Privacy Policy

Last updated: February 2025

1. Who we are

Adventurer Limited ("we", "us", "our") operates the MedStrato platform and related websites. Our registered address is Unit 2705, 27th Floor, China Resources Building, No. 26 Harbour Road, Wan Chai, Hong Kong. For privacy-related enquiries you may contact us at founders@adventurer.fun.

2. What this policy covers

This Privacy Policy describes how we collect, use, store, and disclose personal data when you use our website (including medstrato.com), contact us, or use our MedStrato platform and services. It applies to visitors, contacts, and customers. We may update this policy from time to time; the revised version will be posted on this page with an updated "Last updated" date. If you use MedStrato under a contract with your organisation, that contract may contain additional data processing terms.

3. Data we collect

We may collect:

  • Contact and account information — name, email address, company name, job title, and similar details you provide when signing up, contacting us, or using our services.
  • Usage and technical data — how you use our website and platform (e.g. pages visited, actions taken), IP address, browser type, device information, and similar technical data.
  • Communications — content of emails, contact form submissions, and other communications you send to us.
  • KOL and engagement data — where you use MedStrato to manage expert engagements, we process the data you input (e.g. expert details, engagement records) in accordance with our agreement with you and applicable law.

4. How we use your data

We use the data we collect to:

  • Provide, operate, and improve the MedStrato platform and our website.
  • Respond to your enquiries and support requests.
  • Send you service-related and, where you have agreed, marketing communications.
  • Comply with legal and regulatory obligations and protect our rights.
  • Analyse usage to improve our products and user experience (including in aggregated or anonymised form).

5. Legal basis (EEA/UK)

Where EU/EEA or UK data protection law applies, we rely on: (a) performance of a contract, (b) legitimate interests (e.g. providing the service, improving our products, security), (c) consent where we ask for it explicitly, and (d) legal obligation where required.

6. Sharing and disclosure

We may share personal data with: (i) service providers who process data on our behalf (e.g. hosting, analytics, email) under strict obligations; (ii) professional advisers where necessary; (iii) regulators or law enforcement when required by law or to protect rights and safety. We do not sell your personal data. We may share data within our corporate group and in connection with a merger, sale, or restructuring, subject to the same privacy standards.

7. International transfers

Your data may be processed in Hong Kong and other jurisdictions where we or our service providers operate. Where we transfer data from the EEA, UK, or other restricted regions, we use appropriate safeguards (e.g. standard contractual clauses or other approved mechanisms) as required by applicable law.

8. Retention

We retain personal data for as long as we deem reasonably necessary to fulfil the purposes described in this policy, comply with legal or regulatory obligations, resolve disputes, and enforce our agreements. Retention periods may vary by type of data and context. Account and engagement data are typically retained for the duration of the relationship and for a period thereafter as we consider appropriate; technical and usage data may be retained in aggregated or anonymised form for longer. We do not guarantee any minimum or maximum retention period.

9. Your rights

Depending on where you are, you may have the right to:

  • Access and receive a copy of your personal data.
  • Correct or update inaccurate data.
  • Request erasure or restriction of processing in certain cases.
  • Object to processing based on legitimate interests.
  • Data portability (where applicable).
  • Withdraw consent at any time, where processing was based on consent.
  • Lodge a complaint with a supervisory authority (e.g. in your country or region).

To exercise these rights, contact us at founders@adventurer.fun. We will respond within a reasonable period as required by applicable law.

10. Security

We use commercially reasonable technical and organisational measures intended to protect your personal data against unauthorised access, alteration, disclosure, or destruction. We do not guarantee that our systems or your data will be secure at all times. No method of transmission or storage over the internet is completely secure. You are responsible for using strong credentials and keeping them confidential.

11. Cookies and similar technologies

Our website may use cookies and similar technologies to provide functionality, analyse usage, and improve experience. You can control cookies through your browser settings. Essential cookies are necessary for the site to function; other cookies may be optional where we offer choices.

12. Changes

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the "Last updated" date. For material changes we may provide additional notice (e.g. by email or a notice in the product). Continued use of our services after the effective date constitutes acceptance of the updated policy where permitted by law.

13. Contact

For questions about this Privacy Policy or our data practices, contact Adventurer Limited at founders@adventurer.fun or at Unit 2705, 27th Floor, China Resources Building, No. 26 Harbour Road, Wan Chai, Hong Kong.