Dataapiconnect

Privacy Policy

Data controller

Dataapiconnect is the data controller for personal data submitted through dataapiconnect.digital and collected in the course of client engagements. Contact: info@dataapiconnect.digital, +852 2842 8111, St. George’s Building, 2 Ice House Street, Central, Hong Kong.

Data we collect

  • Enquiry forms: name, email, organisation, selected review type, and message content
  • Engagement files: contact details of nominated staff, and documents you supply that may incidentally contain personal data
  • Technical data: standard server logs (IP address, browser type, timestamps) and, if you accept analytics cookies, aggregated usage data — see our Cookies page

We do not ask for identity card numbers, bank passwords, or health data through the website form.

Purposes

We use personal data to respond to enquiries, perform contracted reviews, issue invoices, meet legal and professional obligations, and improve site reliability.

Where the Personal Data (Privacy) Ordinance (PDPO) of Hong Kong applies, we process data as needed to take steps at your request before a contract, to perform a contract, to comply with law, or with your consent (for example, non-essential cookies).

Retention

Enquiry messages are retained up to twenty-four months if no engagement follows. Engagement working papers and correspondence are retained for seven years after the engagement ends, or longer if a funder or legal process requires. Server logs are typically rotated within ninety days.

Sharing

We do not sell personal data. We may share data with IT hosting providers under confidentiality terms, with professional advisers, or when required by law or a competent authority in Hong Kong.

International transfers

Our primary operations are in Hong Kong. If a hosting or email provider processes data outside Hong Kong, we take reasonable steps to ensure comparable protection consistent with the PDPO.

Your rights

Subject to the PDPO, you may request access to and correction of your personal data. To exercise these rights, email info@dataapiconnect.digital. You may lodge a complaint with the Office of the Privacy Commissioner for Personal Data, Hong Kong.

Security

We use access controls, encrypted transport for the website, and need-to-know restrictions on engagement files. No method of transmission is perfectly secure; please avoid sending highly sensitive identifiers through the public contact form.

Children

Our services are directed at organisations and adult professionals. We do not knowingly collect data from children through this site.

Updates

We may update this policy by posting a revised version here with an updated effective context. Material changes to engagement-related processing will also be communicated to active clients where appropriate.