Privacy Policy

Introduction

Nexus Franchise Law is committed to protecting your privacy and handling your personal information with care and transparency. This Privacy Policy explains how we collect, use, store, and protect personal data when you interact with our franchise law services or visit our website.

This policy complies with the Personal Data (Privacy) Ordinance of Hong Kong and reflects our professional obligations as legal practitioners. If you have questions about this policy, please contact us at [email protected].

Data We Collect

We collect personal information necessary to provide legal services and communicate with you. The types of data we may collect include:

Information You Provide Directly

• Name, email address, phone number when you contact us or submit forms
• Business information including company name, position, and business address
• Details about your franchise situation or legal needs when requesting services
• Financial information for billing purposes when you engage our services
• Any other information you choose to provide in communications with us

Information Collected Automatically

• IP address, browser type, and device information when you visit our website
• Pages visited, time spent, and navigation patterns on our website
• Referral sources that directed you to our website
• Cookie data as described in our Cookie Policy

How We Use Your Information

We use personal data for the following purposes:

• Service Delivery: To provide franchise law services, prepare documentation, and communicate about your legal matters
• Client Communication: To respond to inquiries, provide updates, and maintain ongoing communication
• Billing and Accounting: To process payments and maintain financial records
• Legal Compliance: To meet our professional obligations and comply with legal requirements
• Website Improvement: To analyze website usage and improve our online services
• Professional Communications: To send relevant information about franchise law developments, with your consent

We process personal data based on the following legal grounds: your consent, contract performance, legal obligations, and our legitimate business interests in providing quality legal services.

Data Sharing and Disclosure

We maintain strict confidentiality as required by our professional obligations. We may share your information only in these limited circumstances:

• Service Providers: With trusted third parties who assist in providing our services (e.g., secure document storage, accounting services) under confidentiality agreements
• Legal Requirements: When required by law, court order, or legal process
• Professional Advisors: With other legal or professional advisors as necessary for your representation
• With Your Consent: When you specifically authorize us to share information with third parties

We do not sell, rent, or trade personal information to third parties for marketing purposes.

Data Security

We implement comprehensive security measures to protect your personal information:

• Encrypted data transmission using secure protocols (SSL/TLS)
• Secure document management systems with access controls
• Regular security audits and updates to our systems
• Limited access to personal data by authorized personnel only
• Physical security measures at our office location
• Secure backup procedures for data protection

While we implement strong security measures, no system is completely secure. We cannot guarantee absolute security but commit to promptly notifying you of any data breaches as required by law.

Data Retention

We retain personal data for different periods depending on its purpose:

• Client Files: Maintained for at least seven years following case closure, as required by professional regulations
• Financial Records: Retained for seven years for accounting and tax purposes
• Contact Inquiries: Stored for three years unless you request earlier deletion
• Website Analytics: Aggregate data retained indefinitely; personal identifiers removed after 26 months

After retention periods expire, we securely delete or anonymize personal information unless longer retention is required by law.

Your Rights

Under Hong Kong's Personal Data (Privacy) Ordinance, you have the following rights:

• Access: Request copies of personal data we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Erasure: Request deletion of your personal data in certain circumstances
• Objection: Object to processing of your personal data for specific purposes
• Data Portability: Request transfer of your data to another service provider
• Withdraw Consent: Withdraw previously given consent for data processing

To exercise these rights, contact us at [email protected]. We will respond within 30 days. Please note that some requests may be limited by our professional obligations or legal requirements.

Cookies and Tracking

We use cookies and similar technologies to improve website functionality and analyze usage. For detailed information about our cookie practices, including how to manage cookie preferences, please review our Cookie Policy.

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We recommend reviewing their privacy policies before providing personal information.

Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors. If we become aware that we have collected data from a minor, we will take steps to delete it promptly.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting the updated policy on our website with a revised "Last Updated" date. Continued use of our services after changes indicates acceptance of the updated policy.

Contact Information

For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

If you are not satisfied with our response to a privacy concern, you may lodge a complaint with the Office of the Privacy Commissioner for Personal Data in Hong Kong.