Privacy Policy

This Privacy Policy describes how Pivot Transform (Pivot Transform Consulting Limited) collects, uses, and protects your personal information. We are committed to safeguarding your data and handling it responsibly throughout your interaction with our services related to change management and digital transformation planning for organizational transitions.

Who We Are and Our Role

We operate as the data controller responsible for managing personal information collected through our website and services. Our organization specializes in providing change management consulting and digital transformation solutions for organizational transitions within tech parks and corporate environments. We maintain strict standards for data protection and compliance with applicable privacy regulations in Hong Kong.

Information We Collect

We collect various types of information to provide and improve our services:

• Personal identification data including names, email addresses, phone numbers, and company affiliations when you contact us or submit inquiries
• Professional information such as job titles, organizational roles, and industry details relevant to transformation planning
• Technical data including IP addresses, browser types, pages visited, and timestamps when you access our website
• Communication records from emails, forms, and direct correspondence with our team
• Cookie data and analytics information to understand user behavior and site performance

Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Consent: When you provide explicit permission to collect and use your data through form submissions or service requests
• Legitimate Interest: To improve our services, understand client needs, and enhance our digital transformation offerings
• Contractual Necessity: When processing is required to fulfill service agreements or deliver consulting solutions
• Legal Obligation: To comply with applicable laws, regulations, and corporate governance requirements in Hong Kong

How We Use Your Information

We use the information we collect for specific business purposes aligned with our transformation consulting services. Your data helps us provide personalized change management advice, develop organizational transition strategies, and communicate relevant updates about our offerings. We analyze usage patterns to enhance website functionality and user experience. Additionally, we use your contact information to respond to inquiries, send service updates, and maintain professional relationships with clients and partners in the tech industry.

Data Retention Periods

We maintain clear retention schedules for different types of personal information:

• Contact Form and Inquiry Data: Retained for up to 24 months following your last interaction with our organization
• Client Service Records: Kept for the duration of service engagement plus 36 months for archival and compliance purposes
• Analytics and Website Usage Data: Stored for up to 14 months to track site performance and user patterns
• Email Communications: Retained for up to 24 months unless part of an active service contract requiring longer retention
• Server Access Logs: Maintained for up to 12 months for security and troubleshooting purposes

After these periods, we securely delete or anonymize your information unless legal or contractual obligations require extended retention.

Your Privacy Rights

You have important rights regarding your personal data. You can request access to all information we hold about you and receive a copy in a structured, portable format. You may request correction of inaccurate or incomplete data at any time. You have the right to request deletion of your personal information, subject to legal and contractual obligations. You can object to specific processing activities or request restriction of how your data is used. You also have the right to withdraw consent for processing at any time. To exercise any of these rights, please contact us using the information provided in the Contact Us section below.

Cookies and Tracking Technologies

Our website uses cookies to enhance your browsing experience and collect analytics data. Cookies are small text files stored on your device that help us recognize returning visitors, remember preferences, and understand how you interact with our content. We use session cookies that expire when you close your browser and persistent cookies that remain for longer periods. These cookies help us analyze website traffic, identify popular features, and improve our digital transformation consulting services. You can control cookie settings through your browser preferences and opt out of non-essential tracking at any time.

Data Security and Protection

We implement comprehensive security measures to protect your personal information from unauthorized access, alteration, and disclosure. Our systems include encryption protocols, secure server infrastructure, and restricted access controls. All staff handling personal data receive training on privacy practices and data protection requirements. However, no system is completely secure, and we cannot guarantee absolute protection against all potential threats. We continuously monitor and update our security practices to maintain compliance with evolving privacy standards and address emerging risks in the digital transformation landscape.

International Data Transfers

As a Hong Kong-based consulting firm, we primarily operate within the region. However, if we transfer your personal data internationally for service delivery or business purposes, we ensure appropriate safeguards are in place. We comply with applicable data protection requirements for cross-border transfers and maintain agreements with any third parties who process your information on our behalf. Any international transfers are conducted only with your knowledge and in accordance with applicable regulations governing the protection of personal information outside Hong Kong.

Supervisory Authority and Complaints

You have the right to lodge a complaint with the Office of the Privacy Commissioner for Personal Data (PCPD) in Hong Kong if you believe we have violated your privacy rights or failed to comply with applicable data protection laws. The PCPD is the independent authority responsible for overseeing privacy matters and investigating complaints in Hong Kong. While we encourage you to contact us first to resolve any concerns, you may file a formal complaint with the PCPD if you feel your rights have not been adequately addressed through our internal processes.

Third-Party Services and Data Sharing

We may share your personal information with trusted third-party service providers who assist us in delivering consulting services, managing our website, and conducting analytics. These partners are contractually obligated to maintain confidentiality and use your data only for specified purposes. We do not sell, rent, or trade your personal information to external parties for marketing purposes. Any sharing is limited to what is necessary for service delivery and business operations. You have the right to know which third parties process your data and can request additional details about these arrangements.

Policy Updates and Changes

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. When significant changes occur, we will notify you through email or prominent notice on our website. Your continued use of our services following any updates constitutes your acceptance of the revised policy. We encourage you to review this policy regularly to stay informed about how we protect your information and handle your privacy rights in the context of organizational transformation planning.