Privacy Policy

1. Introduction

catalyst gen ("we," "our," or "us") is committed to protecting the privacy of individuals who interact with our business consulting services. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data in accordance with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong ("PDPO").

By using our website or engaging our services, you acknowledge that you have read and understood this Privacy Policy. If you have questions about our data practices, please contact us at [email protected].

2. Personal Data We Collect

We may collect the following categories of personal data:

2.1 Information You Provide Directly

• Name and contact details (email address, telephone number)
• Organisation name and job title
• Correspondence and communication records
• Information provided in consultation meetings
• Billing and payment information (if applicable)

2.2 Information Collected Automatically

• Device and browser information
• IP address and approximate location
• Pages visited and time spent on our website
• Referring website or search terms
• Cookie data (see our Cookie Policy)

3. How We Use Your Personal Data

We process personal data for the following purposes:

• Responding to inquiries and providing requested information
• Delivering consulting services as agreed upon
• Administering client relationships and contracts
• Processing payments and issuing invoices
• Improving our website and service offerings
• Sending relevant communications (with your consent where required)
• Complying with legal obligations and professional standards
• Protecting our legitimate business interests

4. Legal Basis for Processing

Under the PDPO, we process your personal data based on one or more of the following grounds:

• Consent: Where you have given us explicit permission
• Contractual necessity: To fulfil our obligations under a service agreement
• Legal compliance: To meet our regulatory and legal requirements
• Legitimate interests: To operate and improve our business, provided this does not override your rights

5. Disclosure of Personal Data

We may share your personal data with:

• Service providers: Third parties who assist with website hosting, analytics, payment processing, and professional services
• Professional advisers: Accountants, lawyers, and auditors as necessary
• Regulatory bodies: Government authorities when required by law
• Business transfers: In connection with any merger, acquisition, or sale of assets

We do not sell, rent, or trade your personal data to third parties for their marketing purposes.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including:

• Inquiry records: 2 years from last contact
• Client engagement records: 7 years after completion of services (as required for professional and tax purposes)
• Marketing preferences: Until you withdraw consent
• Website analytics data: 26 months

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

• Secure Socket Layer (SSL) encryption for data transmission
• Access controls limiting data access to authorised personnel
• Regular security assessments and updates
• Secure storage with reputable service providers
• Staff training on data protection practices

While we take reasonable precautions, no method of transmission over the Internet is completely secure. We cannot guarantee absolute security of your data.

8. Your Rights

Under the PDPO, you have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you
• Right of correction: Request correction of inaccurate or incomplete data
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time
• Right to opt out: Unsubscribe from marketing communications

To exercise these rights, please contact us at [email protected]. We may charge a reasonable fee for data access requests as permitted under the PDPO. We will respond to valid requests within 40 days.

9. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience and collect analytical data. For detailed information about the cookies we use and how to manage your preferences, please see our Cookie Policy.

10. Third-Party Websites

Our website may contain links to external websites. We are not responsible for the privacy practices of these third-party sites. We encourage you to review their privacy policies before providing any personal data.

11. Children's Privacy

Our services are intended for business professionals and are not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated policy will be posted on this page with a revised "Last Updated" date. We encourage you to review this policy periodically. Continued use of our services after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: