Privacy Policy

Introduction

Velkro is committed to protecting the privacy and confidentiality of personal information entrusted to us by clients, prospective clients, and website visitors. This privacy policy explains how we collect, use, store, and protect your personal data in accordance with the Personal Data (Privacy) Ordinance of Hong Kong.

This policy applies to all personal information collected through our website, email communications, and during consulting engagements. By using our services or website, you consent to the data practices described in this policy.

Information We Collect

We collect personal information that you voluntarily provide to us when you:

• Submit an inquiry through our website contact form
• Request information about our consulting services
• Engage us for a consulting engagement
• Subscribe to our communications or updates
• Visit our website and accept cookies

The types of personal information we may collect include:

• Name and business title
• Email address and telephone number
• Company name and business address
• Information about your organization and consulting needs
• Website usage data and IP addresses through cookies
• Communication preferences and interaction history

How We Use Your Information

We use the personal information we collect for the following purposes:

• Responding to your inquiries and providing information about our services
• Delivering consulting services and managing client engagements
• Communicating about ongoing projects and deliverables
• Invoicing and payment processing
• Improving our website functionality and user experience
• Analyzing service usage to enhance our consulting offerings
• Sending relevant business updates, subject to your communication preferences
• Complying with legal obligations and professional standards

The legal basis for processing your personal data includes: your consent, performance of our consulting engagement contract, our legitimate business interests, and compliance with legal obligations.

Data Retention

We retain personal information for as long as necessary to fulfill the purposes outlined in this privacy policy, unless a longer retention period is required or permitted by law. Our standard retention periods are:

• Client engagement records: Seven years after engagement completion, in accordance with professional standards
• Inquiry and contact form submissions: Three years from last contact
• Marketing communications data: Until you withdraw consent or request deletion
• Website analytics data: Eighteen months from collection
• Financial records: Seven years from transaction date, as required by Hong Kong tax regulations

Information Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties. We may share your information only in the following limited circumstances:

• With professional service providers who assist us in operating our business, such as IT service providers, subject to confidentiality obligations
• When required by law, legal process, or government request
• To protect our rights, property, or safety, or that of our clients or others
• With your explicit consent for specific purposes

All third-party service providers are required to maintain appropriate security measures and use personal information only for the purposes we specify.

Data Security

We implement appropriate technical and organizational measures to protect personal information against unauthorized access, alteration, disclosure, or destruction. Our security measures include:

• Encryption of data in transit and at rest
• Secure servers with restricted access controls
• Regular security audits and vulnerability assessments
• Employee training on data protection and confidentiality
• Secure disposal procedures for physical and electronic records
• Multi-factor authentication for system access

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but remain committed to maintaining industry-standard protections.

Cookies and Website Analytics

Our website uses cookies and similar technologies to enhance your browsing experience and analyze website usage. Cookies are small text files stored on your device that help us understand how visitors use our site.

We use the following types of cookies:

• Essential cookies: Required for basic website functionality
• Analytics cookies: Help us understand visitor behavior and improve our site
• Preference cookies: Remember your settings and choices

You can control cookie preferences through our cookie banner or your browser settings. For more detailed information about our cookie practices, please review our Cookie Policy.

Your Rights

Under the Personal Data (Privacy) Ordinance of Hong Kong, you have the following rights regarding your personal information:

• Right to access: Request a copy of the personal data we hold about you
• Right to correction: Request correction of inaccurate or incomplete personal data
• Right to erasure: Request deletion of your personal data, subject to legal retention requirements
• Right to data portability: Receive your personal data in a structured, commonly used format
• Right to object: Object to processing of your personal data for certain purposes
• Right to withdraw consent: Withdraw previously given consent at any time
• Right to lodge a complaint: File a complaint with the Office of the Privacy Commissioner for Personal Data

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within thirty days.

Third-Party Links

Our website may contain links to third-party websites for your convenience. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party websites you visit.

Children's Privacy

Our services are directed to business professionals and organizations. We do not knowingly collect personal information from individuals under eighteen years of age. If we become aware that we have inadvertently collected information from a minor, we will take steps to delete it promptly.

International Data Transfers

Your personal information is primarily stored and processed in Hong Kong. In limited circumstances, we may transfer data to service providers located outside Hong Kong. When we do so, we ensure appropriate safeguards are in place to protect your information in accordance with this privacy policy and applicable data protection laws.

Changes to This Privacy Policy

We may update this privacy policy periodically to reflect changes in our practices, legal requirements, or business operations. When we make significant changes, we will post a prominent notice on our website and update the "Last Updated" date at the top of this policy. Your continued use of our services after such changes constitutes acceptance of the updated policy.

Contact Us

If you have questions, concerns, or requests regarding this privacy policy or our data practices, please contact us: