Privacy Policy

Introduction

Kinetic Advisory is committed to protecting the privacy and security of personal information entrusted to us by clients and website visitors. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with Hong Kong's Personal Data Privacy Ordinance and international best practices.

By using our website or engaging our consulting services, you consent to the practices described in this policy. We encourage you to read this document carefully to understand how we handle your information.

Information We Collect

Personal Information Provided Directly

When you contact us or engage our services, we may collect: your name, email address, phone number, business name and title, mailing address, and any information you choose to include in messages or forms you submit. This information is provided voluntarily when you request consultations, submit inquiries, or engage our professional services.

Information Collected Automatically

When you visit our website, we may automatically collect certain technical information including: IP address, browser type and version, operating system, pages visited and time spent on pages, referring website addresses, and general location data derived from IP addresses. This information helps us understand how visitors use our website and improve user experience.

Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance functionality and analyze usage patterns. You can control cookie preferences through your browser settings or our Cookie Policy page. Please see our separate Cookie Policy for detailed information about the types of cookies we use and how to manage them.

How We Use Your Information

We use collected information for the following purposes:

Legal Basis for Processing

We process personal data based on the following legal grounds:

Consent: You have given clear consent for us to process your personal data for specific purposes.

Contract: Processing is necessary for performing a contract with you or taking steps at your request before entering into a contract.

Legitimate Interests: Processing is necessary for our legitimate business interests, such as improving our services, preventing fraud, or ensuring network security.

Legal Obligation: Processing is necessary to comply with legal or regulatory requirements.

Data Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties. We may share information in the following limited circumstances:

Service Providers: We may engage trusted third-party service providers to support our business operations, such as web hosting, analytics, or payment processing. These providers are contractually obligated to protect your information and use it only for purposes we specify.

Professional Advisors: We may share information with lawyers, accountants, auditors, or other professional advisors when necessary for business purposes or legal compliance.

Legal Requirements: We may disclose information when required by law, court order, or government regulation, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

Business Transfers: In the event of a merger, acquisition, or sale of assets, personal information may be transferred as part of the transaction, subject to continued protection under this policy.

Data Security

We implement appropriate technical and organizational measures to protect personal information against unauthorized access, alteration, disclosure, or destruction. Our security practices include:

Encryption of data in transit and at rest using industry-standard protocols

Access controls limiting data access to authorized personnel only

Regular security assessments and updates to our systems

Secure storage facilities with restricted physical and electronic access

Employee training on data protection and confidentiality obligations

While we strive to protect your personal information, no method of transmission or storage is completely secure. We cannot guarantee absolute security but remain committed to maintaining robust protective measures.

Data Retention

We retain personal information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law. Our retention periods vary based on the type of information and purpose:

Client Information: We retain client data for seven years following completion of consulting engagements to comply with business record-keeping requirements and provide ongoing support.

Inquiry Information: Contact form submissions and general inquiries are retained for two years to facilitate communication and track interactions.

Website Analytics: Anonymous usage data is typically retained for 26 months to analyze trends and improve website functionality.

When personal information is no longer needed, we securely delete or anonymize it in accordance with our data disposal procedures.

Your Rights

Under Hong Kong's Personal Data Privacy Ordinance, you have certain rights regarding your personal information:

Right to Access: You can request copies of personal data we hold about you and information about how we process it.

Right to Correction: You can request correction of inaccurate or incomplete personal information.

Right to Erasure: You can request deletion of your personal data in certain circumstances, subject to legal retention requirements.

Right to Object: You can object to processing of your personal data for certain purposes, including direct marketing.

Right to Data Portability: You can request transfer of your personal data to another organization in certain circumstances.

Right to Withdraw Consent: Where processing is based on consent, you can withdraw that consent at any time.

To exercise any of these rights, please contact us at privacy@{{DOMAIN]}}. We will respond to your request within 40 days as required by Hong Kong law.

Children's Privacy

Our website and services are directed to business professionals and organizations. We do not knowingly collect personal information from individuals under 18 years of age. If we become aware that we have inadvertently collected information from someone under 18, we will delete it promptly.

International Data Transfers

Our operations are based in Hong Kong. If you are located outside Hong Kong and provide information to us, please be aware that we may transfer and process your data in Hong Kong. By using our services, you consent to such transfers. We ensure appropriate safeguards are in place when transferring data internationally.

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party websites you visit.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or business operations. We will post the updated policy on this page with a revised "Last Updated" date. For material changes, we may provide additional notice through email or website notification.

We encourage you to review this policy regularly to stay informed about how we protect your information.

Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

If you believe we have not adequately addressed your privacy concerns, you have the right to lodge a complaint with the Office of the Privacy Commissioner for Personal Data in Hong Kong.