Privacy Policy

1. Introduction

Cornermark is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect personal information in accordance with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong.

This policy applies to personal data collected through our website, during consultations, and throughout our provision of legal services. By engaging our services or using our website, you acknowledge that you have read and understood this Privacy Policy.

For any questions about this Privacy Policy or our data practices, please contact us at [email protected].

2. Data Collection

Personal Data We Collect

We collect the following categories of personal data:

• Contact information: name, email address, phone number, postal address
• Identification data: Hong Kong Identity Card number, passport details when required for legal matters
• Financial information: bank account details for transactions, payment information
• Property information: details of properties involved in transactions or legal matters
• Professional information: employment details when relevant to legal services
• Communication data: correspondence with our firm, consultation notes, legal advice provided

How We Collect Data

Personal data is collected through:

• Contact forms on our website
• Email and telephone communications
• In-person consultations and meetings
• Documents provided during the course of legal representation
• Third parties such as financial institutions, government agencies, and other parties to transactions

Legal Basis for Processing

We process personal data on the following legal bases:

• Contract performance: to provide legal services you have engaged us for
• Consent: where you have explicitly agreed to data processing
• Legal obligations: to comply with legal and regulatory requirements
• Legitimate interests: for business operations and service improvement

3. Data Usage

We use your personal data for the following purposes:

• Providing legal services: conveyancing, lease preparation, property development advice, and related legal work
• Client communication: responding to inquiries, providing updates on legal matters, scheduling consultations
• Transaction processing: completing property purchases, sales, leases, and development projects
• Compliance: meeting legal and regulatory obligations, including anti-money laundering requirements
• Record keeping: maintaining accurate files and documentation as required by professional standards
• Service improvement: analyzing service delivery to enhance client experience
• Marketing: sending information about our services (with your consent, which can be withdrawn)

Data Sharing

We may share personal data with:

• Government agencies: Land Registry, Inland Revenue Department, Buildings Department when required
• Financial institutions: banks and mortgage providers involved in transactions
• Other parties to transactions: buyers, sellers, landlords, tenants, developers as necessary
• Professional advisors: accountants, surveyors, other legal counsel when appropriate
• Service providers: IT support, document storage, practice management systems under confidentiality agreements
• Law enforcement: when legally required to disclose information

4. Data Protection Measures

We implement appropriate technical and organizational measures to protect personal data:

Technical Safeguards

• Encrypted data transmission and storage
• Secure servers with regular security updates
• Access controls and authentication requirements
• Regular security assessments and vulnerability testing
• Firewall protection and intrusion detection systems

Organizational Safeguards

• Staff training on data protection responsibilities
• Confidentiality agreements for all personnel
• Limited access to personal data based on job requirements
• Regular audits of data handling practices
• Incident response procedures for data breaches

Data Retention

We retain personal data for as long as necessary to fulfill the purposes outlined in this policy and to comply with legal obligations. Client files are typically retained for seven years following completion of legal matters, in accordance with professional requirements. We securely dispose of data when it is no longer needed.

5. Cookies and Website Data

Our website uses cookies and similar technologies. For detailed information about our cookie practices, please refer to our Cookie Policy.

Essential cookies are necessary for website functionality. Optional cookies for analytics and preferences can be controlled through your browser settings or our cookie management interface.

6. Your Rights

Under Hong Kong's Personal Data (Privacy) Ordinance, you have the following rights:

Right to Access

You may request a copy of the personal data we hold about you. We will provide this information within 40 days of your request.

Right to Correction

You may request correction of inaccurate or incomplete personal data. We will respond to correction requests promptly.

Right to Object

You may object to the use of your personal data for direct marketing purposes at any time.

Right to Erasure

You may request deletion of your personal data, subject to our legal and professional obligations to retain certain information.

Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We may require verification of your identity before processing requests.

7. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of external sites. We encourage you to review the privacy policies of any third-party websites you visit.

8. International Data Transfers

Your personal data is primarily stored and processed in Hong Kong. If data is transferred outside Hong Kong, we ensure appropriate safeguards are in place to protect your information in accordance with applicable data protection laws.

9. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. The "Last Updated" date at the top of this policy indicates when the most recent changes were made.

We will notify clients of material changes through email or prominent notice on our website. Continued use of our services after changes constitutes acceptance of the updated policy.

11. Complaints

If you have concerns about our data handling practices, please contact us first so we can address the issue. If you remain unsatisfied, you have the right to lodge a complaint with:

Office of the Privacy Commissioner for Personal Data
Complaints Division
12/F, Sunlight Tower, 248 Queen's Road East, Wanchai, Hong Kong
Telephone: +852 2827 2827
Website: www.pcpd.org.hk