Privacy Policy

1. Introduction

Keystone Partners ("we", "us", "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services or visit our website.

We comply with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong and other applicable data protection regulations. By engaging our services or using our website, you consent to the practices described in this policy.

2. Information We Collect

We may collect the following types of personal information:

Contact Information: Name, email address, phone number, and business address that you provide when contacting us or engaging our services.

Professional Information: Company name, job title, industry sector, and business-related details relevant to our consulting engagements.

Communication Records: Records of correspondence between you and our team, including emails, meeting notes, and consultation records.

Website Usage Data: Information collected through cookies and similar technologies, including IP addresses, browser type, pages visited, and time spent on our website.

Payment Information: Billing details necessary to process payments for our services, though we do not store complete payment card details.

3. How We Use Your Information

We use your personal data for the following purposes:

To provide and deliver our consulting services, including strategic partnership advisory, business continuity planning, and management consulting retainer services.

To communicate with you regarding inquiries, appointments, project updates, and service-related matters.

To process payments and maintain accurate financial records.

To improve our website and services based on usage patterns and feedback.

To comply with legal obligations and protect our legitimate business interests.

To send you relevant information about our services, where you have consented to receive such communications.

4. Legal Basis for Processing

We process your personal data based on one or more of the following legal grounds:

Contract Performance: Processing necessary to fulfill our contractual obligations to you.

Legitimate Interests: Processing necessary for our legitimate business interests, such as improving our services and maintaining client relationships.

Consent: Where you have given explicit consent for specific processing activities.

Legal Compliance: Processing required to comply with applicable laws and regulations.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your data with:

Service Providers: Third-party vendors who assist us in operating our business, such as IT support, payment processors, and professional advisors, under strict confidentiality agreements.

Legal Requirements: When required by law, court order, or governmental authority.

Business Transfers: In connection with any merger, acquisition, or sale of assets, with appropriate safeguards for your data.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

Encryption of data in transit and at rest where appropriate.

Access controls limiting data access to authorized personnel only.

Regular security assessments and updates to our systems.

Staff training on data protection and confidentiality obligations.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

Active client records: For the duration of our engagement plus seven years thereafter.

Inquiry records: For two years from the date of inquiry.

Website analytics data: For up to 26 months.

8. Cookies

Our website uses cookies to enhance your browsing experience. For detailed information about the cookies we use and how to manage your preferences, please see our Cookie Policy.

9. Your Rights

Under Hong Kong's Personal Data (Privacy) Ordinance, you have the right to:

Access: Request a copy of the personal data we hold about you.

Correction: Request correction of inaccurate or incomplete data.

Opt-out: Withdraw consent for direct marketing communications.

To exercise these rights, please contact us using the details provided below. We may need to verify your identity before processing your request.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

11. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such information, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

13. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us:

14. Supervisory Authority

If you are not satisfied with our response to your privacy concerns, you may lodge a complaint with the Office of the Privacy Commissioner for Personal Data, Hong Kong.