Privacy Policy

This Privacy Policy sets out how SecureIT Consulting Limited ( “SecureIT”, “we”, “us”, or “our”) may collect, use, retain or disclose your personal information in connection with your use of the ComplySys platform, the SecureIT website, and any SecureIT products or services that reference or otherwise incorporate this Privacy Policy as well as your attendance at, or participation in, SecureIT events (collectively the “Services”).

​

In addition to this Privacy Policy, in certain cases, we may also provide you with notice of additional practices concerning how we use your personal information in connection with a particular Service or activity.

Please note that this Privacy Policy does not apply in the following circumstances:

• ​Third-Party Sites: The Services may include links, integrations or references to websites, services or materials that are controlled by third parties and which maintain different data practices than we do. If you provide personal information to any of those third parties, or direct us to share personal information with them, that personal information is governed by their privacy statements.

• Existing Customers and Users: In some cases, we may access or use your personal information on behalf of your organization who is our customer. In such cases, we are a “service provider” or a “data processor” to those organizations and we will treat your information as prescribed in the respective agreements between us and your organization rather than as described in this Privacy Policy. Please reach out to your organization for more information or if you would like to exercise any of your data subject rights in connection with our use of your personal information.

From time to time, we may amend, supersede or replace this Privacy Policy to align with new privacy practices adopted by us or new applicable laws and regulations. Each time this Privacy Policy is updated, we will update the “Last Updated” date at the bottom of this Privacy Policy. If we make any material changes to this Privacy Policy, we will notify you by email or by means of a notice on this website.

1. INFORMATION WE COLLECT ABOUT YOU.

We will only collect your personal information in accordance with applicable law. The information we collect depends on the context of your interactions with us and the choices you make, including your own privacy settings and the specific Services you use.

​

As further detailed below, we collect your personal information from different sources, including information you provide directly, information collected automatically, information from third-party data sources, and information we infer or generate ourselves. We may collect your information both online (for example, through your use of the Services) and offline (for example, through written agreement or over the phone) and we may combine information collected from disparate sources.

​

Personal information collected directly from you. Most of the personal information we collect or maintain about you is provided directly by you to us. For example, we receive and store personal information you voluntarily enter on our Services or otherwise provide to us (e.g., when you execute a written agreement for the use of the Services, when you make payments to us, or submit requests for support to us or when you have a direct communication with us).

Personal information we collect directly from you includes: 

1. Identifiers (such as name, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name or other similar identifiers);

2. Commercial and payment information (such as products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies, financial account information and other payment details);

3. Audio/visual information;

4. Professional or employment related information; and

5. Any other personal information that you elect to communicate to us directly during your communications with us or use of the Services.

When you are asked to provide personal information, you may decline. As further described below, in certain cases, you may use web browser or operating system controls to prevent certain types of automatic data collection. However, if you choose not to provide or allow personal information that is necessary for certain services or features, those services or features may not be available or fully functional.

​

If you choose to provide us with personal information about another person, you shall ensure that you have obtained the consent of that person to share their information with us.

​

Personal information collected automatically. We also collect some personal information automatically when you use our Services, including:

• Identifiers and device information. When you visit our website, our web servers automatically log your Internet Protocol (IP) address and information about your device, including device identifiers (such as MAC address); device type; and your device’s operating system, browser, and other software including type, version, language, settings, and configuration. Additionally, as further described in the Cookies and Similar Technologies section below, our website and retrieve cookie identifiers, mobile IDs, and other data.

• Geolocation data. Depending on your device settings, we collect geolocation data when you use our online services.

• Usage data. We automatically log your activity on our website and online services, including the URL of the website from which you came to our sites, pages you viewed, how long you spent on a page, access times, and other details about your use of and actions on our website.

• Audio/visual information. For example, we may collect your image or a recording of you in connection with our in-person and virtual events.

• Cookies and similar technologies. We use cookies, web beacons and similar technologies to operate our Services and to help collect data, including usage data, identifiers, and device information.

Cookies are small text files placed by a website and stored by your browser on your device. A cookie can later be read when your browser connects to a web server in the same domain that placed the cookie. The text in a cookie contains a string of numbers and letters that may uniquely identify your device and can contain other information as well. This allows the web server to recognize your browser over time, each time it connects to that web server.

​

Web beacons are electronic images (also called single-pixel or clear GIFs) that are contained within a website or email. When your browser opens a webpage or email that contains a web beacon, it automatically connects to the web server that hosts the image (typically operated by a third party). This allows that web server to log information about your device and to set and read its own cookies. In the same way, third-party content on our website (such as embedded videos, plug-ins, or hyperlinks) results in your browser connecting to the third-party web server that hosts that content. We also include web beacons in our email messages or newsletters to tell us if you open and act on them.

​

Please visit here for additional information about the cookies on our website.

Personal information from third-party sources. In certain cases, the personal information we obtain is from third party sources, including:

• Data brokers. Data brokers and aggregators from which we obtain personal information to supplement the data we collect.

• Third party partners. Third party applications and services, including those you choose to connect with or interact with through our services.

• Co-branding/marketing partners. Partners with which we offer co-branded services or engage in joint marketing activities.

• Service providers. Third parties that collect or provide personal information in connection with work they do on our behalf, for example companies that determine your device’s location based on its IP address.

• Publicly available sources. Public sources of personal information such as open government databases.

Inferences about you. Finally, we may also infer new information from other personal information we collect, including using automated means to generate information about your likely preferences or other characteristics (“inferences”). For example, we infer your general geographic location (such as city, state, and country) based on your IP address.

​

2. HOW WE USE YOUR INFORMATION.

At all times in accordance with, and solely where permitted by, applicable law, we use the personal information we collect for the purposes described in this Privacy Policy or as otherwise described to you at the point of collection. For example, we use the categories of personal information identified above for the following purposes:

​

• communicating with you,

• facilitating and responding to your requests and processing your subscriptions,

• operating, improving, and developing our Services,

• customizing your experience, including to understand you and your preferences to enhance your experience and enjoyment using our services,

• providing you with quality assurance and support for our Services,

• conducting our business operations, such as ensuring our own compliance with legal obligations and preventing or investigating fraudulent or inappropriate uses of our Services, and

• marketing and analytics purposes, including to provide you with targeted advertising and to communicate with you about new services, offers, promotions, rewards, contests, upcoming events, and other information about our services and, in certain cases, those of our selected partners (see the “Choice and Control of your personal information” section of this Privacy Policy for information about how to change your preferences for promotional communications).

Cookies and similar technologies. We, and our analytics and advertising partners, use these technologies in our website to collect personal data (such as the pages you visit, the links you click on, and similar usage information, identifiers, and device information) when you use our services, including personal data about your online activities over time and across different websites or online services. This data is then used to store your preferences and settings, analyze and optimize how our website perform, track your interaction with the website, develop inferences, combat fraud, and fulfill other legitimate purposes.

​

From time to time, electronic communications we provide may contain code that enable our database to understand whether the communication was opened and/or what links (if any) you have clicked. 

We and/or our partners also share the data we collect or infer with third parties for these purposes. For more information about the third-party analytics and advertising partners that collect personal information on our services, please see the “When we share your information with others” section of this Privacy Policy.

Legal bases for processing. Some applicable laws require that SecureIT has a “legal basis” for its processing of personal information. We rely on different legal bases for collecting and processing personal information about you, depending on the particular context. Generally, where we are acting as a data controller under applicable law, we process your personal information only: (i) where the processing is in our legitimate interests (which are not overridden by your data protection interests or fundamental rights and freedoms); (ii) in connection with the creation (at your request) or performance of a contract with you; (iii) where such processing is necessary for our compliance with a legal obligation to which we are subject; or (iv) where we have collected your consent to do so.

For the sake of clarity, where we are using your personal information based on the legal basis of consent, we will seek consent from you independent of this Privacy Policy. You can withdraw such consent at any time by contacting us at: info@SecureIThk.com.

​

3. WHEN WE SHARE YOUR INFORMATION WITH OTHERS.

We share your personal information solely as permitted by law and only with your consent, as necessary to complete your subscriptions or provide the services you have requested or authorized or as further described herein. In particular, we may share the categories of personal information described in Section 2 above with the types of third parties described below. All such third parties are obligated to keep your information confidential, secure and in a manner compliant with applicable law.

​

Service providers and contractors. We share personal information with vendors, contractors or agents working on our behalf for the purposes described in this Privacy Policy. These parties provide services directly to us upon our instructions such as delivery services, business administration, fulfillment services, system administration and technical support, advertising support, public relations, media and marketing services, legal services, e-commerce and other web-related services such as web hosting and web monitoring services.

​

Third parties in connection with corporate transactions. We may disclose personal information as part of a corporate transaction or proceeding such as a merger, reorganization, financing, acquisition, bankruptcy, dissolution, or a transfer, divestiture, or sale of all or a portion of our business or assets.

​

Legal and law enforcement. We may access, disclose, and preserve personal information when we believe that doing so is necessary to comply with applicable law, to bring or defend against a legal action, or to respond to valid legal process, including from law enforcement or other government agencies.

Third parties in connection with the protection of security, safety, and legal rights. We may disclose personal information if we believe it is necessary to:

​

• protect our customers and others, for example to prevent spam or attempts to commit fraud, or to help prevent the loss of life or serious injury of anyone;

• operate and maintain the security of our services, including to prevent or stop an attack on our computer systems or networks; or

• protect the rights or property of ourselves or others, including enforcing our agreements, terms, and policies.

Third parties providing analytics or advertising. Third party analytics and advertising companies also collect personal information through our website, including identifiers and device information (such as cookie IDs, device IDs, and IP address), geolocation data, usage data, and inferences based on and associated with that data, as further described in the “Cookies and Similar Technologies” section of this Privacy Policy for additional detail. These third-party vendors may combine this data across multiple sites for their own purposes and others. Please visit here for additional information about these providers. Some of the data disclosures to these third parties may be considered a “sale” or “sharing” of personal information as defined under the laws of certain jurisdictions. Please see the “Choice and Control” section below for more details.

4. LOCATION AND INTERNATIONAL TRANSFER OF YOUR INFORMATION.

We may process (including transfer or store) your personal information in Hong Kong.

​

We will comply with all applicable laws relating to the processing of your personal information in such location. Where applicable law requires consent for such processing or transfer, we will seek consent from you independent of this Privacy Policy.

​

Data Privacy Framework.

​

SecureIT will comply with the Personal Data (Privacy) Ordinance (Cap. 486 of the laws of Hong Kong) (the “Data Privacy Framework”) as set forth by the Hong Kong government with respect to personal information concerning individuals.

​

Please visit https://www.elegislation.gov.hk/hk/cap486 to learn more.

5. CHOICE AND CONTROL OVER YOUR PERSONAL INFORMATION.

We provide a variety of ways for you to control the personal information we hold about you, including choices about how we use that data. In some jurisdictions, you may have the right to request access to or correction or erasure of your personal information. You may also have the right to request that a copy of your personal information be provided to you in a readily useable format and to opt-out of certain uses of your data such as targeted advertising and the sale of your data.

​

In order to process your request, we may need to ask you to provide specific information to help us verify your identity and applicable rights. You may also designate, in writing or through a power of attorney, an authorized agent to make requests on your behalf to exercise your rights under certain laws. Before accepting such a request from an agent, SecureIT may require the agent to provide proof you have authorized it to act on your behalf and may need you to verify your identity directly with us.

​

We may, in limited circumstances, refuse to comply with your request or charge you a reasonable fee if your request is clearly unfounded or excessive. In all cases, we will notify you of any fee in advance. Alternatively, we may refuse to comply with the request in such circumstances. If you receive a response from us informing you that we have declined your request, in whole or in part, you may appeal that decision by submitting your appeal to our data protection officer using the contact method described at the bottom of this Privacy Policy.

​

To obtain more information, including information about how to designate an authorized agent to make a request for you, please contact us at: support@SecureIThk.com or +852-2606 1800. When we are processing personal information on behalf of another party that is the “data controller,” you should direct your request to that party. 

​

Marketing opt-outs. You can unsubscribe from promotional communications sent from us at any time by email to us at: support@SecureIThk.com, indicating your “unsubscribe” request or by following other directions included within the various marketing and promotional communications we send you.

​

These choices do not apply to certain informational communications including transactional notices or mandatory service communications. Please keep in mind that even if you unsubscribe from our marketing communications, we may still contact you for other legitimate reasons (e.g., in relation to an order you placed, an inquiry you made, an event for which you registered, a legally required notice, etc.).

​

Browser or platform controls.

• Cookie controls. Most web browsers are set to accept cookies by default. If you prefer, you can go to your browser settings to learn how to delete or reject cookies. If you choose to delete or reject cookies, this could affect certain features or services of our website. If you choose to delete cookies, settings and preferences controlled by those cookies, including advertising preferences, may be deleted and may need to be recreated.

• Global Privacy Controls. Some browsers and browser extensions support the “Global Privacy Control” (GPC) or similar controls that can send a signal to the websites you visit indicating your choice to opt-out from certain types of data processing, including data sales and/or targeted advertising, as specified by applicable law. When we detect such a signal, we will make reasonable efforts to respect your choices indicated by a GPC setting or similar control that is recognized by regulation or otherwise widely acknowledged as a valid opt-out preference signal.

• Email web beacons. Most email clients have settings that allow you to prevent the automatic downloading of images, including web beacons, which prevents the automatic connection to the web servers that host those images.

Targeted advertising and “selling” or “sharing” of your personal information.

Some privacy laws define “sale” broadly and some of our data disclosures described in this Privacy Policy may be considered a “sale” or “sharing” under those definitions. In particular, we permit select social media and advertising partners to collect identifiers (IP addresses, cookie IDs, and mobile IDs), activity data (browsing, clicks, app usage), device data, and general location data when you browse our website. These providers may use such data for their own commercial purposes, including for marketing and targeted advertising. We do not “sell” or “share” any other types of personal information.

​

SecureIT may also use your personal information for the purposes of targeted advertising.

Additionally, you may have the right to file a complaint with your applicable supervisory authority.

6. SECURITY.

We take reasonable and appropriate steps to help protect your personal information from unauthorized access, use, disclosure, alteration, or destruction, whether in transmission or storage.

​

Please email us using the contact information at the bottom of this Privacy Policy to learn more about our security practices.

7. DATA RETENTION.

We will retain your personal information in accordance with applicable law and, unless otherwise provided by applicable law, for no longer than necessary to provide the Services and fulfill the transactions you have requested, comply with our legal obligations, resolve disputes, enforce our agreements, and in furtherance of our other business purposes outlined hereunder.

​

Because these needs can vary for different types and uses of personal information, actual retention periods can vary based on criteria such as user expectations or consent, the sensitivity of your personal information, the availability of automated controls that enable you to delete data, and our legal or contractual obligations. 

​

Where there are technical limitations that otherwise prevent the deletion or anonymization of your personal information, we will safeguard and limit the use of your personal information as required by applicable law.

8. CHILDREN.

The Services are not intended for or directed at children and we do not knowingly collect any information from children under 18 years of age through the Services. If we learn that we have collected information from children under 18, we will promptly take steps to delete such information.

9. SECUREIT PRIMARY BUSINESS ADDRESS.

This Privacy Policy applies to SecureIT Consulting Limited in Hong Kong. SecureIT's primary place of business listed below.

10. HOW TO CONTACT US.

If you have a privacy question, concern or complaint for SecureIT, you may contact us at: info@SecureIThk.com, or at our primary place of business at:

SecureIT Consulting Limited
Room 603, 6/F, Tower 2, Admiralty Centre,
18 Harcourt Road, Admiralty,
Hong Kong

​

In the event of any discrepancy or inconsistency between the Chinese and English versions, the English version shall prevail.

Last updated July 2026