top of page

Privacy Policy

Last updated: January 2026

1. Introduction

Arlun Advisory (“we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store and disclose personal information in accordance with:

  • Hong Kong Personal Data (Privacy) Ordinance (Cap. 486) (PDPO)

  • Australian Privacy Act 1988 (Cth) and Australian Privacy Principles (APPs)

  • UK General Data Protection Regulation (UK GDPR)

  • EU General Data Protection Regulation (EU GDPR)

 

By accessing or using our website, you acknowledge and agree to the practices described in this Privacy Policy.

 

2. Personal Data We Collect

We may collect personal data including:

  • Name

  • Email address

  • Phone number

  • Company or organisation name

  • Any information you voluntarily provide via forms, enquiries, or correspondence

We may also collect technical and usage data such as:

  • IP address

  • Browser type and version

  • Device information

  • Pages visited, time spent, and interaction data

3. How We Collect Personal Data

We collect personal data when you:

  • Visit or browse our website

  • Submit an enquiry or contact form

  • Subscribe to communications

  • Contact us directly by email or phone

 

Some data is collected automatically through cookies and analytics technologies.

4. Purpose of Collection and Use

  • We collect and use personal data for the following purposes:

  • Responding to enquiries and providing services

  • Communicating with clients and prospective clients

  • Operating, maintaining, and improving our website

  • Internal administration and business operations

  • Complying with legal and regulatory obligations

 

We will not use personal data for new purposes without obtaining consent where required by law.

5. Legal Basis for Processing (GDPR)

Where GDPR applies, we process personal data on the following lawful bases:

  • Consent – where you have provided clear consent

  • Contractual necessity – to provide requested services

  • Legitimate interests – to operate and improve our business

  • Legal obligation – to comply with applicable laws

 

6. Disclosure of Personal Data

We may disclose personal data to:

  • IT, website hosting, and analytics service providers

  • Professional advisers (legal, accounting, consulting)

  • Regulatory authorities or law enforcement agencies where required by law

 

All third parties are required to handle personal data securely and in compliance with applicable privacy laws.

 

7. Cross-Border Data Transfers

As a business operating internationally, personal data may be transferred to, stored, or processed in jurisdictions outside Hong Kong, Australia, the UK, or the EU.

 

Where cross-border transfers occur, we take reasonable steps to ensure appropriate safeguards are in place, including contractual protections and secure data handling practices, in accordance with PDPO and GDPR requirements.

 

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

9. Your Rights

Depending on your location, you may have the right to:

  • Request access to personal data we hold about you

  • Request correction of inaccurate or incomplete data

  • Withdraw consent at any time (where processing is based on consent)

  • Request deletion or restriction of processing (where applicable)

  • Object to certain types of processing

  • Lodge a complaint with a relevant data protection authority

Requests can be made using the contact details below.

10. Cookies

Our website may use cookies and similar technologies to enhance functionality and analyse website traffic.

You may control or disable cookies through your browser settings.

11. Data Security

We implement reasonable technical and organisational measures to protect personal data from loss, misuse, unauthorised access, disclosure, or alteration.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be published on this page with an updated “Last updated” date.

13. Contact Us

If you have any questions, requests, or complaints regarding this Privacy Policy or our handling of personal data, please contact us.

bottom of page