Privacy Policy of MadeTask Service
Effective date: June 30, 2025
1. Introduction
Efficient Systems Limited (“we”, “our”, “the Operator”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, process, store, and protect personal information through our online platform, MadeTask, available at https://madetask.com.
This Policy is written in accordance with the Personal Data (Privacy) Ordinance (Cap. 486) of the Hong Kong SAR (“PDPO”) and the General Data Protection Regulation (EU 2016/679) (“GDPR”). It applies to all users of the Service, regardless of jurisdiction, with particular attention to individuals in the European Union (EU) and the Hong Kong SAR.
By using our Service, you confirm that you have read and understood this Policy and agree to how we use your data in accordance with the applicable law.
2. Who We Are
We are the entity responsible for processing your personal data, whether you are located in the EU, Hong Kong, or elsewhere.
3. What Personal Data We Collect
We may collect and process the following types of personal data:
Identity Information:
-
Full name, date of birth, gender, nationality
-
Passport or ID details
Contact Details:
- Email address, phone number, residential address
Account and Usage Data:
-
Login credentials (username/password), user ID
-
Browser and device information (e.g., IP address, cookies, device type)
-
Activity logs and access history
-
Preferences and settings
Payment Information in compliance with PCI DSS:
-
Credit/debit card numbers (processed through third-party providers)
-
Billing address
Media:
- Webcam photos or uploaded identification documents (if required for verification)
Other:
-
Feedback, surveys, and support requests
-
Any additional personal data voluntarily submitted
We do not knowingly collect personal data of children under the age of 18 unless such collection is in compliance with Terms of Use of Madetask Service.
4. Legal Basis for Processing (Under GDPR)
We only process personal data where we have a legal basis to do so. These include:
-
Consent – for optional features (e.g., marketing emails)
-
Contractual necessity – to provide you with access to the Service
-
Legal obligation – where required by law (e.g., anti-money laundering)
-
Legitimate interests – for system security, user experience improvement, and fraud prevention (where these interests are not overridden by your rights)
For users in Hong Kong, all collection and processing are conducted in accordance with the six Data Protection Principles (DPPs) outlined in the PDPO.
5. How We Use Your Data
We use your personal data for the following purposes:
-
To register and authenticate your account
-
To operate and maintain the functionality of the Service
-
To provide technical support and respond to your requests
-
To meet regulatory and compliance requirements
-
To send service-related communications (e.g., system notifications, policy updates)
-
To send marketing materials (with your explicit consent)
-
To improve our website, products, and services
-
To detect, prevent, and investigate fraud or misuse
6. Marketing and Consent
We may send you marketing emails about our services or those of trusted partners.
You can withdraw your consent at any time.
7. Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your user experience and improve our Service. These technologies collect:
-
Your device’s IP address and type
-
Browser type and version
-
Language settings
-
Referring website addresses
-
Pages visited and duration of visit
We rely on your implied or explicit consent, depending on jurisdiction, to place cookies. You can manage cookie settings in your browser.
8. Data Disclosure
We will not share personal data with third parties unless this is necessary for our legitimate business needs, to carry out requests, provide services and/or as required or permitted by law. Third parties under these circumstances include:
-
Our affiliates, subsidiaries, and parent companies.
-
Service providers. We will disclose personal data to third party partners and service providers (processors) so they can process it on our behalf where required. These service providers are required to provide sufficient assurances in accordance with data protection law. (e.g. being bound contractually to confidentiality and data protection obligations). We will only share personal data necessary for them to provide their services.
-
Auditors, advisors and consultants. We may disclose personal data for purposes and in the context of audits (e.g. external audits, security audits), to legal and other advisors, in order to investigate security issues, risks, complaints etc.
-
Regulatory authorities, law enforcement, courts. We may disclose personal data to comply with applicable legislation, regulatory obligations, to respond to requests of regulatory authorities, government and law enforcement agencies, courts and court orders.
-
Other persons. Other recipients may be any person/legal entity/organization for which you ask your data to be transferred to (e.g. reference etc.) or give your consent to transfer personal data.
As such, personal data may be transferred and disclosed to:
-
Money laundering and fraud prevention agencies, compliance services and risk prevention services. This is required in order to verify your identity, ensure protection against fraud, and confirm eligibility for our services/products.
-
Banks (other credit and financial service institutions), and similar institutions. These enable us to provide our Services.
