Privacy Policy
Last updated: May 2025
Our Privacy Promise
We believe email privacy is a fundamental right. Our business is simple: we provide a secure email service that you pay for. We don't sell your data, we don't scan your emails for advertising, and thanks to our zero-knowledge design, we couldn't read your emails even if we wanted to. This policy explains the technical and legal details of how we protect your information.
1. Introduction
PDG Mail ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you use our email services. As a Hong Kong-based company, we operate under Hong Kong's robust privacy laws, which provide strong protection against foreign surveillance and data requests.
2. Company Information
PDG Mail is operated by PDG Global Limited, a company registered in Hong Kong.
Address:
PDG Global Limited
Level 23
99 Hennessy Road
Wanchai, Hong Kong
Privacy Contact:
Email: [email protected]
3. Jurisdiction and Legal Protection
Our Hong Kong email hosting is a critical part of your privacy. As a Hong Kong-based company, we are not subject to the broad surveillance laws and data sharing agreements found in other parts of the world, such as:
- The Five, Nine, and Fourteen Eyes intelligence sharing pacts
- The EU-US Privacy Shield or similar transatlantic data agreements
- The US CLOUD Act, which can compel US companies to hand over data stored abroad
Hong Kong's legal framework provides strong data privacy protections, requiring any government request for data to go through its independent court system. We will only comply with data requests that are properly authorized by a Hong Kong court.
Crucially, even in cases where we are legally compelled to provide data, our zero-knowledge architecture and end-to-end encryption mean we can only supply encrypted data that we cannot decrypt. The content of your emails remains protected.
4. Data Collection and Use
We collect and process only the information necessary to provide our email services. This includes:
- Account information (email address, name)
- Billing information (for paid services)
- Technical support information
- Service usage data
5. Data Sharing and Disclosure
We maintain a strict zero-knowledge architecture, which means:
- We cannot access, read, or decrypt your email content. Period.
- Your private keys remain exclusively in your control and are never sent to our servers.
- All your email data is protected with end-to-end encryption.
The only data we store and can access is your account information, which is the minimal information needed to operate your private email service. This includes:
- Your chosen email address and any aliases you create.
- Billing information for paid services
- Account settings and preferences
This account information is only accessible to:
- Our employees for technical support purposes
- Our billing department for payment processing
- Authorized personnel for system maintenance
The only third party we share any customer data with is our payment processor, and only the minimum information required by law to process payments. This includes:
- Card information (processed directly by the payment processor)
- Billing address (for payment verification)
- Transaction amounts and dates
All employees with access to customer data are bound by strict confidentiality agreements and are trained in data protection practices. We do not sell or share your personal data with any other third parties.
6. Data Security
We implement robust technical measures to protect the integrity of our secure email hosting environment and the minimal account data we hold:
- End-to-End Encryption for all email communications using modern, audited cryptographic libraries.
- Data-at-rest encryption on all our servers, providing an additional layer of physical security.
- Secure internal network with mutual TLS authentication to protect against internal threats.
- Regular third-party security audits and penetration testing.
7. Your Rights
You have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request deletion of your data
- Object to processing of your data
- Request data portability
8. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at:
Email: [email protected]
Address: Level 23, 99 Hennessy Road, Wanchai, Hong Kong