REALSUCC Privacy Policy

1. Scope of this Privacy Policy

This Privacy Policy explains how REALSUCC collects, uses, discloses, stores, protects and manages personal information when you visit our website, submit a business inquiry, apply for a role, subscribe to content, download resources, participate in research, or otherwise interact with us.

For the website and the personal information described in this Policy, Realsucc Technology Limited, a company registered in Hong Kong, is the website operator and personal information controller unless another entity is expressly identified for a specific service or engagement.

It applies to the REALSUCC website, contact and assessment forms, partner inquiries, recruitment, newsletters, downloads, events and related digital channels. Where REALSUCC processes data on behalf of a client, the applicable client agreement, data processing terms, SOW and project security requirements will generally govern.

2. Information We May Collect

Depending on how you interact with us, we may collect identity and contact data, company and role information, business and project inquiry data, recruitment information, newsletter subscription data, website and technical data, download and tool usage information, communications records and information from legitimate public business sources.

• Identity and contact data: name, title, company, department, country or region, work email, phone number and other business contact details.
• Business and project data: project background, business needs, current issues, system stage, objectives, timing, attachments and follow-up communications.
• Recruitment data: CV, education and employment history, skills, LinkedIn profile, location preferences, work authorization and other information you choose to provide.
• Technical and usage data: IP address, browser, device, operating system, pages visited, timestamps, referral source, cookie identifiers and basic security logs.
• Subscription and content interaction data: preferences, report or tool downloads, email opens and link interactions.

3. Do Not Submit Unnecessary Highly Sensitive Information

Public website forms are not designed for exchanging highly sensitive information. Unless a later project establishes an appropriate secure channel, do not submit passwords, private keys, seed phrases, API secrets, full payment card data, CVV, full payment credentials, production administrator credentials, unmasked bulk transaction data, identity document scans or other unnecessary highly sensitive information.

4. How We Collect Information

We may collect information directly from you, automatically through website technologies, and from legitimate third-party or public business sources such as professional networks, recruitment platforms and business partners. Automated collection may involve cookies, local storage, server logs, security tools or appropriately configured analytics.

5. How We Use Personal Information

We process personal information only for defined business purposes and where permitted by applicable law.

• Responding to inquiries, assessing fit, arranging discussions and preparing proposals or SOWs.
• Delivering contracted advisory, software, implementation, support and project-management services.
• Managing partner, integration and project relationships.
• Recruiting employees, advisers, experts and project specialists.
• Sending research, insights, executive briefs, events or other professional content where requested or legally permitted.
• Operating, protecting, troubleshooting, analyzing and improving the website, content and tools.
• Preventing fraud, abuse, security incidents and unauthorized access.
• Meeting legal, regulatory, contractual, dispute-resolution and record-keeping obligations.

6. Legal Bases for Processing

Where applicable law requires a specific legal basis, we may rely on consent, steps requested by you before entering into a contract, performance of a contract, compliance with legal obligations, REALSUCC’s legitimate interests, or another basis permitted by law.

Where processing relies on consent, you may withdraw that consent subject to applicable law. Withdrawal does not affect processing lawfully carried out before withdrawal.

7. Cookies and Similar Technologies

The website may use cookies, local storage, pixels, tags, logs and similar technologies for website operation, security, preferences, analytics and, where applicable, marketing measurement. See our Cookie Policy for categories, purposes and available choices.

8. How We Share Personal Information

REALSUCC does not sell personal information for unrelated third-party marketing. We may share necessary information with affiliates, IT and cloud providers, CRM/email/collaboration providers, professional advisers, project partners, recruitment providers, and government or regulatory authorities legally entitled to receive it.

Information may also be disclosed in connection with financing, merger, restructuring, asset transfer or change of control, subject to appropriate confidentiality and applicable law.

9. No Sale-Based Data Business Model

REALSUCC does not operate a business model based on selling personal information. If applicable law gives special meanings to “sale,” “sharing” or “targeted advertising” and REALSUCC later engages in covered activities, we will provide notices and choices appropriate to the actual processing.

10. International Data Transfers

REALSUCC may operate across multiple countries and regions, so personal information may be stored, accessed or processed outside the country or region in which you are located.

