
Privacy Policy
Last updated: January 2026
1. Introduction
Arlun Advisory (“we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store and disclose personal information in accordance with:
-
Hong Kong Personal Data (Privacy) Ordinance (Cap. 486) (PDPO)
-
Australian Privacy Act 1988 (Cth) and Australian Privacy Principles (APPs)
-
UK General Data Protection Regulation (UK GDPR)
-
EU General Data Protection Regulation (EU GDPR)
By accessing or using our website, you acknowledge and agree to the practices described in this Privacy Policy.
2. Personal Data We Collect
We may collect personal data including:
-
Name
-
Email address
-
Phone number
-
Company or organisation name
-
Any information you voluntarily provide via forms, enquiries, or correspondence
We may also collect technical and usage data such as:
-
IP address
-
Browser type and version
-
Device information
-
Pages visited, time spent, and interaction data
3. How We Collect Personal Data
We collect personal data when you:
-
Visit or browse our website
-
Submit an enquiry or contact form
-
Subscribe to communications
-
Contact us directly by email or phone
Some data is collected automatically through cookies and analytics technologies.
4. Purpose of Collection and Use
-
We collect and use personal data for the following purposes:
-
Responding to enquiries and providing services
-
Communicating with clients and prospective clients
-
Operating, maintaining, and improving our website
-
Internal administration and business operations
-
Complying with legal and regulatory obligations
We will not use personal data for new purposes without obtaining consent where required by law.
5. Legal Basis for Processing (GDPR)
Where GDPR applies, we process personal data on the following lawful bases:
-
Consent – where you have provided clear consent
-
Contractual necessity – to provide requested services
-
Legitimate interests – to operate and improve our business
-
Legal obligation – to comply with applicable laws
6. Disclosure of Personal Data
We may disclose personal data to:
-
IT, website hosting, and analytics service providers
-
Professional advisers (legal, accounting, consulting)
-
Regulatory authorities or law enforcement agencies where required by law
All third parties are required to handle personal data securely and in compliance with applicable privacy laws.
7. Cross-Border Data Transfers
As a business operating internationally, personal data may be transferred to, stored, or processed in jurisdictions outside Hong Kong, Australia, the UK, or the EU.
Where cross-border transfers occur, we take reasonable steps to ensure appropriate safeguards are in place, including contractual protections and secure data handling practices, in accordance with PDPO and GDPR requirements.
8. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.
9. Your Rights
Depending on your location, you may have the right to:
-
Request access to personal data we hold about you
-
Request correction of inaccurate or incomplete data
-
Withdraw consent at any time (where processing is based on consent)
-
Request deletion or restriction of processing (where applicable)
-
Object to certain types of processing
-
Lodge a complaint with a relevant data protection authority
Requests can be made using the contact details below.
10. Cookies
Our website may use cookies and similar technologies to enhance functionality and analyse website traffic.
You may control or disable cookies through your browser settings.
11. Data Security
We implement reasonable technical and organisational measures to protect personal data from loss, misuse, unauthorised access, disclosure, or alteration.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be published on this page with an updated “Last updated” date.
13. Contact Us
If you have any questions, requests, or complaints regarding this Privacy Policy or our handling of personal data, please contact us.