Privacy Policy | Osmund Business Consulting

Osmund ("we", "us", "our") is committed to protecting the personal data of individuals who interact with our website and engage our services. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and what rights you have under applicable law. Our offices are located at 31/F, Jardine House, 1 Connaught Place, Central, Hong Kong.

1. Applicable Law

This policy is governed by Hong Kong's Personal Data (Privacy) Ordinance (Cap. 486) ("PDPO"). Where our clients are based in the European Union or other jurisdictions with applicable data protection law, we apply the relevant standards to the extent required.

2. Data We Collect

We collect personal data through the following means:

Contact forms: Name, email address, phone number, and any information you include in your message.
Cookies and analytics: Technical information including IP address, browser type, pages visited, and visit duration, collected through cookies and analytics tools. See our Cookie Policy for detail.
Engagement conduct: Information shared during consulting engagements is subject to separate confidentiality arrangements and is not governed by this policy.

3. Legal Basis for Processing

We process personal data on the following bases:

Your consent, given when you submit a contact form or accept optional cookies
Legitimate interests — responding to enquiries, maintaining website security, and improving our services
Contractual necessity — where processing is required to fulfil an engagement agreement

4. How We Use Your Data

To respond to enquiries submitted through our contact form
To communicate regarding potential or active consulting engagements
To maintain and improve this website
To comply with legal obligations

We do not sell personal data to third parties or use it for unsolicited marketing communications.

5. Data Retention

Contact form submissions are retained for up to 24 months, after which they are deleted unless they relate to an active engagement. Analytics data is retained in anonymised form for up to 26 months. Engagement-related information is subject to the retention terms agreed in the relevant engagement agreement.

6. Data Sharing

We do not share personal data with third parties except in the following limited circumstances:

Service providers who assist with website hosting, email, and analytics — bound by confidentiality agreements
Legal requirements — where disclosure is required by law or regulatory authority

All third-party service providers we engage are required to process personal data only as instructed by us and to maintain appropriate security standards.

7. Data Security

We apply technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, and destruction. These include encrypted data transmission (HTTPS), access controls limiting data to named personnel, and regular review of security practices. In the event of a data breach that is likely to result in risk to affected individuals, we will notify them and, where applicable, the Office of the Privacy Commissioner for Personal Data in Hong Kong.

8. Cookies

This website uses cookies. For information about the types of cookies we use and how to manage your preferences, please see our Cookie Policy.

9. Your Rights

Under the PDPO, you have the right to:

Request access to the personal data we hold about you
Request correction of inaccurate data
Request deletion of data that is no longer necessary for the purpose it was collected
Withdraw consent for processing based on consent
Lodge a complaint with the Office of the Privacy Commissioner for Personal Data (Hong Kong)

To exercise any of these rights, please contact us at privacy@{{DOMAIN}}. We will respond within 40 days as required under the PDPO.

10. Third-Party Links

This website may contain links to external sites. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before providing personal data.

11. Children

Our services are directed at organisations and individuals aged 18 or over. We do not knowingly collect personal data from persons under 18. If you believe a minor has submitted data through our site, please contact us promptly.

12. Changes to This Policy

We may update this policy from time to time. Where changes are material, we will update the "Last Updated" date at the top of this page. Continued use of this website following any update constitutes acceptance of the revised policy.

13. Contact

For questions, data access requests, or concerns relating to this policy, please contact:

Osmund
31/F, Jardine House, 1 Connaught Place, Central, Hong Kong
Email: privacy@{{DOMAIN}}
Phone: +852 2731 8564