Privacy policy

This Policy explains what personal data we collect, how and why we use it, with whom it may be shared, and your rights in relation to it. We are committed to fair, transparent data practices and to safeguard your privacy at every touchpoint.

Introduction
Chau & Associates (“we”, “us”, “our”) is firmly committed to protecting the personal data of our website visitors, clients and business partners in accordance with:

• Hong Kong’s PDPO, which governs collection, use, retention and security of personal data (§ 6 Data Protection Principles).
• EU GDPR, which extends certain rights to individuals in the EEA (e.g. access, rectification, erasure).
  California’s CCPA, affording California residents rights to know, delete and opt-out of sale of their personal information.

Information We Collect
1. Personal Data You Provide Voluntarily
Contact details (e.g. name, email, phone) when you submit enquiry forms or subscribe to newsletters.
Professional information (e.g. firm, position) when requesting legal services.
We collect such data only for legitimate purposes, with your informed consent (§ DPP 1: Purpose and consent).
2. Automatically-Collected Data
Usage analytics (IP address, browser type, pages visited) via cookies and third-party analytics tools.
Device identifiers and session data to improve site performance.

How We Use Your Data
Service delivery: to respond to enquiries and provide legal advice.
Client relationship management: to schedule meetings, send updates, and manage engagements.
Site improvement: to analyze usage patterns and optimize functionality.
Marketing: with your opt-in consent, to send newsletters or event invitations.
Processing is limited to what is necessary for each purpose, in line with PDPO’s data minimization principle.

Cookies & Tracking Technologies
We employ cookies for authentication, site analytics and personalization. You may control or disable cookies via your browser settings, though this may affect site performance.

Third-Party Services
We engage trusted third parties (e.g. Google Analytics, CRM providers) as data processors. Under PDPO, we remain responsible for their compliance and require contractual safeguards to prevent unauthorized access or retention beyond what is necessary.

Data Retention
We retain personal data only as long as necessary for the purposes collected (e.g. client files for statutory limitation periods) and in accordance with our retention schedules. Our approach mirrors the PCPD’s retention principles to avoid keeping data longer than necessary.

Data Security
We deploy administrative, technical and physical safeguards (encryption, access controls, secure hosting) to guard against unauthorized access, disclosure, alteration or destruction of personal data, as mandated by PDPO’s security requirement.

Your Rights
Under Hong Kong PDPO
Access & correction: you may request to inspect and correct your personal data held by us.
Under EU GDPR (for EEA visitors)
Right of access: obtain confirmation of processing and a copy of your data.
Rectification, erasure (“right to be forgotten”): correct or delete data if grounds exist.
Restriction & objection: limit or object to certain processing activities.
Data portability: receive your data in a structured, commonly used electronic format.
Under CCPA (for California residents)
Right to know: request disclosure of categories of personal information collected and its purpose.
Right to delete: request deletion of personal information we hold.
Opt-out of sale: if applicable, opt-out of sharing or selling your personal information.
To exercise any of these rights, please contact us as below.

International Transfers
Personal data may be transferred to service providers or offices outside Hong Kong. Where applicable, we ensure that international transfers are subject to safeguards equivalent to those in Hong Kong (e.g. contractual clauses, binding corporate rules).

Children’s Privacy
Our website is not directed at individuals under 16. We do not knowingly collect personal data from minors. Should we become aware of such data, we will promptly delete it.

Changes to This Policy
We may update this Policy to reflect changes in legislation, technology or our data practices. We will post revisions on this page with the effective date.

Contact Us
For any questions or to exercise your rights, please contact:

Chau & Associates
Email: [email protected]
Address: Suite A, 13th Floor, Two Chinachem Plaza, 135 Des Voeux Road Central, Hong Kong.

Last updated: January 1, 2025