Privacy Policy

Last updated: 9/11/2025

Work Less Limited ("Company", "we", "our", or "us") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information in accordance with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong ("PDPO") and, where applicable, the Personal Information Protection Law of the People's Republic of China ("PIPL"). We also take into account principles from the EU General Data Protection Regulation ("GDPR") and similar global standards.

1. Personal Data We Collect

  • Mandatory: Email address (for notifications, account login) and password (stored in hashed form).
  • Optional: Name (if provided in account settings).
  • Automatically collected: Technical information such as IP address, device/browser details, and cookies.

We do not knowingly collect sensitive personal information.

2. Purpose of Collection and Use

We collect and use your personal data for the following purposes:

  • To create and manage your user account.
  • To deliver stock/restock notification emails as requested.
  • To manage subscriptions and process payments (via third-party processors).
  • To improve and secure our Service.
  • To comply with legal obligations or regulatory requests.

We will only use your personal data for the purposes stated at the time of collection or directly related purposes.

3. Direct Marketing

We will not use your personal data for direct marketing without your explicit consent. If you opt-in, you may withdraw your consent at any time.

4. Disclosure of Personal Data

We may share your data with:

  • Service providers: e.g. Supabase for authentication, Resend for email delivery, Stripe for payment processing, Azure for cloud functions, strictly for the purposes of providing our Service.
  • Regulators or authorities if required by law.
  • Successors in the event of a business transfer.

We do not sell or rent personal data to third parties.

5. Cross-Border Transfers

Personal data may be stored or processed outside your jurisdiction. For users in Mainland China, personal data may be transferred outside China. Where required by PIPL, we will obtain your separate consent and ensure equivalent levels of protection.

6. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required by law. Thereafter, data will be securely erased or anonymized.

7. Security

We take all practicable steps to protect personal data, including encryption of passwords, access controls, and use of reputable cloud providers. However, no system can guarantee absolute security.

8. Your Rights

Under PDPO and PIPL, you have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your data (subject to legal or operational requirements).
  • Withdraw consent for processing (where applicable).

Requests should be sent to: privacy@gotorange.com

9. Cookies

We use cookies and similar technologies to improve site functionality and analyze traffic. By continuing to use our site, you consent to our use of cookies. You can disable cookies in your browser settings, but some features may not function properly.

10. Updates

We may update this Privacy Policy from time to time. The latest version will be posted on this page with an updated "last updated" date.

11. Language

This Privacy Policy may be available in English and Chinese. In case of discrepancy, the English version shall prevail.