Legal

Privacy Policy

Last updated: 1 January 2025

This Privacy Policy sets out how Gambit House ("we", "us", "our") collects, uses, stores, and protects personal data provided by visitors to this website and by persons who engage with us in connection with our advisory services. We are committed to handling personal data responsibly and in a manner consistent with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong.

Who We Are

Gambit House is an in-house legal department advisory practice based in Hong Kong. Our registered address is 30/F, 1 Pacific Place, 88 Queensway, Admiralty, Hong Kong. You may contact us at [email protected] or by telephone at +852 2918 4063.

Personal Data We Collect

We may collect the following categories of personal data:

How We Use Personal Data

We use personal data for the following purposes:

We do not use personal data for direct marketing without your consent, and we do not sell or transfer personal data to third parties for commercial purposes.

Legal Basis for Processing

We process personal data where doing so is necessary to respond to a request you have made, to fulfil obligations arising from an engagement, or where we have a legitimate interest in doing so (such as the proper administration of our practice), provided that interest is not overridden by your privacy interests.

Data Retention

We retain personal data only for as long as is necessary for the purposes set out in this policy, or as required by applicable law. Enquiry correspondence is typically retained for three years from the date of the enquiry. Records relating to advisory engagements are retained in accordance with professional and statutory obligations.

Disclosure to Third Parties

We may share personal data with trusted third-party service providers who assist us in operating this website and administering our practice (such as IT infrastructure and analytics providers), solely for those operational purposes and subject to appropriate data processing terms. We do not disclose personal data to other third parties except where required by law or with your consent.

Cookies and Analytics

This website uses cookies and similar tracking technologies to understand visitor behaviour and improve site performance. For details of the cookies we use and how to manage them, please refer to our Cookie Policy.

Your Rights

Under the Personal Data (Privacy) Ordinance, you have the right to request access to, and correction of, personal data we hold about you. To make such a request, please contact us at [email protected]. We will acknowledge your request within fourteen days and respond substantively within forty days.

Data Security

We take reasonable technical and organisational precautions to protect personal data against unauthorised access, disclosure, alteration, or loss. Our website operates over encrypted connections (HTTPS) and access to client data is restricted to personnel who require it in the course of their work.

Changes to This Policy

We may update this Privacy Policy from time to time. The current version will always be available on this page, along with the date it was last revised. Continued use of this website following any update constitutes your acknowledgement of the revised policy.

Contact

If you have questions or concerns about how we handle personal data, you may contact us at: