Privacy Policy

Siu Fung Advisors Limited (“we,” “our,” or “us”) respects your privacy and is committed to handling personal data responsibly and transparently. This Privacy Policy explains how we collect, use, disclose, and protect personal data when you visit siufungadvisors.com (the “Website”) or engage with our professional services.

We operate from Hong Kong and serve clients in global markets. Where applicable, we comply with the Hong Kong Personal Data (Privacy) Ordinance (“PDPO”) and, when processing personal data of individuals in the European Economic Area (“EEA”), we process such data in accordance with the General Data Protection Regulation (“GDPR”).

---

1. Who We Are (Controller Details)

For GDPR purposes, Siu Fung Advisors Limited is the data controller for personal data processed through this Website and in the course of our professional services (unless otherwise agreed in writing).

2. Personal Data We Collect

We may collect and process the following categories of personal data:

• Contact and identity data: name, business email address, phone number, company name, job title.
• Communications data: information you submit via forms, email, phone, or other correspondence.
• Technical and usage data: IP address, browser type/version, device identifiers, operating system, pages viewed, referring URLs, approximate location derived from IP, and interaction data.
• Cookies and similar technologies: see Section 7 for details.

3. How We Use Personal Data

We use personal data for the following purposes:

• To respond to inquiries and communicate with you.
• To provide, manage, and improve our professional services.
• To operate, maintain, secure, and improve the Website.
• To comply with legal obligations and maintain appropriate records.
• To protect our rights, business operations, and the security of our systems.

We do not sell personal data.

4. Legal Bases (GDPR)

Where GDPR applies, we rely on one or more of the following legal bases:

• Consent: where you have given consent (e.g., certain cookies or optional communications).
• Contract: where processing is necessary to perform a contract with you or take pre-contractual steps.
• Legal obligation: where required to meet legal or regulatory requirements.
• Legitimate interests: where necessary for our legitimate interests (e.g., business operations, security, improving services), provided such interests are not overridden by your rights.

5. PDPO Compliance (Hong Kong)

Under the PDPO, we collect personal data for lawful purposes directly related to our functions and activities, and we take practicable steps to ensure personal data is accurate, protected, and retained only as long as necessary. Where required, we will obtain your consent for new purposes that are not directly related to the original purpose of collection.

6. Sharing and Disclosure

We may share personal data on a need-to-know basis with:

• Service providers supporting hosting, IT, security, analytics, communications, and business operations.
• Professional advisors (e.g., legal, compliance, accounting) where necessary.
• Authorities where required by law, regulation, or lawful request.

Where we use service providers, we require them to protect personal data through confidentiality and appropriate security measures.

7. Cookies and Similar Technologies

Cookies are small files placed on your device to enable site functionality and help us understand how the Website is used. Depending on your configuration, we may use: necessary cookies (essential for the site), and analytics cookies (to understand usage and improve performance).

You can control cookies via your browser settings and, where applicable, via cookie preference tools provided on the Website. Disabling certain cookies may affect functionality.

8. International Data Transfers

Because we operate globally, personal data may be transferred to and processed in locations outside your country of residence, including Hong Kong and other jurisdictions where our partners or service providers operate. Where GDPR applies and personal data is transferred outside the EEA/UK, we implement appropriate safeguards such as Standard Contractual Clauses (or other lawful transfer mechanisms) and reasonable security measures.

9. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described in this Policy, including to provide services, maintain business records, resolve disputes, enforce agreements, and comply with legal and regulatory requirements.

10. Security

We apply reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. While we strive to protect your data, no internet transmission or storage system can be guaranteed to be 100% secure.

11. Your Rights

Hong Kong (PDPO): You may request access to and correction of personal data we hold about you, in accordance with the PDPO.

EEA/UK (GDPR): Where GDPR applies, you may have the right to request:

• Access to your personal data
• Correction of inaccurate or incomplete data
• Deletion (erasure) in certain circumstances
• Restriction of processing in certain circumstances
• Data portability (where applicable)
• Objection to processing based on legitimate interests or direct marketing
• Withdrawal of consent (where processing is based on consent)

You also have the right to lodge a complaint with your local supervisory authority if you believe your data protection rights have been infringed.

12. Third-Party Links

The Website may contain links to external websites. We are not responsible for the content or privacy practices of third-party sites. We encourage you to review their privacy policies before providing personal data.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page and indicated by the “Last updated” date.

14. Contact Us

If you have questions, requests, or concerns about this Privacy Policy or our handling of personal data, please contact: