Privacy Policy

This Privacy Policy applies to personal data collected by Pallant ("we," "our," or "us") through our website, client engagements, and business communications. We are committed to transparency in how we handle your information and compliance with applicable Hong Kong privacy laws, including the Personal Data (Privacy) Ordinance (PDPO).

For questions about this policy or our privacy practices, please contact us at [email protected].

Data Controller: Pallant, 3/F Admiralty Centre Tower II, 18 Harcourt Road, Admiralty, Hong Kong

Personal Data Provided Directly

We collect information you provide when engaging with our services:

• Contact information (name, email address, phone number, business address)
• Professional information (job title, company name, business sector)
• Communication content (inquiry details, project requirements, feedback)
• Payment information (processed through secure third-party providers)

Information Collected Automatically

When you visit our website, we may collect:

• Device and browser information (IP address, browser type, operating system)
• Usage data (pages visited, time spent, navigation patterns)
• Cookies and similar tracking technologies (see our Cookie Policy)

Information from Third Parties

We may receive information from professional referrals, business partners, or publicly available sources to verify contact details or understand organizational context relevant to our engagement.

We process personal data for the following purposes:

Service Delivery

• Providing consulting services and advisory support
• Responding to inquiries and managing client relationships
• Scheduling meetings and maintaining engagement records
• Processing payments and managing contracts

Communication

• Sending service-related communications and updates
• Providing information about our services (with your consent)
• Responding to questions and support requests

Business Operations

• Improving our services and website functionality
• Analyzing usage patterns and service effectiveness
• Maintaining security and preventing fraud
• Complying with legal obligations

Legal Basis: We process personal data based on contract performance, legitimate business interests, legal compliance, and where applicable, your explicit consent.

We do not sell personal data. We may share information with:

Service Providers

Trusted third parties who assist with business operations:

• Cloud hosting providers (data storage and website hosting)
• Payment processors (secure transaction handling)
• Email service providers (business communications)
• Analytics platforms (website usage analysis)

Legal Requirements

We may disclose information when required by law, court order, or regulatory authority, or to protect our legal rights and interests.

Business Transfers

In the event of a merger, acquisition, or sale of assets, personal data may be transferred to the acquiring entity with appropriate safeguards.

We implement appropriate technical and organizational measures to protect personal data:

• Encryption of data in transit and at rest
• Access controls and authentication requirements
• Regular security assessments and updates
• Employee training on data protection practices
• Secure backup and disaster recovery procedures

While we strive to protect your information, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security but maintain industry-standard safeguards.

We retain personal data for as long as necessary to fulfill the purposes outlined in this policy:

• Client engagement records: 7 years after engagement completion (regulatory compliance)
• Inquiry and contact data: 3 years from last contact (unless consent withdrawn)
• Website analytics: 26 months (standard practice)
• Financial records: As required by Hong Kong tax and accounting regulations

After retention periods expire, we securely delete or anonymize personal data unless longer retention is required by law.

Our website uses cookies and similar technologies to enhance functionality and analyze usage. For detailed information about our use of cookies, including how to manage your preferences, please see our Cookie Policy.

Categories of cookies we use:

• Essential cookies (required for website functionality)
• Analytics cookies (website performance measurement)
• Preference cookies (remember your settings)

Under Hong Kong privacy law, you have the following rights regarding your personal data:

Right to Access

You may request a copy of the personal data we hold about you.

Right to Correction

You may request correction of inaccurate or incomplete personal data.

Right to Erasure

You may request deletion of your personal data, subject to legal retention requirements.

Right to Object

You may object to processing of your data for marketing purposes or other legitimate interests.

Right to Data Portability

You may request your data in a structured, commonly used format for transfer to another service provider.

Exercising Your Rights: To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month.

Our services are intended for business and professional use. We do not knowingly collect personal data from individuals under 18 years of age. If we become aware that we have inadvertently collected such information, we will take steps to delete it promptly.

While we are based in Hong Kong and primarily serve the Asia-Pacific region, some of our service providers may process data outside Hong Kong. When transferring personal data internationally, we ensure appropriate safeguards are in place:

• Standard contractual clauses approved by privacy authorities
• Adequacy decisions recognizing equivalent data protection standards
• Service provider commitments to data protection principles

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will post the updated policy on this page with a revised "Last Updated" date. Significant changes will be communicated through email or prominent website notice.

For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact: