Who we are
Flaming Field ("we", "us") is a sourcing and product-development consultancy based in Hong Kong. We are the data controller for the personal data described below.
Contact: tonyma@flamingfield.com · Flat B, 39/F, Block 6, La Cite Noble, Tseung Kwan O, N.T., Hong Kong.
What we collect and why
| What | Why | Lawful basis |
|---|---|---|
| Your email address (when you download the 10 Landmines guide, subscribe to the weekly memo, or download a tool) | To send you what you asked for and the occasional related guide | Consent (you submitted the form). You can withdraw any time |
| Your name, company, job title (when you email us or book a call) | To reply to you and to run the engagement | Legitimate interests / contract |
| Business contact details of companies we may work with | To approach relevant business contacts about our services | Legitimate interests, assessed and documented |
| Order details from purchases (what you bought, amount, Stripe reference) | To deliver the product, run refunds, and keep accounting records | Contract / legal obligation |
| Basic visit data from our hosting provider | To keep the site working and secure | Legitimate interests |
We do not collect special category data, we do not run automated decision-making or profiling, and we do not sell your data.
Where we got your details
If we contact you at work, we found your details through your company website, a public company register, public shipping records, or public news coverage. We record the source and the date. If you would rather we did not contact you, reply once and we will stop and add you to our do-not-contact list permanently.
Who we share it with
Only service providers that help us run this site, our email, and our payments, acting on our instructions:
| Provider | Role | What they see |
|---|---|---|
| MailerLite | Sends our emails, manages the list, handles unsubscribe | Email address, subscription metadata |
| Stripe | Processes payments and refunds on their own hosted checkout | Payment details (we never see your full card number) |
| Google (Workspace) | Receives and stores our email | Your email correspondence |
| Cloudflare | Hosts and serves the website | Form submissions in transit, basic visit data |
We do not sell or rent your data. We share it only where the law requires it.
International transfers
Some providers store data outside Hong Kong and outside the UK/EEA. Where personal data leaves the UK or EEA, we rely on the provider's approved transfer terms (such as standard contractual clauses or an adequacy decision), and we use providers whose own transfer terms cover it.
How long we keep it
| Data | Retention |
|---|---|
| Newsletter subscribers | While subscribed, then deleted 12 months after your last engagement |
| Prospect contacts who never replied | 12 months from first contact, then deleted |
| Active client and project records | Duration of the engagement + 12 months (longer where tax or contract law requires) |
| Do-not-contact list | Kept permanently, so we can honour your request |
| Suppression records | Kept permanently, for the same reason |
Your rights
You can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or stop using it for marketing. You can object to marketing at any time and we will stop, with no conditions and no need to justify it. Where we rely on consent, you can withdraw it at any time. Email tonyma@flamingfield.com and we will respond within 30 days (we aim for 48 hours for marketing objections).
If you are in the UK or EEA and you are unhappy with how we handled it, you can complain to your local supervisory authority (UK: ICO; EU: your national authority).
Cookies
This site sets no cookies other than those strictly necessary to serve it. Payments run on Stripe's own hosted checkout, and our newsletter forms run on MailerLite pages; those providers may set cookies on their own pages under their own terms.
Questions about any of this? Email tonyma@flamingfield.com. One human reads it: Tony.