Privacy policy
Last updated: 19 August 2026
This privacy policy statement explains how FAC collects, holds, processes and uses personal data. FAC operates www.hkfac.com and hkfac.com. Access and correction requests should be sent to [email protected].
This statement is prepared with reference to the data protection principles in the Personal Data (Privacy) Ordinance (Cap. 486 of the Laws of Hong Kong). It explains our practices. It is not legal advice to you.
Who we are
The data user is FAC, of Hong Kong. We are a Hong Kong-based advisory firm. We help institutional clients establish a presence in Hong Kong and use Hong Kong as a node to enter mainland China or Middle East markets.
If you have questions about this statement or our handling of personal data, write to [email protected].
What personal data we collect
When you contact us through the booking form on this website, we collect your name, organisation and email address, and any phone number or current-situation note you choose to give. We also record the service categories, direction and audience you select, the language of the page, and the page address from which you submitted the form.
To reduce abuse, our systems may record the internet protocol (IP) address and other technical signals linked to a submission, so we can identify spam.
The administration area of the website is for FAC staff only. Signing in sets a necessary cookie named fac_admin to keep the session. Public pages do not collect your name or email through that cookie.
Purposes of collection
We use this data to handle your booking, assess the request and contact you, speak where needed with third-party providers we may match for you, keep internal records, and comply with applicable law.
We will not use your personal data for direct marketing without the consent required by law. If we later propose to use it for direct marketing, we will first obtain the consent required under Part 6A of the Personal Data (Privacy) Ordinance, and tell you that you may opt out.
What you must provide
Name, organisation and email address are required to submit a booking. If you do not provide them, we cannot process that booking. Phone number and the current-situation note are voluntary. Leaving them blank will not block submission, but it may slow or limit how well we can assess the request.
Who may receive the data
Where directly related to the purpose of collection, data may be provided to FAC staff handling the booking; third-party providers who need to know in order to complete a match; contractors who host the website, database or outbound email for us; and authorities when disclosure is required or permitted by law.
The website and booking records are stored on Cloudflare Pages, Workers and D1. Outbound notices are sent through the email delivery service we use. Those contractors process data only to the extent needed to provide those services.
Processing outside Hong Kong
The cloud and email infrastructure described above may sit outside Hong Kong. Personal data may therefore be held or processed outside Hong Kong. We transfer it only where that is directly related to the purpose of collection, and we require contractors to apply reasonable security measures consistent with this statement.
Retention
Booking data is kept while we handle the enquiry and for about 24 months afterwards, unless a longer or shorter period is required by law, a dispute, or accounting needs. After that we delete it or anonymise it so it no longer identifies you.
Security
We take practicable steps to protect personal data, including encryption in transit, limiting access to the administration area, and authenticating staff sign-in. No method of internet transmission or storage is free of risk. If a leak that may affect you occurs, we will take the steps practicable under applicable law.
Access and correction
You have the right to request access to personal data we hold about you, and to request correction of data that is inaccurate. Send a written request to [email protected]. Please identify yourself and the scope of the request so we can verify it.
We may charge a fee not exceeding any prescribed maximum under the Personal Data (Privacy) Ordinance. We will respond within a reasonable time. If we refuse a request, we will give reasons where the law allows.
Changes
We may update this statement from time to time. The revised text will appear on this page, and the date at the top of the page is the date that applies. If you continue to use this website, you are taken to have notice of the statement then in force.