Privacy Policy

1. Introduction

Capstone Insights ("we," "our," or "us") is committed to protecting the privacy of individuals who visit our website and use our services. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you interact with our business consulting services in Hong Kong.

This policy applies to all personal data collected through our website, contact forms, email communications, and service engagements. By using our services, you acknowledge that you have read and understood this Privacy Policy.

2. Data Controller

Capstone Insights is the data controller responsible for your personal data. Our contact details are:

3. Information We Collect

We may collect and process the following categories of personal data:

3.1 Information You Provide

• Contact information: name, email address, phone number, business address
• Professional information: job title, company name, industry sector
• Communication records: messages, enquiries, and correspondence
• Project information: business details shared during consulting engagements

3.2 Information Collected Automatically

• Device information: browser type, operating system, device identifiers
• Usage data: pages visited, time spent on site, referral sources
• Technical data: IP address, cookie data, access times

4. How We Use Your Information

We use personal data for the following purposes:

• Service delivery: To provide consulting services, respond to enquiries, and manage client relationships
• Communication: To send relevant information about our services, respond to questions, and provide project updates
• Administration: To process payments, maintain records, and fulfil contractual obligations
• Improvement: To analyse website usage and improve our services and user experience
• Legal compliance: To comply with applicable laws, regulations, and legal processes

5. Legal Basis for Processing

We process your personal data on the following legal grounds:

• Consent: Where you have given explicit consent for specific processing activities
• Contract: Where processing is necessary to perform a contract with you or take pre-contractual steps
• Legitimate interests: Where processing is necessary for our legitimate business interests, provided these do not override your rights
• Legal obligation: Where processing is required to comply with Hong Kong law

6. Data Sharing and Disclosure

We may share your personal data with:

• Service providers: Third parties who assist with website hosting, payment processing, and business operations, under contractual obligations to protect your data
• Professional advisers: Lawyers, accountants, and auditors where necessary for professional advice
• Regulatory authorities: Government bodies and regulators where required by law

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including:

• Contact form submissions: 2 years from date of submission
• Client project data: 7 years following project completion (for legal and tax purposes)
• Marketing communications: Until you unsubscribe or withdraw consent
• Website analytics: 26 months (standard analytics retention)

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

• Secure data transmission using SSL/TLS encryption
• Access controls limiting data access to authorised personnel
• Regular security assessments and updates
• Secure storage with reputable hosting providers
• Staff training on data protection practices

While we take reasonable precautions, no method of transmission over the internet is completely secure. We cannot guarantee absolute security of your data.

9. Cookies

Our website uses cookies to enhance your browsing experience. Cookies are small text files stored on your device that help us understand how you use our site.

For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

10. Your Rights

Under the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong, you have the following rights:

• Right of access: Request a copy of the personal data we hold about you
• Right of correction: Request correction of inaccurate or incomplete data
• Right to withdraw consent: Withdraw consent for processing where consent is the legal basis
• Right to object: Object to processing for direct marketing purposes

To exercise these rights, please contact us at [email protected]. We will respond to your request within 40 days as required by Hong Kong law.

11. International Data Transfers

Where we transfer personal data outside Hong Kong, we ensure appropriate safeguards are in place to protect your data, including contractual arrangements with recipients and selection of providers in jurisdictions with adequate data protection standards.

12. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to read the privacy policies of any website you visit.

13. Children's Privacy

Our services are not directed at individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected information from a minor, please contact us immediately.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post any changes on this page with an updated revision date. We encourage you to review this policy periodically.

15. Complaints

If you have concerns about how we handle your personal data, please contact us first at [email protected]. If you are not satisfied with our response, you have the right to lodge a complaint with:

16. Contact Us

For any questions about this Privacy Policy or our data practices, please contact: