Privacy Policy

1. Introduction

Catalystgens ("we", "our", or "us") is committed to protecting the privacy of individuals who interact with our business consulting services. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with Hong Kong's Personal Data (Privacy) Ordinance (Cap. 486).

This policy applies to information collected through our website, consulting engagements, and any other interactions you may have with us. We encourage you to read this policy carefully and contact us if you have any questions.

For privacy-related enquiries, please contact us at [email protected].

2. Data We Collect

We collect personal data that you voluntarily provide to us, as well as certain information collected automatically when you use our website. The types of personal data we may collect include:

Information you provide directly: Your name, email address, telephone number, company name, job title, and any other information you include in correspondence with us or in our contact forms.

Engagement-related data: During consulting engagements, we may collect business information necessary to provide our services, including organisational data, operational metrics, and related documentation.

Automatically collected data: When you visit our website, we may collect technical information such as your IP address, browser type, device information, pages visited, and referring website. This information is collected through cookies and similar technologies.

3. How We Use Your Data

We use the personal data we collect for the following purposes:

Service delivery: To provide our consulting services, respond to your enquiries, and communicate with you about engagements.

Business operations: To manage our relationship with you, process payments, and maintain accurate records of our engagements.

Communications: To send you information about our services that may be of interest, though only where you have consented to receive such communications.

Website improvement: To analyse how visitors use our website and improve its functionality and content.

Legal compliance: To comply with applicable laws, regulations, and legal processes.

4. Legal Basis for Processing

We process your personal data on the following legal grounds:

Contract performance: Processing necessary to fulfil our contractual obligations when you engage our services.

Legitimate interests: Processing necessary for our legitimate business interests, such as improving our services and maintaining security, where these interests do not override your rights.

Consent: Where you have provided explicit consent for specific processing activities, such as marketing communications.

5. Data Sharing

We do not sell your personal data. We may share your data with:

Service providers: Third-party vendors who assist with our operations, such as IT services, payment processing, and professional advisors. These parties are bound by confidentiality obligations.

Legal requirements: Government authorities or law enforcement when required by law or to protect our rights and safety.

Business transfers: In connection with any merger, acquisition, or sale of business assets, your data may be transferred as part of that transaction.

6. Data Retention

We retain personal data for as long as necessary to fulfil the purposes for which it was collected, including:

Enquiry data: Retained for up to 2 years following our last interaction unless an engagement commences.

Client engagement data: Retained for 7 years following the completion of an engagement to comply with legal and regulatory requirements.

Website analytics: Aggregated data may be retained indefinitely; identifiable data is retained for up to 26 months.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

Encryption of data in transit and at rest where appropriate. Access controls limiting data access to authorised personnel. Regular security assessments and updates to our security practices. Confidentiality agreements with staff and contractors who handle personal data.

While we strive to protect your data, no method of transmission over the internet is completely secure. We cannot fully eliminate security risks but are committed to maintaining industry-standard protections.

8. Cookies

Our website uses cookies and similar technologies to enhance your browsing experience. We use essential cookies for website functionality, analytics cookies to understand site usage, and marketing cookies where you have consented.

For detailed information about the cookies we use and your choices, please see our Cookie Policy.

9. Your Rights

Under Hong Kong's Personal Data (Privacy) Ordinance, you have the following rights regarding your personal data:

Right of access: You may request access to the personal data we hold about you.

Right of correction: You may request that we correct any inaccurate personal data.

Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time.

Right to opt-out: You may opt-out of receiving marketing communications at any time.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 40 days as required by law.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any website you visit.

11. Children's Privacy

Our services are intended for business professionals and are not directed at individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically.

13. Contact Information

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

14. Supervisory Authority

If you are not satisfied with our response to any privacy concern, you have the right to lodge a complaint with the Office of the Privacy Commissioner for Personal Data, Hong Kong.