Privacy Policy

1. Who We Are

Vexora Solutions Limited is the data user responsible for your personal data under the Personal Data (Privacy) Ordinance (Cap. 486). Registered in Hong Kong (Company Reg. No. 80916344). Director: Andy-Ken Karibwami. Contact: andy@vexora-solutions.co.uk.

2. Data We Collect

We collect the following personal data when you contact us or engage our consulting services:

• Name, email address, and phone number
• Company name and business details provided during scoping
• Information submitted via our contact form or by email
• Technical data (IP address, browser type) collected automatically via our website

3. How We Use Your Data

We use your personal data solely to:

• Respond to enquiries and provide quotes or proposals
• Deliver contracted consulting services
• Maintain client records and comply with our legal and financial obligations
• Communicate updates relevant to your engagement

We do not use your data for marketing, profiling, or any purpose beyond what is described here without your explicit consent.

4. Purpose & Basis for Collection

5. Data Retention

Personal data is retained for 7 years from the end of an engagement in accordance with Hong Kong record-keeping requirements under the Inland Revenue Ordinance. Enquiry data from contacts that do not result in an engagement is retained for no longer than 12 months. In line with Data Protection Principle 2, we do not keep personal data for longer than is necessary, and after the applicable retention period data is securely and permanently deleted.

6. Third Parties

We do not sell, share, or transfer your personal data to third parties, except where:

• Required by law or regulatory authority
• Strictly necessary to deliver the agreed services (e.g. cloud storage or communications providers)

Any such third parties are subject to appropriate data protection agreements and are prohibited from using your data for their own purposes.

7. Your Rights Under the PDPO

Under the Personal Data (Privacy) Ordinance, you have the following rights regarding your personal data:

• Right of access — submit a Data Access Request for a copy of the personal data we hold about you
• Right to correction — submit a Data Correction Request to have inaccurate personal data corrected
• Right to be informed — be told what personal data we hold and the purposes for which it is used
• Right to withdraw consent — where we rely on your consent (for example, for any direct marketing), withdraw it at any time, free of charge

The PDPO does not provide a general right to erasure or to data portability. However, under Data Protection Principle 2 we will not retain your personal data for longer than is necessary for the purposes for which it was collected.

To exercise any of these rights, email andy@vexora-solutions.co.uk. We will respond within 40 days, as required by the PDPO, and may charge a reasonable fee not exceeding the cost of complying with a Data Access Request. If you are not satisfied with how we handle your request, you may lodge a complaint with the Office of the Privacy Commissioner for Personal Data (PCPD), Hong Kong.

8. Cookies

For information on how we use cookies on this website, please see our Cookie Policy.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Any material changes will be reflected by an updated date at the top of this page. Continued use of our services following an update constitutes acceptance of the revised policy.