Privacy Notice
How Clouddatasuite collects, uses, and retains personal data in connection with enquiries and audit engagements.
Data controller
Clouddatasuite is the data controller for personal data collected through clouddatasuite.digital and during professional engagements. Office: Man Yee Building, 68 Des Voeux Road Central, Central, Hong Kong. Email: info@clouddatasuite.digital. Phone: +852 2522 3131.
Data we collect
- Enquiry forms: name, email, optional audit type, project scope notes, and message content
- Engagements: contact details of client personnel, meeting notes, and documents you provide (which may include personal data of third parties embedded in project files)
- Technical data: IP address, browser type, and cookie identifiers as described in our Cookies page
Purposes
We use personal data to respond to enquiries, perform contracted audit work, invoice and administer engagements, improve site reliability, and meet legal or regulatory obligations.
Legal basis
Where the Personal Data (Privacy) Ordinance (PDPO) applies, we process data as necessary for contracts, legitimate professional interests (such as conflict checks), and compliance with law. Consent is sought where required, including for non-essential cookies.
Retention
Enquiry records are kept for up to 24 months if no engagement follows. Engagement files, including personal data necessary to support the report, are retained for seven years after completion unless a longer period is required by law or a professional indemnity claim. Cookie data follows the durations in our cookies table.
Sharing
We do not sell personal data. We may share data with IT and email hosting providers under confidentiality terms, professional advisers, and regulators when legally required. Project documents may be reviewed by named team members assigned to your engagement.
International transfers
Our primary operations and storage are in Hong Kong. If a processor stores data outside Hong Kong, we take steps to ensure comparable protection consistent with the PDPO, including contractual safeguards.
Your rights
Subject to the PDPO, you may request access to and correction of your personal data. You may also ask us to erase data where retention is no longer necessary. To exercise rights, email info@clouddatasuite.digital. We may need to verify your identity before responding.
Security
We apply access controls to engagement files and use encrypted transport for the website. No method of transmission is perfectly secure; please avoid sending unnecessary sensitive personal data in enquiry forms.
Updates
We may update this notice periodically. The version on this page is current as of the latest publication date of the site.