-
Payment Systems (SWIFT, SEPA, Visa, Mastercard, etc.), payment service providers, card processing companies. These enable us to provide our Services.
-
Data management, storage, archiving, cloud storage service providers.
-
Companies assisting us with provision of our services (e.g. technological services, solutions, support such as support/maintenance/development of IT applications, technology, website management, telephony/SMS services).
-
Customer support service providers and marketing service providers.
-
Administrative service providers.
-
Auditing and accounting services and consultants.
-
External legal advisors.
We may also disclose your data in circumstances such as the following:
-
If we are under a duty to disclose or share your personal data in order to comply with any legal or regulatory obligation or request,
-
In order to apply or enforce the terms and conditions or any other agreement in place in the context of our relationship and to investigate potential breaches,
-
In order to protect our rights, safety or property, or that of our customers or third parties/the public.
-
This includes exchanging information with other companies and organizations for the purposes of money laundering, fraud prevention and equivalent risks.
9. International Data Transfers
Some of our data processing partners are located outside Hong Kong or the EEA. When we transfer your data internationally, we ensure appropriate safeguards are in place:
-
Standard Contractual Clauses (SCCs) approved by the European Commission
-
Contracts in accordance with Section 33 of the PDPO for data transfers out of Hong Kong
-
Additional technical and organizational safeguards
You may request more information about these safeguards by contacting us.
10. Data Retention
We retain your personal data only as long as necessary for the purposes stated in this Policy, or to comply with legal and contractual obligations.
In general:
-
Data related to your account is retained for the duration of your relationship with us + 6 months.
-
Legal and regulatory retention periods (e.g., for financial or tax purposes) may apply.
When data is no longer required, we will securely delete or anonymize it.
11. Your Rights
If you are in the EU (under GDPR):
Under the GDPR, you have certain data protection rights, including:
-
The right to access, update, or delete the personal data we have about you.
-
The right to restrict or object to our processing of your personal data.
-
The right to data portability. If you are in the EEA, Switzerland, or the UK, your rights in relation to your personal data processed by us as a controller specifically include:
-
Right of access and/or portability. You have the right to access any personal data that we hold about you and, in some circumstances, have that data provided to you so that you can provide or “port” that data to another provider;
-
Right of erasure. In certain circumstances, you have the right to the erasure of personal data that we hold about you (for example, if it is no longer necessary for the purposes for which it was originally collected);
-
Right to object to processing. In certain circumstances, you have the right to request that we stop processing your personal data and/or stop sending you marketing communications;
-
Right to rectification. You have the right to require us to correct any inaccurate or incomplete personal data;
-
Right to restrict processing: You have the right to request that we restrict processing of your personal data in certain circumstances (for example, where you believe that the personal data we hold about you is not accurate or lawfully held). Please note that your rights under the GDPR does not release us from our obligations under applicable Anti-Money Laundering legislation and our policy in this regard.
If you are in Hong Kong (under PDPO):
You have the right to:
-
Request access to your personal data
-
Request correction of inaccurate data
-
Understand our data handling practices
-
Withdraw consent for non-essential uses
We aim to respond to requests within 40 calendar days (PDPO) or 30 days (GDPR). Reasonable fees may apply under Hong Kong law for data access requests.
12. Data Security
We take appropriate technical and organizational measures to protect personal data, including:
-
Secure servers and encrypted connections (HTTPS)
-
Access controls and role-based permissions
-
Strong password policies
-
Regular system monitoring and intrusion detection
-
Staff training and confidentiality agreements
Despite our efforts, no system can be completely secure. You are also responsible for safeguarding your login credentials.
13. Automated Decision-Making
We do not use personal data for automated decision-making that produces legal or similarly significant effects on you, unless such decisions are:
-
Necessary for entering into or performing a contract
-
Authorized by law
-
Based on your explicit consent
14. Updates to This Policy
We may revise this Privacy Policy from time to time to reflect legal or operational changes. If we make significant changes, we will notify you through the Service or via email.
The most current version will always be available at: https://madetask.com
Continued use of the Service after changes are published constitutes your acceptance of the updated Policy.
15. Contact Us
If you have any questions, requests, or concerns about this Privacy Policy or our data practices, please contact:
support@madetask.com
Efficient Systems Limited
UNIT B, 31/F UNITED CTR 95
QUEENSWAY ADMIRALTY, HONG KONG