Privacy Policy
Last updated: 29 October 2026.
VariMake Limited (Hong Kong CR 80819625) operates Sorcgard at sorcgard.com. In this policy, “we” means VariMake Limited. We are the controller for personal data you send us when you order a report or ask a question about an order.
This policy covers the order form, email you send us about a report, and the payment confirmation we receive after you pay. The sample report on the homepage does not ask for your email. The free USCC format checker runs in your browser: what you type into it is not sent to us and is not stored. This policy does not cover the official registry websites we link to.
What we collect
The order form has three required entries and two optional ones. We ask which stage you are at (still comparing suppliers, about to pay, or already paid), where the supplier is registered (Mainland China, Hong Kong, or not sure), and the address the supplier claims — from their invoice, storefront or website. Optionally, add a company name, USCC or CR number and a supplier link. We also ask for your email so the free scope check can reach you. We do not ask you to create an account.
When you pay, the payment provider collects the card payment. We receive a confirmation that the fee was paid and the amount of that fee. Do not send a card number by email.
The finished report quotes official public registers. A quote can include the legal representative’s name, because that name is printed on the public register. Your email address is personal data you chose to send us. This policy does not say that an order file is free of personal data.
Why we use it
We use the company name or USCC to produce the report you ordered. We use your email to deliver the PDF, to answer the one follow-up question included with the $129 report, and to process a refund if you request one under the terms. We use the optional note to see which part of the file to open first. We may keep order materials and verification notes for quality control and for handling a dispute about that order.
We do not put your email on a newsletter list. We do not sell your email, your order, or the report. We do not send the supplier your name, your email, or the fact that you placed an order.
If site analytics is switched on, we use it to see which pages are opened. Analytics is not an input to the report. A page view does not change what we write about a supplier.
How long we keep it
We may keep order-related materials and verification notes for up to 180 days. You may ask us to delete them sooner. We will do that unless an active dispute about the order, or a legal duty, requires us to keep them. A payment record may need to be kept for a longer accounting period than 180 days. The 180-day period is the period for the working file, not a promise about tax invoices.
The company you asked us to check
We never contact the company you are checking. Your due diligence stays private. The report is prepared for you. It is not copied to the supplier.
What you should not send
Send the company name or USCC, and the deal documents you want compared: a proforma, a storefront link, or the beneficiary name on the payment. Do not send a passport, a bank login, or a customer list. We do not need them to read the public registers.
International transfers
You send us the supplier identifiers and your email so that we can deliver a report you ordered. That submission is initiated by you. On the reading recorded in our pre-sale checklist, EDPB Guidelines 05/2021, a buyer-initiated submission of this kind is not treated as a restricted transfer that requires Standard Contractual Clauses.
We do not claim that personal data never sits on rented hosting or email. The point above is only about the order you send.
Your requests
You may ask what personal data we hold about you, ask us to correct it, ask us to delete it subject to the retention rule above, and object to a use that is not needed to deliver or dispute the report you bought. Send the request to the contact published in the footer once that mailbox is open. Until the mailbox is open, send it through the order form and mark the note as a privacy request.
Security
Access to order files is limited to the people producing and checking the report. We do not take card numbers by email. This section does not say that a file cannot be lost or misused.
Changes
When this policy changes, we change the date at the top. The text on this page at the time you place a new order is the text that applies to that order.
Controller: VariMake Limited, Hong Kong CR 80819625. The report is signed by the researcher.