Privacy Policy

1. Introduction

Apex Counsel ("we," "our," or "us") is committed to protecting the privacy of individuals who visit our website and engage with our consulting services. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong ("PDPO") and other applicable data protection regulations.

By accessing our website or using our services, you acknowledge that you have read and understood this Privacy Policy. If you have questions about our data practices, please contact us at [email protected].

2. Information We Collect

We collect personal information in several ways:

Information You Provide: When you submit inquiries through our contact form, we collect your name, email address, phone number (if provided), and the content of your message. During consulting engagements, we may collect additional information relevant to the services being provided.

Automatic Information: When you visit our website, we automatically collect certain technical information including your IP address, browser type, device information, pages visited, and time spent on pages. This information is collected through cookies and similar technologies.

Information from Third Parties: We may receive information about you from business partners, referral sources, or publicly available sources when relevant to potential or existing engagements.

3. How We Use Your Information

We use the personal information we collect for the following purposes:

Service Delivery: To respond to your inquiries, provide consulting services, and communicate with you about your engagement with us.

Business Operations: To manage our business relationship with you, process payments, maintain records, and fulfill our contractual obligations.

Website Improvement: To analyze how visitors use our website, improve our content and user experience, and ensure the security and functionality of our online services.

Legal Compliance: To comply with applicable laws, regulations, and legal processes, and to protect our rights and the rights of others.

Marketing Communications: With your consent, we may send you information about our services, industry insights, or other content we believe may be relevant to you. You may opt out of marketing communications at any time.

4. Legal Basis for Processing

We process your personal information based on the following legal grounds:

Consent: Where you have given us explicit consent to process your data for specific purposes.

Contractual Necessity: Where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract.

Legitimate Interests: Where processing is necessary for our legitimate business interests, provided these do not override your rights and freedoms.

Legal Obligation: Where processing is necessary to comply with legal requirements.

5. Data Sharing and Disclosure

We do not sell your personal information to third parties. We may share your information in the following circumstances:

Service Providers: We may share information with trusted third-party service providers who assist us in operating our website, conducting our business, or providing services to you. These providers are contractually obligated to protect your information.

Professional Advisors: We may share information with our legal, accounting, or other professional advisors as necessary for their services.

Legal Requirements: We may disclose information when required by law, court order, or governmental authority, or when we believe disclosure is necessary to protect our rights or the safety of others.

Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements.

For website inquiries that do not result in an engagement, we typically retain information for up to two years. For consulting engagements, we retain relevant records for seven years following completion of the engagement, in accordance with professional standards and legal requirements.

When personal information is no longer needed, we securely delete or anonymize it.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

Secure data transmission using SSL/TLS encryption, access controls limiting data access to authorized personnel, regular security assessments and updates, secure storage of physical and electronic records, and confidentiality agreements with staff and service providers.

While we strive to protect your information, no method of transmission over the internet or electronic storage is completely secure. We cannot provide absolute assurance of security.

8. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience and collect information about how you use our site. For detailed information about our use of cookies, including how to manage your preferences, please see our Cookie Policy.

9. Your Rights

Under the PDPO and other applicable laws, you have certain rights regarding your personal information:

Right of Access: You have the right to request a copy of the personal information we hold about you.

Right to Correction: You have the right to request that we correct any inaccurate or incomplete personal information.

Right to Erasure: In certain circumstances, you may request that we delete your personal information.

Right to Restrict Processing: You may request that we restrict the processing of your information in certain circumstances.

Right to Data Portability: Where applicable, you may request to receive your data in a structured, commonly used format.

Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within the timeframe required by applicable law.

10. Third-Party Links

Our website may contain links to third-party websites. This Privacy Policy does not apply to those websites, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party sites you visit.

11. Children's Privacy

Our services are intended for business professionals and organizations. We do not knowingly collect personal information from individuals under the age of 18. If we become aware that we have collected information from a minor, we will take steps to delete it promptly.

12. International Data Transfers

Your information may be transferred to and processed in countries other than Hong Kong. When we transfer data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with applicable data protection laws.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: