Privacy Policy

1. Introduction

Mosaic Consulting ("we," "our," or "us") is committed to protecting your personal information and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or engage our consulting services.

We are based in Hong Kong and comply with the Personal Data (Privacy) Ordinance (Cap. 486) ("PDPO") and applicable data protection principles. By using our website or services, you consent to the practices described in this policy.

If you have questions about this policy, please contact us at [email protected].

2. Information We Collect

2.1 Personal Information You Provide

We may collect personal information that you voluntarily provide when you:

• Complete our contact form or request information
• Engage our consulting services
• Subscribe to our communications
• Correspond with us via email or telephone

This information may include:

• Name and title
• Business email address
• Telephone number
• Company name and position
• Business address
• Information contained in your communications with us

2.2 Automatically Collected Information

When you visit our website, we may automatically collect certain information, including:

• IP address and general location information
• Browser type and version
• Operating system
• Pages visited and time spent on our website
• Referring website addresses
• Device information

This information is collected through cookies and similar technologies. Please see our Cookie Policy for more details.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To respond to your enquiries, provide consulting services, and manage our client relationships
• Communication: To send you information you have requested or that may be relevant to your interests
• Website Improvement: To analyse how visitors use our website and improve our online presence
• Legal Compliance: To comply with applicable laws, regulations, and legal processes
• Business Operations: To manage our business relationships and internal administration

4. Legal Basis for Processing

Under the PDPO and general data protection principles, we process your personal data based on:

• Consent: Where you have given clear consent for us to process your personal data for specific purposes
• Contractual Necessity: Where processing is necessary to perform our contractual obligations to you
• Legitimate Interests: Where processing is necessary for our legitimate business interests, provided these do not override your rights
• Legal Obligation: Where processing is necessary to comply with legal requirements

5. Data Sharing and Disclosure

We may share your personal information with:

• Service Providers: Third parties who provide services on our behalf, such as website hosting, analytics, and professional advisers
• Legal Requirements: Government authorities or law enforcement officials when required by law
• Business Transfers: In connection with any merger, acquisition, or sale of company assets

We do not sell your personal information to third parties for marketing purposes.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Secure data transmission using encryption
• Access controls limiting who can access personal data
• Regular security assessments and updates
• Staff training on data protection

While we strive to protect your information, no method of transmission over the internet is completely secure. We cannot provide absolute assurance of information security.

7. Data Retention

We retain your personal information for as long as necessary to fulfil the purposes for which it was collected, including:

• Contact enquiries: Up to 2 years after last contact
• Client engagement records: 7 years after completion of services
• Website analytics data: Up to 26 months

We may retain certain information longer where required by law or for legitimate business purposes.

8. Your Rights

Under Hong Kong's PDPO and applicable data protection laws, you have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete personal data
• Erasure: Request deletion of your personal data in certain circumstances
• Objection: Object to processing of your personal data for direct marketing
• Withdrawal of Consent: Withdraw consent where processing is based on consent

To exercise these rights, please contact us at [email protected]. We will respond to requests within 40 days as required by the PDPO.

9. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

10. Children's Privacy

Our website and services are intended for business professionals and are not directed at individuals under 18 years of age. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected such information, please contact us immediately.

11. International Data Transfers

As a Hong Kong-based company, your data is primarily processed in Hong Kong. If we transfer data outside Hong Kong, we will ensure appropriate safeguards are in place to protect your information in accordance with the PDPO.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated policy on our website with a revised "Last Updated" date. We encourage you to review this policy periodically.

13. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Mosaic Consulting
Unit 1106, 11/F, Bank of America Tower
12 Harcourt Road, Central
Hong Kong

Email: [email protected]
Phone: +852 2574 8362

14. Complaints

If you are dissatisfied with how we handle your personal data, you have the right to lodge a complaint with the Office of the Privacy Commissioner for Personal Data (PCPD) in Hong Kong:

Website: www.pcpd.org.hk