Privacy Policy

Effective Date: [XCOMPANYDATEX]

Oceanic Risk Management is committed to protecting your personal data in accordance with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong. This Privacy Policy explains what personal data we collect, how we use it, whether it is shared, and your rights in relation to your data.

By using this website or submitting personal data to us, you acknowledge and accept the practices described in this Policy.

  • Personal Data We Collect

    We may collect and process the following categories of personal data:

    • Name and contact details, including email address, telephone number, and business address
    • Company name, job title, and professional details
    • Identification details provided during service enquiries
    • Correspondence records and enquiry information
    • Technical data such as IP address, browser type, device information, and usage data
    • Any other information voluntarily provided to us

    Provision of certain personal data may be necessary for us to respond to enquiries or provide services.

  • Whether Provision of Data Is Obligatory or Voluntary

    Providing personal data is generally voluntary.

    However, where personal data is required for the purpose of processing an enquiry, entering into a contract, or delivering services, failure to provide such data may prevent us from fulfilling your request or providing services.

  • Purposes of Collection and Use

    Personal data collected may be used for the following purposes:

    • Responding to enquiries and communications
    • Providing and administering professional services
    • Managing client relationships
    • Conducting internal administrative and operational activities
    • Improving website functionality and user experience
    • Complying with legal or regulatory obligations
    • Protecting our legal rights and interests

    Personal data will only be used for purposes directly related to the purpose of collection unless further consent is obtained or permitted under law.

  • Direct Marketing

    We may use your personal data for direct marketing purposes, including sending information about our services, updates, or relevant industry insights.

    We will only use your personal data for direct marketing where:

    • You have given your consent; or
    • You have not objected where consent is permitted under applicable law

    You may opt out of receiving marketing communications at any time by contacting us using the details provided below.

  • Classes of Transferees

    Your personal data may be transferred or disclosed to the following classes of recipients where necessary:

    • Employees and authorised personnel of Oceanic Risk Management
    • Professional advisers, including legal, accounting, or compliance advisers
    • IT service providers, hosting providers, and technology vendors
    • Payment processors and administrative service providers
    • Regulatory authorities or governmental bodies where required by law

    We ensure that recipients handle personal data in accordance with applicable legal requirements.

  • Cross-Border Transfers

    Personal data may be transferred to and processed in jurisdictions outside Hong Kong for secure hosting, storage, or operational support.

    Where cross-border transfers occur, we take reasonable steps to ensure that the transferred personal data is protected to a standard comparable to that required under Hong Kong law.

  • Data Security

    We implement appropriate technical and organisational measures to safeguard personal data, including:

    • Secure hosting environments
    • Encryption technologies such as SSL
    • Access controls restricting data access to authorised personnel
    • Internal policies and procedures governing data handling

    While we take reasonable precautions, no method of transmission over the internet is completely secure.

  • Data Retention

    Personal data will be retained only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law or regulatory obligations.

    When data is no longer required, it will be securely deleted or anonymised.

  • Your Rights

    Under the Personal Data (Privacy) Ordinance, you have the right to:

    • Request access to your personal data
    • Request correction of inaccurate or incomplete personal data

    Requests must be made in writing and may be subject to a reasonable administrative fee where permitted by law.

    To exercise your rights or make enquiries about your personal data, please contact:

    Email: [XCOMPANYEMAILX]
    Address: [XCOMPANYADDRESSX]

  • Changes to This Policy

    We may update this Privacy Policy from time to time. Updates will be published on this page, and continued use of the website constitutes acceptance of the revised Policy.