Privacy policy

Last updated: 1 October 2026

The short version

When you send us a brief, ask for a free GEO check or ask for our GEO playbook, we collect what you type into the form and a few technical details that come with it. We use them only to answer your enquiry, run your check or send you the playbook, and for the work that follows from it. We do not sell them.

You can ask for a copy of the personal data we hold about you, or ask us to correct it, through the contact form. We do not charge for this.

The rest of this page gives the detail.

Who we are

A2FF Digital Limited is an AI agency registered in Hong Kong. We run www.a2ff.com and we are responsible for the personal data it collects. We handle personal data under Hong Kong's Personal Data (Privacy) Ordinance (Cap. 486), which this page calls "the Ordinance".

What we collect

When you send us a brief

The contact form asks for your name, your company, your work email, the service you are interested in and your brief. We need these to reply, so the form will not send without them. Your company website and when you need the work are optional.

If you reached the form through a link on our site, the form also records a short label for that link (or "direct" if there is none). With every form it records the date and time, the page you sent it from, your IP address and basic details of your browser.

Through the contact form, we only collect what you type into it and the details above. Please do not put sensitive personal data, such as health or financial details, in your brief.

When you ask for a free GEO check

The free check form asks for your name, your company, your website and your work email. We need these to run the check and send you the result, so the form will not send without them. Competitors' websites are optional. The form records the same technical details as the contact form. We use all of this to run the check, email you the result and manage free check requests, and for the work that follows if you then ask us for it.

When you ask for the GEO playbook

The playbook form asks for your name, your company, your work email and your website. We need these to email you the playbook, so the form will not send without them. The form records the same technical details as the contact form. We use all of this to send you the playbook and manage playbook requests, and for the work that follows if you then ask us for it.

When you browse the site

You do not need an account to use this site, and the site has no comments.

The site uses a few cookies and similar browser storage to remember your language and light or dark mode, and Google Analytics cookies to count visits. You can clear or block them in your browser's settings.

Google Analytics

We use Google Analytics to count visits and to see which pages people read. When a page opens, Google receives your IP address and details of the visit, such as the pages you view, the site you came from, your browser and the type of device. Google uses the IP address to work out a rough location. We look at the reports only as totals and do not use them to identify you.

You can block these cookies in your browser settings, or install Google's opt-out add-on.

Other companies

Google (fonts, the forms' spam check and Analytics) and Cloudflare (security and speed) receive your IP address and basic details of your browser when a page loads.

Why we use it

  • Your brief and contact details: only to answer your enquiry and for the work that follows from it.
  • Your free check request: to run the check, email you the result and manage free check requests.
  • Your playbook request: to email you the playbook and manage playbook requests.
  • The technical details sent with the form: to keep a record of your enquiry and to spot spam and misuse of the form.
  • Google Analytics: to understand which pages are useful, so we can improve the site.
  • The items kept in your browser: to remember your language and display choices.

Who receives it

  • A2FF. Each form sends what you entered to our inbox and saves a copy in our website's database.
  • The provider that hosts our website, the provider that hosts the inbox the form sends to, and the service that delivers the form's emails, only so that they can provide their services to us. They may process data outside Hong Kong.
  • Google, for Analytics, reCAPTCHA and fonts, and Cloudflare, as described above. Both process data outside Hong Kong.
  • Anyone the law requires us to tell, such as a court or a regulator.

We do not sell your personal data.

How long we keep it

We keep a brief, a free check request or a playbook request only as long as we need it for the purposes above, and then we delete it from our inbox and our website's database.

How we protect it

The site is served over an encrypted connection (HTTPS). We take reasonable steps to protect the personal data we hold from unauthorised access, loss and misuse.

Your rights

Under the Ordinance you can:

  • ask whether we hold personal data about you, and ask for a copy of it;
  • ask us to correct personal data about you that is wrong.

You can also ask us to delete your brief.

Requests are handled by our Data Protection Officer. To make one, send it through our contact form and say in your message that it is a data access request or a correction request. We may need to check who you are before we reply.

This site is for businesses

This site is meant for people looking for services for their company. We do not knowingly collect personal data from children.

Changes to this policy

We will update this page when what the site collects, or how we use it, changes, and we will change the date at the top. This page is also available in Chinese. If the two versions differ, the English version applies.

Scroll to Top