Privacy Policy

Introduction

Thalweg is committed to protecting the privacy and security of personal information. This Privacy Policy explains how we collect, use, protect, and handle your personal data in accordance with Hong Kong's Personal Data (Privacy) Ordinance and other applicable privacy regulations.

By using our website or engaging our services, you consent to the collection and use of your information as described in this policy. If you have questions about our data practices, please contact us at [email protected].

Information We Collect

Personal Information

We collect personal information that you voluntarily provide when you:

• Submit inquiries through our contact form
• Request consulting services or information
• Engage us for a consulting project
• Subscribe to our communications

This information may include your name, email address, phone number, company name, job title, and details about your inquiry or project requirements.

Automatically Collected Information

When you visit our website, we automatically collect certain information about your device and browsing behavior, including:

• IP address and general location information
• Browser type and version
• Pages visited and time spent on our site
• Referring website addresses

We collect this information through cookies and similar technologies. For more details, please see our Cookie Policy.

How We Use Your Information

We use your personal information for the following purposes:

• To respond to your inquiries and provide requested information
• To deliver consulting services and manage client engagements
• To communicate with you about our services, including updates and proposals
• To improve our website and services based on your feedback
• To comply with legal obligations and regulatory requirements
• To analyze website usage and optimize user experience

We process your data based on legitimate interests, contractual necessity, and your consent where applicable.

Data Sharing and Disclosure

We do not sell or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: We may engage trusted third-party service providers to help us operate our website, conduct business activities, or provide services on our behalf. These providers have access to personal information only as needed to perform their functions and are obligated to protect it.
• Legal Requirements: We may disclose your information if required by law, court order, or governmental regulation, or if we believe disclosure is necessary to protect our rights or comply with legal processes.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections.

Data Protection Measures

We implement appropriate technical and organizational security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Access controls and authentication procedures
• Regular security assessments and monitoring
• Secure storage systems with backup procedures
• Employee training on data protection practices

While we strive to protect your information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but maintain industry-standard protections.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

• Client engagement records: 7 years after engagement completion
• Inquiry and contact form submissions: 3 years from submission
• Marketing communications: Until you unsubscribe or request deletion
• Website analytics data: 26 months

When information is no longer needed, we securely delete or anonymize it in accordance with our data retention schedule.

Your Privacy Rights

Under Hong Kong's Personal Data (Privacy) Ordinance, you have the following rights regarding your personal information:

• Right of Access: You may request a copy of the personal information we hold about you.
• Right to Correction: You may request that we correct any inaccurate or incomplete information.
• Right to Erasure: You may request that we delete your personal information, subject to certain legal exceptions.
• Right to Object: You may object to the processing of your information for direct marketing purposes.
• Right to Withdraw Consent: Where we rely on your consent to process information, you may withdraw that consent at any time.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month.

Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience and analyze site usage. Cookies are small text files stored on your device that help us recognize you on return visits.

We use the following types of cookies:

• Essential Cookies: Necessary for the website to function properly
• Analytics Cookies: Help us understand how visitors interact with our site
• Preference Cookies: Remember your settings and preferences

For detailed information about our cookie practices and how to manage your preferences, please see our Cookie Policy.

Third-Party Links

Our website may contain links to third-party websites for your convenience and information. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected information from a child under 18, we will take steps to delete it promptly.

International Data Transfers

Our primary operations are in Hong Kong. If you are accessing our services from outside Hong Kong, please be aware that your information may be transferred to, stored, and processed in Hong Kong. We ensure appropriate safeguards are in place for international data transfers in accordance with applicable privacy laws.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated policy on this page with a revised "Last Updated" date.

We encourage you to review this Privacy Policy periodically. Your continued use of our services after any changes indicates your acceptance of the updated policy.

Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Supervisory Authority

If you believe we have not adequately addressed your privacy concerns, you have the right to lodge a complaint with the Office of the Privacy Commissioner for Personal Data in Hong Kong.