Privacy policy
How Apiaggregator collects, uses, and retains personal data in connection with enquiries and engagements.
Data controller
Apiaggregator is the data controller for personal data submitted through this website or in the course of professional engagements. Contact: info@apiaggregator.digital, Wheelock House, 20 Pedder Street, Central, Hong Kong, telephone +852 2118 3388.
Data we collect
- Contact details you submit via the enquiry form (name, email, message content, selected engagement type)
- Correspondence and documents you provide for a scoped engagement
- Technical data such as browser type and pages visited when analytics cookies are accepted (see our cookies policy)
We do not ask for identity card numbers, bank passwords, or other sensitive credentials through the website form.
Purposes
- Responding to engagement enquiries
- Performing contracted statutory reporting checks and related services
- Maintaining engagement records and invoices
- Improving site usability when analytics are enabled
Legal basis and retention
We process enquiry data to take steps at your request before entering a contract, and engagement data to perform that contract. Enquiry records are ordinarily retained for up to 24 months if no engagement follows. Engagement files are retained for seven years after completion unless a longer period is required by professional obligations or law, then securely destroyed or anonymised.
International transfers
Our primary records are held in Hong Kong. If a document-hosting or email provider stores data outside Hong Kong, we select providers with appropriate contractual safeguards. Financial statement packs may contain personal data of directors or employees; you remain responsible for having a lawful basis to share that information with us.
Your rights
Subject to Hong Kong law, you may request access to personal data we hold about you, correction of inaccuracies, and information about how we use your data. To exercise these rights, email info@apiaggregator.digital. You may also lodge a complaint with the Office of the Privacy Commissioner for Personal Data, Hong Kong, where applicable.
Security
We apply access controls to engagement files and use encrypted transmission where practical. No method of transmission is perfectly secure; please avoid sending unnecessary personal data in initial enquiries.
Updates
We may update this policy periodically. The version on this page is current as of the last site publication date.