Your privacy, our priority

We only collect personal data that is necessary for the purposes set out in this policy. We collect data through the forms on our website, including our contact form, lead capture forms, ROI calculator, and resource downloads.

• Identity and contact details: full name, email address, phone number
• Business information: company name, company size, industry, job title
• Project details: project type, description, timeline, budget range, and current challenges
• Communications: the content of messages and enquiries you send us
• Technical data: IP address, browser type, and usage data collected automatically when you visit our site

We collect your personal data for the following purposes, and only use it for those purposes or a directly related purpose, unless you consent otherwise or the law requires:

• Responding to your enquiries and providing information about our services
• Assessing your business needs and preparing proposals or quotations
• Delivering requested resources, such as guides and assessment tools
• Communicating with you about projects, services, and relevant updates
• Improving our website, products, and services through analytics
• Complying with our legal and regulatory obligations

We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Lead and enquiry data is generally retained for up to 24 months after our last interaction with you. You may request earlier deletion of your data at any time (see Your Rights below).

We implement appropriate technical and organisational safeguards to protect your personal data against unauthorised access, disclosure, alteration, or loss. These measures include:

• Single-tenant architecture with isolated, dedicated database instances per client
• Encryption of data in transit (TLS) and at rest
• Role-based access control and authentication for internal systems
• Audit logging of system actions and access
• Regular security reviews of our infrastructure and practices

We do not sell, rent, or trade your personal data. We only share your data in the following limited circumstances:

• With our service providers and processors who help us operate our business (e.g. hosting, analytics), under contractual obligations of confidentiality and security
• When required by law, court order, or regulatory authority in Hong Kong
• In connection with a merger, acquisition, or asset sale, subject to the protections of this policy

Your personal data is primarily stored and processed in Hong Kong. Where data is transferred outside of Hong Kong, we take steps to ensure it is protected to a standard comparable to the PDPO, and we only transfer data to jurisdictions that provide adequate protection or under appropriate safeguards.

Our website uses cookies and similar technologies to operate the site and understand how it is used. You can control cookies through your browser settings. Disabling cookies may affect some functionality of the site.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated version on this page and revise the last updated date. We encourage you to review this policy periodically.