Privacy Policy

Introduction

Fortivex is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you engage with our business consulting services or visit our website.

We comply with the Personal Data (Privacy) Ordinance (PDPO) of Hong Kong and follow industry best practices for data protection. By using our services or providing us with your personal information, you acknowledge that you have read and understood this Privacy Policy.

For questions regarding this policy or data protection matters, please contact us at [email protected].

Data Collection Information

Personal Data We Collect

We collect the following categories of personal information:

• Contact details: name, email address, phone number, business address
• Professional information: job title, company name, industry sector
• Communication records: correspondence, consultation notes, engagement history
• Technical data: IP address, browser type, device information, website usage patterns

How We Collect Data

Personal data is collected through:

• Contact forms and inquiry submissions on our website
• Email correspondence and telephone conversations
• In-person consultations and business meetings
• Cookies and analytics tools when you visit our website
• Third-party platforms (LinkedIn, professional networks) with your consent

Legal Basis for Processing

We process your personal data based on:

• Consent: You have explicitly agreed to our data collection and use
• Contractual necessity: Processing is required to fulfill consulting services
• Legitimate interests: Business operations, client relationship management, service improvement
• Legal obligations: Compliance with Hong Kong regulations and professional standards

Data Retention

We retain personal data for:

• Active client data: Duration of engagement plus 7 years for professional records
• Inquiry data: 2 years from last contact if no engagement established
• Marketing communications: Until you unsubscribe or request deletion
• Website analytics: 26 months following Google Analytics standard retention

Data Usage Explanation

How We Use Your Data

Personal information is used for:

• Responding to inquiries and providing consulting services
• Scheduling consultations and managing client engagements
• Communicating project updates, reports, and recommendations
• Sending relevant industry insights and service information (with consent)
• Improving service quality through feedback analysis
• Complying with legal and regulatory requirements
• Maintaining business records and professional documentation

Third-Party Data Sharing

We may share limited personal data with:

• Service providers: Cloud hosting, email services, analytics platforms (Google Analytics)
• Professional advisors: Legal counsel, accountants, auditors (under confidentiality obligations)
• Regulatory authorities: When legally required for compliance purposes

We do not sell or rent personal data to third parties. All service providers are contractually bound to protect your information and use it only for specified purposes.

Marketing Communications

With your explicit consent, we may send:

• Industry insights and thought leadership content
• Service updates and consulting methodology developments
• Relevant event invitations and webinar announcements

You can unsubscribe at any time using the link in our communications or by contacting [email protected].

Data Protection Measures

Security Measures

We implement comprehensive security controls:

• Encrypted data transmission using SSL/TLS protocols
• Secure cloud storage with access controls and authentication
• Regular security audits and vulnerability assessments
• Staff training on data protection and confidentiality obligations
• Incident response procedures for potential data breaches

Access Controls

Personal data access is restricted to:

• Authorized personnel who require access for legitimate business purposes
• Role-based permissions ensuring minimum necessary access
• Audit logging of data access and modifications

Breach Notification

In the event of a data breach affecting your personal information, we will notify you within 72 hours and provide details about the incident, affected data, and remedial actions taken.

Cookie Information

Our website uses cookies to enhance functionality and analyze usage patterns. Cookies are small text files stored on your device.

Types of Cookies

• Essential cookies: Required for website functionality (cannot be disabled)
• Analytics cookies: Google Analytics to understand visitor behavior
• Preference cookies: Remember your settings and choices

For detailed information about our cookie usage and management options, please review our Cookie Policy.

User Rights Section

Under Hong Kong's Personal Data (Privacy) Ordinance, you have the following rights:

Access and Rectification

• Right to access: Request a copy of personal data we hold about you
• Right to correction: Request rectification of inaccurate or incomplete data

Data Portability and Erasure

• Right to data portability: Receive your data in structured, commonly used format
• Right to erasure: Request deletion of personal data (subject to legal retention requirements)

Processing Objections

• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Withdraw previously given consent at any time
• Right to restrict processing: Request limitation on how we use your data

Exercising Your Rights

To exercise any of these rights, contact us at [email protected]. We will respond within 40 days as required by Hong Kong law.

You also have the right to lodge a complaint with the Office of the Privacy Commissioner for Personal Data (PCPD) in Hong Kong if you believe we have not adequately addressed your concerns.

Third-Party Links

Our website may contain links to external sites operated by third parties. We are not responsible for the privacy practices or content of these external sites. We recommend reviewing their privacy policies before providing any personal information.

Children's Privacy

Our services are directed toward business professionals and organizations. We do not knowingly collect personal data from individuals under 18 years of age. If we become aware of such collection, we will delete the information promptly.

Policy Updates

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Material changes will be communicated through:

• Prominent notice on our website
• Email notification to registered contacts
• Updated "Last Updated" date at the top of this policy

Continued use of our services after policy updates constitutes acceptance of the revised terms.

Contact Information

For questions, concerns, or requests regarding this Privacy Policy or data protection: