Privacy Policy
Last Updated: January 28, 2026
Opterols is committed to protecting the privacy and personal data of individuals who interact with our consulting practice. This privacy policy explains how we collect, use, store, and protect information in accordance with Hong Kong's Personal Data (Privacy) Ordinance and related data protection regulations.
Data Controller Information
Opterols acts as the data controller for personal information collected through our website and consulting engagements. We determine the purposes and means of processing your personal data.
Company Name: Opterols
Address: 9/F, Two Harbourfront, 22 Tak Fung Street, Hung Hom, Hong Kong
Phone: +852 2763 9418
Privacy Contact: [email protected]
Information We Collect
We collect personal data necessary to provide consulting services, respond to inquiries, and operate our website. The categories of information we collect include:
Information You Provide Directly
- Contact information including name, email address, phone number, and business address
- Professional information such as job title, company name, and role
- Inquiry details submitted through contact forms or email communications
- Information provided during consulting engagements including strategic documents and operational data
- Communication preferences and feedback
Information Collected Automatically
- Website usage data including pages visited, time spent on site, and navigation paths
- Device information such as IP address, browser type, and operating system
- Cookies and similar tracking technologies as described in our Cookie Policy
- Referral sources and search terms used to find our website
How We Use Your Information
We process personal data for specific, legitimate business purposes. The legal basis for processing varies depending on how you interact with our services:
Service Delivery (Contractual Basis)
- Providing consulting services as specified in engagement agreements
- Communicating about project progress, deliverables, and scheduling
- Processing payments and maintaining billing records
- Managing client relationships and engagement administration
Inquiry Response (Legitimate Interest)
- Responding to contact form submissions and email inquiries
- Providing information about our services and capabilities
- Scheduling initial consultations and engagement discussions
Website Operation (Legitimate Interest)
- Analyzing website usage to improve user experience and content
- Maintaining website security and preventing fraudulent activity
- Optimizing website performance and troubleshooting technical issues
Legal Compliance (Legal Obligation)
- Complying with Hong Kong business regulations and reporting requirements
- Maintaining records as required by professional consulting standards
- Responding to legal requests and protecting our rights
Data Sharing and Disclosure
We do not sell personal data to third parties. We share information only in the following limited circumstances:
- Service Providers: We engage third-party vendors for website hosting, email communications, and analytics. These providers are bound by contractual obligations to protect data and use it only for specified purposes.
- Professional Advisors: We may share information with legal counsel, accountants, or other professional advisors when necessary for business operations, bound by professional confidentiality obligations.
- Legal Requirements: We disclose information when required by law, court order, or government regulation, or when necessary to protect our rights or the safety of others.
- Business Transfers: In the event of a merger, acquisition, or asset sale, personal data may be transferred to the successor entity, subject to this privacy policy.
Data Security Measures
We implement technical and organizational measures to protect personal data against unauthorized access, loss, or disclosure:
- Encrypted transmission of data using SSL/TLS protocols for all web communications
- Secure storage of engagement documents with access controls and authentication
- Regular security assessments and updates to protection measures
- Staff training on data protection obligations and handling procedures
- Confidentiality agreements with all employees and contractors
- Incident response procedures for addressing potential data breaches
While we maintain appropriate safeguards, no security system is impenetrable. We cannot guarantee absolute security of transmitted or stored data.
Data Retention
We retain personal data only as long as necessary for the purposes outlined in this policy or as required by law:
- Inquiry Data: Retained for 24 months after last contact unless you become a client
- Client Engagement Data: Retained for 7 years following engagement completion to comply with professional standards and potential legal requirements
- Financial Records: Retained for 7 years as required by Hong Kong tax and business regulations
- Website Analytics: Aggregated data retained indefinitely; individual identifiers removed after 26 months
- Marketing Communications: Retained until you opt out or request deletion
Your Rights
Under Hong Kong's Personal Data (Privacy) Ordinance, you have specific rights regarding your personal data:
Right to Access
You may request copies of personal data we hold about you and information about how we process it.
Right to Correction
You may request correction of inaccurate or incomplete personal data.
Right to Object
You may object to processing based on legitimate interests, including direct marketing communications.
Right to Data Portability
You may request your data in a structured, commonly used format for transfer to another service provider where technically feasible.
Right to Erasure
You may request deletion of your personal data, subject to legal retention requirements and legitimate business needs.
To exercise these rights, contact us at [email protected]. We will respond to requests within 40 days as required by Hong Kong law. We may require identity verification before processing requests.
Cookies and Tracking
Our website uses cookies and similar technologies to enhance functionality and analyze usage. For detailed information about our cookie practices, please review our Cookie Policy.
Children's Privacy
Our services are intended for business and professional audiences. We do not knowingly collect personal data from individuals under 18 years of age. If we become aware that we have inadvertently collected such information, we will delete it promptly.
Changes to This Policy
We may update this privacy policy periodically to reflect changes in our practices or legal requirements. Material changes will be communicated through:
- Updated "Last Updated" date at the top of this policy
- Email notification to active clients and recent inquirers
- Prominent notice on our website for significant changes
Continued use of our website or services after changes take effect constitutes acceptance of the updated policy.
Contact and Complaints
For questions about this privacy policy or to exercise your data protection rights, contact:
Email: [email protected]
Phone: +852 2763 9418
Mail: Privacy Officer, Opterols, 9/F Two Harbourfront, 22 Tak Fung Street, Hung Hom, Hong Kong
If you believe we have not adequately addressed your privacy concerns, you have the right to lodge a complaint with the Office of the Privacy Commissioner for Personal Data in Hong Kong.