applicable law. When data is no longer needed, we securely delete or anonymize it in accordance with our data retention schedule.

While we strive to use commercially acceptable means to protect your personal information, no method of electronic storage or transmission over the internet is one hundred percent secure. We cannot guarantee absolute security of your data. In the event of a data breach that affects your personal information, we will notify you and relevant regulatory authorities as required by applicable law.

7. Data Retention

We retain personal data for different periods depending on the nature of the data and the purpose for which it was collected. Contact form submissions are retained for up to twenty-four months after the last communication unless an active client relationship is established. Client project data, including technical documentation and communications, is retained for the duration of the engagement plus seven years to comply with contractual obligations and legal record-keeping requirements.

Server logs are retained for a maximum of ninety days and then automatically purged. Analytics data is retained in aggregate, anonymized form indefinitely for historical trend analysis. Individual analytics events are deleted after twenty-six months. Cookies set by our website expire as described in Section 3 of this policy.

Upon expiration of the applicable retention period, or upon your verified request for deletion, your personal data will be securely erased from our systems, anonymized, or otherwise rendered irreversibly inaccessible. We may retain certain information in anonymized or aggregated form for analytical and statistical purposes where such data can no longer be associated with you.

8. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: The right to request a copy of the personal data we hold about you and information about how we process it.
• Rectification: The right to request correction of inaccurate or incomplete personal data we hold about you.
• Erasure: The right to request deletion of your personal data, subject to certain legal exceptions.
• Restriction: The right to request that we limit the processing of your personal data under certain conditions.
• Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller.
• Objection: The right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.
• Withdraw Consent: The right to withdraw previously given consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, please contact us at office@heromight.lol. We will respond to your request within thirty calendar days and may request proof of identity to verify your request. You also have the right to lodge a complaint with your local data protection supervisory authority if you believe your rights have been violated.

9. International Data Transfers

Hero Might is headquartered in China, and our primary data processing activities occur within Chinese territory. However, in the course of providing services to international clients, your personal data may be transferred to, stored in, or processed in countries outside your country of residence, including countries that may have data protection laws that differ from those in your jurisdiction.

When we transfer personal data across international borders, we implement appropriate safeguards in accordance with applicable data protection laws. These safeguards may include the use of standard contractual clauses approved by relevant regulatory authorities, adequacy decisions, binding corporate rules, or other lawful transfer mechanisms. By using our services, you consent to the transfer of your information to countries outside your country of residence as described in this policy.

10. Childrens Privacy

Our website and services are not directed to individuals under the age of sixteen, and we do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal data without your consent, please contact us immediately at office@heromight.lol. Upon verification, we will promptly delete such information from our records.

If we become aware that we have inadvertently collected personal data from a child under the age of sixteen without verifiable parental consent, we will take steps to remove that information from our servers as quickly as possible and terminate any associated accounts or services.

11. Third-Party Links

Our website may contain links to external websites, services, or resources that are not operated or controlled by Hero Might. This Privacy Policy does not apply to any third-party websites or services. We strongly encourage you to review the privacy policies of every third-party website you visit before providing any personal information. Hero Might assumes no responsibility or liability for the content, privacy practices, or data handling policies of any third-party site or service.

12. Do Not Track Signals

Our website does not respond to Do Not Track (DNT) signals at this time because no universally accepted standard for DNT signal interpretation exists. However, as stated in Section 3 of this policy, we do not engage in behavioral tracking or use third-party advertising cookies. You may configure your browser settings to block or alert you about cookies as you prefer. Note that blocking certain types of cookies may impact your experience on our website.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices, technology, legal obligations, or operational requirements. When we make changes, we will update the Last updated date at the top of this page and, for material changes, provide a more prominent notice on our website or send you a direct notification via email if you maintain an active client relationship with us.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information. Your continued use of our website and services after any modification to this policy will constitute your acknowledgment of the modifications and your consent to abide by and be bound by the modified policy.

14. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact us using the information below. We take all privacy-related inquiries seriously and will respond promptly and thoroughly.

This document was last reviewed and approved by the Hero Might legal compliance team on July 15, 2026. All sections are effective as of the date stated above.