Privacy Policy

1. Introduction

Arcveil ("we", "us", "our") operates as an AI consulting firm at 25 Chatham Road South, Tsim Sha Tsui, Kowloon, Hong Kong. This Privacy Policy describes how we handle personal data collected through our website and during the provision of our services. If you have questions about this policy, please contact us at [email protected].

2. Data We Collect

We collect personal data in the following circumstances:

• Contact form submissions: name, email address, phone number (optional), and message content
• Enquiries made by email or phone: name and contact details provided
• Engagement onboarding: organisational information and relevant business context
• Website analytics: aggregated browsing behaviour through analytics cookies (where consent is given)

3. Purpose of Data Collection

Personal data is collected and used for the following purposes:

• Responding to enquiries and facilitating initial consultations
• Delivering consulting services and engagement deliverables
• Sending service-related communications including updates and reports
• Improving the quality and relevance of our services
• Complying with applicable legal and regulatory obligations

4. Legal Basis for Processing

We process personal data on the following bases: your consent (for marketing communications and optional analytics), the performance of a contract (for service delivery), our legitimate interests (for responding to enquiries and improving services), and compliance with legal obligations. You may withdraw consent at any time by contacting [email protected].

5. Data Retention

We retain personal data for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required by law. Specifically:

• Enquiry data: retained for 24 months from last contact
• Client engagement data: retained for 7 years for legal and contractual purposes
• Analytics data: retained in aggregated form; individual session data deleted after 26 months

6. Data Sharing

We do not sell personal data to third parties. We may share data with:

• Professional advisors (legal, accounting) under confidentiality obligations
• Technology service providers who support our operations (under data processing agreements)
• Regulatory authorities when required by law

7. Data Protection Measures

We apply technical and organisational measures to protect personal data, including encrypted communication channels, access controls limiting data to relevant team members, and practices informed by ISO 27001 standards. In the event of a data breach that poses a risk to individuals, we will notify affected parties and relevant authorities as required by applicable law.

8. Cookies

Our website uses cookies to improve your browsing experience and understand how the site is used. For detailed information about the types of cookies we use and how to manage your preferences, please refer to our Cookie Policy.

9. Your Rights under PDPO

Under Hong Kong's PDPO, you have the right to:

• Access personal data we hold about you
• Request correction of inaccurate personal data
• Withdraw consent to processing (where processing is based on consent)
• Object to direct marketing
• Lodge a complaint with the Office of the Privacy Commissioner for Personal Data (PCPD)

To exercise any of these rights, contact us at [email protected]. We will respond within 40 days as required by PDPO.

10. Third-Party Links

Our website may contain links to third-party sites. We are not responsible for the privacy practices of those sites and encourage you to review their respective privacy policies.

11. Children's Privacy

Our services are directed at business organisations and are not intended for individuals under the age of 18. We do not knowingly collect personal data from minors.

12. International Transfers

Where personal data is transferred outside Hong Kong (for example, to cloud service providers), we ensure appropriate safeguards are in place to protect the data in accordance with PDPO requirements.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by publishing the updated policy on this page with a revised "Last Updated" date. Continued use of our services after changes constitutes acceptance of the revised policy.

14. Contact

For any privacy-related enquiries, contact our data protection contact at:

Email: [email protected]
Address: 25 Chatham Road South, Tsim Sha Tsui, Kowloon, Hong Kong