Privacy Policy

1. Introduction

Ridgeline Advisory ("we," "us," or "our") is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, store, and protect information when you use our website, services, or communicate with us.

We operate in accordance with the Personal Data (Privacy) Ordinance (PDPO) of Hong Kong and relevant data protection principles. By engaging with our services or using our website, you acknowledge that you have read and understood this policy.

For any questions regarding this policy or your personal data, please contact us at [email protected].

2. Data We Collect

We collect information that you provide directly to us and information generated through your use of our website. The types of personal data we may collect include:

2.1 Information You Provide

When you contact us, submit an enquiry form, or engage our services, we may collect your name, email address, phone number, company name, job title, and the content of your communications with us.

2.2 Automatically Collected Information

When you visit our website, we may automatically collect technical information including your IP address, browser type and version, device information, pages visited, time spent on pages, and referring website addresses.

2.3 Cookies and Similar Technologies

We use cookies and similar technologies to enhance your experience on our website. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

3. How We Use Your Data

We use the personal data we collect for the following purposes:

Service Delivery: To provide our consulting services, respond to your enquiries, and fulfil our contractual obligations to you.

Communication: To send you information about our services, respond to your questions, and provide updates relevant to your engagement with us.

Website Improvement: To analyse how visitors use our website and improve its functionality, content, and user experience.

Legal Compliance: To comply with applicable laws, regulations, and legal processes in Hong Kong.

Business Administration: To manage our business operations, including record-keeping and internal reporting.

4. Legal Basis for Processing

We process your personal data on the following legal grounds:

Consent: Where you have given us clear consent to process your personal data for specific purposes, such as receiving marketing communications.

Contractual Necessity: Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.

Legitimate Interests: Where processing is necessary for our legitimate business interests, provided these do not override your rights and interests.

5. Data Sharing and Disclosure

We do not sell your personal data to third parties. We may share your information in the following circumstances:

Service Providers: We may share data with trusted service providers who assist us in operating our website, conducting our business, or providing services to you, subject to confidentiality obligations.

Professional Advisers: We may share data with our lawyers, accountants, or other professional advisers as necessary for their professional services.

Legal Requirements: We may disclose your information if required by law, court order, or governmental request, or if we believe disclosure is necessary to protect our rights or the safety of others.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include secure data storage, encryption of sensitive data in transit, access controls, and regular security assessments.

While we strive to protect your personal data, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but are committed to maintaining industry-standard protections.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements.

For enquiry form submissions, we typically retain data for up to two years after your last interaction with us, unless a longer retention period is required for legal or business purposes.

For client engagement records, we retain data for a minimum of seven years following the completion of services, in accordance with professional and legal requirements in Hong Kong.

8. Your Rights

Under the Personal Data (Privacy) Ordinance of Hong Kong, you have the following rights regarding your personal data:

Right of Access: You may request access to the personal data we hold about you.

Right of Correction: You may request that we correct any inaccurate or incomplete personal data.

Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time.

Right to Object: You may object to receiving direct marketing communications from us.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 40 days as required by the PDPO.

9. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to read the privacy policies of any third-party websites you visit.

10. Children's Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected data from a child, we will take steps to delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will post any changes on this page with an updated revision date. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us:

13. Supervisory Authority

If you are not satisfied with our response to any complaint or believe our processing of your data does not comply with data protection law, you have the right to lodge a complaint with the Office of the Privacy Commissioner for Personal Data (PCPD) in Hong Kong.