Privacy Policy

01Who We Are

CriticalOre ("we", "us") is a B2B supplier and exporter of critical mineral concentrates with its head office at 16 Harcourt Road, Admiralty, Hong Kong, operating export logistics from Southeast Asia. This policy explains how we handle personal information collected through criticalore.com.

For any privacy matter, the fastest route is info@criticalore.com - a human reads it, around the clock.

02Information We Collect

We collect information in two ways - directly from you, and automatically through analytics:

• Form submissions - when you request a quote, ask a question, download a guide or subscribe to our newsletter, we collect the details you provide: name, email address, company, phone number, country, and the content of your inquiry (product, quantity, destination port, message).
• Analytics data - we use Google Analytics (gtag.js), which collects anonymized usage data through cookies: pages visited, approximate location, device and browser type, and how you arrived at our site. This data does not identify you personally.
• Technical logs - our hosting provider records standard server logs (IP address, request time, user agent) for security and reliability.

03How We Use Your Information

We use personal information for clearly defined purposes only:

• Responding to your inquiry - preparing quotations, arranging samples, answering questions
• Performing contracts - order processing, shipping and export documentation, invoicing
• Legal and compliance duties - know-your-customer (KYC) checks, sanctions and export-control screening required in the minerals trade
• Improving the website - aggregate analytics tell us which guides and pages are useful
• Sending updates you asked for - the market briefing newsletter, only if you subscribed, with one-click unsubscribe

04Legal Bases for Processing

Where the EU GDPR applies, we rely on: performance of a contract or pre-contractual steps (quotes, samples, orders); legitimate interests (responding to business inquiries, site security, analytics); legal obligation (trade-compliance screening, record keeping); and consent (newsletter subscriptions, which you can withdraw at any time).

05Where Your Data Is Stored

Form submissions are stored securely in our database hosted by Supabase, and are accessible only to CriticalOre staff. The website is served by Vercel over its global content network. Form notifications are also delivered to our company mailbox. All providers process data on our behalf under their own security and privacy commitments.

Because our operations span Hong Kong, Southeast Asia and Europe, your data may be transferred internationally. We use providers with recognized safeguards (standard contractual clauses or equivalent) for such transfers.

06How Long We Keep It

Inquiry data is kept while we correspond with you and for a reasonable period after, so we can pick up the conversation when you return. Commercial and trade records connected to actual transactions are retained for as long as applicable trade, customs and tax law requires (typically 7 years). Newsletter data is kept until you unsubscribe. Analytics data is retained per Google Analytics' standard settings.

07Sharing With Third Parties

We do not sell, rent or trade your personal information. We share it only with:

• Service providers necessary to perform our services - logistics partners, independent laboratories, surveyors and banks handling your transaction
• Our hosting and infrastructure providers (Supabase, Vercel, Google Analytics) as processors
• Authorities, where required by law, regulation or export-control obligations

08Cookies

We use analytics cookies to measure site usage. You can block cookies in your browser settings or use Google's opt-out tools; the site works fully without them. Full details, including the exact cookies set, are in our Cookie Policy at /cookie-policy.

09Your Rights

You may request a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it at any time. Email info@criticalore.com and we will respond within a reasonable period - normally a few business days.

EU residents have additional rights under the GDPR - access, rectification, erasure, restriction, portability, objection - and the right to lodge a complaint with a supervisory authority. Hong Kong residents have corresponding rights under the Personal Data (Privacy) Ordinance (PDPO), including access and correction rights and the right to complain to the Privacy Commissioner for Personal Data.

10Changes to This Policy

We may update this policy from time to time as our services or the law evolve. The date at the top reflects the latest revision; material changes will be highlighted on this page.