Last updated: 19/02/2026
IPSEM Squared Limited is based in Hong Kong and works across Europe and Asia. We provide:
This policy explains what personal information we use, why we use it, and your rights.
If you are in the EU or UK, you can contact our representatives:
DataRep
Address:
77 Camden Street Lower
Dublin D02 XE80
Ireland
Illustre Consulting Limited
Address:
206 Upper Richmond Road West
East Sheen
London
SW14 8AH
Email: hello@illustre.co
Sometimes we decide how personal data is used (e.g., sponsorship discussions, marketing, website enquiries). In those cases, we are the controller.
Sometimes we handle personal data only on a client’s instructions (e.g., during a BPI project). In those cases, we are a processor and the client is the controller.
We may use:
We may hold personal information relating to individuals located in the EU, UK, Australia, New Zealand, the United States and Canada in connection with delivering our services.
We don’t use automated profiling or automated decision-making.
Depending on the project, the BPI platform might be:
Our BPI technology platform is provided by:
QLBS.COM LIMITED
253 Queen Street
Auckland 1010
New Zealand
The platform is hosted using Microsoft Azure cloud services.
These providers operate under contractual data protection and security commitments.
We use personal data to:
To run our business, we use trusted third-party platforms, including:
These providers process personal data on our behalf under contractual safeguards.
Because we operate internationally, some data may be processed outside the EU or UK (for example, in the United States or Israel). Where required, we use appropriate legal safeguards to protect that data.
We choose reputable service providers and require them to meet appropriate security and confidentiality standards.
We don’t sell personal data. We may share it with trusted service providers (like hosting or collaboration tools) and professional advisers, under contracts and confidentiality.
To operate our business we use Microsoft 365 (including Outlook, SharePoint and Teams) for email and document storage. Our Microsoft 365 environment is supported by:
SecuHostIT Solutions & Media Services SDN. BHD. (Malaysia)
They may access systems for administration and support under confidentiality obligations.
Microsoft services may involve processing in multiple countries, including the United States and other locations where Microsoft operates.
We also use trusted service providers, including:
Because we operate internationally, personal information may be processed outside your country (including in Hong Kong, New Zealand, Australia, Israel, the United States or Canada). Where required by law, we use recognised safeguards to protect transferred data.
We keep personal data only as long as needed for the work we’re doing, plus any legal or contractual requirements.
We keep personal data for seven (7) years, or the length of contracted services plus seven (7) years, whichever is longer.
If EU/UK law applies, you may have rights to access, correct, delete, or object to certain processing.
Contact us at: info@ipsemsquared.com
We use cookies. See our Cookie Notice here.
IPSEM Squared Limited
Address:
2401, Dominion Centre
43-59 Queen's Road East
Wan Chai, Hong Kong
999077
Email: info@ipsemsquared.com
IPSEM Squared Limited (“IPSEM Squared”, “we”, “us”, “our”)
Last updated: 19/02/2026
We are incorporated and based in Hong Kong and operate extensively across Europe and Asia. This Privacy Policy explains how we collect, use, disclose, store, and protect personal data in connection with our:
Where applicable, we comply with:
If you are located in the EU or UK, you may contact our appointed representatives:
DataRep
Address:
77 Camden Street Lower
Dublin D02 XE80
Ireland
Illustre Consulting Limited
Address:
206 Upper Richmond Road West
East Sheen
London
SW14 8AH
Email: hello@illustre.co
Depending on the service and context, IPSEM Squared may act as:
Where we determine the purposes and means of processing, including:
Where we process personal data solely on behalf of a client under a written agreement (including a Data Processing Addendum), including:
Where we act as Processor, the client is the Controller and we process personal data only on documented instructions.
We may process (as applicable):
We do not intentionally process special category data (sensitive data) unless explicitly required, minimised, and contractually agreed with appropriate safeguards.
We may process personal data relating to individuals located in the European Union, United Kingdom, Australia, New Zealand, the United States and Canada, in connection with the provision of our services.
Where individuals submit information via website forms powered by HubSpot, we may collect and process submitted contact details, enquiry information, and related interaction data for the purposes described in Section 6.
The BPI platform may be:
Where the BPI platform is delivered via our technology partner, the platform is provided by:
QLBS.COM LIMITED
253 Queen Street
Auckland 1010
New Zealand
QLBS.COM LIMITED hosts the platform using Microsoft Azure cloud infrastructure.
Where applicable, QLBS.COM LIMITED and Microsoft Azure act as sub-processors and are subject to contractual data protection and security obligations.
Security and hosting responsibilities are allocated in accordance with contractual arrangements and the applicable hosting model.
Security responsibilities may vary depending on hosting model and contractual allocation:
Where EU/UK GDPR applies, we process personal data only where we have a lawful basis, including:
Purposes: service improvement, operational analysis, reporting, governance/process alignment, platform support.
Lawful basis: performance of a contract; legitimate interests; legal obligation (where applicable).
Purposes: introductions, commercial evaluation, negotiation support, relationship management.
Lawful basis: performance of a contract; legitimate interests.
Purposes: responding to enquiries, sending relevant updates (where permitted).
Lawful basis: legitimate interests and/or consent where required; you may opt out at any time.
Purposes: regulatory compliance, dispute management, protection of rights.
Lawful basis: legal obligation; legitimate interests.
We do not conduct automated decision-making or profiling of individuals for the purposes of Article 22 EU/UK GDPR.
We do not sell personal data. We may disclose personal data to:
We use Microsoft 365 (including Outlook, SharePoint, Teams and related services) for email, document management, communication and collaboration.
Microsoft 365 services are provided through Microsoft Corporation and/or relevant regional Microsoft entities.
Administrative and support services for our Microsoft 365 environment are provided by:
SecuHost IT Solutions & Media Services SDN. BHD. Kuala Lumpur, Malaysia
SecuHost acts as an IT services provider and may have access to our Microsoft 365 environment strictly for administration, support and maintenance purposes under contractual confidentiality obligations.
We also currently use the following third-party service providers to support our other operations:
These providers process personal data on our behalf under contractual data protection obligations.
As a Hong Kong-based organisation operating internationally, personal data may be transferred to and processed in multiple jurisdictions, including:
Microsoft may process personal data in multiple global locations in accordance with its own data protection commitments and applicable safeguards.
HubSpot, Inc. is headquartered in the United States and may process personal data in the United States and other jurisdictions. Monday.com Ltd. is headquartered in Israel and may process personal data in Israel and other jurisdictions. Where required under EU or UK data protection law, we rely on appropriate safeguards, including Standard Contractual Clauses and equivalent mechanisms, for international transfers.
Where required under EU or UK data protection law, we implement appropriate safeguards for international transfers, including:
We maintain appropriate technical and organisational measures such as:
Our Microsoft 365 environment is administered with the assistance of an external IT services provider under contractual confidentiality obligations. Access is limited to authorised personnel and subject to role-based permissions.
We conduct appropriate due diligence on third-party service providers and require contractual commitments regarding data protection, confidentiality, and security measures.
We retain personal data only for as long as necessary for the purposes described, including contractual, legal, and legitimate business requirements. Indicative retention periods: seven (7) years, or the length of contracted services plus seven (7) years, whichever is longer.
Where the use of third-party technology platforms or cross-border hosting arrangements may give rise to elevated data protection risk, we will assess whether a Data Protection Impact Assessment (DPIA) is required under applicable law.
Subject to applicable law, you may have rights to:
To exercise rights, contact: info@ipsemsquared.com
EU individuals may also contact our EU Representative. UK individuals may also contact our UK Representative.
We use cookies. See our Cookie Notice here.
IPSEM Squared Limited
Address:
2401, Dominion Centre
43-59 Queen's Road East
Wan Chai, Hong Kong
999077
Email: info@ipsemsquared.com