Where cross-border transfers are subject to legal requirements, REALSUCC will apply measures appropriate to the actual data flow and applicable law, which may include contractual safeguards, data-processing terms, access controls, data minimization and other legally recognized mechanisms.

11. Data Retention

We retain personal information only for as long as reasonably necessary for defined business purposes, contract performance, security and record keeping, or legal obligations. Retention periods depend on the information type, relationship, project status, dispute risk and applicable law.

For example, inquiry data may be kept through a reasonable follow-up period; client project data follows contractual and record-keeping requirements; recruitment data is kept for the hiring process and a reasonable talent-matching period; newsletter data is generally kept until unsubscribe or invalidation.

12. Data Minimization

REALSUCC follows a data-minimization principle and processes only information needed for a defined purpose. In payment infrastructure projects, where practical, we prefer test or masked data and controlled access rather than unnecessary copying of real sensitive production data.

13. Information Security

We use reasonable technical and organizational measures appropriate to the nature and risk of the data, which may include authentication, least privilege, access controls, logging, environment separation, encryption, secure configuration, backups, vulnerability remediation, access revocation, vendor controls and confidentiality obligations.

No internet transmission or information system can be guaranteed absolutely secure. See our Trust & Security page for our broader project-control principles.

14. Third-Party Websites and Services

The website may link to or integrate third-party websites, social platforms, video, analytics, scheduling or other services. Those third parties process information under their own terms and privacy policies, which REALSUCC does not control.

15. Newsletters and Professional Communications

If you subscribe, we may send research, expert perspectives, executive briefs, event information and related professional content. You may unsubscribe from optional marketing communications using the provided link or by contacting us. Transactional project, security, contractual or service communications are not general marketing messages.

16. Recruitment Data

Recruitment information is used for legitimate talent-management purposes such as reviewing applications, arranging interviews, communicating about roles, conducting necessary checks and considering future opportunities. Do not submit unrelated highly sensitive information during the initial application stage.

17. Children’s Privacy

The website is designed for businesses, professionals and payment-industry participants and is not directed at children. We do not intentionally target children for collection of personal information.

18. Your Privacy Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, restrict or object to processing, data portability, withdraw consent, object to direct marketing, understand disclosures or complain to a regulator. These rights may be subject to legal exceptions, identity verification and jurisdictional differences.

19. How to Submit a Privacy Request

You may submit a privacy request through the official REALSUCC Contact page. If REALSUCC publishes a dedicated privacy contact channel, you may use that channel as well. We may reasonably verify your identity before fulfilling a request in order to prevent unauthorized access, correction or deletion.

20. Additional Rights in Certain U.S. States

If REALSUCC becomes subject to U.S. state privacy laws, eligible residents may have additional rights such as access, correction, deletion, and opt-out rights relating to certain sales or sharing. Applicability should be determined from the actual entity, scale and processing activities rather than assumed in advance.

21. EU, EEA and UK

If particular processing is subject to the GDPR or UK GDPR, REALSUCC will determine the applicable controller role, legal bases, data-subject procedures, international transfer mechanisms, cookie consent requirements, and any DPO or representative obligations, and may provide a regional supplement where necessary.

22. Automated Decision-Making

The current website should not be understood as using solely automated systems to make decisions that produce legal or similarly significant effects on individuals. If such decision-making is introduced in recruitment, lead assessment or other processes, appropriate notices and rights will be provided where required.

23. AI-Assisted Processing

If REALSUCC uses AI-assisted tools in a workflow that involves personal information, the use will be assessed according to the purpose, data sensitivity, applicable contractual commitments and relevant privacy requirements. Highly sensitive information should not be placed into general-purpose AI tools without a valid need, appropriate authorization and suitable controls.

24. Changes to this Policy

We may update this Policy to reflect changes in law, technology, services or data-processing activities. The current version and last-updated date will be posted on the website, and material changes may receive additional notice where appropriate.

25. Contact Us

Questions about this Policy, personal-information handling or privacy rights may be submitted through the official REALSUCC Contact page. Where a dedicated privacy contact or data-protection representative is required or published, the relevant contact information will be made available through the website or applicable contractual documentation.