Privacy Policy

1. Data Controller

Mardock Business Consulting is the data controller for the personal data collected through this website and in connection with our consulting services. Our registered address is 22/F, Pacific Place Three, 1 Queen's Road East, Admiralty, Hong Kong.

2. What Personal Data We Collect

We may collect the following categories of personal data:

• Contact enquiries: Name, email address, telephone number, company name, and the content of any message you submit via our contact form.
• Engagement data: Information provided during the course of a consulting engagement, including financial, operational, or organisational information that you share with our consultants.
• Website usage data: Technical information such as IP address, browser type, pages visited, and time spent on pages, collected automatically via cookies and analytics tools where consent has been given.

We do not collect sensitive personal data (as defined under the PDPO) unless it is strictly necessary and you have provided explicit consent.

3. Purposes of Collection and Use

We collect and use personal data for the following purposes:

• To respond to your enquiries and communicate with you about our services.
• To provide, manage, and deliver consulting services that you have engaged us for.
• To maintain records of our engagements for quality assurance and compliance purposes.
• To improve our website and services through anonymised usage analytics, where consent has been provided.
• To meet our legal obligations, including record-keeping requirements under applicable Hong Kong law.

We will not use your personal data for direct marketing without your explicit consent, and we do not sell or rent personal data to third parties.

4. Legal Basis for Processing

We process your personal data on the following bases:

• Performance of a contract: Where processing is necessary to provide services you have requested or are considering engaging us for.
• Legitimate interests: Where we have a legitimate business interest in maintaining records, improving our services, or communicating with enquirers, provided these interests do not override your rights.
• Legal obligation: Where processing is required to comply with applicable laws and regulations in Hong Kong.
• Consent: Where you have given clear consent, such as for analytics cookies.

5. Disclosure of Personal Data

We do not share your personal data with third parties except in the following circumstances:

• Service providers: We may share data with trusted third-party service providers who assist in operating our website or delivering services (e.g., hosting providers, email service providers), under contractual obligations of confidentiality.
• Legal requirements: We may disclose data when required by law, court order, or regulatory authority.
• Business transfers: In the event of a merger, acquisition, or sale of business assets, personal data may be transferred as part of that transaction.

Where personal data is transferred outside Hong Kong, we take steps to ensure adequate protections are in place consistent with the PDPO.

6. Data Retention

We retain personal data for no longer than is necessary for the purposes for which it was collected. Enquiry data is retained for 24 months. Engagement-related data is retained for 7 years in compliance with Hong Kong commercial record-keeping requirements. Website analytics data is retained in aggregate, anonymised form.

When data is no longer needed, it is securely deleted or anonymised.

7. Data Security

We implement reasonable technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These include access controls, encrypted data transmission, and confidentiality agreements with staff and contractors who handle personal data.

No transmission over the internet is entirely secure. While we take data security seriously, we cannot guarantee absolute security and encourage you to contact us promptly if you have any concerns.

8. Your Rights Under the PDPO

Under the Personal Data (Privacy) Ordinance, you have the following rights:

• Right of access: You may request a copy of the personal data we hold about you.
• Right of correction: You may request that inaccurate personal data be corrected.
• Right to object: You may object to certain uses of your personal data, including direct marketing.

To exercise any of these rights, please submit a written request to us using the contact details below. We will respond within 40 days as required by the PDPO. We may charge a reasonable fee for data access requests in accordance with the Ordinance.

9. Cookies

Our website uses cookies to improve functionality and, where consent is given, to collect analytics data. For full details of the cookies we use and how to manage them, please see our Cookie Policy.

10. Children's Privacy

Our website and services are directed at business professionals and are not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The date at the top of this page indicates when it was last updated. We encourage you to review this Policy periodically.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or the personal data we hold about you, please contact us:

Mardock Business Consulting
22/F, Pacific Place Three, 1 Queen's Road East, Admiralty, Hong Kong
+852 2815 4367
info@{{DOMAIN}}

You also have the right to lodge a complaint with the Office of the Privacy Commissioner for Personal Data Hong Kong (www.pcpd.org.hk) if you believe your data protection rights have not been respected.