Privacy Policy

HKOEA Consultancy Privacy Policy

Effective Date: 17 March 2026
Last Updated: 17 March 2026

HKOEA Consultancy (“we”, “us”, or “our”) is committed to protecting your personal data privacy in accordance with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong (“PDPO”). This Privacy Policy Statement (“PPS”) explains how we collect, use, retain, disclose, and protect your personal data.

1. Purpose and Manner of Collection of Personal Data (DPP1)

We collect personal data that is necessary and adequate for the purposes directly related to our recruitment consultancy services. The types of personal data we may collect include:

– Full name
– Contact details (telephone number, email address, mailing address)
– Hong Kong Identity Card number (where necessary for employment verification)
– Employment history and work experience
– Educational qualifications and professional certifications
– Language abilities
– Expected salary and employment preferences
– References and referee contact information
– Any other information you voluntarily provide

How we collect your data:
Personal data is collected directly from you through our website forms, email correspondence, telephone conversations, in-person meetings, job applications, and registration as a candidate or client.

It is entirely voluntary for you to supply your personal data to us. However, if you do not provide sufficient personal data, we may not be able to process your application or provide our services to you.

2. Purpose of Use of Personal Data (DPP3)

Your personal data will be used for the following purposes, or purposes directly related thereto:

– Matching candidates with suitable job opportunities
– Processing job applications and providing recruitment services
– Communicating with you regarding employment opportunities
– Verifying your qualifications, experience, and references
– Complying with applicable laws and regulations, including the Employment Ordinance and the Employment Agency Regulations
– Administering and managing our business operations
– Handling enquiries, complaints, and feedback

We will not use your personal data for any purpose other than the purpose for which it was collected, or a directly related purpose, unless we have obtained your voluntary and explicit consent.

3. Direct Marketing

In accordance with Part 6A of the PDPO, we will not use your personal data for direct marketing purposes unless we have obtained your explicit written consent. You have the right to opt out of receiving direct marketing communications at any time by contacting us in writing. We will cease to use your data for direct marketing without charge upon receipt of your request.

The kinds of personal data that may be used for direct marketing include your name, contact details, and employment preferences. The classes of marketing subjects may include job opportunities, career events, industry updates, and our services.

4. Transfer and Disclosure of Personal Data

Your personal data may be transferred to or disclosed to the following classes of persons:

– Prospective employers and their authorised representatives
– Our affiliated companies and business partners
– Third-party service providers who assist us in our operations (e.g., IT service providers, cloud storage providers)
– Professional advisers (e.g., lawyers, auditors)
– Government authorities and regulatory bodies where required by law
– The Labour Department of the HKSAR Government as required under the Employment Agency Regulations

We will take all practicable steps to ensure that any third party receiving your personal data is bound by appropriate confidentiality and data protection obligations.

5. Accuracy and Retention of Personal Data (DPP2)

We take all practicable steps to ensure that personal data we hold is accurate and up-to-date. We will not keep your personal data longer than is necessary to fulfil the purpose for which it was collected. When personal data is no longer required, we will take all practicable steps to erase it in accordance with Section 26 of the PDPO.

6. Data Security (DPP4)

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised or accidental access, processing, erasure, loss, or use. These measures include:

– Access controls and authentication measures
– Encryption of data in transit and at rest where appropriate
– Regular security reviews and updates
– Staff training on data protection obligations
– Contractual safeguards with data processors

Where we engage data processors to process personal data on our behalf, we adopt contractual or other means to ensure compliance with DPP4 requirements.

7. Openness about Personal Data Policies and Practices (DPP5)

We are committed to being transparent about the kinds of personal data we hold and how it is used. This Privacy Policy Statement is publicly available on our website. For further enquiries about our data policies and practices, please contact our Data Protection Officer using the contact details below.

8. Your Rights — Data Access and Correction (DPP6)

Under the PDPO, you have the right to:

– Request access to your personal data held by us
– Request correction of any inaccurate personal data
– Request erasure of personal data that is no longer necessary for the purpose for which it was collected
– Withdraw consent previously given for direct marketing or other specified purposes

To exercise any of these rights, please submit a written request to us using the contact details below. We will respond to data access requests within 40 days of receiving the request, as required by the PDPO. A reasonable fee may be charged for complying with a data access request.

9. Cookies and Website Data

Our website may use cookies and similar technologies to improve your browsing experience and analyse website traffic. You can manage your cookie preferences through your browser settings. We do not use cookies to collect personally identifiable information without your knowledge.

10. Cross-Border Transfer of Personal Data

In some cases, your personal data may be transferred to parties located outside Hong Kong. We will take all practicable steps to ensure that such transfers comply with the requirements of the PDPO and that the receiving party provides a level of data protection comparable to that under the PDPO.

11. Changes to This Privacy Policy

We may update this Privacy Policy Statement from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on our website. We encourage you to review this page periodically.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy Statement, or wish to make a data access or correction request, please contact us:

HKOEA Consultancy
Email: [email protected]

You may also lodge a complaint with the Office of the Privacy Commissioner for Personal Data (PCPD) at www.pcpd.org.hk if you believe your personal data privacy rights havebeen violated.