1. Our Commitment to Privacy

Cadmium is committed to protecting your personal data. We understand that your privacy matters, and we take our obligations under Hong Kong's Personal Data (Privacy) Ordinance seriously. This policy explains how we collect, use, and safeguard your information.

2. Information We Collect

We collect personal information in the following ways:

Information You Provide Directly

Through contact forms: When you complete our contact form, we collect your name, email address, phone number, and any message content you provide.
During engagement: When we enter into a professional engagement, we collect additional information necessary for service delivery, including business details, operational information, and documentation relevant to the engagement.
Direct communication: Information provided through email, phone calls, or in-person meetings.

Information Collected Automatically

Website analytics: We use analytics tools to understand how visitors interact with our website, including IP addresses, browser type, and pages visited.
Cookies: We use cookies to improve your experience (see our Cookie Policy for details).

3. How We Use Your Information

We use the information we collect for the following purposes:

Service delivery: To provide the legal advisory services you've engaged us to deliver.
Communication: To respond to your enquiries and maintain contact regarding engagements.
Professional obligations: To meet regulatory and legal requirements applicable to legal practice in Hong Kong.
Website improvement: To understand how you use our website and improve our services.
Marketing communication: To inform you about our services (only if you've consented to receive such communications).

4. Legal Basis for Processing

We process your personal data on the following legal bases:

Contract performance: Processing necessary to perform our professional obligations to you as a client.
Legitimate interest: Processing necessary for our business operations, such as improving our website and services.
Consent: Where you have explicitly consented to processing, such as for marketing communications.
Legal compliance: Processing required to meet our regulatory obligations under Hong Kong law.

5. Data Sharing and Disclosure

We do not sell or trade your personal data. We share your information only in the following circumstances:

Service providers: With third-party vendors who assist us in delivering services (such as cloud hosting providers), under strict confidentiality agreements.
Legal requirements: When required by law, regulatory authorities, or court order.
Professional service delivery: With other professionals assisting with your matter, only to the extent necessary and with appropriate confidentiality protections.

6. Data Protection Measures

We implement comprehensive security measures to protect your information:

Encryption: Sensitive information is encrypted both in transit and at rest.
Access controls: Access to personal data is restricted to authorised personnel who need it for their work.
Secure infrastructure: We use secure, industry-standard servers and hosting providers.
Regular audits: We conduct regular security assessments and maintain updated security protocols.
Staff training: Our team receives training on data protection and confidentiality obligations.

7. Data Retention

We retain personal data for the following periods:

Client information: Retained while you are a client and for seven years after engagement concludes, in compliance with professional practice standards.
Enquiry information: Information from contact forms is retained for two years unless you request deletion sooner.
Analytics data: Automatically collected data is retained for up to 24 months unless required for legal compliance.

8. Cookies and Tracking

Please see our Cookie Policy for detailed information about cookies and how to manage your preferences. We use essential cookies for basic site functionality and optional cookies for analytics and user preferences.

9. Your Rights

Under Hong Kong's Personal Data (Privacy) Ordinance, you have the following rights:

Right of access: You can request access to personal data we hold about you.
Right of correction: You can request that we correct inaccurate information.
Right of erasure: You can request deletion of your personal data under certain circumstances.
Right to object: You can object to processing of your data for direct marketing or other purposes.
Right to withdraw consent: If processing is based on your consent, you can withdraw it at any time.
Right to data portability: You can request your information in a structured, portable format.
Right to lodge a complaint: You can lodge a complaint with the Privacy Commissioner for Personal Data.

To exercise these rights, contact us at [email protected].

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing personal information.

11. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from minors. If we become aware that we've collected data from someone under 18, we will take steps to delete such information promptly.

12. Policy Updates

We may update this privacy policy periodically to reflect changes in our practices, technology, or legal requirements. We will notify you of significant changes by posting the updated policy on our website. Your continued use of our website after updates constitutes acceptance of the revised policy.

13. Contact Information

For questions about this privacy policy or to exercise your data rights, please contact:

Data Protection Contact
Cadmium
Email: [email protected]
Phone: +852 2781 6394
Address: Unit 1905, 19/F, Fairmont House, 8 Cotton Tree Drive, Admiralty, Hong Kong

You also have the right to lodge a complaint with the Privacy Commissioner for Personal Data of Hong Kong.

Privacy Policy