Privacy Policy

1. Introduction

Pelagic Helm ("we", "us", "our") is committed to protecting the privacy of individuals who interact with our services. This Privacy Policy explains how we collect, use, store, and share your personal data in connection with our business consulting services and our website.

This policy applies to all personal data we receive, whether in electronic or physical form. If you have questions, you may reach us at privacy@pelagichelm.

Our registered address is 15 Queen's Road East, Unit 706, Wan Chai, Hong Kong.

2. Data We Collect

We may collect the following types of personal data:

Contact Information: Name, email address, telephone number, and business address when you fill in a contact form or reach out to us directly.

Engagement Data: Information provided during consulting engagements, including financial records, organisational documents, and strategic materials you share with us for the purpose of delivering our services.

Website Usage Data: IP address, browser type, pages visited, and time spent on our site, collected through cookies and analytics tools.

Communications: Records of correspondence between you and our team, including emails and meeting notes.

3. How We Use Your Data

We use your personal data for the following purposes:

Service Delivery: To deliver the consulting services you have engaged us for, including research, analysis, and report preparation.

Communication: To respond to your enquiries, schedule consultations, and provide project updates during active engagements.

Website Improvement: To understand how visitors use our website and to improve its functionality and content.

Legal Compliance: To meet our obligations under applicable laws and regulations in Hong Kong.

4. Legal Basis for Processing

We process your data based on one or more of the following grounds:

Consent: Where you have provided clear consent for us to process your data for specific purposes, such as when submitting a contact form.

Contractual Necessity: Where processing is necessary to perform a consulting engagement or to take steps at your request prior to entering into an agreement.

Legitimate Interest: Where processing supports our operational needs, such as improving our services or maintaining security, provided this does not override your rights.

5. Data Protection Measures

We take appropriate technical and organisational measures to protect your personal data from unauthorised access, loss, or misuse. These measures include encrypted file storage, access-controlled systems, and secure communication channels. Only team members who need access to your data for the purposes of an engagement are permitted to view it.

We conduct periodic reviews of our security practices and adjust them as needed to maintain an appropriate level of protection.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Contact form data is retained for up to 12 months after your last interaction with us. Engagement-related data is retained for up to 36 months after the conclusion of the engagement, unless a longer period is required by law or regulation.

After the retention period expires, data is securely deleted or anonymised.

7. Sharing Your Data

We do not sell your personal data. We may share data with the following categories of recipients:

Service Providers: Third-party providers who support our operations, such as cloud hosting, analytics, and email services. These parties are contractually bound to use your data only as instructed.

Legal Requirements: Where required by law, regulation, or legal process in Hong Kong.

With Your Consent: In any situation not covered above, we will seek your explicit consent before sharing your data.

8. Cookies

Our website uses cookies to support basic functionality and to understand visitor behaviour. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

9. Your Rights

Under Hong Kong's Personal Data (Privacy) Ordinance (PDPO), you have the following rights in relation to your personal data:

Right of Access: You may request a copy of the personal data we hold about you.

Right of Correction: You may request correction of any inaccurate or incomplete data.

Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time.

Right to Object: You may object to the processing of your data for direct marketing purposes.

To exercise any of these rights, please contact us at privacy@pelagichelm. We will respond within 40 days as required by the PDPO.

10. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies before providing any personal information.

11. Children's Privacy

Our services are intended for business professionals and are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors.

12. Policy Updates

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically.

13. Contact Us

If you have questions or concerns about this Privacy Policy or how your personal data is handled, please reach out to us:

Pelagic Helm
15 Queen's Road East, Unit 706, Wan Chai, Hong Kong
Email: privacy@pelagichelm
Phone: +852 6291 4853

For complaints regarding data protection, you may also contact the Office of the Privacy Commissioner for Personal Data in Hong Kong.