Privacy Policy
Last updated: 11 June 2026 · The English version of this policy is authoritative; a Chinese translation will follow.
1. Who we are
Guide to Uni (guidetouni.com) is operated by Umami Labs Ltd, a company incorporated in Hong Kong. For the personal data described in this policy, Umami Labs Ltd is the data controller — the party that decides why and how your data is used. For anything privacy-related, write to [email protected].
2. What we collect
- Intake quiz answers — your study goals, current education stage, grade and budget bands, target timeline, and contact details: name, email address, and an optional WeChat, WhatsApp, or LINE ID if you choose to give one.
- An optional CV — only if you choose to upload one. You can complete the quiz without it.
- Account email — if you create an account to view a purchased guide, your sign-in email is handled by Clerk, our authentication provider.
- Payment confirmation — payments are made through Airwallex payment links arranged with our team. Airwallex processes your card or bank details; we never see or store your full payment card numbers. We receive only confirmation that a payment was made, and basic billing details such as name and amount.
We do not run advertising trackers, analytics scripts, or marketing platforms on this site.
3. Why we use it, and on what legal basis
We use your data for one purpose: to prepare your personalised university decision guide and to communicate with you about it. Where the GDPR applies (for users in the EU or UK), our legal bases are:
- Performance of a contract — for clients: we need your intake answers and contact details to deliver the guide you purchased.
- Legitimate interest, or your consent — for prospective clients who complete the intake quiz: we use your answers to assess fit and respond to your enquiry.
- Consent — for the optional CV upload. You can withdraw that consent at any time by asking us to delete it.
4. Who processes data for us
We use a small set of service providers, each touching only what it needs:
- DigitalOcean — hosts our server (Singapore region), where intake answers and uploaded CVs are stored.
- Cloudflare — provides CDN and proxy services for the website, handling traffic data in transit.
- Clerk — provides account sign-in, processing your account email and session cookies.
- Resend — sends transactional emails (e.g. delivery notices), processing your email address.
- Airwallex — processes payments. Your card details go to Airwallex directly, never to us.
- Google Drive — used internally to store working documents related to your guide, accessible only to our team.
That is the whole list. We never sell your data, and we never share it with universities, education agents, or advertisers. Our business runs on a zero-commission model: we are paid only by you, so we have no one else to share your information with.
5. International transfers
We are a Hong Kong company, our servers are in Singapore, and some of our providers (Clerk, Resend, Cloudflare, Google) are based in the United States. This means your data may be processed outside your country of residence. Where the law requires safeguards for such transfers — for example, for users in the EU, UK, or mainland China — we rely on contractual protections with our providers, including standard contractual clauses where required, and we limit each provider to the minimum data it needs.
6. How long we keep it
- If you don't become a client — your intake answers and any uploaded CV are deleted within 12 months.
- If you do become a client — we keep your data for the duration of your guide's access period (one year), plus 12 months.
- Backups — follow the same schedule.
7. Your rights
Your rights depend on where you live, but the way to use them is the same everywhere: email [email protected] from the address you gave us, and we will respond within 14 days.
If you're in the EU or UK (GDPR)
You can ask to access, correct, or erase your data; receive a portable copy; object to processing based on legitimate interest; and withdraw any consent you have given. You also have the right to complain to your local supervisory authority.
If you're in Hong Kong (PDPO)
You can request access to and correction of your personal data. We do not use your data for direct marketing, but if that ever changed you would have the right to opt out, and we would ask first.
If you're in mainland China (PIPL)
You can ask to access and copy your personal information, request correction or deletion, and withdraw consent. Because we process your data outside mainland China (in Hong Kong, Singapore, and with overseas providers), we ask for your consent to this cross-border processing when you submit the intake quiz.
8. Cookies and similar technologies
The only cookies on this site are strictly-necessary session cookies set by Clerk so that sign-in works. There are no advertising or analytics cookies, and nothing follows you around the web after you leave.
9. Children
The service is intended for users aged 16 and over. If you are younger, please use the service through a parent or guardian — in practice, most of our younger students' guides are commissioned by their parents anyway.
10. Changes to this policy
If we change this policy, we will post the updated version on this page with a new "Last updated" date. For significant changes affecting existing clients, we will also email you.
Questions? [email protected]