Last updated: 12 August 2026
This Privacy Policy explains how Asia CPA (“we”, “us”, or “our”) collects, uses, stores, and discloses personal data in connection with the website asiacpa.com and related enquiry forms. We are based in Hong Kong SAR, China. For privacy questions, email info@asiacpa.com .
We aim to handle personal data in a manner consistent with Hong Kong’s Personal Data (Privacy) Ordinance (Cap. 486) (“PDPO”) and related guidance from the Office of the Privacy Commissioner for Personal Data, where applicable.
What we collect
Depending on how you use the site, we may collect:
- Enquiry data you submit via contact or quote forms: name, email address, optional phone number, and message content (and any other fields shown on the form).
- Email correspondence if you write to us at info@asiacpa.com or another address we publish.
- Technical and usage data such as approximate location derived from IP address, browser type, device information, pages viewed, and referring URLs, collected through our hosting provider and analytics tools.
- Cookies and similar technologies used for site operation, security, and analytics (see Cookies below).
We do not ask you to create an account on this website. Please do not submit sensitive personal data (for example identity document numbers, bank account details, or health information) through website forms unless we specifically ask for it through a secure channel for an engagement.
How we use personal data
We use personal data to:
- Respond to enquiries and quote requests
- Provide information about our services and, where appropriate, discuss engagement
- Operate, secure, and improve the website (including diagnosing technical issues)
- Understand how visitors use the site through aggregated or pseudonymous analytics
- Comply with legal or regulatory obligations, or establish, exercise, or defend legal claims
We do not sell your personal data. We do not use form submissions for unrelated marketing lists without a clear basis to do so.
Sharing and processors
We may share personal data with service providers who process it on our behalf, for example:
- Cloudflare — website hosting, content delivery, and related infrastructure (including delivery of contact form messages via email tooling where configured).
- Microsoft Clarity — website analytics and session insights (see Cookies).
- Professional advisers or authorities where required by law, or where necessary to protect our rights or users’ safety.
If we engage you as a client, additional confidentiality and data-handling terms may apply under a separate engagement letter or agreement.
Cookies and analytics
This site may set or allow cookies and similar technologies (including local storage) that help the site function, measure traffic, and understand how pages are used. We use Microsoft Clarity for analytics. Clarity may record usage metrics and, depending on configuration, session replay or heatmaps. Clarity’s practices are described in Microsoft’s privacy documentation.
You can control cookies through your browser settings. Blocking some cookies may affect site features. Where your browser or device offers a “Do Not Track” or similar preference, we may not be able to respond to every signal; analytics tools have their own controls and policies.
Retention
We keep enquiry and correspondence data for as long as needed to respond and follow up, and for a reasonable period afterward for business continuity, dispute handling, and legal compliance. Analytics data is retained according to the relevant vendor’s settings and our operational needs. Client matter files (if any) are retained under engagement and professional record-keeping requirements.
Security
We take reasonable technical and organisational measures to protect personal data. No method of transmission over the internet or electronic storage is completely secure; we cannot guarantee absolute security.
International transfers
Our hosting and analytics providers may process data in jurisdictions outside Hong Kong. Where we transfer personal data outside Hong Kong, we take steps we consider appropriate in the circumstances, having regard to the PDPO and the nature of the data and services.
Your rights
Subject to the PDPO and applicable exceptions, you may have rights to request access to, and correction of, personal data we hold about you. To make a request, email info@asiacpa.com with enough detail for us to verify your identity and locate the relevant data. We may charge a permitted fee for data access requests where allowed by law.
Children
This website is directed at business users and adults. We do not knowingly collect personal data from children for marketing or website accounts.
Changes
We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page will change when we do. Continued use of the site after an update constitutes notice of the revised policy, except where a different notice is required by law.