Privacy

What this website collects

We load Google Analytics 4 only after you choose Allow analytics. It measures page visits, device/browser information, referral origins, service-link and contact clicks, and contact submissions accepted by our email provider. This helps us improve our GEO and social insights services. An accepted submission is not proof of inbox delivery or a qualified lead. We do not send names, email addresses, company names, message text, URL query strings or fragments in our analytics events. Google processes network information, including IP addresses, when receiving requests; this is not anonymous browsing.

We remember your analytics choice in local storage for 180 days. With permission, analytics cookies last up to 180 days and a session-storage value remembers the most recently visited product area. Declining does not load the Google tag or send analytics pings. You can change your choice using Analytics settings in the footer; withdrawing stops future analytics and removes this site's analytics cookies and product-area value. It does not erase data already received by Google. Advertising consent remains denied and Google signals and advertising personalization are disabled in our tag. Fonts and images are hosted on this domain; we do not use session recording.

Google provides the analytics service and may process data outside Hong Kong. Its privacy information is available at policies.google.com/privacy. For questions about analytics records or retention, contact hello@tocanan.com. Consent-based reports exclude visitors who decline or block analytics, so they are not complete visitor or enquiry counts.

Our hosting provider, Cloudflare, processes standard server request logs — IP address, user agent, the page requested — as part of delivering and protecting the site. We do not use those logs to build a profile of you and we do not combine them with anything else.

Cloudflare also provides page-view and performance measurements through its browser beacon. This operates separately from optional Google Analytics and is not controlled by Analytics settings.

Links to other sites, including LinkedIn and any source we cite, are ordinary links. Following one takes you to a site with its own privacy practices, which are not ours.

When you use the contact form

The form asks for your name, email address, company and message so we can reply. If you allow analytics, we also record a separate event when the email provider accepts a submission, without sending any form contents to Google. Email-link clicks are measured separately and do not prove that an email was sent. The form works whether or not you allow analytics.

The form posts to an endpoint on this domain, not to a third-party form service, so your submission does not pass through anyone else's website. From there it is delivered to us as email by Resend, a transactional email provider, which processes it only to deliver the message. The mail arrives at hello@tocanan.com and we reply to the address you gave us.

The form is protected by Cloudflare Turnstile, an automated-abuse check provided by Cloudflare — the same company that already hosts this site. It runs only where the form appears, its result tells us nothing about you beyond whether the submission looks automated, and it is not used for tracking or advertising.

We use what you send only to answer you and to follow up on that enquiry. We do not sell it and we do not add you to a marketing list you did not ask for. It is kept for as long as the conversation or commercial relationship is live, and for 12 months after our last contact with you, on the same basis as email — see below.

When you email us

If you write to hello@tocanan.com or press@tocanan.com we hold your email, your name and whatever you choose to tell us, because we need it to answer you. We use it for that and for related follow-up about your enquiry. We do not sell it, and we do not add you to a marketing list you did not ask for.

We keep enquiry correspondence for as long as the conversation or commercial relationship is live, and for 12 months after our last contact with you. After that it is deleted. Ask us to delete it sooner and we will, unless we are required by law to keep it.

The GEO audit tool

audit.tocanan.ai is a separate application and it does collect information — at minimum the brand and contact details you enter in order to receive a report. It is linked from this site but not covered by this notice. It publishes its own privacy notice at audit.tocanan.ai/privacy, which is the one that applies there.

Data we process for clients

Our services analyse publicly available material — social posts, news coverage, and the answers AI engines give to questions — some of it obtained through third-party data providers under our agreements with them. That work is governed by the contract with each client, not by this notice, which covers visitors to this website.

Your choices

Use Analytics settings in the footer to allow or decline analytics at any time. If you want to know what personal data we hold, or request correction or deletion, write to hello@tocanan.com. We may need information to identify the relevant records; we do not connect anonymous-looking analytics identifiers to your enquiry details.

Under the Personal Data (Privacy) Ordinance you may request access to, and correction of, personal data we hold about you. Send data access or correction requests to hello@tocanan.com. If you are not satisfied with how we handle a request, you may complain to the Office of the Privacy Commissioner for Personal Data, Hong Kong (pcpd.org.hk).

Changes and contact

We update this notice when our collection practices change and show the revision date below. Questions go to hello@tocanan.com.

Who we are

This site is operated by TOCANAN LIMITED (天勤營銷服務有限公司), a company registered in Hong Kong at 11/F–12/F & Roof Floor, 133 Wai Yip Street, Kwun Tong, Kowloon, Hong Kong. TOCANAN LIMITED is the data user in respect of personal data collected through this site, within the meaning of the Personal Data (Privacy) Ordinance (Cap. 486).

We market to Hong Kong and the wider Asia-Pacific region. We do not target visitors in the EU or the UK, and this notice is written to Hong Kong law.