This policy explains how Stepcon Business Services ("we", "us") handles personal data. We comply with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong.
1. Scope
This policy applies to: (a) your browsing and use of the stepcon.com.hk website; (b) enquiries you make through our forms, by telephone, email, WhatsApp or in person; and (c) personal data we handle in the course of providing services to you or your company.
2. Data we collect
- Contact data — name, company name, telephone number, email address.
- Enquiry content — what you tell us about your business and requirements.
- Service data — where you engage us, identity documents, address proof, company records and financial information necessary to perform the engagement.
- Technical data — IP address, approximate region, device type, browser, referring site, pages viewed and time on page.
3. How we use it
- To respond to enquiries and provide quotations
- To deliver the services engaged, including filings with the Companies Registry, Inland Revenue Department and MPF trustees
- To meet our own statutory record-keeping and anti-money-laundering obligations
- To improve the website and understand which content is useful
We do not sell personal data. We do not use your data for direct marketing without your consent.
4. Disclosure
Personal data may be disclosed to: government departments and regulators where required for a filing or by law; professional parties engaged for your matter, such as the practising CPA conducting the statutory audit; and service providers who host or maintain our systems under confidentiality obligations. Data is not transferred outside Hong Kong except as necessary for these purposes.
5. Retention
Personal data is kept only as long as necessary for the purpose collected, or as required by law. Accounting and business records are retained for at least seven years under the Companies Ordinance and the Inland Revenue Ordinance. Enquiry records not leading to an engagement are deleted within a reasonable period.
6. Security
We apply reasonable technical and organisational measures — encrypted transmission (HTTPS), access control on internal systems, and staff confidentiality obligations — to protect data against unauthorised access, loss or misuse.
7. Cookies and analytics
The website uses a session cookie for basic functionality and may use analytics tools to count visits and understand which pages are read. Analytics data is aggregated and not used to identify individuals. You can block or delete cookies in your browser settings; core pages will still work.
8. Your rights
Under sections 18 and 22 of the Personal Data (Privacy) Ordinance you may request access to, and correction of, personal data we hold about you. Requests should be sent to the contact details below. We may charge a reasonable fee for complying with a data access request, as the Ordinance permits, and will respond within 40 days.
9. Changes to this policy
We may update this policy from time to time. The version published on this page is the version in force.
10. Contact
Stepcon Business Services
Room A, 1/F, Hang Seng Centre, 95-97 Tung Chau Street, Tai Kok Tsui, Kowloon, Hong Kong
Telephone: (852) 3687-1127
This policy is provided in Traditional Chinese, English and Simplified Chinese. In the event of any inconsistency, the Traditional Chinese version prevails.