Privacy Policy

1. Introduction

Latitude Consulting ("we", "our", or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website, use our services, or otherwise interact with us.

We operate from Hong Kong and are committed to compliance with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong. Where applicable, we also adhere to international data protection standards including the General Data Protection Regulation (GDPR) for our European clients.

For any privacy-related enquiries, please contact us at [email protected].

2. Information We Collect

We may collect and process the following categories of personal data:

2.1 Information You Provide

When you contact us, request our services, or fill out forms on our website, you may provide us with personal information including your name, email address, telephone number, company name, job title, and details about your business consulting requirements.

2.2 Information Collected Automatically

When you visit our website, we may automatically collect certain information about your device and usage patterns, including your IP address, browser type, operating system, referring URLs, pages visited, time spent on pages, and other analytical data.

2.3 Cookies and Similar Technologies

We use cookies and similar tracking technologies to enhance your browsing experience and gather information about how our website is used. For detailed information about our cookie practices, please refer to our Cookie Policy.

3. How We Use Your Information

We use the personal information we collect for the following purposes:

• To provide and deliver our consulting services to you
• To respond to your enquiries and communicate with you about our services
• To send you relevant information about our services, with your consent where required
• To improve our website, services, and customer experience
• To comply with legal obligations and protect our legitimate business interests
• To maintain records of our business relationships and transactions

4. Legal Basis for Processing

We process your personal data on the following legal grounds:

• Consent: Where you have given explicit consent for specific processing activities
• Contract: Where processing is necessary for the performance of a contract with you
• Legitimate Interests: Where processing is necessary for our legitimate business interests, provided these do not override your rights
• Legal Obligation: Where processing is necessary to comply with applicable laws

5. Data Sharing and Disclosure

We may share your personal information with:

• Service Providers: Third-party vendors who assist us in operating our website and delivering services (e.g., hosting providers, analytics services)
• Professional Advisers: Lawyers, accountants, and other professional advisers as necessary
• Legal Requirements: Government authorities or law enforcement when required by law or to protect our legal rights
• Business Transfers: In connection with any merger, acquisition, or sale of company assets

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Secure server infrastructure with encryption protocols
• Access controls limiting data access to authorised personnel
• Regular security assessments and updates
• Staff training on data protection practices
• Secure data backup and recovery procedures

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security but will notify you of any data breach that may affect your rights in accordance with applicable laws.

7. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. Typical retention periods are:

• Client records and project documentation: 7 years after completion of engagement
• Marketing communications consent records: Duration of consent plus 2 years
• Website analytics data: 26 months
• Enquiry records: 3 years from last contact

8. Your Rights

Under applicable data protection laws, you may have the following rights regarding your personal information:

• Right of Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data under certain circumstances
• Right to Restrict Processing: Request limitation of how we use your data
• Right to Data Portability: Request transfer of your data in a structured format
• Right to Object: Object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 40 days as required under Hong Kong law.

9. International Data Transfers

As a consulting firm working with international clients, we may transfer your personal information to countries outside Hong Kong. When we do so, we ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable data protection laws.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party websites you visit.

11. Children's Privacy

Our services are intended for business professionals and are not directed at individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us so we can delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will post any changes on this page with an updated revision date. We encourage you to review this policy periodically.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

14. Supervisory Authority

If you are not satisfied with our response to a privacy concern, you have the right to lodge a complaint with the Office of the Privacy Commissioner for Personal Data, Hong Kong. Visit www.pcpd.org.hk for more information.