Privacy Policy

1. Introduction

Conduitpns ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or engage our consulting services.

We operate from Hong Kong and are committed to compliance with the Personal Data (Privacy) Ordinance (Cap. 486) ("PDPO") of the Hong Kong Special Administrative Region. Where applicable, we also observe the principles of the General Data Protection Regulation (GDPR) for data subjects in the European Economic Area.

For questions about this policy, contact us at: [email protected]

2. Information We Collect

2.1 Personal Information

We may collect personal information that you voluntarily provide, including:

• Name and contact details (email address, phone number)
• Company name and job title
• Information provided in enquiry forms or correspondence
• Details shared during consulting engagements

2.2 Automatically Collected Information

When you visit our website, we may automatically collect:

• Device information (browser type, operating system)
• IP address and approximate geographic location
• Pages visited and time spent on site
• Referring website or source

3. How We Use Your Information

We use collected information for the following purposes:

• Responding to enquiries and providing requested services
• Managing client relationships and delivering consulting services
• Sending service-related communications
• Improving our website and service offerings
• Analysing website usage patterns
• Complying with legal obligations

Our legal basis for processing includes: consent you have provided, performance of a contract with you, legitimate business interests, and compliance with legal obligations.

4. Information Sharing and Disclosure

We do not sell your personal information. We may share information with:

• Service providers who assist our operations (hosting, analytics, communication tools)
• Professional advisors (legal, accounting) under confidentiality obligations
• Regulatory authorities when required by law
• Successor entities in the event of business transfer

Any third parties receiving data are required to protect it in accordance with applicable privacy laws.

5. Data Security

We implement appropriate technical and organisational measures to protect personal information, including:

• Encrypted data transmission (SSL/TLS)
• Secure data storage with access controls
• Regular security assessments
• Staff training on data protection

While we strive to protect your information, no method of transmission over the internet is entirely secure. We will notify affected individuals and relevant authorities in the event of a data breach as required by law.

6. Cookies

Our website uses cookies to enhance your experience. These include:

• Essential cookies required for site functionality
• Analytics cookies to understand usage patterns
• Preference cookies to remember your settings

For detailed information about cookies we use and how to manage them, please see our Cookie Policy.

7. Data Retention

We retain personal information for as long as necessary to fulfil the purposes for which it was collected, including:

• Enquiry data: 2 years from last contact
• Client engagement records: 7 years after engagement completion
• Website analytics: 26 months

After the retention period, data is securely deleted or anonymised.

8. Your Rights

Under the PDPO and, where applicable, GDPR, you have rights regarding your personal data:

• Right to access your personal data
• Right to request correction of inaccurate data
• Right to request deletion (where applicable)
• Right to restrict or object to processing
• Right to data portability (GDPR)
• Right to withdraw consent

To exercise these rights, contact us at [email protected]. We will respond within 40 days as required by the PDPO.

You may also lodge a complaint with the Privacy Commissioner for Personal Data, Hong Kong.

9. International Transfers

Your information may be transferred to and processed in countries other than Hong Kong. When transferring data internationally, we ensure appropriate safeguards are in place, including contractual protections consistent with applicable data protection laws.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

11. Children's Privacy

Our services are not directed at individuals under 18 years of age. We do not knowingly collect personal information from minors. If we become aware of such collection, we will promptly delete the information.

12. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated revision date. Continued use of our website or services following changes constitutes acceptance of the revised policy.

13. Contact Us

For questions or concerns about this Privacy Policy or our data practices: