Privacy Policy

1. Introduction

Cornerstens ("we," "us," or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you engage with our business consulting services or visit our website.

We are based in Hong Kong and operate primarily within the Hong Kong Special Administrative Region. We comply with the Personal Data (Privacy) Ordinance (Cap. 486) ("PDPO") and take our responsibilities regarding your personal data seriously.

If you have any questions about this Privacy Policy, please contact us at [email protected].

2. Information We Collect

We may collect and process the following types of personal data:

2.1 Information You Provide

• Name and contact details (email address, phone number)
• Company name and job title
• Business address
• Information contained in correspondence with us
• Information provided during consulting engagements

2.2 Information Collected Automatically

• Device information (browser type, operating system)
• IP address and approximate location
• Pages visited and time spent on our website
• Referring website addresses
• Cookie and tracking data (see our Cookie Policy)

3. How We Use Your Information

We use your personal data for the following purposes:

• To provide our consulting services and fulfil our contractual obligations
• To respond to your enquiries and communicate with you
• To send you relevant information about our services (with your consent)
• To improve our website and services
• To comply with legal and regulatory requirements
• To protect our legitimate business interests

4. Legal Basis for Processing

Under the PDPO and applicable data protection principles, we process your personal data on the following bases:

• Consent: Where you have given clear consent for us to process your personal data
• Contract: Where processing is necessary to perform a contract with you
• Legal Obligation: Where we must comply with a legal requirement
• Legitimate Interests: Where processing is necessary for our legitimate business purposes, provided these do not override your interests

5. Sharing Your Information

We may share your personal data with:

• Service providers who assist us in delivering our services (under appropriate contractual protections)
• Professional advisers such as lawyers and accountants
• Government authorities when required by law

We do not sell your personal data to third parties.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements.

Generally, we retain client records for seven years following the completion of an engagement, in accordance with professional and legal requirements in Hong Kong. Contact enquiries are retained for two years unless you become a client.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Access controls and authentication procedures
• Regular security assessments and updates
• Staff training on data protection practices
• Secure disposal of data when no longer needed

8. Cookies and Tracking

Our website uses cookies and similar technologies to enhance your browsing experience and analyse site usage. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

9. Your Rights

Under Hong Kong's PDPO, you have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete personal data
• Withdraw Consent: Withdraw your consent to processing at any time (where processing is based on consent)
• Object: Object to direct marketing communications

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 40 days, as required by the PDPO.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to read the privacy policies of any third-party sites you visit.

11. Children's Privacy

Our services are intended for business professionals and organisations. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently collected such information, please contact us so we can promptly delete it.

12. International Data Transfers

Your personal data may be transferred to and processed in jurisdictions outside Hong Kong. Where this occurs, we ensure appropriate safeguards are in place to protect your data in accordance with the PDPO, including contractual arrangements with data processors.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated policy on our website with a new "Last Updated" date. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: