Privacy Policy

1. Introduction

Parvane ("we," "our," or "us") is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, disclose, and protect information when you visit our website or engage with our consulting services.

This policy applies to personal data collected through our website and during our professional engagements. We operate in accordance with the Personal Data (Privacy) Ordinance (PDPO) of Hong Kong and international data protection standards.

2. Data Controller

Parvane

14/F, Harbour Centre, 25 Harbour Road

Wan Chai, Hong Kong

Email: [email protected]

Phone: +852 2943 8571

3. Information We Collect

3.1 Information You Provide

We collect information you voluntarily provide when you:

• Submit inquiries through our contact form
• Communicate with us via email or phone
• Engage our consulting services
• Subscribe to communications or updates

This information may include:

• Name and contact details (email address, phone number)
• Professional information (company name, job title)
• Communication preferences
• Content of your inquiries or communications

3.2 Automatically Collected Information

When you visit our website, we may automatically collect:

• Technical data (IP address, browser type, operating system)
• Usage data (pages visited, time spent, navigation paths)
• Device information (device type, screen resolution)
• Cookies and similar tracking technologies (see our Cookie Policy)

4. How We Use Your Information

We use collected information for the following purposes:

4.1 Service Delivery

• Responding to your inquiries and providing information about our services
• Delivering consulting engagements and professional services
• Communicating about ongoing projects and deliverables
• Providing client support and assistance

4.2 Business Operations

• Managing client relationships and engagement administration
• Maintaining records for business and legal purposes
• Improving our services based on feedback and analysis
• Conducting internal quality assurance and training

4.3 Legal Compliance

• Complying with legal and regulatory obligations
• Protecting our legal rights and preventing fraud
• Responding to legal requests and processes

5. Legal Basis for Processing

We process your personal data based on:

• Contract: Processing necessary to provide services you have requested or engaged
• Consent: Where you have given explicit consent for specific processing activities
• Legitimate Interests: For business operations, service improvement, and maintaining client relationships
• Legal Obligation: To comply with applicable laws and regulations

6. Data Sharing and Disclosure

6.1 Third-Party Service Providers

We may share information with trusted third parties who assist in operating our website and conducting business, including:

• Website hosting and technical infrastructure providers
• Email communication platforms
• Analytics services (Google Analytics)
• Professional advisors (legal, accounting)

6.2 Legal Requirements

We may disclose information when required by law or to:

• Comply with legal processes or governmental requests
• Enforce our terms and conditions
• Protect our rights, property, or safety
• Prevent fraud or illegal activities

7. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Secure server infrastructure and regular security assessments
• Access controls limiting data access to authorized personnel only
• Regular staff training on data protection practices
• Incident response procedures for potential data breaches

8. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Specific retention periods include:

• Inquiry data: Retained for 2 years from last contact
• Client engagement data: Retained for 7 years following engagement completion (for professional and regulatory purposes)
• Website analytics: Retained for 26 months
• Marketing communications: Until you unsubscribe or withdraw consent

9. Your Rights

Under Hong Kong's Personal Data (Privacy) Ordinance and international data protection principles, you have the following rights:

• Access: Request access to your personal data we hold
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data (subject to legal obligations)
• Objection: Object to processing based on legitimate interests
• Restriction: Request restriction of processing in certain circumstances
• Data Portability: Receive your data in a structured, commonly used format
• Withdraw Consent: Withdraw consent for processing where consent was the legal basis

To exercise any of these rights, please contact us at [email protected]. We will respond to requests within one month.

10. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance user experience and analyze website usage. For detailed information about our cookie practices, please refer to our Cookie Policy.

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

12. Children's Privacy

Our services are intended for business and professional use. We do not knowingly collect personal data from individuals under 18 years of age. If you believe we have inadvertently collected such information, please contact us immediately.

13. International Data Transfers

While we primarily operate within Hong Kong, some of our service providers may be located in other jurisdictions. When transferring data internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions.

14. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable laws. We will notify you of significant changes by posting the updated policy on our website with a new effective date. Your continued use of our services after such changes constitutes acceptance of the updated policy.

15. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

16. Supervisory Authority

If you believe we have not addressed your data protection concerns adequately, you have the right to lodge a complaint with the Office of the Privacy Commissioner for Personal Data in Hong Kong.