Privacy Policy

Introduction

Nolwiols is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you visit our website or engage our consulting services.

This policy complies with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong and reflects our commitment to transparency in all data handling practices.

Information We Collect

Personal Information

When you contact us or engage our services, we may collect the following personal information:

• Name and contact details (email address, phone number)
• Business information (company name, position, business address)
• Communication preferences and inquiry details
• Information provided during consulting engagements

Automatically Collected Information

Our website automatically collects certain technical information:

• IP address and browser type
• Pages visited and time spent on site
• Referring website or source
• Device information and operating system

How We Use Your Information

Purpose of Processing

We process your personal data for the following purposes:

• Responding to inquiries and providing requested information
• Delivering consulting services and managing client relationships
• Communicating about our services and engagements
• Improving our website functionality and user experience
• Complying with legal and regulatory requirements

Legal Basis

We process personal data based on:

• Your consent when you submit contact forms or engage our services
• Contract performance for delivering consulting services
• Legitimate interests in operating and improving our business
• Legal obligations under Hong Kong regulations

Data Retention

We retain personal information for the following periods:

• Inquiry data: 2 years from last contact
• Client engagement records: 7 years following engagement completion
• Website analytics data: 26 months
• Marketing consent records: Until consent is withdrawn

After these periods, data is securely deleted or anonymized unless longer retention is required by law.

Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• Encrypted data transmission using SSL/TLS protocols
• Secure server infrastructure with regular security updates
• Access controls limiting data access to authorized personnel
• Regular security audits and vulnerability assessments
• Employee training on data protection and confidentiality

Despite these measures, no transmission over the internet is completely secure. We cannot absolutely guarantee the security of data transmitted to our website.

Data Sharing and Disclosure

We do not sell or rent your personal information. We may share data with:

Service Providers

Third-party service providers who assist with:

• Website hosting and maintenance
• Email communication services
• Analytics and website performance monitoring

These providers are contractually obligated to protect your data and use it only for specified purposes.

Legal Requirements

We may disclose information when required by law, regulation, legal process, or governmental request, or when necessary to protect our rights or comply with Hong Kong legal obligations.

Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance functionality and analyze usage. We use:

• Essential cookies for basic website functionality
• Analytics cookies to understand how visitors use our site
• Preference cookies to remember your settings

For detailed information about cookies, please refer to our Cookie Policy.

Your Rights Under Hong Kong Law

Under the Personal Data (Privacy) Ordinance, you have the following rights:

Access and Correction

You have the right to request access to your personal data and request correction of any inaccurate information.

Data Portability

You may request a copy of your personal data in a structured, commonly used format.

Objection and Erasure

You may object to processing of your data or request erasure, subject to legal retention requirements.

Withdrawal of Consent

Where processing is based on consent, you may withdraw consent at any time.

To exercise these rights, please contact us at [email protected]. We will respond to your request within 40 days as required by Hong Kong law.

Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected data from a child, we will take steps to delete it promptly.

International Data Transfers

Your personal data is primarily processed and stored in Hong Kong. If we transfer data outside Hong Kong, we ensure appropriate safeguards are in place to protect your information in accordance with applicable data protection laws.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Updates will be posted on this page with a revised "Last Updated" date.

We encourage you to review this policy regularly. Continued use of our website or services after changes constitutes acceptance of the updated policy.

Contact Information

For questions, concerns, or requests related to this Privacy Policy or your personal data, please contact:

You also have the right to lodge a complaint with the Office of the Privacy Commissioner for Personal Data in Hong Kong if you believe your data protection rights have been violated.