Privacy Policy

1. Introduction

Cantilever Group ("we", "our", or "us") is committed to protecting your privacy and handling your personal data responsibly. This Privacy Policy explains how we collect, use, store, and protect your personal information when you interact with our business consulting services or visit our website.

This policy applies to information we collect through our website, via email, telephone, or in-person consultations. By engaging with our services or using our website, you acknowledge that you have read and understood this Privacy Policy.

For questions regarding this policy or your personal data, please contact us at [email protected].

2. Data Controller

The data controller responsible for your personal information is:

3. Information We Collect

We collect personal information in several ways:

3.1 Information You Provide

When you contact us, request a consultation, or engage our services, you may provide: your name, email address, telephone number, company name and position, business information relevant to our consulting engagement, and any other information you choose to share with us.

3.2 Automatically Collected Information

When you visit our website, we may automatically collect: IP address and browser type, device information, pages visited and time spent on site, referring website addresses, and general location data derived from IP address.

3.3 Cookies

We use cookies and similar technologies to enhance your browsing experience and analyse website traffic. For detailed information about our cookie usage, please see our Cookie Policy.

4. How We Use Your Information

We use your personal information for the following purposes:

• Service Delivery: To provide our business consulting services, including capability extension advisory, market reach consultation, and service expansion planning.
• Communication: To respond to your enquiries, schedule consultations, and provide updates relevant to our engagement.
• Website Improvement: To analyse how visitors use our website and improve its functionality and content.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes in Hong Kong.

5. Legal Basis for Processing

We process your personal data on the following legal grounds:

• Contractual Necessity: Processing necessary to perform our consulting services or take steps prior to entering a contract.
• Consent: Where you have given explicit consent for specific processing activities, such as marketing communications.
• Legitimate Interests: Processing necessary for our legitimate business interests, such as improving our services and website.
• Legal Obligation: Processing necessary to comply with legal requirements under Hong Kong law.

6. Data Sharing and Disclosure

We do not sell your personal information. We may share your data with:

• Service Providers: Third-party vendors who assist with website hosting, analytics, and business operations, bound by confidentiality agreements.
• Legal Authorities: When required by law, court order, or regulatory requirement in Hong Kong.
• Professional Advisors: Our accountants, lawyers, or auditors when necessary for professional advice.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using SSL/TLS protocols
• Secure storage systems with access controls
• Staff training on data protection and confidentiality
• Regular review of security practices

8. Data Retention

We retain your personal information for as long as necessary to fulfil the purposes for which it was collected, including:

• Client Records: Seven years after the conclusion of our engagement, as required for professional and legal purposes.
• Enquiry Records: Two years from the date of your last communication with us.
• Website Analytics: Twenty-six months from the date of collection.

9. Your Rights

Under the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong, you have rights regarding your personal data:

• Right of Access: You may request a copy of the personal data we hold about you.
• Right of Correction: You may request correction of inaccurate personal data.
• Right to Opt-Out: You may opt out of receiving marketing communications at any time.

To exercise these rights, please contact us at [email protected]. We will respond to your request within 40 days.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

11. Children's Privacy

Our services are intended for business professionals and are not directed at individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child without appropriate consent, we will take steps to delete that information.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will post any changes on this page with an updated "Last Updated" date. We encourage you to review this policy periodically. Your continued use of our services after any changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us: