Privacy Policy
Last Updated: January 23, 2026
Elmkraft is committed to protecting your privacy and handling your personal data with transparency and care. This Privacy Policy explains how we collect, use, store, and protect information about you when you interact with our consulting services or visit our website.
For questions about this policy or how we handle your data, please contact us at [email protected].
1. Information We Collect
Personal Data You Provide
When you contact us for consulting services or inquire about our offerings, we collect information you voluntarily provide, which may include:
- Name and professional title
- Business email address and phone number
- Company name and industry
- Information about your consulting needs and organizational challenges
- Any other information you choose to share in correspondence
Usage Information
When you visit our website, we automatically collect certain technical information through cookies and similar technologies:
- IP address and approximate geographic location
- Browser type and version
- Pages visited and time spent on each page
- Referring website and search terms used to find us
- Device information and operating system
2. How We Use Your Information
We use the information we collect for the following purposes:
- Service Delivery: To respond to inquiries, provide consulting services, and communicate about engagements
- Contract Performance: To fulfill our obligations under consulting agreements and deliver agreed-upon services
- Business Operations: To maintain records, manage client relationships, and improve our service offerings
- Website Improvement: To analyze how visitors use our website and enhance user experience
- Legal Compliance: To comply with applicable laws, regulations, and professional standards
- Communications: To send you information about our services if you have opted to receive such communications (you may opt out at any time)
3. Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Consent: When you provide information through our contact forms or subscribe to communications
- Contract Performance: When processing is necessary to deliver consulting services you have engaged us to provide
- Legitimate Interests: For business operations, service improvement, and maintaining client relationships, provided your interests and rights do not override these purposes
- Legal Obligations: When required to comply with applicable laws and regulations
4. Data Sharing and Disclosure
We do not sell or rent your personal information. We may share your data in the following limited circumstances:
- Service Providers: We may share information with trusted third-party service providers who assist with website hosting, analytics, email communications, or other business operations. These providers are contractually obligated to protect your data and use it only for the purposes we specify.
- Professional Obligations: We may disclose information when required by law, court order, or regulatory authority, or when necessary to protect our legal rights.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.
We do not share client information with other clients or use your data for marketing purposes beyond our own services.
5. Data Retention
We retain your personal data for as long as necessary to fulfill the purposes outlined in this policy:
- Inquiry information: 2 years from last contact if no engagement proceeds
- Client engagement data: 7 years following completion of services, as required for professional record-keeping
- Website analytics: 26 months, in line with standard analytics retention
- Marketing communications: Until you unsubscribe or request deletion
After the retention period expires, we securely delete or anonymize your information.
6. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction:
- Secure servers with encryption for data transmission and storage
- Access controls limiting data access to authorized personnel only
- Regular security assessments and updates
- Secure backup procedures and disaster recovery protocols
- Employee training on data protection obligations
While we take data security seriously, no method of transmission or storage is completely secure. We cannot guarantee absolute security but maintain industry-standard protections.
7. Cookies and Tracking Technologies
Our website uses cookies and similar technologies to enhance your browsing experience and analyze site usage. We use:
- Essential Cookies: Required for basic website functionality and security
- Analytics Cookies: To understand how visitors use our site and improve user experience
- Preference Cookies: To remember your settings and preferences
You can manage cookie preferences through your browser settings or our cookie consent tool. For more information, please see our Cookie Policy.
8. Your Rights and Choices
Under Hong Kong's Personal Data (Privacy) Ordinance and other applicable privacy laws, you have the following rights regarding your personal data:
- Right to Access: Request a copy of the personal data we hold about you
- Right to Rectification: Request correction of inaccurate or incomplete data
- Right to Erasure: Request deletion of your data where there is no compelling reason for continued processing
- Right to Data Portability: Receive your data in a structured, commonly used format
- Right to Object: Object to processing based on legitimate interests or for direct marketing purposes
- Right to Withdraw Consent: Withdraw consent for processing where consent was the legal basis
- Right to Restriction: Request limitation of processing in certain circumstances
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month.
You also have the right to lodge a complaint with the Office of the Privacy Commissioner for Personal Data in Hong Kong if you believe we have not handled your data appropriately.
9. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.
10. International Data Transfers
As we operate primarily in Hong Kong, your personal data is generally stored and processed within Hong Kong. If we transfer data outside Hong Kong, we ensure appropriate safeguards are in place to protect your information in accordance with applicable privacy laws.
11. Children's Privacy
Our services are directed at businesses and professionals. We do not knowingly collect personal information from individuals under the age of 18. If we become aware that we have collected data from someone under 18, we will take steps to delete such information.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of material changes by updating the "Last Updated" date at the top of this policy and, where appropriate, by contacting you directly. We encourage you to review this policy periodically.
13. Contact Information
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Elmkraft
17/F, Tower 535, 535 Jaffe Road
Causeway Bay, Hong Kong
Email: [email protected]
Phone: +852 2485 7369