VORVN LIMITED ("VORVN", "we", "us", "our") is a private holding company incorporated in Hong Kong SAR (Business Registration: VORVN LIMITED, RM4 16/F, Ho King Commercial Centre, 2–16 Fa Yuen Street, Mongkok, Kowloon, Hong Kong). We operate the website vorvn.com and own and operate the brands listed on our portfolio page through our affiliated incubator studio PT. Aduh (Lagi) Studio (Bali, Indonesia). VORVN LIMITED is the data controller for personal data processed via this website.
We collect the minimum data needed to operate this website and respond to enquiries.
Full name
Email address
Company / project name (optional)
Topic of enquiry
The content of your message
IP address (used for rate-limiting our contact form, never stored long-term)
Standard server log data: user-agent string, request timestamp, requested path, HTTP status code (handled by our hosting provider Netlify)
Aggregated, anonymous indexing data via Google Search Console (no personal identifiers)
See section 5. By default, this website sets no non-essential cookies. Essential cookies (e.g. for theme preference) are stored only in your browser's local storage and never transmitted to us.
To respond to enquiries you submit through the contact form
To prevent abuse of the contact form (rate-limiting, anti-spam honeypot)
To monitor site availability and security via standard server logs
To measure aggregate site visibility in search engines (Google Search Console)
To comply with our legal obligations
We do not sell, rent, or trade your personal data. We do not use your data for automated decision-making or profiling. We do not send marketing emails.
Contact form submissions : legitimate interest, responding to a person who has voluntarily contacted us (Art. 6(1)(f) GDPR). You may withdraw at any time by asking us to delete your data.
Server logs and rate-limiting : legitimate interest, securing the service (Art. 6(1)(f) GDPR).
Any future analytics or advertising cookies (e.g. Meta Pixel): consent (Art. 6(1)(a) GDPR), collected via our cookie banner before any tracker loads.
This website is intentionally low-tracking. As of the date above, we use:
No analytics cookies by default.
Local storage only for UI preferences (selected language, theme). This data never leaves your browser.
Google Search Console : a one-time meta-tag verification only, no cookies, no JavaScript runtime.
Meta Pixel (Facebook/Instagram) : if and when enabled, we will load it only after you grant explicit consent through the cookie banner. Until you consent, no Meta scripts run and no data is sent to Meta. You can withdraw consent at any time by clearing the consent cookie or via the "Cookie preferences" link in the footer.
Most browsers let you refuse or delete cookies in their settings. Doing so will not affect access to this site.
We share personal data only with the processors strictly required to operate the site:
Netlify, Inc. (USA), website hosting, contact-form serverless function execution. Privacy policy .
Google LLC (USA), Gmail (Google Workspace) is used to deliver contact-form submissions to our internal inbox. Privacy policy .
Google Search Console , aggregated, anonymised search-performance data only.
Meta Platforms Ireland Ltd. , only if you consent to the Meta Pixel.
We do not disclose personal data to any other third parties unless required by law, regulator, or court order.
VORVN operates from Hong Kong with infrastructure in the United States (Netlify, Google). For transfers of EU/UK personal data outside the EEA/UK, we rely on the European Commission's Standard Contractual Clauses entered into by our processors, and on the EU-US Data Privacy Framework where applicable. For Indonesian personal data, we rely on the consent of the data subject and on the explicit lawful bases under Law No. 27 of 2022 (UU PDP).
Contact-form messages : retained in our Gmail inbox for up to 24 months from the date of last correspondence, then deleted.
Server logs : retained by Netlify for up to 30 days.
Rate-limit IP cache : held in volatile server memory for 15 minutes maximum.
Personal data is encrypted in transit (HTTPS/TLS 1.2+) and at rest (provider-side encryption by Netlify and Google). The contact form uses an authenticated SMTP connection over TLS. We restrict access to received messages to the founder and operations lead only.
Depending on your jurisdiction, you have the right to:
Access the personal data we hold about you
Rectify inaccurate or incomplete data
Erase your data ("right to be forgotten")
Restrict or object to processing
Data portability , receive your data in a machine-readable format
Withdraw consent at any time, where processing is based on consent
Lodge a complaint with a supervisory authority
To exercise any of these rights, contact us via the form on our contact page . We respond within 30 days (or sooner where required by law). We may need to verify your identity before fulfilling a request.
The data controller is VORVN LIMITED (Hong Kong). We have not appointed an EU representative under Art. 27 GDPR because our processing of EU residents' data is occasional and does not include special categories of data on a large scale. EU/UK residents may lodge a complaint with their local supervisory authority, for example, the Irish Data Protection Commission ( dataprotection.ie ) or the UK Information Commissioner's Office ( ico.org.uk ).
We process personal data in accordance with the six Data Protection Principles under the Personal Data (Privacy) Ordinance (Cap. 486). You may make a data access or correction request under sections 18 and 22 of the PDPO via our contact form.
California residents have the right to know what personal information we collect, to request deletion, to correct inaccurate information, and to opt out of the "sale" or "sharing" of personal information. VORVN does not sell or share personal information as those terms are defined under the CCPA/CPRA. We do not offer financial incentives for personal information.
Where Indonesian personal data is processed (e.g. operations of our Bali studio), we rely on the consent of the data subject or on legitimate operational necessity as permitted under Article 20. Indonesian data subjects have the rights set out in Articles 5–14 of the UU PDP, exercisable through the same contact channel.
This website is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has submitted personal data through our site, contact us and we will delete it.
We may update this policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Material changes will be highlighted on this page for at least 30 days.
For privacy-related questions or to exercise your rights, please use our contact form and select the topic "Other" . The registered office of the data controller is:
VORVN LIMITED RM4 16/F, Ho King Commercial Centre 2–16 Fa Yuen Street, Mongkok Kowloon, Hong Kong SAR